Policy-based connectivity

• US 20040107274A1
• Filed: 12/03/2002
• Published: 06/03/2004
• Est. Priority Date: 12/03/2002
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Bantz, David Frederick, Mastrianni, Steven J., Chefalas, Thomas E.
• Application Number:
  US10/308,665
• Publication Number:
  US 20040107274A1
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

The system disclosed uses policy directives to establish and regulate connectivity on a computer system. A policy profile is applied to the computer system that determines how and when connections can be made, and the devices on which the connections can be made.

Claims

1. ) A system using one or more policy directives to establish and regulate connectivity from a user'"'"'s computer comprising:

applying a policy schema file containing Policy Settings, establishing desired criteria, to said user'"'"'s computer, resulting in a Policy Engine which determines if said criteria are met to allow a connection to take place;

when said user attempts to connect to a wired or wireless network, either manually or automatically, via said user'"'"'s computer, said computer enumerates the possible connections available to said user; and

depending upon Policy Settings in said policy schema file, which Policy Settings are read and interpreted by said Policy Engine; and

depending upon said user'"'"'s preference, and based upon said criteria in said policy engine, said system;

a) allows said user to select one of the available connections, or

b) selects an available connection automatically for said user;

in either event, said policy manager determines whether said user has the proper rights and privileges to make said connection based upon said criteria embodied in said policy manager; and

,

if said user does not have said proper rights and privileges, no connection is attempted;

or

if said user has said proper rights and privileges, in such event, said policy manager makes said connection using the connection manager portion of said user'"'"'s computer system.

2. ) The system defined in claim 1 which further includes the step of entry by said user of any information required by said policy engine, whereupon said policy manager presents proper dialog to enable said user to enter the requested information.

3. ) The system defined in claim 2 wherein said policy manager keeps a record of all connection attempts, successes, failures, length of time connected, number of bytes transmitted and received, average throughput, information about policies that were applied and all network information.

4. ) The system defined in claim 3 wherein said policy schema file includes standards, priorities, security requirements, speed, operations that may be performed on the network.

5. ) The system defined in claim 3 wherein said policy schema file has been previously initialized by said user'"'"'s company IT or technology organization and placed on said user'"'"'s computer by said company or downloaded to said user'"'"'s computer from an optional policy server.

6. ) The system defined in claim 3 wherein said policy manager records the details of each connection and optionally “

learns”

the best connectivity settings by saving the results and using those results to automatically update said policy.

7. ) The system claimed in claim 6 wherein said “

learned”

settings are manually or automatically applied to said policy schema file to insure that the best possible settings are used to provide said connection.

8. ) The system defined in claim 4 wherein said policy schema file has been previously initialized by said user'"'"'s company IT or technology organization and placed on said user'"'"'s computer by said company or downloaded to said user'"'"'s computer from an optional policy server.

9. ) The system defined in claim 8 wherein said policy manager records the details of each connection and “

learns”

the best connectivity settings by saving the results.

10. ) The system claimed in claim 9 wherein said “

learned”

settings are manually or automatically applied to said policy schema file to insure that the best possible settings are used to provide said connection.

11. ) The system defined in claim 1 wherein said Policy Settings are specified or mandated by corporate policy.