System and method of changing a network designation in response to data received from a device

• US 20080133719A1
• Filed: 11/30/2006
• Published: 06/05/2008
• Est. Priority Date: 11/30/2006
• Status: Active Grant

• Current Assignee: Access Layers Limited (Trumpf GmbH + Company KG)
• Original Assignee: Access Layers Limited (Trumpf GmbH + Company KG)
• Inventors: Amitai, Ofer, Aran, Nir
• Granted Patent: US 8,102,860 B2
• Time in Patent Office: Days
• US Class Current: 709/221
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones

Abstract

A method and system to create a virtual network to isolate a device connected to a port, and to change a designation of such network in response to identification data received from the device so as to provide the identified device with access to further areas of a network.

Claims

1. A method comprising:

designating a virtual first network, said first virtual network to accept a link with a device connected to a port, said first virtual network having a first identifier;

accepting information from said device;

evaluating said information against a criteria; and

upon satisfaction of said criteria by said information, changing said first identifier to a second identifier, said second identifier identifying a second network.

2. The method as in claim 1, wherein accepting said information comprises accepting information selected from the group consisting of a media access control address associated with said device, an internet protocol address associated with said device, a product license of said device, an identifier associated with software on said device, and an identifier associated with a user of said device.

3. The method as in claim 1, comprising querying said device from a network device connected to said virtual first network.

4. The method as in claim 1, wherein said designating comprises designating said virtual first network recognized by a network device connected to said virtual first network.

5. The method as in claim 1, wherein comparing said information to a criteria comprises, comparing said information to a criteria in a policy server.

6. The method as in claim 1, comprising connecting said device to a resource of said second network, said resource available to said device upon a satisfaction of said criteria.

7. The method as in claim 1, comprising

searching for an unwanted item on a memory of said device;

and

upon satisfaction of another criteria, changing said second identifier to a third identifier, said third identifier identifying a third network.

8. The method as in claim 1, wherein said designating a virtual first network comprises, designating said first virtual network so that said device when connected to said first virtual network has no access to said second network.

9. The method as in claim 1, wherein said accepting said information from said device comprises accepting an indication of a network resource used by said device;

and wherein said connecting said device to said second network comprises connecting said device to said second network, said second network providing access to said network resource.

10. The method as in claim 1, wherein said accepting said information from said device comprises accepting an indication of a quality of service required by said device.

11. An article comprising a storage medium having stored thereon instructions that, when executed by a processor, result in:

designating a virtual first network, said first virtual network to accept a link with a device connected to a port, said virtual first network having a first identifier;

accepting information from said device;

evaluating said information against a criteria; and

upon satisfaction of said criteria by said information, changing said first identifier to a second identifier, said second identifier, identifying a second network.

12. The article as in claim 11, wherein accepting said information comprises accepting information selected from the group consisting of a media access control address associated with said device, an internet protocol address associated with said device, a product license of said device, an identifier associated with software on said device, and an identifier associated with a user of said device.

13. The method as in claim 11, wherein said execution of said instructions further result in querying said device from a network device connected to said virtual first network.

14. The method as in claim 11, wherein said designating comprises designating said virtual first network recognized by a network device connected to said virtual first network.

15. The method as in claim 11, wherein comparing said information to a criteria comprises, comparing said information to a criteria in a policy server.

16. The method as in claim 11, wherein said execution of said instructions further results in, connecting said device to a resource of said second network, said resource available to said device upon a satisfaction of said criteria.

17. The method as in claim 11, wherein said execution of said instructions further results in,

searching for an unwanted item on a memory of said device;

and

upon satisfaction of another criteria changing said second identifier to a third identifier, said third identifier identifying a third network.

18. The method as in claim 11, wherein said designating a virtual first network comprises, designating said first virtual network so that said device when connected to said first virtual network has no access to said second network.

19. The method as in claim 11, wherein said accepting said information from said device comprises accepting an indication of a network resource used by said device;

and wherein said connecting said device to said second network comprises connecting said device to said second network, said second network providing access to said network resource.

20. The method as in claim 11, wherein said accepting said information from said device comprises accepting in indication of a quality of service required by said device.