User specific automatic data redirection system

• US 6,779,118 B1
• Filed: 04/21/1999
• Issued: 08/17/2004
• Est. Priority Date: 05/04/1998
• Status: Expired

• Current Assignee: Linksmart Wireless Technology LLC (AuriQ Systems, Inc.)
• Original Assignee: AuriQ Systems, Inc.
• Inventors: Ikudome, Koichiro, Yeung, Moon Tai
• Primary Examiner(s): ELISCA, PIERRE E
• Application Number:
  US09/295,966
• Time in Patent Office: 1,945 Days
• Field of Search: 713/200, 713/201, 713/202, 713/165, 713/168, 713/193, 709/229, 380/200, 380/201, 380/230, 340/825.31, 340/825.34, 705/57, 705/58
• US Class Current: 726/7
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A data redirection system for redirecting user'"'"'s data based on a stored rule set. The redirection of data is performed by a redirection server, which receives the redirection rule sets for each user from an authentication and accounting server, and a database. Prior to using the system, users authenticate with the authentication and accounting server, and receive a network address. The authentication and accounting server retrieves the proper rule set for the user, and communicates the rule set and the user'"'"'s address to the redirection server. The redirection server then implements the redirection rule set for the user'"'"'s address. Rule sets are removed from the redirection server either when the user disconnects, or based on some predetermined event. New rule sets are added to the redirection server either when a user connects, or based on some predetermined event.

Claims

1. A system comprising:

a database with entries correlating each of a plurality of user IDs with an individualized rule set;

a dial-up network server that receives user IDs from users'"'"' computers;

a redirection server connected to the dial-up network server and a public network, and

an authentication accounting server connected to the database, the dial-up network server and the redirection server;

wherein the dial-up network server communicates a first user ID for one of the users'"'"' computers and a temporarily assigned network address for the first user ID to the authentication accounting server;

wherein the authentication accounting server accesses the database and communicates the individualized rule set that correlates with the first user ID and the temporarily assigned network address to the redirection server; and

wherein data directed toward the public network from the one of the users'"'"' computers are processed by the redirection server according to the individualized rule set.

2. The system of claim 1, wherein the redirection server further provides control over a plurality of data to and from the users'"'"' computers as a function of the individualized rule set.

3. The system of claim 1, wherein the redirection server further blocks the data to and from the users'"'"' computers as a function of the individualized rule set.

4. The system of claim 1, wherein the redirection server further allows the data to and from the users'"'"' computers as a function of the individualized rule set.

5. The system of claim 1, wherein the redirection server further redirects the data to and from the users'"'"' computers as a function of the individualized rule set.

6. The system of claim 1, wherein the redirection server further redirects the data from the users'"'"' computers to multiple destinations as a function of the individualized rule set.

7. The system of claim 1, wherein the database entries for a plurality of the plurality of users'"'"' IDs are correlated with a common individualized rule set.

8. In a system comprising a database with entries correlating each of a plurality of user IDs with an individualized rule set;

a dial-up network server that receives user IDs from users'"'"' computers;

a redirection server connected to the dial-up network server and a public network, and an authentication accounting server connected to the database, the dial-up network server and the redirection server, the method comprising the steps of;

communicating a first user ID for one of the users'"'"' computers and a temporarily assigned network address for the first user ID from the dial-up network server to the authentication accounting server;

communicating the individualized rule set that correlates with the first user ID and the temporarily assigned network address to the redirection server from the authentication accounting server;

and processing data directed toward the public network from the one of the users'"'"' computers according to the individualized rule set.

9. The method of claim 8, further including the step of controlling a plurality of data to and from the users'"'"' computers as a function of the individualized rule set.

10. The method of claim 8, further including the step of blocking the data to and from the users'"'"' computers as a function of the individualized rule set.

11. The method of claim 8, further including the step of allowing the data to and from the users'"'"' computers as a function of the individualized rule set.

12. The method of claim 8, further including the step of redirecting the data to and from the users'"'"' computers as a function of the individualized rule set.

13. The method of claim 8, further including the step of redirecting the data from the users'"'"' computers to multiple destinations a function of the individualized rule set.

14. The method of claim 8, further including the step of creating database entries for a plurality of the plurality of users'"'"' IDs, the plurality of users'"'"' ID further being correlated with a common individualized rule set.

15. A system comprising:

a redirection server programed with a user'"'"'s rule set correlated to a temporarily assigned network address;

wherein the rule set contains at least one of a plurality of functions used to control passing between the user and a public network;

wherein the redirection server is configured to allow automated modification of at least a portion of the rule set correlated to the temporarily assigned network address; and

wherein the redirection server is configured to allow modification of at least a portion of the rule set as a function of some combination of time, data transmitted to or from the user, or location the user access.

16. The system of claim 15, wherein the redirection server is configured to allow modification of at least a portion of the rule set as a function of time.

17. The system of claim 15, wherein the redirection server is configured to allow modification of at least a portion of the rule set as a function of the data transmitted to or from the user.

18. The system of claim 15, wherein the redirection server is configured to allow modification of at least a portion of the rule set as a function of the location or locations the user access.

19. The system of claim 15, wherein the redirection server is configured to allow the removal or reinstatement of at least a portion of the rule set as a function of time.

20. The system of claim 15, wherein the redirection server is configured to allow the removal or reinstatement of at least a portion of the rule set as a function of the data transmitted to or from the user.

21. The system of claim 15, wherein the redirection server is configured to allow the removal or reinstatement of at least a portion of the rule set as a function of the location or locations the user access.

22. The system of claim 15, wherein the redirection server is configured to allow the removal or reinstatement of at least a portion of the rule set as a function of some combination of time, data transmitted to or from the user, or location or locations the user access.

23. The system of claim 15, wherein the redirection server has a user side that is connected to a computer using the temporarily assigned network address and a network side connected to a computer network and wherein the computer using the temporarily assigned network address is connected to the computer network through the redirection server.

24. The system of claim 23 wherein instructions to the redirection server to modify the rule set are received by one or more of the user side of the redirection server and the network side of the redirection server.

25. In a system comprising a redirection server containing a user'"'"'s rule set correlated to a temporarily assigned network address wherein the user'"'"'s rule set contains at least one of a plurality of functions used to control data passing between the user and a public network;

the method comprising the step of;

modifying at least a portion of the user'"'"'s rule set while the user'"'"'s rule set remains correlated to the temporarily assigned network address in the redirection server; and

wherein the redirection server has a user side that is connected to a computer using the temporarily assigned network address and a network address and a network side connected to a computer network and wherein the computer using the temporarily assigned network address is connected to the computer network through the redirection server and the method further includes the step of receiving instructions by the redirection server to modify at least a portion of the user'"'"'s rule set through one or more of the user side of the redirection server and the network side of the redirection server.

26. The method of claim 25, further including the step of modifying at least a portion of the user'"'"'s rule set as a function of one or more of:

time, data transmitted to or from the user, and location or locations the user access.

27. The method of claim 25, further including the step of removing or reinstating at least a portion of the user'"'"'s rule set as a function of one or more of:

time, the data transmitted to or from the user and the location or locations the user access.