Establishing access controls in a premise-based environment

• US 9,503,459 B2
• Filed: 06/17/2013
• Issued: 11/22/2016
• Est. Priority Date: 12/30/2002
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: AOL Inc. (Apollo Global Management, Inc.)
• Inventors: Lu, Larry L., Meenan, Patrick
• Primary Examiner(s): Moorthy, Aravind
• Assistant Examiner(s): Pan, Peiliang
• Application Number:
  US13/919,969
• Publication Number:
  US 20130283359A1
• Time in Patent Office: 1,254 Days
• Field of Search: 726/2, 726/27, 726/5
• US Class Current: 1/1
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

Establishing access controls includes establishing a communication session between an unrecognized user identity of a user device and a destination system through an online access provider device that provides the user device with access to the destination system. The communication session is established from a premise having associated therewith one or more user identities that are recognized by the online access provider device, with at least two of the recognized user identities being associated with different access control levels. An access control level to apply to communications between the unrecognized user identity of the user device and the destination system is determined by applying an access control level established for one of the recognized user identities. The determined access control level is applied to communications between the unrecognized user identity of the user device and the destination system.

Claims

1. A computer-implemented method for establishing access controls, the method comprising:

establishing a communication session between a user device located at a premise and a destination system, the premise comprising a physical location and being associated with a plurality of users with corresponding access control levels;

receiving a request for content from the user device, the request identifying the user device and a requesting user;

accessing, using at least one processor, identifying information corresponding to the plurality of users associated with the premise;

determining, using the at least one processor, whether the requesting user is associated with the premise based on the identifying information; and

applying, when the requesting user is determined not to be associated with the premise, a default access control level to communications between the user device and the destination system.

2. The method of claim 1, further comprising:

comparing an access control level associated with the requesting user to access control levels associated with the plurality of users associated with the premise; and

selecting an access control level as the default access control level to apply to communications between the user device and the destination system, based on at least the comparison.

3. The method of claim 1, wherein applying the default access control level comprises:

determining a most restrictive access control level from among a plurality of access control levels associated with the plurality of users associated with the premise; and

selecting the determined most restrictive access control level as the default access control level to apply to the communications between the user device and the destination system.

4. The method of claim 1, wherein applying the default access control level comprises:

determining a least restrictive access control level from among a plurality of access control levels associated with the plurality of users associated with the premise; and

selecting the determined least restrictive access control level as the default access control level to apply to the communications between the user device and the destination system.

5. The method of claim 1, further comprising:

changing the access control levels for plurality of users associated with the premise from one level of classification of content to a different level of classification of content, based on age-appropriateness of the content.

6. The method of claim 1, wherein the access control levels include parental control levels.

7. The method of claim 6, wherein the parental control levels associated with the access control levels are stored on a proxy.

8. The method of claim 1, wherein the destination system includes a host system and the method further comprises:

determining an access control level to apply at the host system.

9. The method of claim 1, wherein the communication session is established through a gateway server.

10. The method of claim 1, further comprising:

establishing the communication session between the user device and the destination system through a proxy located between the user device that initiates the communication session and an online provider device; and

determining an access control level to apply at the proxy.

11. The method of claim 10, further comprising:

storing the access control information associated with plurality of users on the proxy.

12. The method of claim 10, further comprising:

using the proxy to apply the default access control level to communications between the user device and the destination system.

13. The method of claim 1, further comprising:

enabling a master account owner to override the access control level applied to each requesting user.

14. A tangible, non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to perform a method for establishing access controls, the method comprising:

establishing a communication session between a user device located at a premise and a destination system, the premise comprising a physical location and being associated with a plurality of users with corresponding access control levels;

receiving a request for content from the user device, the request identifying the user device and a requesting user;

accessing identifying information corresponding to the plurality of users associated with the premise;

determining whether the requesting user is associated with the premise based on the identifying information; and

applying, when the requesting user is determined not to be associated with the premise, a default access control level to communications between the user device and the destination system.

15. The computer-readable medium of claim 14, wherein the instructions further cause the processor to perform the following operations:

comparing an access control level associated with the requesting user to access control levels associated with the plurality of users associated with the premise; and

selecting an access control level as the default access control level to apply to communications between the user device and the destination system, based on at least the comparison.

16. The computer-readable medium of claim 14, wherein the instructions further cause the processor to perform the following operations:

determining a most restrictive access control level from among a plurality of access control levels associated with the plurality of users associated with the premise; and

selecting the determined most restrictive access control level as the default access control level to apply to the communications between the user device and the destination system.

17. The computer-readable medium of claim 14, wherein the instructions further cause the processor to perform the following operations:

determining a least restrictive access control level from among a plurality of access control levels associated with the plurality of users associated with the premise; and

selecting the determined least restrictive access control level as the default access control level to apply to the communications between the user device and the destination system.

18. The computer-readable medium of claim 14, wherein the instructions further cause the processor to perform the following operation:

changing the access control levels for plurality of users associated with the premise from one level of classification of content to a different level of classification of content, based on age-appropriateness of the content.

19. The computer-readable medium of claim 14, wherein the access control levels include parental control levels.

20. The computer-readable medium of claim 19, wherein the instructions further cause the processor to perform the following operation:

storing the parental control levels associated with the access control levels on the proxy.

21. The computer-readable medium of claim 14, wherein the destination system includes a host system and the instructions further cause the processor to perform the following operation:

determining an access control level to apply at the host system.

22. The computer-readable medium of claim 14, wherein the communication session is established through a gateway server.

23. The computer-readable medium of claim 14, wherein the instructions further cause the processor to perform the following operations:

establishing the communication session between the user device and the destination system through a proxy located between the user device that initiates the communication session and an online provider device; and

determining the access control level to apply at the proxy.

24. The computer-readable medium of claim 23, wherein the instructions further cause the processor to perform the following operation:

storing the access control information associated with plurality of users on the proxy.

25. The computer-readable medium of claim 22, wherein the instructions further cause the processor to perform the following operation:

using the proxy to apply a default access control level to communications between the user device and the destination system.

26. The computer-readable medium of claim 14, wherein the instructions further cause the processor to perform the following operation:

enabling a master account owner to override the access control levels applied to each recognized user.

27. A system for establishing access controls, comprising:

a storage device that stores instructions; and

at least one processor that executes the instructions to configure the at least one processor to perform the following operations;

establishing a communication session between a user device located at a premise and a destination system, the premise comprising a physical location and being associated with a plurality of users with corresponding access control levels;

receiving a request for content from the user device, the request identifying the user device and a requesting user;

accessing identifying information corresponding to the plurality of users associated with the premise;

determining whether the requesting user is associated with the premise based on the identifying information; and

applying, when the requesting user is determined not to be associated with the premise, a default access control level to communications between the user device and the destination system.