Method, Apparatus, and software for a multi-phase packet filter for internet access

• US 20080276311A1
• Filed: 05/01/2008
• Published: 11/06/2008
• Est. Priority Date: 05/04/2007
• Status: Abandoned Application

• Current Assignee: Stefan Kassovic
• Original Assignee: Stefan Kassovic
• Inventors: Kassovic, Stefan
• Application Number:
  US12/151,097
• Publication Number:
  US 20080276311A1
• Time in Patent Office: Days
• US Class Current: 726/11
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212

Abstract

A Time Gate Packet Filter (TGPF) for controlling data flow and Internet Access in a small environment. The TGPF is self-contained, simple to use, does not require IT expertise, and requires no software installation. The TGPF utilizes multi-phase filtering to control network access based on: types of sites, specific sites, types of services that can be accessed, source and destination, time of day, and day of week.

Claims

1. A stand-alone filter system configurable to control data flow between at least a computer and an external network, said stand-alone filtering system connected between said at least a computer and said external network.

2. The filter system of claim 1 configured to provide filtering of said data flow, wherein said filtering includes time filtering.

3. The filter system of claim 2 configured such that said filtering is multi-phase filtering, at least one of said phases including time filtering.

4. The filter system of claim 3, configured such that said time filtering constitutes a filtering phase.

5. The filter system of claim 1, configured such that said filtering includes protocol/port filtering.

6. The filter system of claim 1, configured such that said filtering includes filtering of specific URL'"'"'s/web sites.

7. The filter system of claim 1, configured such that said filtering is organized by user-determined Internet access categories.

8. The filter system of claim 3, wherein said data flow includes a request from a source to a destination, said request being pursuant to a protocol, wherein said multi-phase filtering includes:

a) a filtering mechanism configured to allow an outgoing request only if said request has access to a specific protocol resident on an inside interface, based on apparatus connectivity and system considerations;

b) a filtering mechanism configured to allow a request for data to flow between a user computer and a specific site/URL unless, based on a user configuration, said specific site/URL is denied.

c) a filtering mechanism configured to allow a request for data to flow between a user computer and the Internet pursuant to a first protocol/port unless, based on said user configuration, said first protocol/port being requested belongs to a prohibited group and is not specifically allowed.

d) a filtering mechanism configured to allow a request for data to flow between a user computer and the Internet pursuant to a second protocol/port/site only if the time and day of said request, based on said user configuration, permits access of said requested second protocol/port/site.

9. The filter system of claim 8, where each of said elements a)-d) constitutes a separate filtering phase, and further configured to include a fifth phase comprising the request is allowed and data packets are passed without modification.

10. The filter system of claim 8, further configured to include a filtering mechanism to allow a request for data to flow between a specific user computer having an IP/MAC address and the Internet only if said IP/MAC address is allowed, based on user configuration, to use said inside interface.