Methods of Providing Reputation Information with an Address and Related Devices and Computer Program Products

• US 20100057895A1
• Filed: 08/29/2008
• Published: 03/04/2010
• Est. Priority Date: 08/29/2008
• Status: Abandoned Application

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Huang, Yuming
• Application Number:
  US12/201,032
• Publication Number:
  US 20100057895A1
• Time in Patent Office: Days
• US Class Current: 709/222
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/66 Trust-dependent, e.g. using trust scores or trust relationships

Abstract

Methods of providing reputation information for a remote device may include receiving a name for the remote device from a client device. Responsive to receiving the name for the remote device, the name may be translated into an Internet Protocol (IP) address for the remote device, and reputation information may be provided for the remote device. The IP address and the reputation information may be transmitted to the client device, for example, in one IP packet.

Claims

1. A method of providing reputation information for a remote device, the method comprising:

receiving a name for the remote device from a client device;

responsive to receiving the name for the remote device, translating the name into an Internet Protocol (IP) address for the remote device;

responsive to receiving the name for the remote device, providing reputation information for the remote device; and

transmitting the IP address and the reputation information to the client device.

2. A method according to claim 1 wherein receiving the name comprises receiving the name at a name server, and wherein transmitting the IP address and the reputation information comprises transmitting the IP address and the reputation information from the name server to the client device.

3. A method according to claim 1 wherein the name comprises a host name, domain name, and/or a Uniform Resource Locator (URL).

4. A method according to claim 1 wherein providing the reputation information comprises determining if the name is identified in a policy list.

5. A method according to claim 4 wherein the policy list comprises a blacklist and/or a whitelist.

6. A method according to claim 4 wherein receiving the name comprises receiving the name at a name server, and wherein transmitting the IP address and the reputation information comprises transmitting the IP address and the reputation information from the name server to the client device, and wherein the policy list is stored at the name server and/or at a separate policy server remote from the name server.

7. A method according to claim 1 wherein the reputation information comprises information providing a status of the remote device as a suspected phishing device.

8. A method according to claim 1 wherein providing reputation information comprises providing classification information for the remote device, and wherein transmitting the reputation information comprises transmitting the classification information to the client device.

9. A method according to claim 1 wherein providing the reputation information comprises comparing the name with a policy list and determining if the policy list includes a full match with the name and/or determining if the policy list includes a partial match with the name.

10. A method according to claim 1 wherein providing the reputation information comprises comparing the name and/or the IP address with entries in a policy list.

11. A method according to claim 10 further comprising:

storing the name, the IP address, and the reputation information in a memory for a time interval; and

after expiration of the time interval, expiring the name, the IP address, and the reputation information from the memory.

12. A method according to claim 1 wherein transmitting comprises transmitting the IP address and the reputation information to the client device in a same IP packet.

13. A method of accessing a remote device from a client device, the method comprising:

transmitting a name for the remote device from the client device to a name server;

receiving at the client device an IP address for the remote device corresponding to the name from the name server;

receiving reputation information for the remote device from the name server;

applying a client policy based on the reputation information; and

establishing communication with the remote device consistent with applying the client policy based on the reputation information and using the IP address.

14. A method according to claim 13 wherein establishing communication with the remote device consistent with applying the client policy based on the reputation information comprises denying communication with the remote device if the reputation information indicates that the remote device is suspect.

15. A method according to claim 14 wherein denying communication with the remote device comprises alerting a user of the client device that the remote device is suspect, and allowing communication responsive to a user override.

16. A method according to claim 13 wherein establishing communication with the remote device consistent with applying the client policy based on the reputation information comprises allowing communication with the remote device if the reputation information indicates that the remote device is not suspect.

17. A method according to claim 13 wherein the name comprises a host name, domain name, and/or a Uniform Resource Locator (URL).

18. A method according to claim 13 wherein the reputation information comprises information providing a status of the remote device as a suspected phishing device.

19. A method according to claim 13 further comprising:

storing the name, the IP address, and the reputation information in memory of the client device for a time interval; and

after expiration of the time interval, expiring the name, the IP address, and the reputation information from the memory of the client device.

20. A method according to claim 13 wherein receiving comprises receiving the IP address and the reputation information at the client device from the name server in a same IP packet.