Method and system for enforcing secure network connection

• US 20050278777A1
• Filed: 06/14/2005
• Published: 12/15/2005
• Est. Priority Date: 06/14/2004
• Status: Abandoned Application

• Current Assignee: Hackerproff Security, Inc., Hackerproof Security, Inc.
• Original Assignee: Hackerproof Security, Inc.
• Inventors: Loza, Boris
• Application Number:
  US11/152,543
• Publication Number:
  US 20050278777A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

The invention is a system and method for enforcing remote users to use secure network connections. Every time a user connects to the network, its network connection is verified for security vulnerabilities and a security policy applies to every network connection based on the number and severity of security vulnerabilities identified for this particular user on this particular network connection.

Claims

1. A method of preventing establishment of an insecure network connection between a client device and a server, the method comprising:

detecting an initiation of said network connection;

upon said detecting, automatically initiating an assessment by an external or internal vulnerability detector of security vulnerabilities on said client device; and

if a security vulnerability on said client device is found by said external or internal vulnerability detector, preventing establishment of said network connection.

2. A method of providing a warning of an insecure network connection between a client device and a server, the method comprising:

receiving a request to detect security vulnerabilities on said client device, said request including a unique identifier of said client device;

in response to said request, using said unique identifier to scan said client device for security vulnerabilities; and

if at least one security vulnerability is detected, sending a warning message to at least one of said client device and said server.

3. A method of preventing establishment of an insecure network connection between a client device and a server, the method comprising:

detecting an initiation of said network connection;

upon said detecting, automatically initiating an assessment by an external or internal vulnerability detector of security vulnerabilities on said client device;

receiving a warning message from said external or internal vulnerability detector;

preventing said network connection from being established.