Method and system for controlling network access

• US 20050204050A1
• Filed: 03/10/2005
• Published: 09/15/2005
• Est. Priority Date: 03/10/2004
• Status: Active Grant

• Current Assignee: Netskope Incorporated
• Original Assignee: RPX Corporation
• Inventors: Johnston, Keith, Turley, Patrick, Tonnesen, Steven D.
• Granted Patent: US 8,543,710 B2
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

Systems and methods intended to control a network devices access to a network are disclosed. Embodiments of the current invention expose a method for confining a network client'"'"'s network access to a specific logical region of the network. A network communication may be received and the client that originated this communication determined. This client is associated with a set of rules or walled garden that specifies the access allowed by that client. The destination of the communication may also be determined and if the destination is allowed by the set of rules associated with the client and access to the destination allowed if access to the destination is allowed by the set of rules.

Claims

1. A method for controlling access to network resources, comprising:

receiving a network communication;

determining a client associated with the network communication, wherein the client is associated with a set of rules;

determining a destination from the network traffic;

determining if the destination is allowed by the set of rules associated with the client; and

allowing access to the destination if access to the destination is allowed by the set of rules.

2. The method of claim 1, further comprising redirecting the network communication if the destination is not within the set of rules.

3. The method of claim 2, wherein the network communication is redirected to a region of a network designed for constrained clients.