Creating an interrogation manifest request

• US 7,770,222 B2
• Filed: 10/29/2007
• Issued: 08/03/2010
• Est. Priority Date: 12/10/2003
• Status: Expired due to Fees

• Current Assignee: Aventail LLC
• Original Assignee: Aventail LLC
• Inventors: Young, Brian, Anandam, Parvez, Hopen, Chris, Tomlinson, Gary, O'Reilley, Jude Michael Dylan, Flagg, Alan
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Kaplan; Benjamin A
• Application Number:
  US11/927,286
• Publication Number:
  US 20080134302A1
• Time in Patent Office: 1,009 Days
• Field of Search: 726/1, 726/4, 726/5, 726/22
• US Class Current: 726/22
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/1433 Vulnerability analysis

Abstract

Systems and techniques are provided for controlling requests for resources from remote computers. A remote computer'"'"'s ability to access a resource is determined based upon the computer'"'"'s operating environment. The computer or computers responsible for controlling access to a resource will interrogate the remote computer to ascertain its operating environment. The computer or computers responsible for controlling access to a resource may, for example, download one or more interrogator agents onto the remote computer to determine its operating environment. Based upon the interrogation results, the computer or computers responsible for controlling access to a resource will control the remote computer'"'"'s access to the requested resource.

Claims

1. A method for creating an interrogation manifest request, the method comprising:

executing instructions stored in memory of an end point control server, wherein execution of the instructions by a processor of the end point control server;

selects a first available realm from a list of all available realms,

selects a first available user community from the selected realm,

creates a literal graph for the selected user community,

obtains a first available zone from a list of zones associated with the selected user community,

obtains a first available signature for the obtained zone,

obtains a first available literal specified in the definition of obtained signature, and

adds the obtained literal to the literal graph when the obtained literal is determined to be unique to the literal graph for the user community.

2. The method of claim 1, wherein further execution of instructions by the processor of the end point control server:

obtains a second available literal specified in the definition of the obtained signature, and

obtains a third available literal specified in the definition of the obtained signature when the second literal is determined to be not unique to the literal graph for the user community.

3. The method of claim 1, wherein further execution of instructions by the processor of the end point control server:

attempts to obtain a next available literal specified in the definition of the obtained signature, and

adds the next available literal to the literal graph when the next available literal is determined to be available and unique to the literal graph for the user community.

4. The method of claim 1, wherein further execution of instructions by the processor of the end point control server:

attempts to obtain a next available literal specified in the definition of the obtained signature, and

attempts to obtain a next available signature for the obtained zone when the next literal is not available.

5. The method of claim 4, wherein further execution of instructions by the processor of the end point control server attempts to obtain a next available zone for the selected user community when the next signature is not available.

6. The method of claim 5, wherein further execution of instructions by the processor of the end point control server:

attempts to select a next available user community when the next available zone for the for the selected user community is not available, and

creates a new literal graph for the next available user community when the next available user community is available.

7. The method of claim 5, wherein further execution of instructions by the processor of the end point control server:

attempts to select a next available user community when the next available zone for the selected user community is not available, and

attempts to select a next available realm when the next available user community is not available.

8. The method of claim 7, wherein further execution of instructions by the processor of the end point control server concludes that the manifest interrogation request creation process is complete when the next available realm is not available.

9. The method of claim 8, wherein further execution of instructions by the processor of the end point control server installs a post-authentication interrogator agent on a client, the agent including the manifest interrogation request, the installation of the post-authentication agent initiated by a provisioning server communicatively coupled to the end point control server.

10. The method of claim 9, wherein further execution of instructions by the processor of the end point control server sends a message to an installer to instantiate the post-authentication agent, the message sent by the provisioning server.

11. The method of claim 10, wherein the message includes HTML.

12. The method of claim 11, wherein the HTML includes a URL identifying a configuration file containing the manifest interrogation request.

13. The method of claim 12, wherein the configuration file is in *.ini format.

14. The method of claim 12, wherein the configuration file includes commands for the post-authentication interrogator.

15. The method of claim 14, wherein the commands include one or more of files, directories, processes, registry keys, or registry values to be examined.

16. The method of claim 15, wherein the commands are secured using a Hash Message Authentication Code.