System and method for controlling network access

• US 8,059,530 B1
• Filed: 09/30/2005
• Issued: 11/15/2011
• Est. Priority Date: 09/30/2005
• Status: Active Grant

• Current Assignee: Globalfoundries US Incorporated (GlobalFoundries, Inc.)
• Original Assignee: GlobalFoundries, Inc.
• Inventors: Cole, Terry L.
• Primary Examiner(s): Yao, Kwang B
• Assistant Examiner(s): DUDA, ADAM K
• Application Number:
  US11/240,311
• Time in Patent Office: 2,237 Days
• Field of Search: 370/229, 370/230, 370/232, 370/235
• US Class Current: 370/229
• CPC Class Codes: H04L 41/5025 by proactively reacting to service quality change, e.g. by reconfiguration after service quality degradation or upgrade
• CPC Class Codes: H04L 43/062 related to network traffic
• CPC Class Codes: H04L 47/10 Flow control; Congestion control
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 47/822 Collecting or measuring resource availability data
• CPC Class Codes: H04L 47/826 Involving periods of time

Abstract

A network tap device may include a processor, a first network interface responsive to the processor a second network interface responsive to the processor, the second network interface configured to provide wireless network access, and memory accessible to the processor. The memory may include a network access rule. The processor may be operable to permit network traffic to flow between the first network interface and the second network interface based at least in part on network traffic in a network coupled to the first network interface in accordance with the network access rule.

Claims

1. A device comprising:

a first network interface to couple to a first network;

a second network interface to couple to a second network;

a processor to monitor network traffic passed through the device between the first network interface and the second network interface;

a third network interface responsive to the processor, the third network interface to provide a wireless network; and

memory accessible to the processor, the memory including a network access rule, the processor to permit network traffic to flow between the first network interface and the third network interface based on the network traffic monitored at the processor in accordance with the network access rule, and a wireless device is to be permitted to register with the device via the third network interface based upon the network access rule, wherein the network access rule is configured to permit registration of a wireless network device via the first network interface based on the network traffic of the first network coupled to the first network interface.

2. A device comprising:

a first network interface to couple to a first network;

a second network interface to couple to a second network;

a processor to monitor network traffic passed through the device between the first network interface and the second network interface;

a third network interface responsive to the processor, the third network interface to provide a wireless network; and

memory accessible to the processor, the memory including a network access rule, the processor to permit network traffic to flow between the first network interface and the third network interface based on the network traffic monitored at the processor in accordance with the network access rule,

wherein the network access rule is to permit network traffic to flow between the first and third network interfaces based on a comparison of network traffic between the first and second network interfaces to an average network traffic between the first and second network interfaces for a particular time.

3. The device of claim 2, wherein the processor is to monitor the network traffic via the first network interface.

4. The device of claim 3, wherein a second network access rule is to permits network traffic to flow between the first and third network interface in response to the network traffic volume of the first network coupled to the first network interface being below a threshold.

5. The device of claim 2, wherein a second network access rule permits network traffic to flow between the first and third network interface based on whether network traffic from the third network interface is encrypted.

6. The device of claim 2, wherein a second network access rule is to permits network traffic to flow between the first and third network interface based on a cumulative amount of data transferred to a device connected to the third network interface.

7. The device of claim 2, wherein the first network interface comprises a wired network interface, and the second network interface comprises a wired network interface.

8. The device of claim 2, wherein the network access rule permits network traffic to flow between the first and third network interfaces based on a time of day.

18. The device of claim 2, wherein the third network interface is configured to permit registration of a wireless device based on the network access rule.

19. The device of claim 2, wherein the second network interface is to provide a second wireless network.

9. A device comprising:

a processor;

a first network interface responsive to the processor and to couple to a first network;

a second network interface responsive to the processor and to couple to a second network;

a third network interface responsive to the processor, the third network interface to provide a wireless network; and

memory accessible to the processor, the memory including a network access rule, the processor to permit registration of a wireless device and to permit network traffic to flow between the first network interface and the third network based on network traffic to the first network coupled to the first network interface in accordance with the network access rule, wherein the network access rule is configured to permit registration of a wireless network device via the first network interface based on the network traffic of the first network coupled to the first network interface.

10. The device of claim 9, wherein the processor is to monitor the network traffic via the first network interface.

11. The device of claim 9, wherein a second network access rule permits registration of a wireless device in response to network traffic volume of the first network coupled to the first network interface being below a threshold.

12. The device of claim 9, wherein the network access rule is applied based on network traffic of the first network coupled to the first network interface.

13. The device of claim 9, wherein the network access rule is applied based on whether the network traffic from the third network interface is encrypted.

14. The device of claim 9, wherein the network access rule is applied based on a cumulative amount of data transferred to a wireless device via the third network interface.

15. The device of claim 9, wherein the first network interface comprises a wired network interface.

16. The device of claim 9, wherein the processor, further permits network traffic to flow between the first and third network interfaces based on evaluating a time.

17. The device of claim 9, wherein the processor, further permits network traffic to flow between the first and third network interfaces based on evaluating a comparison of network traffic to an average network traffic for a particular time.