Control Access Based on Network Status

• US 20140310776A1
• Filed: 01/26/2012
• Published: 10/16/2014
• Est. Priority Date: 01/26/2012
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Graham, Christoph J.
• Application Number:
  US14/364,103
• Publication Number:
  US 20140310776A1
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04W 12/08 Access security

Abstract

Embodiments herein relate to controlling access to a device based on status information of a network. The device is connected to and detects status information from the network. Further, the device controls access to a feature of the device based on the detected status information. The device detects the status information and controls access regardless of at least one of a power state of the device and an operating state of an operating system (OS) of the device.

Claims

1. A client device comprising:

a network controller to connect the client device to a network; and

a control module to detect status information from the network via the network controller and to control access to the client device based on the detected status information, wherein

the control module detects the status information regardless of at least one of a power state of the client device and an operating state of an operating system (OS) of the client device.

2. The client device of claim 1, wherein the control module is to communicate with the network controller at least one of when the operating state of the OS is not an on state and when the power state of the client device is an off state.

3. The client device of claim 2, wherein the control module is to access the network controller to detect the status information before a loading of OS of the client device.

4. The client device of claim 3, wherein the control module determines a type of the OS to load based on the detected status information.

5. The client device of claim 1, wherein the control module controls access to at least one of a basic input/output system (BIOS) of the client device, an operating system (OS) of the client device and a component of the client device based on the detected status information.

6. The client device of claim 5, wherein the control module controlling access to the client device further includes at least one of controlling access to settings of the BIOS, hardware resources of the component, and permission for the OS to perform a service.

7. The client device of claim 6, wherein the control module configures the component based on the detected status information, the component including at least one of a RAM, a memory, a processor, a peripheral device and an input/output (I/O) device.

8. The client device of claim 1, wherein the control module is included in at least one a basic input/output system (BIOS) and a hypervisor.

9. The client device of claim 1, wherein the detected status is retrieved by the control module from at least one of a router, a switch, a gateway, a domain controller and a server included in the network.

10. The client device of claim 1, wherein

the detected status information includes at least one of a type of the network, a state of the client device within the network, and an identity of the client device within a hierarchy of the network, and

the state of the client device includes at least one of joined to and quarantined within a part of the network.

11. A method, comprising:

accessing a network element via a network stack of a device connected to a network;

detecting status information from the network element related to the network independently of a state of an operating system (OS) of the device; and

controlling access to a feature of the device based on the detected status information.

12. The method of claim 11, wherein

the detected status information includes at least one of a type of the network, a state of the device within the network, and an identity of the device within a hierarchy of the network, and

the state of the device includes at least one of joined to and quarantined within the network.

13. A non-transitory computer-readable storage medium storing instructions that, if executed by a processor of a device, cause the processor to:

communicate with a network element of a network via a network controller of the device along a communication channel, where the device is connected to the network and the communication channel is independent of at least one of a power state and an operating state of the device;

retrieve status information from the network element related to the network; and

restrict access to a feature of the device based on the detected status information.

14. The non-transitory computer-readable storage medium of claim 13, wherein the restrict includes restricting access to at least one of a basic input/output system (BIOS) of the device, an operating system (OS) of the device and a component of the device, based on the detected status information.

15. The non-transitory computer-readable storage medium of claim 14, further comprising instructions that, if executed by the processor, cause the processor to:

configure a setting of the component based on the detected status information, the component including at least one of a RAM, a memory, a processor, a peripheral device and an input/output (I/O) device.