Method for managing computer network access

• US 8,930,535 B2
• Filed: 06/06/2011
• Issued: 01/06/2015
• Est. Priority Date: 01/23/2001
• Status: Expired due to Fees

• Current Assignee: Weserve Access, LLC
• Original Assignee: Helios Software LLC
• Inventors: Field, Jr., Joseph I., Fertell, David A.
• Primary Examiner(s): DENNISON, JERRY B
• Application Number:
  US13/153,931
• Publication Number:
  US 20110239277A1
• Time in Patent Office: 1,310 Days
• Field of Search: 709/225
• US Class Current: 709/225
• CPC Class Codes: H04L 41/20 Network management software packages
• CPC Class Codes: H04L 43/06 Generation of reports
• CPC Class Codes: H04L 47/803 Application aware
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 65/40 Support for services or applications
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34

Abstract

A client computer initiates a first communication session at a first network address and receives therefrom a second network address. The client computer then initiates a second communication session at the second network address and receives therefrom an access configuration including a control setting for a communication protocol capable of being utilized during a third communication session. Concurrent with the second communication session, the client computer initiates a third communication session at a third network address whereupon the conveyance of data to or from an instantiated process on the client computer via the third communication session is controlled based on the control setting for the communication protocol.

Claims

1. A method of controlling computer network access comprising:

(a) receiving an access configuration file at an endpoint computer;

(b) the endpoint computer initiating a computer network session at a network address;

(c) concurrent with the computer network session in step (b), the endpoint computer initiating another computer network session at another network address;

(d) transmitting to the network address via the computer network session a URL requested in the other computer network session;

(e) receiving in the computer network session data about the requested URL corresponding to category information stored in the access configuration file; and

(f) determining at the endpoint computer whether access to the requested URL is allowed or denied based on information stored in the access configuration file.

2. The method of claim 1, further including:

(g) logging information regarding the requested URL or the corresponding category information, wherein the logged information includes at least one of the following;

access prohibited to conveyed data including a predetermined word or phrase;

access prohibited to data of at least one predetermined data type;

access prohibited to data conveyed during at least one of a predetermined time and day-of-week;

or access prohibited based on a rating for a category included with the conveyed data.

3. The method of claim 1, wherein step (f) includes monitoring the conveyance of data between the endpoint computer and the other network address.

4. A method for controlling computer network access, the method comprising the steps of:

(a) initiating at a client computer a communication session at a network primary server;

(b) receiving at the client computer via the network primary server communication session a network address for a network data server;

(c) initiating at the client computer a communication session with the network data server;

(d) receiving at the client computer from the network primary server an access configuration including a control setting for at least one communication protocol capable of being utilized during a monitored communication session;

(e) instantiating on the client computer a process which initiates a monitored communication session at a network address;

(f) in connection with the monitored communication session, controlling the conveyance of data at least one of (i) to and (ii) from the process instantiated on the client computer based on the control setting for the one communication protocol, wherein the one communication protocol is determined from the conveyed data or client communication application, and the control setting is obtained by the client computer from the access configuration; and

(g) transferring at least part of the conveyed data to the network data server via the communication session between the client computer and the network data server.

5. The method of claim 4, wherein the monitored communication session is between the client computer and a remote computer at an IP address.

6. The method of claim 4, wherein the network primary server and the network data server are on the same computer.

7. The method of claim 4, wherein at least part of the conveyed data is transferred to the network data server at a predetermined time interval while relevant within an expected timeframe.