User specific automatic data redirection system

• US 20070294417A1
• Filed: 12/26/2006
• Published: 12/20/2007
• Est. Priority Date: 05/04/1998
• Status: Abandoned Application

• Current Assignee: Linksmart Wireless Technology LLC (AuriQ Systems, Inc.)
• Original Assignee: Linksmart Wireless Technology LLC (AuriQ Systems, Inc.)
• Inventors: Ikudome, Koichiro, Yeung, Moon
• Application Number:
  US11/645,924
• Publication Number:
  US 20070294417A1
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A data redirection system for redirecting user'"'"'s data based on a stored rule set. The redirection of data is performed by a redirection server, which receives the redirection rule sets for each user from an authentication and accounting server, and a database. Prior to using the system, users authenticate with the authentication and accounting server, and receive a network address. The authentication and accounting server retrieves the proper rule set for the user, and communicates the rule set and the user'"'"'s address to the redirection server. The redirection server then implements the redirection rule set for the user'"'"'s address. Rule sets are removed from the redirection server either when the user disconnects, or based on some predetermined event. New rule sets are added to the redirection server either when a user connects, or based on some predetermined event.

Claims

1. A system comprising:

a database with entries correlating each of a plurality of user IDs with an individualized rule set;

a dial-up network server that receives user IDs from users'"'"' computers;

a redirection server connected to the dial-up network server, an authentication accounting server connected to the database, the dial-up network server and the redirection server;

wherein the dial-up network server communicates a first user ID and a temporarily assigned network address for the first user ID to the authentication accounting server; and

wherein the authentication accounting server accesses the database and communicates the individualized rule set that correlates with the user ID and the temporarily assigned network address to the redirection server.

2. The system of claim 1, wherein the redirection server further provides control over a plurality of data to and from the users'"'"' computers as a function of the individualized rule set.

3. The system of claim 1, wherein the redirection server further blocks the data to and from the users'"'"' computers as a function of the individualized rule set.

4. The system of claim 1, wherein the redirection server further allows the data to and from the users'"'"' computers as a function of the individualized rule set.

5. The system of claim 1, wherein the redirection server further redirects the data to and from the users'"'"' computers as a function of the individualized rule set.

6. The system of claim 1, wherein the redirection server further redirects the data from the users'"'"' computers to multiple destinations as a function of the individualized rule set.

7. The system of claim 1, wherein the database entries for a plurality of the plurality of users'"'"' IDS are correlated with a common individualized rule set.

8. In a system comprising a database with entries correlating each of a plurality of user IDs with an individualized rule set;

a dial-up network server that receives user IDs from users'"'"' computers;

a redirection server connected to the dial-up network server, an authentication accounting server connected to the database, the dial-up network server and the redirection server, the method comprising the steps of;

communicating a first user ID and a temporarily assigned network address for the first user ID from the dial-up network server to the authentication accounting server; and

communicating the individualized rule set that correlates with the user ID and the temporarily assigned network address to the redirection server from the authentication accounting server.

9. The method of claim 8, further including the step of controlling a plurality of data to and from the users'"'"' computers as a function of the individualized rule set.

10. The method of claim 8, further including the step of blocking the data to and from the users'"'"' computers as a function of the individualized rule set.

11. The method of claim 8, further including the step of allowing the data to and from the users'"'"' computers as a function of the individualized rule set.

12. The method of claim 8, further including the step of redirecting the data to and from the users'"'"' computers as a function of the individualized rule set.

13. The method of claim 8, further including the step of redirecting the data from the users'"'"' computers to multiple destinations a function of the individualized rule set.

14. The method of claim 8, further including the step of creating database entries for a plurality of the plurality of users'"'"' IDs, the plurality of users'"'"' ID further being correlated with a common individualized rule set.

15. A system comprising:

a redirection server programmed with a user'"'"'s rule set correlated to a temporarily assigned network address;

wherein the rule set contains at least one of a plurality of functions used to control the user'"'"'s data; and

wherein the redirection server is configured to allow modification of at least a portion of the rule set.

16. The system of claim 15, wherein the redirection server is configured to allow modification of at least a portion of the rule set as a function of time.

17. The system of claim 15, wherein the redirection server is configured to allow modification of at least a portion of the rule set as a function of the data transmitted to or from the user.

18. The system of claim 15, wherein the redirection server is configured to allow modification of at least a portion of the rule set as a function of the location or locations the user access.

19. The system of claim 15, wherein the redirection server is configured to allow modification of at least a portion of the rule set as a function of some combination of time, data transmitted to or from the user, or location or locations the user access.

20. The system of claim 15, wherein the redirection server is configured to allow the removal or reinstatement of at least a portion of the rule set as a function of time.

21. The system of claim 15, wherein the redirection server is configured to allow the removal or reinstatement of at least a portion of the rule set as a function of the data transmitted to or from the user.

22. The system of claim 15, wherein the redirection server is configured to allow the removal or reinstatement of at least a portion of the rule set as a function of the location or locations the user access.

23. The system of claim 15, wherein the redirection server is configured to allow the removal or reinstatement of at least a portion of the rule set as a function of some combination of time, data transmitted to or from the user, or location or locations the user access.

24. The system of claim 15, wherein the redirection server has a user side that is connected to a computer using the temporarily assigned network address and a network side connected to a computer network and wherein the computer using the temporarily assigned network address is connected to the computer network through the redirection server.

25. The system of claim 24 wherein instructions to the redirection server to modify the rule set are received by one or more of the user side of the redirection server and the network side of the redirection server.

26. In a system comprising a redirection server containing a user'"'"'s rule set correlated to a temporarily assigned network address wherein the user'"'"'s rule set contains at least one of a plurality of functions used to control the user'"'"'s data;

the method comprising the step of;

modifying at least a portion of the user'"'"'s rule set while the user'"'"'s rule set remains correlated to the temporarily assigned network address in the redirection server.

27. The method of claim 26, further including the step of modifying at least a portion of the user'"'"'s rule set as a function of one or more of:

time, data transmitted to or from the user, and location or locations the user access.

28. The method of claim 26, further including the step of removing or reinstating at least a portion of the user'"'"'s rule set as a function of one or more of:

time, the data transmitted to or from the user and the location or locations the user access.

29. The method of claim 26, wherein the redirection server has a user side that is connected to a computer using the temporarily assigned network address and a network side connected to a computer network and wherein the computer using the temporarily assigned network address is connected to the computer network through the redirection server and the method further includes the step of:

receiving instructions by the redirection server to modify at least a portion of the user'"'"'s rule set through one or more of the user side of the redirection server and the network side of the redirection server.