Network Classification

• US 20140280798A1
• Filed: 03/14/2014
• Published: 09/18/2014
• Est. Priority Date: 02/06/2004
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Khaki, Mohamed Jawad, Bahl, Pradeep, Corbett, Christopher J.
• Granted Patent: US 9,374,286 B2
• Time in Patent Office: Days
• US Class Current: 709/220
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 41/0233 Object-oriented techniques, for representation of network management data, e.g. common object request broker architecture [CORBA]
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/0853 by actively collecting configuration information or by backing up configuration information
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/14 Network analysis or design
• CPC Class Codes: H04L 41/145 involving simulating, designing, planning or modelling of a network
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 43/08 Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Network DNA may be determined for a computer network that taxonomically classifies the computer network. Network DNA may include derived network DNA components and raw network DNA components. Raw network DNA components may be acquired from local or remote sources. Derived network DNA components may be generated according to derived network DNA component specifications. Derived network DNA component specifications may reference raw network DNA components. Network DNA determined for the computer network may include a network species component capable of indicating network species classifications for computer networks. Network species classifications may include enterprise network, home network and public place network. Network species classifications may be determined as a function of network security, network management and network addressing. One or more network DNA stores may be configured to store network DNA for computer networks. Network DNA stores may store network DNA history as well as current network DNA.

Claims

1-44. -44. (canceled)

45. A computer-readable memory having instructions stored therein, the instructions for performing operations to manage network connectivity of a computing device, the operations comprising:

obtaining a classification of a type of a computer network from amongst multiple different types of computer networks, wherein obtaining the classification includes deriving the classification from at least one network attribute associated with the computer network;

obtaining at least one network classification policy based on the obtained classification for the computer network; and

executing a network classification policy action according to the at least one network classification policy, wherein executing the at least one network classification policy action comprises configuring network security settings of the computing device for the computer network based on the obtained classification.

46. The computer-readable memory of claim 45, wherein:

the at least one network attribute includes a domain name, one or more IP addresses, a presence of a network infrastructure element, a parameter received from a network server, a communications media type, a service provider, a nominal available communications bandwidth, a measured available communications bandwidth, a logical network location, and/or a physical network location.

47. The computer-readable memory of claim 45, wherein:

the obtained classification indicates the type of network selected from amongst a plurality of network types; and

the plurality of network types comprise an enterprise network, a home network and a public network.

48. The computer-readable memory of claim 45, wherein:

the obtained classification is associated with a combination of multiple network attributes of the at least one network attributes.

49. The computer-readable memory of claim 45, wherein:

obtaining the classification also includes deriving the classification based on a structured query language statement, a scripting language statement, and/or an object-oriented language statement.

50. The computer-readable memory of claim 45, wherein:

the classification is also derived based on each network characteristic referenced by a network characteristic list matching network attributes of the network, the network characteristic list referencing at least one network characteristic dependent upon multiple network attributes.

51. A method for managing network communications, the method comprising:

obtaining a classification of a type of a computer network from amongst multiple different types of computer networks, wherein obtaining the classification includes;

deriving the classification from multiple network attributes associated with the computer network;

obtaining at least one network classification policy based on the obtained classification for the computer network; and

implementing a network classification policy action according to the at least one obtained network classification policy, wherein implementing the at least one network classification policy action includes;

configuring network security settings based on the obtained classification.

52. The method of claim 51, wherein the implementing the network classification policy action further includes:

configuring applications settings of a computing device for the network communications via the computer network.

53. The method of claim 51, wherein the implementing the network classification policy action further includes:

selecting the computer network from amongst multiple available networks.

54. The method of claim 51, wherein:

the multiple network attributes include a domain name, a presence of a network infrastructure element, a parameter received from a network server, a communications media type, a service provider, a nominal available communications bandwidth, a measured available communications bandwidth, and/or a physical network location.

55. The method of claim 51, wherein:

the multiple network attributes include information received from a remote computer

56. The method of claim 51, wherein:

the obtained classification indicates the type of network selected from amongst a plurality of network types.

57. The method of claim 56, wherein:

the plurality of network types comprise an enterprise network, a home network and a public network.

58. The method of claim 51, wherein:

the obtained classification specifies a combination of network attributes of the multiple network attributes.

59. The method of claim 51, wherein:

obtaining the classification also includes deriving the classification based on a structured query language statement, a scripting language statement, and/or an object-oriented language statement.

60. The method of claim 51, wherein:

the classification is also derived based on each derived network characteristic referenced by a network characteristic list matching network attributes of the network, the network characteristic list referencing at least one network characteristic dependent upon two or more network attributes.

61. The method of claim 51, wherein:

the classification is also derived based on confidence levels associated with each of at least two network attributes of the multiple network attributes.

62. A computing device that is connectable to at least one network, the computing device comprising:

a memory and at least one processor that are respectively configured to store and execute instructions that are organized into;

a classification store that stores network classifications, the network classifications classifying types of networks according to network characteristics;

a network classification policy enforcer that;

selects a network classification policy action to execute based on a determined network classification from the classification store; and

configures network security settings according to definitions of the selected network classification policy action;

a network attribute acquirer that receives indications of multiple network attributes associated with the network; and

a network characteristic generator that determines the network classification from the stored network classifications according to the received indications of the multiple network attributes associated with the network.

63. The computing device of claim 62, wherein the network classification policy enforcer also:

configures applications settings for communications via the network.

64. The computing device of claim 62, wherein:

the multiple network attributes include a domain name, a presence of a network infrastructure element, a parameter received from a network server, a communications media type, a service provider, a nominal available communications bandwidth, a measured available communications bandwidth, and/or a physical network location.

65. The computing device of claim 62, wherein:

the multiple network attributes include information received from an authenticated remote computer

66. The computing device of claim 62, wherein:

the determined network classification indicates a type of network selected from amongst a plurality of network types.

67. The computing device of claim 66, wherein:

the plurality of network types comprise an enterprise network, a home network and a public network.

68. The computing device of claim 62, wherein:

the determined network classification is at least partially defined by a combination of the multiple network attributes.

69. The computing device of claim 62, wherein the network characteristic generator also:

determines the network classification based on confidence levels associated with a plurality of network attributes from the multiple network attributes.