Method for selectively providing access to voice and data networks by use of intelligent hardware

• US 20050177640A1
• Filed: 09/11/2001
• Published: 08/11/2005
• Est. Priority Date: 03/20/2001
• Status: Abandoned Application

• Current Assignee: 3Com Corporation (HP Inc.)
• Original Assignee: 3Com Corporation (HP Inc.)
• Inventors: Chang, Russell, Rubinstein, Alan
• Application Number:
  US09/954,112
• Publication Number:
  US 20050177640A1
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: H04L 12/6418 Hybrid transport
• CPC Class Codes: H04L 2012/6427 Subscriber Access Module; Concentrator; Group equipment
• CPC Class Codes: H04L 2012/6464 Priority
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04Q 2213/13003 Constructional details of switching devices
• CPC Class Codes: H04Q 2213/13034 A/D conversion, code compression/expansion
• CPC Class Codes: H04Q 2213/1308 Power supply
• CPC Class Codes: H04Q 2213/13093 Personal computer, PC
• CPC Class Codes: H04Q 2213/13098 Mobile subscriber
• CPC Class Codes: H04Q 2213/13179 Fax, still picture
• CPC Class Codes: H04Q 2213/13339 Ciphering, encryption, security
• CPC Class Codes: H04Q 2213/13349 Network management
• CPC Class Codes: H04Q 2213/13386 Line concentrator
• CPC Class Codes: H04Q 2213/13389 LAN, internet
• CPC Class Codes: H04Q 3/0087 Network testing or monitoring arrangements
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 48/02 Access restriction performed under specific conditions
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 74/00 : Wireless channel access

Abstract

A method for selectively providing access to voice and data networks by use of intelligent hardware. The present invention provides security measures for controlling access to a network connection. An electronic device communicatively coupled to intelligent hardware initiates a request to access a network. The request is received at the intelligent hardware communicatively coupled to the network and configured to allow access to the network according to predetermined criteria. Provided the request satisfies the predetermined criteria, the electronic device is provided access to the network. The predetermined criteria may include placing geographic restrictions (e.g., the room the port is located in), temporal restrictions (e.g., weekend or nighttime restrictions), and user class restrictions (e.g., visitor restrictions or low-level employee restrictions) on specific ports of the intelligent hardware. In one embodiment, a central control site manages the predetermined criteria. In one embodiment, the present invention controls access to a corporate Intranet. In one embodiment, the intelligent device has specific access port serial number. The present invention provides a method of easier management of information systems.

Claims

1. A method for selectively providing access to a network, said method comprising the steps of:

a) receiving a request to access said network at intelligent hardware communicatively coupled to said network and configured to allow access to said network according to predetermined criteria, said request initiated by an electronic device communicatively coupled to said intelligent hardware; and

b) provided said request satisfies said predetermined criteria, allowing said electronic device to access said network such that said electronic device is communicatively coupled to said network through said intelligent device.

2. A method as recited in claim 1 wherein said intelligent hardware comprises:

a first interface for communicatively coupling said intelligent hardware to said network;

a second interface for communicatively coupling said intelligent hardware to a plurality of said electronic devices such that each said electronic device is communicatively coupled to said network;

a processor coupled to said first interface and said second interface; and

an access provider coupled to said processor.

3. A method as recited in claim 1 wherein said electronic device is a client device.

4. A method as recited in claim 1 wherein said intelligent hardware is communicatively coupled over said network to a central control site, said central control site for defining said predetermined criteria and for transmitting said predetermined criteria to said intelligent hardware.

5. A method as recited in claim 1 wherein said predetermined criteria are for providing access to said network based on a registration status of a user.

6. A method as recited in claim 1 wherein said predetermined criteria are for providing access to said network based on a type of location where said intelligent hardware resides.

7. A method as recited in claim 1 wherein said predetermined criteria are for providing access to said network based on a time of day.

8. A method as recited in claim 7 wherein said providing access is implemented by traditional firewall techniques.

9. A method as recited in claim 1 wherein said intelligent hardware has a predefined serial number associated therewith.

10. A method as recited in claim 1 wherein said intelligent hardware comprises tamper detection hardware for detecting attempts at accessing said network by bypassing said intelligent hardware.

11. A method as recited in claim 1 wherein said intelligent hardware comprises identification hardware configured to read an identification badge such that access to said network is provided based on said identification badge.

12. An intelligent device for providing access to a network comprising:

a first interface for communicatively coupling said intelligent device to said network;

a second interface for communicatively coupling said intelligent device to a plurality of electronic devices such that said plurality of electronic devices is communicatively coupled to said network through said intelligent device;

a processor coupled to said first interface and said second interface; and

an access provider coupled to said processor, said access provider configured to receive a request to access said network at said intelligent device and configured to provide access to said network according to predetermined criteria, said request initiated by one of said plurality of electronic devices.

13. A method as recited in claim 12 wherein said plurality of electronic devices comprises at least one client device.

14. An intelligent device as recited in claim 12 wherein said intelligent device is communicatively coupled over said network to a central control site, said central control site for defining said predetermined criteria and for transmitting said predetermined criteria to said intelligent device.

15. An intelligent device as recited in claim 12 wherein said predetermined criteria are for providing access to said network based on a registration status of a user.

16. An intelligent device as recited in claim 12 wherein said predetermined criteria are for providing access to said network based on a type of location where said intelligent device resides.

17. An intelligent device as recited in claim 12 wherein said predetermined criteria are for providing access to said network based on a time of day.

18. An intelligent device as recited in claim 12 wherein said providing access is implemented by traditional firewall techniques.

19. An intelligent device as recited in claim 12 wherein said intelligent device has a predefined serial number associated therewith.

20. An intelligent device as recited in claim 12 further comprising identification hardware configured to read an identification verifier such that access to said network is provided based on said identification verifier.

21. An intelligent device as recited in claim 12 further comprising tamper detection hardware for detecting attempts at accessing said network by bypassing said intelligent device.

22. An intelligent device for providing access to a network comprising:

a first interface for communicatively coupling said intelligent device to said network;

a second interface for communicatively coupling said intelligent device to a plurality of electronic devices such that said plurality of electronic devices is communicatively coupled to said network through said intelligent device;

a means for processing and interpreting data coupled to said first interface and said second interface; and

an access provision means coupled to said means for processing and interpreting data, said access provision means for receiving a request to access said network at said intelligent device and for providing access to said network according to predetermined criteria, said request initiated by one of said plurality of electronic devices.

23. A method as recited in claim 22 wherein said plurality of electronic devices comprises at least one client device.

24. An intelligent device as recited in claim 22 wherein said intelligent device is communicatively coupled over said network to a central control site, said central control site for defining said predetermined criteria and for transmitting said predetermined criteria to said intelligent device.

25. An intelligent device as recited in claim 22 wherein said predetermined criteria are for providing access to said network based on a registration status of a user.

26. An intelligent device as recited in claim 22 wherein said predetermined criteria are for providing access to said network based on a type of location where said intelligent device resides.

27. An intelligent device as recited in claim 22 wherein said predetermined criteria are for providing access to said network based on a time of day.

28. An intelligent device as recited in claim 22 wherein said providing access is implemented by traditional firewall techniques.

29. An intelligent device as recited in claim 22 wherein said intelligent device has a predefined serial number associated therewith.

30. An intelligent device as recited in claim 22 further comprising identification means configured to read an identification verification means such that access to said network is provided based on said identification verification means.

31. An intelligent device as recited in claim 22 further comprising tamper detection means for detecting attempts at accessing said network by bypassing said intelligent device.