Intelligent gate distributed use and device network access management on personal area network

• US 7,194,251 B2
• Filed: 02/22/2002
• Issued: 03/20/2007
• Est. Priority Date: 03/20/2001
• Status: Expired due to Term

• Current Assignee: Valtrus Innovations Limited (f/k/a Dolya Holdco 9 Limited) (Key Patent Innovations Limited)
• Original Assignee: 3Com Corporation (HP Inc.)
• Inventors: Wang, Gary, Rubinstein, Alan
• Primary Examiner(s): Anderson, Matthew D.
• Assistant Examiner(s): PHU, SANH D
• Application Number:
  US10/082,422
• Publication Number:
  US 20050282522A1
• Time in Patent Office: 1,852 Days
• Field of Search: 455/410, 455/411, 455/412.1, 455/41.1, 455/41.2, 235/379, 235/381, 235/382, 235/380
• US Class Current: 455/410
• CPC Class Codes: H04L 63/0218 Distributed architectures, e.g. distributed firewalls
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

The present invention relates to a method for managing access to a wireless personal area network in an intelligent concentrator. The method manages wireless access to a network by providing wireless communication in the network, providing firewall protection between the network and a wireless access device, receiving an identification code from the wireless access device to the network, determining whether the identification code is valid, granting network access to the wireless access device when the identification code is valid, denying network access to the wireless access device when the identification code is not valid, and issuing an alert to a network manager when the identification code is not valid. The identification code can be the unique media access code of the wireless access device or any other unique identification code previously registered with the network manager.

Claims

1. A method for managing access to a network, comprising:

providing wireless communication in a network;

providing a plurality of distributed firewall units in the network, each firewall unit configured to provide wireless access to the network for a set of valid wireless access devices associated with the firewall unit;

receiving, at a particular one of the plurality of distributed firewall units, an identification code transmitted wirelessly from a wireless access device, said identification code a media access control number of the wireless access device;

determining whether said identification code is valid for the particular firewall unit grant network access to the wireless access device;

granting network access at the particular firewall unit to said wireless access device when said identification code is valid;

denying network access at the particular firewall unit to said wireless access device when said identification code is not valid.

2. The method described in claim 1, wherein said providing said wireless communication is accomplished with an intelligent concentrator enabled for wireless communication.

3. The method described in claim 2, wherein said providing said wireless communication is accomplished in circuitry resident in said intelligent concentrator.

4. The method described in claim 1, wherein said determining whether said identification code is valid is accomplished by reference to a list of valid identification codes associated with the particular firewall unit.

5. The method described in claim 4, wherein said list of valid identification codes is resident in said firewall unit.

6. The method described in claim 4, wherein said list of valid identification codes is resident in a server in said network.

7. The method described in claim 1, wherein said denying said access to said network at the particular firewall unit is accomplished simultaneously with granting access to wireless accesses devices with valid identification codes.

8. The method described in claim 1, wherein said network is a wireless personal area network.

9. An intelligent concentrator, comprising:

a housing configured to be mounted within a cavity in a wall, said housing including a first interface at an internal part of the wall and a second interface external to and substantially planar with en external part of the wall;

a cable connector coupled to said housing at the first interface and adapted to communicatively couple said intelligent concentrator to a network data cable;

electronic circuitry mounted in said housing enabled to wirelessly communicate with a wireless access device and a network; and

a distributed firewall resident in said electronic circuitry wherein said firewall is enabled to control the access to said network of said wireless access device only at the intelligent data concentrator by determining whether an identification code transmitted from said wireless access device is included in a set of valid identification codes identifying wireless access devices associated with the intelligent data concentrator, said identification code a media access control number associated with said wireless access device.

10. The intelligent concentrator described in claim 9, wherein said intelligent concentrator is enabled as a hub of a personal area network.

11. The intelligent concentrator described in claim 9, wherein said distributed firewall is enabled to obtain a list of valid identification codes from a server in said network.

12. The intelligent concentrator described in claim 9, wherein said distributed firewall is enabled to deny access to said wireless access device if said identification code is not valid.

13. The intelligent concentrator described in claim 9, wherein said distributed firewall is enabled to issue an alarm to a network manager is said identification code is not valid.