Systems and Methods for Mediating an Internet Service Delivered to a Particular Location

• US 20110231894A1
• Filed: 10/04/2010
• Published: 09/22/2011
• Est. Priority Date: 03/18/2010
• Status: Abandoned Application

• Current Assignee: Nominum Incorporated (Akamai Technologies, Inc.)
• Original Assignee: Nominum Incorporated (Akamai Technologies, Inc.)
• Inventors: Tovar, Tom C.
• Application Number:
  US12/897,430
• Publication Number:
  US 20110231894A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2149 Restricted operating environment

Abstract

Systems and methods for an Internet service delivered to a selected location are provided herein. According to some exemplary embodiments a method for mediating an Internet service delivered to a selected location having an Internet connection operatively coupling at least one user device to the Internet service includes executing instructions stored in a memory by a processor to prevent delivery of restricted Internet content via the Internet service. The restricted Internet content includes Internet content included in one or more categories of restricted Internet content included in a mediation policy adapted to be selectively applied to the Internet service.

Claims

1. A method for mediating an Internet service, the method comprising:

delivering the Internet service to a selected location, the location having an Internet connection operatively coupling at least one user device to the Internet service; and

executing instructions stored in a memory by a processor to prevent delivery of restricted Internet content via the Internet service to all users of a host network while a master mediation policy is enabled, the restricted Internet content comprising Internet content included in one or more categories of restricted Internet content of the master mediation policy.

2. The method according to claim 1, further comprising defining the Internet content included in the one or more categories of restricted Internet content by:

evaluating Internet content for subject matter; and

associating the Internet content with at least one of the one or more categories of restricted Internet content if the subject matter of the Internet content corresponds to at least one of the one or more categories of restricted Internet content.

3. The method according to claim 2, further comprising updating the one or more categories of restricted Internet content by:

identifying additional Internet content;

evaluating the subject matter of the additional Internet content; and

adding the additional Internet content to one or more of the restricted categories of the master mediation policy if the subject matter of the Internet content corresponds to at least one of the one or more categories of restricted Internet content.

4. The method according to claim 3, further comprising creating a master mediation policy by:

receiving input indicative of at least one selection corresponding to at least one of the one or more categories of restricted Internet content;

adding at least a portion of the Internet content of the selected categories of restricted Internet content to the master mediation policy; and

associating the master mediation policy with the Internet connection.

5. The method according to claim 3, wherein an end user may create an individualized mediation policy by specifying additional categories of restricted Internet content not included in the predefined categories to add to the master mediation policy, wherein the individualized mediation policy is applied to the Internet service when the end user is utilizing a user device operatively coupled to the Internet service.

6. The method according to claim 1, further comprising creating an additional category of restricted Internet content by:

receiving a request to create an additional category, wherein the request includes at least one of a category description and Internet content having evaluable subject matter; and

adding the additional category to the one or more categories of restricted Internet content.

7. The method according to claim 6, further comprising evaluating the request according to a predetermined category creation policy and adding the additional category to the one or more categories of restricted Internet content when the additional category complies with the predetermined category creation policy.

8. The method of claim 6, wherein the administrator adds specific Internet content not included within defined categories to the master mediation policy.

9. The method according to claim 6, wherein if the request includes Internet content having evaluable subject matter, evaluating includes:

evaluating the subject matter of the Internet content; and

creating a category corresponding to the subject matter of the Internet content if the category complies with the predetermined category creation policy.

10. The method according to claim 1, wherein an administrator provides input on the content of categories associated with the master mediation policy to a provider of the Internet service.

11. The method according to claim 1, wherein administrators of different networks share the contents of the master mediation policies.

12. The method according to claim 1, wherein any new devices added to the network are subject to the existing master mediation policy.

13. The method according to claim 1, wherein the administrator allows designated restricted Internet content to be delivered to specific end users although the master mediation policy is in effect.

14. The method according to claim 1, wherein selectively applying the master mediation policy to the Internet service includes:

receiving a request to access Internet content from a user device coupled to the Internet service;

comparing the requested Internet content to the master mediation policy; and

blocking a resolution performed by a DNS server if the requested Internet content is included in the master mediation policy.

15. The method according to claim 14, wherein blocking includes blocking a resolution performed by an Internet service provider if the requested Internet content is included in the master mediation policy.

16. The method according to claim 1, further comprising outputting a notification that access to the Internet content is prohibited by the master mediation policy.

17. The method according to claim 1, further comprising providing a notification to the administrator of attempted access to restricted Internet content included in the master mediation policy.

18. The method according to claim 1, wherein the Internet content includes any of a domain, a video, audio, and an application.

19. The method of claim 1, wherein at least one element of the master mediation policy is resident on the DNS server.

20. The method of claim 1, wherein at least one element of the master mediation policy is enforced by the DNS server.

21. The method of claim 1, wherein the administrator specifies different master mediation policies for different locations.

22. The method of claim 1, wherein at least a portion of the Internet service is resident on a user device.

23. A system for mediating an Internet service, the system comprising:

a memory for storing a mediation policy application; and

a processor to deliver the Internet service to a selected location, the location having an Internet connection operatively coupling at least one user device to the Internet service, the processor further executing the mediation policy application, the mediation policy application preventing delivery of restricted Internet content via the Internet service, the restricted Internet content comprising Internet content included in one or more categories of restricted Internet content of a master mediation policy adapted to be selectively applied to the Internet service.

24. The system according to claim 23, wherein the mediation policy application includes a category management module stored in memory and executable by the processor to define the Internet content included in the one or more categories of restricted Internet content by:

evaluating Internet content for subject matter; and

associating the Internet content with at least one of the one or more categories of restricted Internet content if the subject matter of the Internet content corresponds to at least one of the one or more categories of restricted Internet content.

25. The system according to claim 24 wherein the category management module creates an additional category of restricted Internet content by:

receiving a request to create an additional category, wherein the request includes at least one of a category description and Internet content having evaluable subject matter; and

adding the additional category to the one or more categories of restricted Internet content if the subject matter of the Internet content corresponds to at least one of the one or more categories of restricted Internet content.

26. The system according to claim 25, wherein the category management module is adapted to evaluate the request according to a predetermined category creation policy and add the additional category to the one or more categories of restricted Internet content when the additional category complies with the predetermined category creation policy.

27. The system according to claim 26, wherein if the request includes Internet content having evaluable subject matter, evaluate includes:

evaluate the subject matter of the Internet content; and

create a category corresponding to the subject matter of the Internet content if the category complies with the predetermined category creation policy.

28. The system according to claim 23, wherein the mediation policy application further includes a category updating module stored in memory and executable by the processor to update the one or more categories of restricted Internet content by:

locating additional Internet content;

evaluating the subject matter of the additional Internet content; and

adding the additional Internet content to one or more of the restricted categories corresponding to the subject matter of the additional Internet content.

29. The system according to claim 28, wherein the mediation policy application further includes a mediation policy management module stored in memory and executable by the processor to create a master mediation policy by:

receiving input indicative of at least one selection corresponding to at least one of the one or more categories of restricted Internet content;

adding at least a portion of the Internet content of the selected categories of restricted Internet content to the master mediation policy; and

associating the master mediation policy with the Internet connection.

30. The system according to claim 23, wherein an end user may create an individualized mediation policy by selecting one or more additional categories of restricted Internet content to add to the master mediation policy, wherein the individualized mediation policy is applied to the Internet connection when the end user is utilizing a user device operatively coupled to the Internet service.

31. The system according to claim 23, wherein selectively applying the master mediation policy to the Internet service includes:

receiving a request to access Internet content from a user device coupled to the Internet service;

comparing the requested Internet content to the master mediation policy; and

blocking a resolution performed by a DNS server if the requested Internet content is included in the master mediation policy.

32. The system according to claim 31, wherein blocking includes blocking a resolution performed by an Internet service provider if the requested Internet content is included in the master mediation policy.

33. The system according to claim 23, further comprising outputting a notification that access to the Internet content is prohibited by the master mediation policy.

34. The system according to claim 23, further comprising providing a notification to the administrator of attempted access to restricted Internet content included in the master mediation policy.

35. The system according to claim 23, wherein the Internet content includes any of a domain, a video, audio, and an application.

36. The system of claim 23, wherein at least one element of the master mediation policy is resident on the DNS server.

37. The system of claim 23, wherein at least one element of the master mediation policy is enforced by the DNS server.

38. The system of claim 23, wherein the administrator specifies different master mediation policies for different locations.

39. The system of claim 23, wherein at least a portion of the Internet service is resident on a user device.

40. A non-transitory computer readable storage medium having a program embodied thereon, the program executable by a processor in a computing system, the method comprising:

mediating an Internet service delivered to a selected location having an Internet connection operatively coupling at least one user device to the Internet service; and

preventing delivery of restricted Internet content via the Internet service, wherein restricted Internet content comprises Internet content included in one or more categories of restricted Internet content of a master mediation policy adapted to be selectively applied to the Internet service.

41. A method for mediating an Internet service, the method comprising:

delivering the Internet service to a selected location, the location having an Internet connection operatively coupling at least one user device to the Internet service via a DNS server; and

executing instructions stored in a memory by a processor to prevent delivery of restricted Internet content via the DNS server to all users of a host network while a master mediation policy is enabled, the restricted Internet content comprising Internet content included in one or more categories of restricted Internet content of the master mediation policy.

42. The method according to claim 41, further comprising defining in the DNS server one or more categories of restricted Internet content by:

evaluating Internet content for subject matter; and

associating the Internet content with at least one of the one or more categories of restricted Internet content if the subject matter of the Internet content corresponds to at least one of the one or more categories of restricted Internet content.

43. The method according to claim 42, further comprising updating the one or more categories of restricted Internet content in the DNS server by:

identifying additional Internet content;

evaluating the subject matter of the additional Internet content; and

adding the additional Internet content to one or more of the restricted categories of the master mediation policy if the subject matter of the Internet content corresponds to at least one of the one or more categories of restricted Internet content.

44. The method according to claim 43, further comprising creating a master mediation policy in the DNS server by:

receiving input indicative of at least one selection corresponding to at least one of the one or more categories of restricted Internet content;

adding at least a portion of the Internet content of the selected categories of restricted Internet content to the master mediation policy; and

associating the master mediation policy with the Internet connection.

45. The method according to claim 43, wherein an end user may create an individualized mediation policy by specifying additional categories of restricted Internet content not included in the predefined categories to add to the master mediation policy, wherein the individualized mediation policy is applied to the Internet service when the end user is utilizing a user device operatively coupled to the Internet service.

46. The method according to claim 41, further comprising creating an additional category of restricted Internet content in the DNS server by:

receiving a request to create an additional category, wherein the request includes at least one of a category description and Internet content having evaluable subject matter; and

adding the additional category to the one or more categories of restricted Internet content.

47. The method according to claim 46, further comprising evaluating the request according to a predetermined category creation policy and adding the additional category to the one or more categories of restricted Internet content when the additional category complies with the predetermined category creation policy.

48. The method of claim 44, wherein the administrator adds Internet content not included within defined categories to the master mediation policy in the DNS server.

49. The method according to claim 46, wherein if the request includes Internet content having evaluable subject matter, evaluating includes:

evaluating the subject matter of the Internet content; and

creating a category corresponding to the subject matter of the Internet content if the category complies with the predetermined category creation policy.

50. The method according to claim 41, wherein an administrator provides input on the content of categories associated with the master mediation policy to a provider of the Internet service.

51. The method according to claim 41, wherein administrators of different networks share the contents of the master mediation policies.

52. The method according to claim 41, wherein the administrator allows designated restricted Internet content to be delivered to specific end users although the master mediation policy is in effect.

53. The method according to claim 41, wherein selectively applying the master mediation policy to the Internet service includes:

receiving a request to access Internet content from a user device at the DNS server coupled to the Internet service;

comparing the requested Internet content to the master mediation policy; and

blocking a resolution performed by a DNS server if the requested Internet content is included in the master mediation policy.

54. The method according to claim 53, wherein blocking includes blocking a resolution performed by the DNS service provided by an Internet service provider if the requested Internet content is included in the master mediation policy.

55. The method according to claim 41, further comprising outputting a notification that access to the Internet content is prohibited by the master mediation policy.

56. The method according to claim 41, further comprising providing a notification to the administrator of attempted access to restricted Internet content included in the master mediation policy.

57. The method according to claim 41, wherein the Internet content includes any of a domain, a video, audio, and an application.

58. The method of claim 41, wherein the administrator specifies different mediation policies for different locations.

59. The method of claim 41, wherein at least a portion of the Internet service is resident on a user device.

60. A system for mediating an Internet service, the system comprising:

a memory for storing a mediation policy application; and

a processor to deliver the Internet service to a selected location, the location having an Internet connection operatively coupling at least one user device to the Internet service, the processor further executing the mediation policy application, the mediation policy application preventing delivery of restricted Internet content via the Internet service, the restricted Internet content comprising Internet content included in one or more categories of restricted Internet content of a master mediation policy adapted to be selectively applied to the Internet service.

61. The system according to claim 60, wherein the mediation policy application includes a category management module stored in memory and executable by the processor to define the Internet content included in the one or more categories of restricted Internet content by:

evaluating Internet content for subject matter; and

associating the Internet content with at least one of the one or more categories of restricted Internet content if the subject matter of the Internet content corresponds to at least one of the one or more categories of restricted Internet content.

62. The system according to claim 61 wherein the category management module creates an additional category of restricted Internet content by:

receiving a request to create an additional category, wherein the request includes at least one of a category description and Internet content having evaluable subject matter; and

adding the additional category to the one or more categories of restricted Internet content if the subject matter of the Internet content corresponds to at least one of the one or more categories of restricted Internet content.

63. The system according to claim 62, wherein the category management module is adapted to evaluate the request according to a predetermined category creation policy and add the additional category to the one or more categories of restricted Internet content when the additional category complies with the predetermined category creation policy.

64. The system according to claim 63, wherein if the request includes Internet content having evaluable subject matter, evaluate includes:

evaluate the subject matter of the Internet content; and

create a category corresponding to the subject matter of the Internet content if the category complies with the predetermined category creation policy.

65. The system according to claim 60, wherein the mediation policy application further includes a category updating module stored in memory and executable by the processor to update the one or more categories of restricted Internet content by:

locating additional Internet content;

evaluating the subject matter of the additional Internet content; and

adding the additional Internet content to one or more of the restricted categories corresponding to the subject matter of the additional Internet content.

66. The system according to claim 65, wherein the mediation policy application further includes a mediation policy management module stored in memory and executable by the processor to create a master mediation policy by:

receiving input indicative of at least one selection corresponding to at least one of the one or more categories of restricted Internet content;

adding at least a portion of the Internet content of the selected categories of restricted Internet content to the master mediation policy; and

associating the master mediation policy with the Internet connection.

67. The system according to claim 60, wherein an end user may create an individualized mediation policy by selecting one or more additional categories of restricted Internet content to add to the master mediation policy, wherein the individualized mediation policy is applied to the Internet connection when the end user is utilizing a user device operatively coupled to the Internet service.

68. The system according to claim 60, wherein selectively applying the master mediation policy to the Internet service includes:

receiving a request to access Internet content from a user device coupled to the Internet service;

comparing the requested Internet content to the master mediation policy; and

blocking a resolution performed by a DNS server if the requested Internet content is not included in the master mediation policy.

69. The system according to claim 68, wherein blocking includes blocking a resolution performed by an Internet service provider if the requested Internet content is included in the master mediation policy.

70. The system according to claim 60, further comprising outputting a notification that access to the Internet content is prohibited by the master mediation policy.

71. The system according to claim 61, further comprising providing a notification to an administrator of attempted access to restricted Internet content included in the master mediation policy.

72. The system according to claim 60, wherein the Internet content includes any of a domain, a video, audio, and an application.

73. The system according to claim 60, wherein an administrator specifies different mediation policies for different locations.

74. The system according to claim 60, wherein at least a portion of the Internet service is resident on a user device.