REMOTE ACCESS TO RESOURCES OVER A NETWORK

• US 20140123225A1
• Filed: 10/19/2013
• Published: 05/01/2014
• Est. Priority Date: 12/10/2003
• Status: Active Grant

• Current Assignee: Aventail LLC
• Original Assignee: Adventail LLC
• Inventors: Hopen, Chris, Tomlinson, Gary, Anandam, Parvez, Young, Brian, Flagg, Alan, O'Reilley, Jude Michael Dylan
• Granted Patent: US 9,300,670 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 2221/034 Test or assess a computer or a system
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 47/783 Distributed allocation of resources, e.g. bandwidth brokers
• CPC Class Codes: H04L 47/805 QOS or priority aware
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context

Abstract

Systems and techniques are provided for controlling requests for resources from remote computers. A remote computer'"'"'s ability to access a resource is determined based upon the computer'"'"'s operating environment. The computer or computers responsible for controlling access to a resource will interrogate the remote computer to ascertain its operating environment. The computer or computers responsible for controlling access to a resource may, for example, download one or more interrogator agents onto the remote computer to determine its operating environment. Based upon the interrogation results, the computer or computers responsible for controlling access to a resource will control the remote computer'"'"'s access to the requested resource.

Claims

1. A non-transitory computer readable storage medium having embodied thereon a program executable to perform a method for administrating rules to access resources hosted by a server, the method comprising:

displaying existing access rules when existing rules governing access to a particular resource are currently defined;

defining access rules when there are no rules currently governing access to a particular resource; and

adding access rules that govern access rights to the particular resource, wherein the access rules,

permit or deny access to the particular resource to a user of a remote computer,

identify a user of a remote computer,

download interrogator agents on the remote computer when desired, and define zones of trust corresponding to the identity of the user of the remote computer.

2. The non-transitory computer readable storage medium of claim 1, further comprising:

associating the existing access rules, newly defied access rules, or the added access rules to a user indicator, wherein the user indicator identifies whether the user of the remote computer can be permitted access to the particular resource; and

identifying the newly defied access rules, and the added access rules as being part of the existing access rules.

3. The non-transitory computer readable storage medium of claim 2, wherein the user indicator identifies that any user may have access to the particular resource.

4. The non-transitory computer readable storage medium of claim 1, further comprising:

describing a destination indicator, wherein the destination indicator describes the location of the particular resource.

5. The non-transitory computer readable storage medium of claim 4, wherein the destination indicator identifies the location of the server system through which the particular resource is accessed, or identifies the resource itself.

6. The non-transitory computer readable storage medium of claim 4, further comprising:

editing the destination indicator to correspond to a destination resource control, wherein the destination resource control specifies whether the user of the remote computer can be permitted access to the particular resource located by the destination indicator.

7. The non-transitory computer readable storage medium of claim 2, further comprising:

describing a communication method indicator, wherein the communication method indicator identifies one or more communication techniques that correspond to and must be used with the existing access rules.

8. The non-transitory computer readable storage medium of claim 2, further comprising:

describing a zone indicator, wherein the zone indicator identifies one or more zones of trust that correspond to and must be used with the existing access rules.

9. The non-transitory computer readable storage medium of claim 2, further comprising:

describing an action control, wherein the action control identifies whether the user of the remote computer will be permitted access to the particular resource when the existing access rules are complied with.

10. The non-transitory computer readable storage medium of claim 2, further comprising:

enforcing of the existing access rules by the server, wherein access to the particular resource is permitted when the existing access rules are complied with, and denies access to the particular resource when the existing access rules are not complied with.

11. A method for administrating rules to access resources hosted by a server, the method comprising:

displaying existing access rules when existing rules governing access to a particular resource are currently defined;

defining access rules when there are no rules currently governing access to a particular resource; and

adding access rules that govern access rights to the particular resource, wherein the access rules,

permit or deny access to the particular resource to a user of a remote computer,

identify a user of a remote computer,

download interrogator agents on the remote computer when desired, and

define zones of trust corresponding to the identity of the user of the remote computer.

12. The method of claim 11, further comprising:

associating the existing access rules, newly defied access rules, or the added access rules to a user indicator, wherein the user indicator identifies whether the user of the remote computer can be permitted access to the particular resource; and

identifying the newly defied access rules, and the added access rules as being part of the existing access rules.

13. The method of claim 12, wherein the user indicator identifies that any user may have access to the particular resource.

14. The method of claim 11, further comprising:

describing a destination indicator, wherein the destination indicator describes the location of the particular resource.

15. The method of claim 14, wherein the destination indicator identifies the location of the server system through which the particular resource is accessed, or identifies the resource itself.

16. The method of claim 14, further comprising:

editing the destination indicator to correspond to a destination resource control, wherein the destination resource control specifies whether the user of the remote computer can be permitted access to the particular resource located by the destination indicator.

17. The method of claim 12, further comprising:

describing a communication method indicator, wherein the communication method indicator identifies one or more communication techniques that correspond to and must be used with the existing access rules.

18. The method of claim 12, further comprising:

describing a zone indicator, wherein the zone indicator identifies one or more zones of trust that correspond to and must be used with the existing access rules.

19. The method of claim 12, further comprising:

describing an action control, wherein the action control identifies whether the user of the remote computer will be permitted access to the particular resource when the existing access rules are complied with.

20. The method of claim 12, further comprising:

enforcing of the existing access rules by the server, wherein access to the particular resource is permitted when the existing access rules are complied with, and denies access to the particular resource when the existing access rules are not complied with.