Network security system based on physical location

• US 20070162954A1
• Filed: 04/05/2004
• Published: 07/12/2007
• Est. Priority Date: 04/07/2003
• Status: Abandoned Application

• Current Assignee: Forrad, Inc. (CommScope Holding Company, Inc.)
• Original Assignee: Forrad, Inc. (CommScope Holding Company, Inc.)
• Inventors: Pela, Peter
• Application Number:
  US10/551,568
• Publication Number:
  US 20070162954A1
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

A network security system and method for monitoring, tracking, and authorizing the physical location of a network login. More specifically, the present invention relates to a system that maintains records (200) of authorized network users and monitors, tracks, and authorizes the physical location from which those users are authorized to access a computer network.

Claims

1. A method for providing security to a computer network by monitoring the physical location of a network login or login attempts said method comprising:

associating a workstation to a physical location;

associating a network user to said workstation;

monitoring a computer network to determine a network login or attempted login of said user;

determining a physical location of said login or attempted login;

determining whether said user is authorized to access said network from said physical location of said login or attempted login.

2. The method of claim 1, further comprising determining whether preventive action is necessary and, if so, automatically initiating preventive action.

3. The method of claim 2, wherein said preventive action comprises generating an alert.

4. The method of claim 2, wherein said preventive action comprises disconnecting said workstation from said network.

5. The method of claim 2, wherein said preventive action comprises generating a notification message that said user is accessing said computer network from an unauthorized location.

6. The method of claim 1, further comprising storing information regarding said physical location of said login or attempted login.

7. The method of claim 1, further comprising storing information regarding said workstation associated with said login or attempted login.

8. The method of claim 7, wherein said workstation information includes one or more of the following types of information:

an IP/MAC address of said workstation, a date and time of each login attempt, a date and time of each successful login, login type description, network security agent, domain address, information regarding which network resources were accessed, server identification, the number of login attempts, host name data, jack or outlet information, port identification, or any other circuit trace information.

9. The method of claim 1, further comprising generating an event log.

10. The method of claim 7, wherein said event log comprises information regarding said physical location of said login or attempted login and information regarding said user.

11. The method of claim 1, further comprising associating said user with a workstation.

12. A method for providing security to a computer network by monitoring a network login or login attempt from a particular workstation, said method comprising:

associating a workstation to a physical location;

associating a network user to said workstation;

monitoring a computer network to determine a network login or attempted login of said user;

determining which workstation said login or attempted login is generated from;

determining whether said user is authorized to access said network from said workstation of said login or attempted login.

13. A network security system for a plurality workstations coupled via a local area network, said network said security system comprising:

electronic storage for associating said workstations to a user and a physical location; and

one or more processors for receiving login information from said workstations and accessing said electronic storage to determine whether said user or said workstation is authorized to login to said network from said physical location.

14. The system of claim 13, wherein said one or more processors generates an alert based said determination.

15. The system of claim 14, wherein said alert comprises an email notification.

16. The system of claim 14, wherein said alert comprises a pager notification.

17. The system of claim 14, wherein said alert comprises a termination signal.

18. The system of claim 14, wherein said one or more processors generates an event log.

19. The system of claim 18, wherein said event log comprises a time of said access.

20. The system of claim 18, wherein said event log comprises said physical location.

21. Computer readable medium having computer readable code for causing one or more processors to associating a workstation to a physical location;

associating a network user to said workstation;

monitoring a computer network to determine a network login or attempted login of said user;

determining a physical location of said login or attempted login;

determining whether said user is authorized to access said network from said physical location of said login or attempted login.

22. A network security system for a plurality workstations coupled via a local area network each workstation being associated with a specific user and coupled to one of a plurality of data ports of a patch panel, said patch panel being coupled to a computer network, said security system comprising:

a workstation associated with a physical location and a user;

a monitoring device for determining a network login or attempted login of said user,

a device for determining a physical location of said login or attempted login;

wherein said system determines whether said user is authorized to access said network from said physical location of said login or attempted login.