Wireless network control and protection system

• US 20040153665A1
• Filed: 02/03/2003
• Published: 08/05/2004
• Est. Priority Date: 02/03/2003
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Browne, Logan
• Application Number:
  US10/357,800
• Publication Number:
  US 20040153665A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A local area network and method for operating the same is disclosed. The local computer network is connected to a wide area network by a node that receives network communications from computers on the local network. The node includes a registration system for assigning one of a plurality of predetermined states to each of the computers on the network, the states determining the types of communications allowed by that computer on the wide area network. The registration system assigns a first one of the states to one of the computers when that computer provides registration information to the registration system and a second state when the computer provides authentication information to an authentication site. A computer on the network has restricted access to the wide area network when assigned the first state and less restricted access to the wide area network when assigned the second state.

Claims

1. A local computer network for connecting a plurality of computers to a wide area network, said local computing network comprising:

a node for receiving network communications from computers on said network, said node comprising a registration system for assigning one of a plurality of predetermined states to each of said computers on said network, said states determining the types of communications allowed by that computer on said wide area network; and

an authentication site for authenticating said computers on said local network,

wherein said registration system assigns a first one of said states to one of said computers when said computer provides a first set of registration information and a second state when said computer has provided authentication information to said authentication site, that computer having restricted access to said wide area network when assigned said first state and less restricted access to said wide area network when assigned said second state.

2. The local computer network of claim 1 wherein said wide area network comprises the Internet.

3. The local computer network of claim 1 wherein said authentication site is located on said wide area network.

4. The local computer network of claim 1 wherein one of said computers comprises a wireless link for connecting said computer to said network.

5. The local computer network of claim 1 wherein said registration system further comprises an attack detection engine identifying hostile communications on said network and wherein said registration system assigns a third state to one of said computers when said attack engine has identified a predetermined number of hostile communications from that computer, said third state restricting access to said wide area network by that computer.

6. The local computer network of claim 5 wherein said registration system communicates the assignment of said third state to that computer to said authentication site.

7. The local computer network of claim 5 wherein said registration system communicates the assignment of said third state to that computer to a network administration site connected to said network.

8. The local computer network of claim 5 wherein said registration system further comprises a countermeasures program for interfering with communications from one of said computers assigned said hostile state.

9. A method for operating a local computer network that connects a plurality of computers to a wide area network, said method computing network comprising:

providing a node for receiving network communications from said computers on said local network, said node comprising a registration system for assigning one of a plurality of predetermined states to each of said computers on said network, said states determining the types of communications allowed by that computer on said wide area network;

providing an authentication site for authenticating said computers on said local network; and

assigning a first one of said states to one of said computers when said computer provides registration information to said registration system and a second state when said computer has provided authentication information to said authentication site, that computer having restricted access to said wide area network when assigned said first state and less restricted access to said wide area network when assigned said second state.

10. The method of claim 9 wherein said wide area network comprises the Internet.

11. The method of claim 9 wherein said authentication site is located on said wide area network.

12. The method of claim 9 wherein one of said computers comprises a wireless link for connecting said computer to said network.

13. The method of claim 9 wherein said registration system further comprises an attack detection engine identifying hostile communications on said network and wherein said registration system assigns a third state to one of said computers when said attack engine has identified a predetermined number of hostile communications from that computer, said third state restricting access to said wide area network by that computer.

14. The method of claim 13 wherein said registration system communicates the assignment of said third state to that computer to said authentication site.

15. The method of claim 13 wherein said registration system communicates the assignment of said third state to that computer to a network administration site connected to said network.

16. The method of claim 13 wherein said registration system further comprises a countermeasures program for interfering with communications from one of said computers assigned said hostile state.