Detecting entry-portal-only network connections

• US 7,730,215 B1
• Filed: 04/08/2005
• Issued: 06/01/2010
• Est. Priority Date: 04/08/2005
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Sobel, William E., McCorkendale, Bruce
• Primary Examiner(s): Follansbee; John
• Assistant Examiner(s): Mejia; Anthony
• Application Number:
  US11/102,517
• Time in Patent Office: 1,880 Days
• Field of Search: 709/223, 709/224, 709/225, 709/250, 717/122, 726/7
• US Class Current: 709/250
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context

Abstract

A network connection manager detects entry-portal-only network connections. The network connection manager requests content from at least one remote location through a network connection. The network connection manager examines the received content, and determines whether the network connection is an entry-portal-only network connection. In response to detecting an entry-portal-only condition, the network connection manager prompts the user to logon through the entry portal and establish a general purpose network connection.

Claims

1. A computer implemented method for detecting an entry-portal-only network connection, the method comprising the steps of:

using a computer configured to execute method steps, the steps comprising;

requesting, through a network connection, content from at least one remote location at which content is known not to be present;

receiving unexpected content from the at least one remote location at which content is known not to be present;

responsive to receiving two or more pieces of unexpected content from the at least one remote location at which content is known not to be present,

determining that the network connection is an entry-portal-only network connection based on a comparison of the unexpected contents, wherein an entry-portal-only network connection is a network connection that, in response to any request for content, returns content of the entry portal regardless of the content being requested until authorization or payment occurs; and

responsive to determining that the network connection is an entry-portal-only network connection, notifying a user of the determination.

2. The method of claim 1 further comprising:

requesting content from at least two remote locations at which content is known not to be present; and

responsive to receiving unexpected contents content in response to at least two requests to at least two remote locations at which content is known not to be present,

comparing the unexpected contents content received in response to the at least two requests; and

responsive to the unexpected contents content received in response to the at least two requests being at least substantially similar, determining that the network connection is an entry-portal-only network connection.

3. The method of claim 1 further comprising:

periodically requesting content from at least one location at which content is known not to be present; and

responsive to receiving unexpected content in response to at least one request to at least one remote location at which content is known not to be present, determining that the network connection is an entry-portal-only network connection.

4. The method of claim 1 further comprising:

monitoring requests made for network connection activity;

responsive to a successful request to establish a network connection, requesting content from at least one remote location at which content is known not to be present; and

responsive to receiving unexpected content in response to at least one request to at least one remote location at which content is known not to be present, determining that the network connection is an entry-portal-only network connection.

5. The method of claim 1 further comprising:

monitoring requests made for network connection activity;

responsive to a successful request to establish a network connection, requesting content from at least one remote location at which content is known not to be present;

responsive to receiving unexpected content in response to at least one request to at least one remote location at which content is known not to be present, monitoring subsequent requests for content from remote locations;

comparing the unexpected content received in response to at least one request to at least one remote location at which content is known not to be present and unexpected content received responsive to a subsequent monitored request for content from a remote location; and

responsive to the unexpected content received in response to the at least one request to the at least one remote location at which content is known not to be present and the unexpected content received responsive to a subsequent monitored request for content from a remote location being at least substantially similar,

determining that the network connection is an entry-portal-only network connection.

6. The method of claim 1 further comprising:

including an identifier in specific content on at least one remote location;

requesting specific content from at least one remote location on which specific content is known to be present;

examining content received in response to at least one request to at least one remote location on which specific content is known to be present for the identifier; and

responsive to the identifier not being present in the received content, determining that the network connection is an entry-portal-only network connection.

7. The method of claim 1 further comprising:

responsive to determining that the network connection is an entry-portal-only network connection, prompting a user to establish a general network connection.

20. The method of claim 1, wherein determining that the network, connection is an entry-portal-only network connection based on a comparison of the unexpected contents further comprises, responsive to the comparison of the two or more pieces of unexpected content indicating that the two or more pieces of unexpected content received are identical or substantially similar, determining that requests for content through the network connection are returning only entry-portal content, and thus the network connection is an entry-portal-only network connection.

21. The method of claim 1, further comprising:

requesting, through the network connection, content from a second remote location at which content is known not to be present;

receiving unexpected content from the second remote location at which content is known not to be present;

comparing the unexpected content received from the at least one remote location with the unexpected content received from the second remote location; and

responsive to the comparison indicating that the unexpected contents received are identical or substantially similar, determining that requests for content through the network connection are returning only entry-portal content, and thus the network connection is an entry-portal-only network connection.

8. A non-transitory computer readable storage medium encoded with a computer program product for detecting an entry-portal-only network connection, the computer program product comprising program code executable on a computer system comprising:

program code for requesting, through a network connection, content from at least one remote location at which content is known not to be present;

program code for receiving unexpected content from the at least one remote location at which content is known not to be present;

program code for, responsive to receiving two or more pieces of unexpected content from the at least one remote location at which content is known not to be present,

determining that the network connection is an entry-portal-only network connection based on the unexpected contents, wherein an entry-portal-only network connection is a network connection that, in response to any request for content, returns content of the entry portal regardless of the content being requested until authorization or payment occurs; and

program code for notifying a user of the determination responsive to determining that the network connection is an entry-portal-only network connection.

9. The computer program product of claim 8 further comprising:

program code for requesting content from at least two remote locations at which content is known not to be present; and

program code for, responsive to receiving unexpected contents content in response to at least two requests to at least two remote locations at which content is known not to be present, comparing the unexpected contents content received in response to the at least two requests; and

program code for, responsive to the unexpected contents content received in response to the at least two requests being at least substantially similar, determining that the network connection is an entry-portal-only network connection.

10. The computer program product of claim 8 further comprising:

program code for monitoring requests made for network connection activity;

program code for, responsive to a successful request to establish a network connection,

requesting content from at least one remote location at which content is known not to be present; and

program code for, responsive to receiving unexpected content in response to at least one request to at least one remote location at which content is known not to be present, determining that the network connection is an entry-portal-only network connection.

11. The computer program product of claim 8 further comprising:

program code for monitoring requests made for network connection activity;

program code for, responsive to a successful request to establish a network connection,

requesting content from at least one remote location at which content is known not to be present;

program code for, responsive to receiving unexpected content in response to at least one request to at least one remote location at which content is known not to be present, monitoring subsequent requests for content from remote locations;

program code for comparing the unexpected content received in response to at least one request to at least one remote location at which content is known not to be present and unexpected content received responsive to a subsequent monitored request for content from a remote location; and

program code for, responsive to the unexpected content received in response to the at least one request to the at least one remote location at which content is known not to be present and the unexpected content received responsive to a subsequent monitored request for content from a remote location being at least substantially similar, determining that the network connection is an entry-portal-only network connection.

12. The computer program product of claim 8 further comprising:

program code for including an identifier in specific content on at least one remote location;

program code for requesting specific content from at least one remote location on which specific content is known to be present;

program code for examining content received in response to at least one request to at least one remote location on which specific content is known to be present for the identifier; and

program code for, responsive to the identifier not being present in the received content, determining that the network connection is an entry-portal-only network connection.

13. A computer system for detecting an entry-portal-only network connection, the computer system comprising:

a non-transitory computer-readable storage medium storing executable software portions, comprising;

a software portion configured to request, through a network connection, content from at least one remote location at which content is known not to be present;

a software portion configured to receive unexpected content from the at least one remote location at which content is known not to be present;

a software portion configured to, responsive to receiving two or more pieces of unexpected content from the at least one remote location at which content is known not be present,

determine that the network connection is an entry-portal-only network connection based on the unexpected contents, wherein an entry-portal-only network connection is a network connection that, in response to any request for content, returns content of the entry portal regardless of the content being requested until authorization or payment occurs;

a software portion configured to notify a user of the determination responsive to determining that the network connection is an entry-portal-only network connection; and

the computer system configured to execute the software portions stored by the non-transitory computer readable storage medium.

14. The computer system of claim 13 further comprising:

a software portion configured to request content from at least two remote locations at which content is known not to be present; and

a software portion configured to compare unexpected contents content received in

response to the at least two requests, responsive to receiving content in response

to at least two requests to at least two remote locations at which content is known not to be present; and

a software portion configured to determine that the network connection is an entry-portal-only network connection, responsive to the unexpected contents content received in response to the at least two requests being at least substantially similar.

15. The computer system of claim 13 further comprising:

a software portion configured to monitor requests made for network connection activity;

a software portion configured to request content from at least one remote location at which content is known not to be present, responsive to a successful request to

establish a network connection; and

a software portion configured to determine that the network connection is an entry-portal-only network connection, responsive to receiving unexpected content in response to at least one request to at least one remote location at which content is known not to be present.

16. The computer system of claim 13 further comprising:

a software portion configured to monitor requests made for network connection activity;

a software portion configured to request content from at least one remote location at which content is known not to be present, responsive to a successful request to establish a network connection;

a software portion configured to monitor subsequent requests for content from remote locations, responsive to receiving unexpected content in response to at least one request to at least one remote location at which content is known not to be present;

a software portion configured to compare the unexpected content received in response to at least one request to at least one remote location at which content is known not to be present and unexpected content received responsive to a subsequent monitored request for content from a remote location; and

a software portion configured to determine that the network connection is an entry-portal-only network connection, responsive to the unexpected content received in response to the at least one request to the at least one remote location at which content is known not to be present and the unexpected content received responsive to a subsequent monitored request for content from a remote location being at least substantially similar.

17. The computer system of claim 13 further comprising:

a software portion configured to include an identifier in specific content on at least one remote location;

a software portion configured to request specific content from at least one remote location on which specific content is known to be present;

a software portion configured to examine content received in response to at least one request to at least one remote location on which specific content is known to be present for the identifier; and

software portion configured to determine that the network connection is an entry-portal-only network connection, responsive to the identifier not being present in the received content.

18. A computer implemented method for determining that a network connection is an entry-portal-only network connection with a pre-determined level of certainty, the method comprising the steps of:

using a computer configured to execute method steps, the steps comprising;

requesting, through a network connection, content from a first remote location at which content is known not to be present;

receiving a first unexpected content from the first remote location at which content is known not to be present;

requesting, through the network connection, content from a second remote location at which content is known not to be present;

receiving a second unexpected content from the second remote location at which content is known not to be present;

comparing the first unexpected content returned from the first remote location and the second unexpected content returned from the second remote location;

responsive to the first unexpected content and the second unexpected content being identical or substantially similar;

increasing a level of certainty that the network connection is an entry-portal-only network connection;

in response to the level of certainty reaching a predetermined level determining that the network connection is an entry-portal-only network connection, wherein an entry-portal-only network connection is a network connection that, in response to any request for content, returns content of the entry portal regardless of the content being requested until authorization or payment occurs; and

in response to determining that the network connection is an entry-portal-only network connection, notifying a user of the determination.

19. The method of claim 18, further comprising sending broadcast messages indicating the entry-portal-only status of the network connection to a plurality of network applications.