System and method for actively characterizing a network

• US 9,088,627 B2
• Filed: 09/29/2005
• Issued: 07/21/2015
• Est. Priority Date: 09/29/2005
• Status: Active Grant

• Current Assignee: Channel IP BV
• Original Assignee: Ipass Incorporated (Pareteum Corp.)
• Inventors: Nelson, Barbara, Albert, Roy David, Bullock, Blair Thomas
• Primary Examiner(s): Lai, Michael C
• Application Number:
  US11/239,707
• Publication Number:
  US 20070073868A1
• Time in Patent Office: 3,582 Days
• Field of Search: 709/237
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/75 Indicating network or usage conditions on the user display
• CPC Class Codes: H04L 69/24 Negotiation of communication capabilities
• CPC Class Codes: H04W 48/16 Discovering, processing access restriction or access information
• CPC Class Codes: H04W 48/18 Selecting a network or a communication service

Abstract

In one embodiment the method includes detecting a network indicator associated with a network, the network provided by a network provider. In one embodiment, after the detecting of the network indicator, the method includes obtaining from the network provider an actual attribute associated with the network. The method may also include determining, based on stored network information, whether the actual attribute matches an expected attribute for the network. If the actual attribute matches the expected attribute, the method may classify the network into one of a plurality of network classes.

Claims

1. A non-transitory machine-readable storage medium including instructions which when executed by a computer cause the computer to perform operations for classifying a network, the operations comprising:

detecting, by a client executing on the computer, a network indicator associated with the network, the network provided by a network provider;

classifying the network as being in one of a plurality of network classes based on the network indicator and stored network information;

after the classifying, verifying whether the network is correctly classified into the one of the plurality of network classes, the verifying comprising,

interacting with a component associated with the network to receive an actual attribute of the network;

determining an expected attribute for the network, wherein the expected attribute is derived from the network indicator associated with the network; and

determining whether the expected attribute matches the actual attribute;

in response to determining the actual attribute matches the expected attribute, determining that the network is correctly classified; and

in response to determining the actual attribute does not match the expected attribute, reclassifying, based on an interaction with the component and the actual attribute, the network into another one of the plurality of network classes.

2. The non-transitory machine-readable storage medium of claim 1, the operations further comprising:

after classifying the network as being in the one of the plurality of network classes, connecting to the network without user input.

3. The non-transitory machine-readable storage medium of claim 1, the operations further comprising:

presenting, in a graphical user interface controlled by the client, an icon indicating the network is available for a full network connection;

establishing, in response to user input, the full network connection between the computer and the network.

4. The non-transitory machine-readable storage medium of claim 1, the operations further comprising:

after classifying the network as being in the one of the plurality of network classes, precluding presentation of an icon indicating the network is available for connection.

5. The non-transitory machine-readable storage medium of claim 1, the operations further comprising:

obtaining, via interaction with the network provider, another actual attribute of the network; and

determining that the stored network information about the network includes another expected attribute that matches the another actual attribute;

classifying the network into a different one of the plurality of network classes based on the another actual attribute.

6. The non-transitory machine-readable storage medium of claim 5, the operations further comprising:

after classifying the network into the different one of the plurality of network classes, precluding presentation of an icon indicating that the network is available for connection.

7. The non-transitory machine-readable storage medium of claim 5, the operations further comprising:

after classifying the network into the different one of the plurality of network classes, displaying an icon indicating the network is available for connection.

8. The non-transitory machine-readable storage medium of claim 1, wherein the network indicator is a Service Set Identifier.

9. The non-transitory machine-readable storage medium of claim 1, wherein the network indicator is a network address.

10. The non-transitory machine-readable storage medium of claim 1, wherein the actual attribute is selected from the group consisting of a Media Access Control address of the network attachment point, media access control address of a network-resident component, IP address of a network-resident component, VLAN association, and Wireless Equivalent Privacy key.

11. The non-transitory machine-readable storage medium of claim 1, wherein the actual attribute includes an identity certificate.

12. The non-transitory machine-readable storage medium of claim 1, wherein the network indicator is a device identifier.

13. The non-transitory machine-readable storage medium of claim 1, wherein the plurality of network classes include trusted network or untrusted network.

14. The non-transitory machine-readable storage medium of claim 1, wherein the plurality of network classes include public access networks, known private networks, discovered corporate networks, and untrusted networks.

15. A computer-implemented method comprising:

receiving, in a computer, a network indicator associated with a network;

classifying the network into one of a plurality of network classes, the classifying based on the network indicator and stored network information;

presenting, on a display of the computer, a first indication that the network is classified into the one of a plurality of network classes;

verifying whether the network is correctly classified into the one of the plurality of network classes, the verifying including interacting with a component associated with the network; and

if the network has been incorrectly classified in the one of the plurality of network classes,

reclassifying, based on an interaction with the component and the stored network information, the network into another one of the plurality of network classes;

presenting, on the display, a second indication that the network belongs in the other one of the plurality of network classes;

precluding a connection between the computer and the network;

if the network has been correctly classified, facilitating a connection between the computer and the network.

16. The computer-implemented method of claim 15, wherein the interacting includes:

receiving an identity certificate from an aggregator; and

authenticating the identity certificate.

17. The computer-implemented method of claim 15, wherein the interacting includes:

receiving an identity certificate from the component; and

authenticating the identity certificate.

18. The computer-implemented method of claim 15, wherein the interacting includes:

receiving one or more network attributes; and

comparing the one or more network attributes to one or more stored attributes.

19. The computer implemented method claim 15, wherein the plurality of network classes include a trusted network class and an untrusted network class.

20. The computer-implemented method of claim 15, wherein the plurality of network classes include public access networks, known private networks, discovered corporate networks, and untrusted networks.