Method and system for blocking specific network resources

• US 20060167871A1
• Filed: 12/17/2004
• Published: 07/27/2006
• Est. Priority Date: 12/17/2004
• Status: Abandoned Application

• Current Assignee: Sorenson Communications Incorporated
• Original Assignee: Sorenson Communications Incorporated
• Inventors: Sorenson, James Lee, Brooksby, Scot Lorin, Armstrong, Edward Franz, Flathers, Michael Drew
• Application Number:
  US11/015,585
• Publication Number:
  US 20060167871A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 61/4557 Directories for hybrid networks, e.g. including telephone numbers
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

A system and method for blocking access by a network device to specific network resources by comparing a specific resource identifier against entries in a blacklist and facilitating a connection accordingly. A request for a connection to a specific network resource identified by a specific identifier is received and compared against entries in a stored blacklist. When the specific identifier matches one of the entries within the blacklist, the connection to the specific network resource is denied and when the specific identifier does not match one of the entries within the blacklist, then the connection to the specific network resource is allowed. The system further includes a blacklist database that maintains an updated copy of the blacklist and the network device retrieves an updated version upon the occurrence of specific events.

Claims

1. A method for blocking access to specific network resources, comprising:

receiving a request for a connection to a specific network resource as identified by a specific identifier;

comparing the specific identifier against entries in a stored blacklist, the blacklist including blocked network resource identifiers;

denying the connection to the specific network resource when the specific identifier matches one of the entries within the blacklist; and

allowing the connection to the specific network resource when the specific identifier does not match one of the entries within the blacklist.

2. The method of claim 1, further comprising retrieving an updated copy of the stored blacklist from a blacklist database upon the occurrence of an update event.

3. The method of claim 2, wherein the event is one of a periodic event, a notification event, a power-up event and the request for a connection event.

4. The method of claim 2, wherein retrieving an updated copy includes forming a connection with a blacklist database according to a stored blacklist IP address.

5. The method of claim 1, wherein the specific identifier is one of a domain name and an IP address.

6. The method of claim 5, further comprising resolving the domain name to a corresponding IP address when the specific identifier is a domain name.

7. The method of claim 1, wherein the entries of the stored blacklist include at least one entry for a network resource blacklisted in preference to a preferred network resource designated by a stored service number.

8. An network device, comprising:

a first portion of storage configured to retain a list of entries in a stored blacklist, the blacklist including blocked network resource identifiers; and

a control process configured to receive and compare a request for a connection to a specific network resource as identified by a specific identifier against the list of entries in the stored blacklist including blocked network resource identifiers, the control process further configured to deny the connection to the specific network resource when the specific identifier matches one of the entries within the blacklist and allow the connection to the specific network resource when the specific identifier does not match one of the entries within the blacklist.

9. The network device of claim 8, further comprising a second portion of storage configured to retain a stored blacklist IP address and the control process is further configured to retrieve an updated copy of the stored blacklist from a blacklist database upon the occurrence of an update event.

10. The network device of claim 9, wherein update events includes one of a periodic event, a notification event, a power-up event and the request for a connection event.

11. The network device of claim 9, wherein the control process is further configured to form a connection with a blacklist database according to a stored blacklist IP address to retrieve the updated copy of the stored blacklist from the blacklist database.

12. The network device of claim 8, wherein the specific identifier is one of a domain name and an IP address.

13. The network device of claim 12, wherein the control process is further configured to resolve the domain name to a corresponding IP address when the specific identifier is a domain name.

14. The network device of claim 8, wherein the entries of the stored blacklist include at least one entry for a network resource blacklisted in preference to a preferred network resource designated by a stored service number.

15. A system for selectively blocking access to specific network services, comprising:

a network device including;

storage configured to store entries in a stored blacklist, the blacklist including blocked network resource identifiers; and

a control process configured to receive and compare a request for a connection to a specific network resource as identified by a specific identifier against the list of entries in the stored blacklist including blocked network resource identifiers, the control process further configured to deny the connection to the specific network resource when the specific identifier matches one of the entries within the blacklist and allow the connection to the specific network resource when the specific identifier does not match one of the entries within the blacklist;

an associated service preferably selected by the network device, the network device further including a stored service number to identify the associated service; and

a network selectively addressably coupling the network device with the associated service.

16. The system of claim 15, wherein the control process is further configured to retrieve an updated copy of the stored blacklist from a blacklist database upon the occurrence of an update event.

17. The system of claim 16, wherein the event is one of a periodic event, a notification event, a power-up event and the request for a connection event.

18. The system of claim 15 wherein the storage is further configured to retain a stored blacklist IP address and the control process is further configured to retrieve an updated copy by forming a connection with a blacklist database according to the stored blacklist IP address.

19. The system of claim 15, wherein the specific identifier is one of a domain name and an IP address.

20. The system of claim 15, wherein the entries of the stored blacklist include at least one entry for a network resource blacklisted in preference to the associated service designated by a stored service number.