Federating trust in a heterogeneous network

• US 8,028,326 B2
• Filed: 07/22/2009
• Issued: 09/27/2011
• Est. Priority Date: 02/22/2005
• Status: Active Grant

• Current Assignee: Pulse Secure, LLC (Ivanti Software, Inc.)
• Original Assignee: Juniper Networks Incorporated
• Inventors: Palmer, Matthew A., Poirier, Jason P., Harding, Andrew Richard, Tock, Theron
• Primary Examiner(s): Jung; David Y
• Application Number:
  US12/507,462
• Publication Number:
  US 20090293103A1
• Time in Patent Office: 797 Days
• Field of Search: 726/3, 726/5, 726/9
• US Class Current: 726/3
• CPC Class Codes: H04L 12/2876 Handling of subscriber policies group policies management H04L41/0893
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04M 11/062 using different frequency bands for speech and other data

Abstract

A check of a processing device is performed. A device may receive a network access request to access a network from a first processing device. A security check may be caused to be performed on the first processing device. Whether to grant the network access request to the first processing device is based on a result of the security check.

Claims

1. A method comprising:

requesting, by a client device, access to a network;

receiving, by the client device, an indication from a service provider that a security check is to be performed on the client device;

executing, by the client device, the security check to obtain a result;

providing, by the client device, the result to the service provider; and

receiving, from the service provider, either a level of access to the network or a redirection to a predefined network location based on the result of the security check.

2. The method of claim 1, where the service provider is a set of one or more server devices.

3. The method of claim 1, where executing the security check includes:

detecting installation of security software on the client device.

4. The method of claim 3, where executing the security check further includes:

detecting execution of the security software on the client device.

5. The method of claim 3, where the security software includes at least one of antivirus software, spyware detection software, or key logger software.

6. The method of claim 3, where the result of executing the security check is based at least in part on detecting the installation of the security software on the client device.

7. The method of claim 1, where executing the security check includes:

requesting configuration information from the service provider; and

receiving the requested configuration information from the service provider,

where the configuration information includes a security module.

8. The method of claim 7, where executing the security check further includes:

installing the received security module; and

executing the installed security module.

9. The method of claim 7, where the requested configuration information further includes at least one of checksums of software modules to be loaded or operating system dependent files.

10. The method of claim 7, where the requested configuration information is included in a compressed archive file.

11. The method of claim 1, where executing the security check includes:

determining whether the client device implements one or more predetermined security policies.

12. The method of claim 1, where the level of access is one of full access, limited access, or no access.

13. The method of claim 12, where the result indicates that the client device conforms with a predetermined security policy, where the level of access is full access.

14. The method of claim 12, where the result indicates that the client device is executing an outdated version associated with at least one predetermined security policy, where the level of access is limited access.

15. The method of claim 1, where the result indicates that the client device does not conform with a predetermined security policy, where a redirection is received.

16. The method of claim 15, where the redirection provides a user of the client device an opportunity to purchase software that conforms with the security policy.

17. A computer-readable medium having instructions recorded thereon, the instructions comprising:

one or more instructions to cause a processor of a client device to request access to a network;

one or more instructions to cause the processor to receive an indication from a service provider that a security check is to be performed on the client device;

one or more instructions to cause the processor to execute the security check to obtain a result;

one or more instructions to cause the processor to provide the result to the service provider; and

one or more instructions to cause the processor to receive, from the service provider, either a level of access to the network or a redirection to a predefined network location based on the result of the security check.

18. The computer-readable medium of claim 17, where the one or more instructions to cause the processor to execute the security check include:

one or more instructions to cause the processor to detect installation of security software on the client device; and

one or more instructions to cause the processor to detect execution of the security software on the client device.

19. The computer-readable medium of claim 17, where the one or more instructions to cause the processor to execute the security check include:

one or more instructions to cause the processor to request configuration information from the service provider;

one or more instructions to cause the processor to receiving the requested configuration information from the service provider,

where the configuration information includes a security module;

one or more instructions to cause the processor to install the received security module; and

one or more instructions to cause the processor to execute the installed security module.