Access management for devices in communication networks

• US 20100088755A1
• Filed: 12/29/2006
• Published: 04/08/2010
• Est. Priority Date: 12/29/2006
• Status: Abandoned Application

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Gotare, Christian
• Application Number:
  US12/521,287
• Publication Number:
  US 20100088755A1
• Time in Patent Office: Days
• US Class Current: 726/11
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 12/088 using filters or firewalls

Abstract

The invention relates to a terminal a node and a method for terminating communication between a communication network (200) and a device (340) connected to the communication network (120, 200) via an access manager (330, 330′), which access manager (330, 330′) is arranged to operatively accept communication between the network (200) and the device (340) depending on a received identifier, wherein the network (200), node (210, 220) or terminal (290) is arranged to operatively provide said access manager (330, 330′) with an identifier associated with the terminal (290) being operatively connected to the network (200). The termination is preformed by the steps of detecting that said terminal (290) has terminated its activities; and transmitting a message from the network (200) to the access manager (30, 330′) instructing the access manager (330, 330′) to deny communication from the device (340) to the terminal (290) via the network (200).

Claims

1. A communication terminal arranged to communicate with a device via a communication network and an access manager, which access manager is arranged between the network and the device to accept communication between the communication terminal and the device depending on a received identifier, wherein said terminal is arranged to operatively provide said access manager with an identifier associated with the terminal, the communication terminal being arranged to terminate an accepted communication by transmitting a message to the access manager instructing the access manager to deny communication from the device to the terminal via said network.

2. The communication terminal in claim 1, wherein the terminal is further arranged to terminate an accepted communication by transmitting a message to the access manager instructing the access manager to deny communication from the terminal to the device.

3. The communication terminal in claim 1 wherein the terminal is a client and the device is a server.

4. The communication terminal in claim 1, wherein the terminal is a telecommunication terminal and the network is a telecommunication network.

5. A node in a communication network arranged to communicate with a device via an access manager, which access manager is arranged between the network and the device for accepting communication between the network and the device depending on a received identifier, wherein the node is arranged to provide said access manager with an identifier associated with a terminal being operatively connected to the network the node being arranged to terminate an accepted communication by transmitting a message to the access manager instructing the access manager to deny communication from the device to the terminal via the network.

6. The node in claim 5, wherein the node is further arranged to terminate an accepted communication by transmitting a message to the access manager instructing the access manager to deny communication from the terminal to the device via the network.

7. The node in claim 5, wherein the network is a telecommunication network.

8. The node in claim 5, wherein the node is a GPRS Support Node.

9. The node in claim 5, wherein the node is arranged to communicate with an access manager in the form of a firewall.

10. A method for terminating communication between a communication network and a device connected to the communication network via an access manager, which access manager is arranged to accept communication between the network and the device depending on a received identifier, wherein the network is arranged to provide said access manager with an identifier associated with a terminal being operatively connected to the network, comprising the steps of:

detecting that said terminal has terminated its activities; and

transmitting a message from the network to the access manager instructing the access manager to deny communication from the device to the terminal via the network.

11. The method in claim 10, further comprising:

transmitting a message from the network to the access manager instructing the access manager to deny communication from the terminal to the device via the network.

12. The method in claim 10, wherein providing the access manager with a filter-profile for the terminal from a database in the network, which filter-profile comprises conditions to be fulfilled for the access manager to accept communication for the terminal in question.

13. The method in claim 10, wherein the access manager is a firewall.