Filtering techniques for managing access to Internet sites or other software applications

• US 20060031504A1
• Filed: 09/13/2005
• Published: 02/09/2006
• Est. Priority Date: 12/05/2001
• Status: Active Grant

• Current Assignee: Forcepoint LLC
• Original Assignee: Forcepoint LLC
• Inventors: Kester, Harold, Lonas, Hal Case Jr., Hegli, Ronald Bjorn
• Granted Patent: US 7,483,982 B2
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34

Abstract

A method and system for providing flexible access resources or services related to particular software applications are described. The system includes a database of Internet sites that have been categorized so that the system determines the category of information that a user is accessing on the Internet. The system is also programmed so users are only allowed to access sites a limited number of times. The system is further programmed to limit a user'"'"'s access to the Internet based on the network'"'"'s current bandwidth usage. Moreover, users can requested a postponed access, wherein the resource or service they are requesting is stored to a server, and available to the user at a later time. In addition, if a user chooses to access a resource or service that is within certain predefined categories, they are presented with the option of retrieving the resource or service, but notified that their access will be logged to a file.

Claims

1. A system comprising:

a first module configured to associate a category with an Internet site;

a second module configured to determine a data transfer rate between an area network and an Internet; and

a third module configured to control access to the Internet site based at least in part on the associated category and the data transfer rate.

2. The system of claim 1, wherein the data transfer rate is indicative of a total data transfer rate between the area network and the Internet.

3. The system of claim 1, wherein the data transfer rate is indicative of a portion of a total data transfer rate between the area network and the Internet that is associated with the category.

4. The system of claim 1, wherein the area network is a local area network.

5. The system of claim 1, wherein the area network is a wide area network.

6. The system of claim 5, wherein the wide area network includes a plurality of local area networks.

7. A method comprising:

associating a category with an Internet site;

determining a bandwidth between an area network and an Internet; and

controlling access to the internet site based at least in part on the bandwidth and the associated category.

8. The method of claim 7, wherein the bandwidth is indicative of a total data transfer rate between the area network and the Internet.

9. The method of claim 7, wherein the bandwidth is indicative of a portion of a total bandwidth between the area network and the Internet that is associated with the category.

10. The method of claim 7, wherein the area network is a local area network.

11. The method of claim 7, wherein the area network is a wide area network.

12. A system comprising:

means for associating a category with an Internet site;

means for determining a data transfer rate between an area network and the Internet; and

means for controlling access to the internet site based at least in part on the data transfer rate and the associated category.

13. A system comprising:

a first module configured to determine a data transfer rate between a user and an Internet;

a database having a limit associated with the user; and

a second module configured to control access to the Internet based at least in part on the data transfer rate and the limit associated with the user.

14. The system of claim 13, wherein the data transfer rate is a measure of bytes transferred per time period.

15. The system of claim 13, wherein the data transfer rate is a measure of number of hits per time period.

16. A system comprising:

a first module configured to identify a software data traffic type associated with a software application;

a second module configured to determine a data transfer rate within an area network; and

a third module configured to control transmission of data related to the software data traffic type within the area network based at least in part on the data transfer rate.

17. The system of claim 16, wherein the software data traffic type is instant messaging.

18. The system of claim 16, wherein the software data traffic type is e-mail.

19. The system of claim 16, wherein the software data traffic type is audio files.

20. The system of claim 16, wherein the software data traffic type is video files.

21. The system of claim 16, wherein the software data traffic type is streaming audio.

22. The system of claim 16, wherein the software data traffic type is streaming video.

23. A method comprising:

capturing a first data packet transmitted between an area network and an Internet;

determining a software data traffic type to associate with the first data packet;

determining a data transfer rate between the area network and the Internet; and

controlling flow of a second data packet based at least in part on the data transfer rate and the software data traffic type, wherein the first data packet and the second data packet are associated with the same software data traffic type.

24. The method of claim 23, wherein the software data traffic type is instant messaging.

25. The method of claim 23, wherein the software data traffic type is e-mail.

26. The method of claim 23, wherein the software data traffic type is audio files.

27. The method of claim 23, wherein the software data traffic type is video files.

28. The method of claim 23, wherein the software data traffic type is streaming audio.

29. The method of claim 23, wherein the software data traffic type is streaming video.