System from reputation shaping a peer-to-peer network

• US 8,266,284 B2
• Filed: 05/16/2008
• Issued: 09/11/2012
• Est. Priority Date: 05/16/2008
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Iverson, Kris
• Primary Examiner(s): Chan, Wing
• Assistant Examiner(s): KATSIKIS, KOSTAS J
• Application Number:
  US12/121,798
• Publication Number:
  US 20090287819A1
• Time in Patent Office: 1,579 Days
• Field of Search: 709/204, 709/217, 709/224, 709/225, 709/223, 709/226, 709/229, 715/500
• US Class Current: 709/225
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/1057 involving pre-assessment of levels of reputation of peers

Abstract

A method of managing access to resources in a network. A reputation for each network participant is evaluated by querying a data source for the reputation associated with the network participant. Based on the evaluated reputation, an appropriate level of access to network resources is determined from a plurality of levels of access to network resources for the corresponding network participant. An access control action is then performed to correspond to the determined level of access for the participant.

Claims

1. A computer-implemented method of managing access to resources in a network, comprising:

evaluating, using a computing device, a reputation for a network participant, wherein at least one representation of the reputation comprises an icon;

determining, using the computing device, an appropriate level of access to network resources for the network participant from a plurality of levels of access to network resources based on the reputation of the network participant, wherein at least some network resources have associated reputation elements that are useable to further determine an access level to said at least some network resources and levels of access to network resources are configured, at least in part, to delineate corresponding utilization of network resource consumption;

determining, using the computing device, eligibility of the network participant to access network resources based, at least in part, on a history of behaviors of the network participant, regardless of the reputation of the network participant, wherein the network participant is denied access to network resources if the history shows a pattern of certain undesirable behaviors; and

performing, using the computing device, an action corresponding to the appropriate level of access to network resources determined.

2. The method of claim 1, wherein evaluating a reputation for a network participant comprises:

establishing an identity for the network participant;

querying a data source for a reputation associated with the identity established; and

obtaining a reputation of the identity from the data source.

3. The method of claim 2, wherein establishing an identity comprises:

extracting login information from a client device corresponding to the network participant; and

querying a network server to obtain the identity based on the login information from the client device of the network participant.

4. The method of claim 2, wherein establishing an identity comprises determining an IP address of the client device corresponding to the client device of the network participant.

5. The method of claim 1, wherein the network is a virtual network.

6. The method of claim 5, wherein the virtual network is a peer to peer network.

7. The method of claim 1, wherein performing an action comprises:

granting access to a set of available network resources, the set corresponding to a level of access to network resources.

8. The method of claim 1, wherein performing an action comprises:

prohibiting access to a set of available network resources, the set corresponding to a level of access to network resources.

9. The method of claim 1, wherein the client device of the network participant is in the network.

10. The method of claim 1, wherein the client device of the network participant is attempting to join the network.

11. A method of managing access to local resources in a client device of a first network participant, comprising:

receiving network traffic corresponding to a request from a client device of a second network participant;

evaluating a reputation of the second network participant, wherein at least one representation of the reputation comprises an icon;

determining an eligibility of the second network participant to access the local resources of the first network participant by comparing the reputation of the second network participant with eligibility criteria, wherein eligibility criteria is established, at least in part, from user input or pre-defined from the first network and wherein establishing eligibility criteria comprises;

querying the first network participant for a set of conditions required to be eligible for access to local resources; and

receiving the set of conditions required to be eligible for access to local resources from the first network participant; and

performing an action corresponding to the access eligibility determined, wherein eligibility is further determined, at least in part, based upon a history of behaviors of the second network participant, regardless of the reputation of the second network participant, and wherein the second network participant is denied access to local resources of the first network participant if the history shows a pattern of certain undesirable behaviors.

12. The method of claim 11, wherein evaluating a reputation further comprises:

establishing an identity for the second network participant;

querying a data source for a reputation associated with the identity of the second network participant;

obtaining a reputation of the identity from the data source.

13. The method of claim 11, wherein performing an action comprises:

granting access to local resources for network participants with eligibility determined.

14. A computer system having a processor coupled to a memory, the memory having computer readable code, which when executed by the processor causes the computer system to implement:

a network reputation service provider for determining a network reputation of a client device, wherein at least one representation of the network reputation comprises an icon; and

a network reputation data source;

wherein, in response to a request for the network reputation of the client device, the network reputation service provider determines the network reputation of the client device by referencing one or more identities associated with users of the client device stored in the reputation data source in response;

wherein the reputation of the client device is used to prioritize a connection to the client device; and

wherein eligibility of the client device to access resources through the connection is determined based, at least in part, upon a history of behaviors of the client device, regardless of the reputation of the client device, and wherein the client device is denied access to resources if the history shows a pattern of certain undesirable behaviors.

15. The system according to claim 14, wherein requests for a network reputation of a client device are received by the network reputation service provider from a remote computing device.

16. The system according to claim 15, wherein the remote computing device is a computer system.

17. The system according to claim 16, wherein the remote computing device is a hand-held computing device.

18. The system according to claim 15, wherein the requests are sent from the remote computing device to the network reputation service provider via the Internet.