Method and System for Managing Access to a Wireless Network

• US 20070109983A1
• Filed: 08/28/2006
• Published: 05/17/2007
• Est. Priority Date: 11/11/2005
• Status: Abandoned Application

• Current Assignee: Computer Associates Think Inc. (Broadcom, Inc.)
• Original Assignee: Computer Associates Think Inc. (Broadcom, Inc.)
• Inventors: Shankar, Rohit, Gudipudi, Srinivas, Swarangi, Muralidhar, Deshpande, Sumit, Singh, Kartik, Nadimpalli, Bharat
• Application Number:
  US11/467,803
• Publication Number:
  US 20070109983A1
• Time in Patent Office: Days
• US Class Current: 370/310.200
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/08 Access security

Abstract

According to one embodiment of the invention, a method for managing access to a wireless network includes defining access criteria for a plurality of endpoint devices in the wireless network. The access criteria includes a group of access policies controlling access to specific access points in the wireless network. The group of access policies are associated with respective access points and an identifier associated with a user. The method further includes configuring at least one endpoint device of the group of endpoint devices in the wireless network with the access criteria.

Claims

1. A method for managing access to a wireless network, comprising:

defining, by a managing device, access criteria for a plurality of endpoint devices in the wireless network, the access criteria comprising a plurality of access policies controlling access to specific access points in the wireless network, the plurality of access policies associated with respective ones of the access points and an identifier associated with a user, the plurality of access policies comprising;

a calendar policy, the calendar policy specifying a period of time in which the user may access the wireless network;

a geographic location policy, the geographic policy specifying a geographic boundary in which the user may access the wireless network; and

a security policy, the security policy specifying an operational restriction on a plurality of security parameters for the plurality of endpoint devices; and

configuring, by the managing device, at least one endpoint device of the plurality of endpoint devices in the wireless network with the access criteria.

2. A method for managing access to a wireless network, comprising:

defining, by a managing device, access criteria for a plurality of endpoint devices in the wireless network, the access criteria comprising a plurality of access policies controlling access to specific access points in the wireless network, the plurality of access policies associated with respective ones of the access points and an identifier associated with a user; and

configuring, by the managing device, at least one endpoint device of the plurality of endpoint devices in the wireless network with the access criteria.

3. The method of claim 2, wherein defining, by a managing device, access criteria for a plurality of endpoint devices in the wireless network comprises defining, by the managing device, a calendar policy for the plurality of endpoint devices in the wireless network, the calendar policy specifying a period of time in which the user may access the wireless network.

4. The method of claim 2, wherein defining, by a managing device, access criteria for a plurality of endpoint devices in the wireless network comprises defining, by the managing device, a geographic policy for the plurality of endpoint devices in the wireless network, the geographic policy specifying a geographic boundary in which the user may access the wireless network.

5. The method of claim 2, wherein defining, by a managing device, access criteria for a plurality of endpoint devices in the wireless network comprises defining, by the managing device, a security policy for the plurality of endpoint devices in the wireless network, the security policy specifying an operational restriction on a plurality of security parameters for the plurality of endpoint devices.

6. The method of claim 2, wherein configuring, by the managing device, at least one endpoint device of the plurality of endpoint devices in the wireless network with the access criteria comprises transmitting, by the managing device, software code operable to configure the at least one endpoint device.

7. The method of claim 2, further comprising maintaining, by the managing device, user data for a plurality of users of the wireless network, the user data comprising access criteria for each of the plurality of users.

8. The method of claim 2, further comprising importing, by the managing device, user data for a plurality of users of the wireless network from a directory, the user data comprising access criteria for each of the plurality of users.

9. A system for managing access to a wireless network, comprising:

a plurality of access points in the wireless network; and

a managing device operable to connect to the wireless network, the managing device comprising;

a processor; and

a storage device embodying a program of instructions operable, when executed on the processor, to;

define access criteria for a plurality of endpoint devices in the wireless network, the access criteria comprising a plurality of access policies controlling access to specific wireless access points in the wireless network, the plurality of access policies associated with respective ones of the access points and an identifier associated with a user; and

configure at least one endpoint device of the plurality of endpoint devices in the wireless network with the access criteria.

10. The system of claim 9, wherein the program o f instructions is further operable to define a calendar policy for the plurality of endpoint devices in the wireless network, the calendar policy specifying a period of time in which the user may access the wireless network.

11. The system of claim 9, wherein the program of instructions is further operable to define a geographic policy for the plurality of endpoint devices in the wireless network, the geographic policy specifying a geographic boundary in which the user may access the wireless network.

12. The system of claim 9, wherein the program of instructions is further operable to define a security policy for the plurality of endpoint devices in the wireless network, the security policy specifying an operational restriction on a plurality of security parameters for the plurality of endpoint devices.

13. The system of claim 9, wherein the program of instructions is further operable to transmit software code operable to configure the at least one endpoint device.

14. The system of claim 9, wherein the program of instructions is further operable to maintain user data for a plurality of users of the wireless network, the user data comprising access criteria for each of the plurality of users.

15. The system of claim 9, wherein the program of instructions is further operable to import user data for a plurality of users of the wireless network from a directory, the user data comprising access criteria for each of the plurality of users.

16. Logic encoded in media, the logic being operable, when executed on a processor, to:

define access criteria for a plurality of endpoint devices in the wireless network, the access criteria comprising a plurality of access policies controlling access to specific access points in the wireless network, the plurality of access policies associated with respective ones of the access points and an identifier associated with a user; and

configure at least one endpoint device of the plurality of endpoint devices in the wireless network with the access criteria.

17. The logic of claim 16, wherein the logic is further operable to define a calendar policy for the plurality of endpoint devices in the wireless network, the calendar policy specifying a period of time in which the user may access the wireless network.

18. The logic of claim 16, wherein the logic is further operable to define a geographic policy for the plurality of endpoint devices in the wireless network, the geographic policy specifying a geographic boundary in which the user may access the wireless network.

19. The logic of claim 16, wherein the logic is further operable to define a security policy for the plurality of endpoint devices in the wireless network, the security policy specifying an operational restriction on a plurality of security parameters for the plurality of endpoint devices.

20. The logic of claim 16, wherein the logic is further operable to transmit software code operable to configure the at least one endpoint device.

21. The logic of claim 16, wherein the logic is further operable to maintain user data for a plurality of users of the wireless network, the user data comprising access criteria for each of the plurality of users.

22. The logic of claim 16, wherein the logic is further operable to import user data for a plurality of users of the wireless network from a directory, the user data comprising access criteria for each of the plurality of users.