IP based security applications using location, port and/or device identifier information

• US 8,402,559 B2
• Filed: 11/18/2010
• Issued: 03/19/2013
• Est. Priority Date: 01/08/2002
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Services Corporation (Verizon Communications Inc.)
• Inventors: Baum, Robert T
• Primary Examiner(s): Lipman, Jacob
• Application Number:
  US12/949,357
• Publication Number:
  US 20110067119A1
• Time in Patent Office: 852 Days
• Field of Search: 726/2, 726/9, 726/34
• US Class Current: 726/34
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks

Abstract

Methods and apparatus for determining, in a reliable manner, a port, physical location and/or device identifier, such as a MAC address, associated with a device using an IP address and for using such information, e.g., to support one or more security applications is described. Supported security applications include restricting access to services based on the location of a device seeking access to a service, determining the location of stolen devices, and verifying the location of the source of a message or other IP signal, e.g., to determine if a prisoner is contacting a monitoring service from a predetermined location.

Claims

1. A stolen device detection method, the method comprising the steps of:

storing, in a storage device, a list of device identifiers corresponding to stolen devices;

receiving an IP packet from a device including an IP address associated with said device;

using said IP address associated with said device to determine a device identifier also associated with said device;

comparing the determined device identifier to said stored list of device identifiers corresponding to stolen devices; and

determining that said IP address corresponds to a stolen device when said determined device identifier matches a device identifier in said stored list.

2. The stolen device detection method of claim 1, wherein said determined device identifier is a MAC address and wherein said stored list of device identifiers is a list of MAC addresses.

3. The stolen device detection method of claim 1, further comprising:

determining the location from which said device is used from said IP address and from information determined from a MAC address corresponding to said device.

4. The stolen device detection method of claim 3, further comprising:

generating a message indicating the location of device determined to be a stolen device, said message including the determined location form which said device is being used.

5. The stolen device detection method of claim 3, wherein said step of determining the location from which said device is used includes:

determining a router and port through which said device transmitted said IP packet; and

obtaining location information from a database associating router and port numbers with physical locations corresponding to subscriber premises.

6. The stolen device detection method of claim 5, further comprising:

storing owner contact information with said list of stolen device identifiers.

7. The stolen device detection method of claim 6, wherein said owner contact information includes an E-mail address corresponding to an owner of a stolen device.

8. The stolen device detection method of claim 5, further comprising:

storing law enforcement contact information with said list of stolen device identifiers.

9. The stolen device detection method of claim 8, wherein said law enforcement contact information includes an E-mail address corresponding to an owner of a stolen device.

10. A system for detecting stolen devices using IP addresses, the system comprising:

a stored list of device identifiers corresponding to stolen devices;

means for receiving an IP packet from a device including an IP address associated with said device;

means for determining a device identifier associated with said device from said IP address associated with said device;

means for comparing the determined device identifier to said stored list of device identifiers corresponding to stolen devices; and

means for determining that said IP address corresponds to a stolen device when said determined device identifier matches a device identifier in said stored list.

11. The system of claim 10, wherein said determined device identifier is a MAC address and wherein said stored list of device identifiers is a list of MAC addresses.

12. The system of claim 11, further comprising:

means for determining the location from which said device is used from said IP address and from information determined from a MAC address corresponding to said device.

13. The system of claim 12, further comprising:

means for generating a message indicating the location of device determined to be a stolen device, said message including the determined location form which said device is being used.