System for securing inbound and outbound data packet flow in a computer network

• US 20080263639A1
• Filed: 05/12/2008
• Published: 10/23/2008
• Est. Priority Date: 12/22/1998
• Status: Active Grant

• Current Assignee: American Patents LLC
• Original Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Inventors: Maria, Arturo
• Granted Patent: US 7,934,090 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers

Abstract

A method provides for control of access to network resources. A virtual identity machine resides in the network and is pre-authorized to access certain network resources. End users desiring access to those network resources attempt to logically connect to the virtual identity machines. If the logical connection attempt is successful, then the end user assumes the virtual identity of the virtual identity machine and has access to all of the same information that was available to the virtual identity machine.

Claims

1. A method for providing access to a network resource, comprising:

receiving at a network node, said network node pre-authorized to access a network resource,

from a first user a request to assume the identity of the network node;

allowing the first user to assume the identity of the pre-authorized network node, after verifying that said first user is authorized, and

based on the first user assuming the identity of said pre-authorized network node, allowing the requestor access to the resource.

2. The method of claim 1 further comprising:

receiving at said network node, from a second user a request to assume the identity of the network node;

allowing the second user to assume the identity of the pre-authorized network node, after verifying that said second user is authorized, and

based on the second user assuming the identity of said pre-authorized network node, allowing the requester access to the resource.

3. The method of claim 2, wherein said first and second users are assigned the identity of the pre-authorized network node during overlapping time periods.

4. The method of claim 1, wherein said step of verifying includes:

receiving an identifier associated with the first user;

comparing the received identifier to a table of authorized identifiers; and

determining whether the received identifier matches any of the authorized identifiers.

5. The method of claim 1, wherein the step of verifying includes:

receiving a first identifier associate with the first user and a second identifier associated with a requested resource;

comparing the received first identifier and second identifier pair to contents of an authorized memory; and

determining that the user is authorized to access the requested resource if a match is found for the first and second identifier pair in the memory.

6. The method of claim 1, wherein the network node is an internet service provider.

7. The method of claim 1, wherein the network resource is on the internet.

8. The method of claim 1, wherein the network node has a plurality of logical ports through which said request may be received.