Network login security

• US 20080134308A1
• Filed: 12/05/2006
• Published: 06/05/2008
• Est. Priority Date: 12/05/2006
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Black, Charles A., Yalakanti, Ramachandra
• Application Number:
  US11/633,744
• Publication Number:
  US 20080134308A1
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

Systems, methodologies, media, and other embodiments associated with network login security are described. One exemplary system embodiment includes a network edge logic configured to receive information related to a network login request, to gather information associated with the user, and, to gather information related to the user'"'"'s system. The system further includes a server comprising an identity management agent configured to determine access rights to a network based on the user login request, gathered information associated with the user, gathered information related to the user'"'"'s system, and, stored access profile information.

Claims

1. A system, comprising:

a network edge logic configured to receive information related to a network login request, to gather information associated with the user, and, to gather information related to the user'"'"'s system; and

,

a server comprising an identity management agent configured to determine access rights to a network based on the user login request, gathered information associated with the user, gathered information related to the user'"'"'s system, and, stored access profile information.

2. The system of claim 1, the identity management agent further configured to determine the access rights based on at least one of a time of day, a corporate holiday schedule and a user schedule associated with the network login request.

3. The system of claim 1, the identity management agent further configured to determine the access rights based on a stored group membership of the user.

4. The system of claim 1, the identity management agent further configured to determine the access rights based a physical location from which the user is attempting to access the network.

5. The system of claim 1, the gathered information related to the user'"'"'s system comprising a media access control address of the user'"'"'s system.

6. The system of claim 1, the identity management agent further configured to determine access rights to one or more particular resources of the network.

7. The system of claim 1, the stored access profile information received from an identity management configuration logic.

8. The system of claim 7, further comprising the identity management configuration logic configured to provide modified access profile information to the identity management agent.

9. The system of claim 1, comprising a plurality of servers, each server comprising an identity management agent.

10. The system of claim 1, the access rights include access to a virtual local area network.

11. The system of claim 1, the access rights include a quality of service to be provided to the user.

12. The system of claim 1, the access rights include prioritization of network traffic to be allocated to the user.

13. The system of claim 1, the access rights include access and/or rate limits to be allocated to the user.

14. The system of claim 1, the server is a remote authentication dial-in service.

15. A system, comprising:

means for receiving a network login request;

means for gathering information related to a user;

means for gather information related to the user'"'"'s system;

means for determining access rights based upon the network login request and gathered information; and

,

means for employing the determined access rights to access a network.

16. The system of claim 15, further comprising means for employing the determined access rights to access a particular resource of the network.

17. A method for assigning network access rights, comprising:

receiving a network login request;

gathering information related to the user and/or user'"'"'s system; and

,

determining access rights based upon the network login request, gathered information, and, stored access profile information.

18. The method of claim 17, further comprising employing the determined access profile to access the network.

19. The method of claim 17, further comprising employing the determined access profile to access a particular resource of the network.

20. The method of claim 17 being implemented by processor executable instructions provided by a machine-readable medium.