Level-based network access restriction

• US 6,523,120 B1
• Filed: 10/29/1999
• Issued: 02/18/2003
• Est. Priority Date: 10/29/1999
• Status: Expired due to Fees

• Current Assignee: rStar Corp. (Gilat Satellite Networks Limited)
• Original Assignee: rStar Corp. (Gilat Satellite Networks Limited)
• Inventors: Strasnick, Steven L.
• Primary Examiner(s): Hayes, Gail
• Assistant Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US09/430,859
• Time in Patent Office: 1,208 Days
• Field of Search: 713/200, 713/201, 705/51, 705/52, 705/59, 705/67, 705/76, 709/225, 709/226, 709/227, 709/228, 709/229, 709/311, 709/313, 707/500, 707/513
• US Class Current: 726/4
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 2211/009 Trust
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

Methods and apparatuses for level-based network access restriction are described. A user of network resources logs on to the network according to any appropriate security procedure. The user is provided access to a known, trusted resource as a starting point. From the starting point, the user can access other network resources by following links from the starting point or in another manner. The network resources accessed by the user are analyzed to determined whether the resource is a trusted resource. If the resource is a trusted resource, the user is allowed to follow a predetermined number of links away from the trusted resource before access is denied.

Claims

1. A method comprising:

determining whether an electronic resource is a trusted electronic resource;

limiting access to further electronic resources to a predetermined multiple number of levels away from the trusted electronic resource, wherein access to the further electronic resources is accomplished via electronic links; and

deny access to the further electronic resources if the electronic resource is not a trusted electronic resource.

2. The method of claim 1 wherein the electronic resource comprises a World Wide Web page.

3. The method of claim 1 wherein the electronic resource comprises a Hypertext Markup Language (HTML) document.

4. The method of claim 1 wherein the electronic resource comprises a Virtual Reality Markup Language (VRML) document.

5. The method of claim 1 wherein the trusted electronic resource is an index document.

6. The method of claim 1 wherein the predetermined number of levels away from the trusted resource comprises following an electronic link to a second resource having additional electronic links, wherein following the additional electronic links from the second resource is prohibited.

7. The method of claim 1 wherein the predetermined number of levels away from the trusted electronic resource comprises following an electronic link to a second electronic resource having additional electronic links and following one of the links from the second resource to a third resource, wherein following the additional electronic links from the third resource is prohibited.

8. A machine-readable medium having stored thereon sequences on instructions that when executed cause one or more electronic devices to:

determine whether an electronic resource is a trusted electronic resource;

limit access to further electronic resources to a predetermined multiple number of levels away from the trusted electronic resource, wherein access to the further electronic resources is accomplished via electronic links; and

deny access to the further electronic resources if the electronic resource is not a trusted electronic resource.

9. The machine-readable medium of claim 8 wherein the electronic resource comprises a World Wide Web page.

10. The machine-readable medium of claim 8 wherein the electronic resource comprises a Hypertext Markup Language (HTML) document.

11. The machine-readable medium of claim 8 wherein the electronic resource comprises a Virtual Reality Markup Language (VRML) document.

12. The machine-readable medium of claim 8 wherein the trusted electronic resource is an index document.

13. The machine-readable medium of claim 8 wherein the predetermined number of levels away from the trusted resource comprises following an electronic link to a second resource having additional electronic links, wherein following the additional electronic links from the second resource is prohibited.

14. The machine-readable medium of claim 8 wherein the predetermined number of levels away from the trusted electronic resource comprises following an electronic link to a second electronic resource having additional electronic links and following one of the links from the second resource to a third resource, wherein following the additional electronic links from the third resource is prohibited.

15. An apparatus comprising:

means for determining whether an electronic resource is a trusted electronic resource;

means for limiting access to further electronic resources to a predetermined multiple number of levels away from the trusted electronic resource, wherein access to the further electronic resources is accomplished via electronic links; and

means for denying access to the further electronic resources if the electronic resource is not a trusted electronic resource.

16. The apparatus of claim 15 wherein the predetermined number of levels away from the trusted resource comprises following an electronic link to a second resource having additional electronic links, wherein following the additional electronic links from the second resource is prohibited.

17. The method of claim 15 wherein the predetermined number of levels away from the trusted electronic resource comprises following an electronic link to a second electronic resource having additional electronic links and following one of the links from the second resource to a third resource, wherein following the additional electronic links from the third resource is prohibited.

18. A network comprising:

a first device to store electronic resources having links; and

a second device coupled to the first device, the second device executing a browser application to access electronic resources, wherein the browser determines a trusted status of an electronic resource to be accessed, and further wherein the browser limits access to further electronic resources to a predetermined multiple number of levels away from a trusted electronic resource.

19. The network of claim 18 further comprising a third device to store electronic resources having links, the third device coupled to the first device and to the second device, wherein at least one of the links in the electronic resources of the first device indicate one of the electronic resources of the third device, and further wherein the browser limits access to the trusted electronic resource of the first device and to the electronic resources of the third device indicated by the links in the electronic resources of the first device.

20. The network of claim 18 further comprising:

a third device coupled to the first device and to the second device, the third device to store electronic resources having links, wherein one of the links in the electronic resources of the first device indicates one of the electronic resources of the third device; and

a fourth device coupled to the second device and to the third device, the fourth device to store electronic resources, wherein one of the links in the resources of the third device indicates one of the electronic resources of the fourth device, and further wherein the browser limits access to the trusted electronic resource of the first device, to the electronic resource linked to the trusted electronic resource of the first device, and to the electronic resource of the fourth device linked to the electronic resource of the third device linked to the trusted electronic resource of the first device.

21. The network of claim 18 wherein one or more of the devices comprises a computer system.

22. The network of claim 18 wherein one or more of the devices comprises a set-top box.

23. The network of claim 18 wherein one or more of the devices is an electronic personal digital assistant (PDA).