Filtering techniques for managing access to internet sites or other software applications

• US 7,483,982 B2
• Filed: 09/13/2005
• Issued: 01/27/2009
• Est. Priority Date: 12/05/2001
• Status: Expired due to Term

• Current Assignee: Forcepoint LLC
• Original Assignee: Forcepoint LLC
• Inventors: Kester, Harold, Lonas, Hal Case Jr., Hegli, Ronald Bjorn
• Primary Examiner(s): Caldwell; Andrew
• Assistant Examiner(s): Meucci; Michael D
• Application Number:
  US11/225,297
• Publication Number:
  US 20060031504A1
• Time in Patent Office: 1,232 Days
• Field of Search: 709223-225, 709/229
• US Class Current: 709/225
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34

Abstract

A method and system for providing flexible access resources or services related to particular software applications are described. The system includes a database of Internet sites that have been categorized so that the system determines the category of information that a user is accessing on the Internet. The system is also programmed so users are only allowed to access sites a limited number of times. The system is further programmed to limit a user'"'"'s access to the Internet based on the network'"'"'s current bandwidth usage. Moreover, users can requested a postponed access, wherein the resource or service they are requesting is stored to a server, and available to the user at a later time. In addition, if a user chooses to access a resource or service that is within certain predefined categories, they are presented with the option of retrieving the resource or service, but notified that their access will be logged to a file.

Claims

1. A system comprising:

at least one processor;

a first module that when executed by the at least one processor associates a category with an Internet site requested by a user, the category being selected from a predetermined list of categories;

a second module that when executed by the at least one processor determines a data transfer rate through a predetermined network access point, the network access point being between an area network and an Internet so that data received from the Internet site in response to the request passes through the network access point, the data transfer rate being indicative of an amount of data traffic passing through the network access point; and

a third module that when executed by the at least one processor identifies a predetermined network threshold value associated with the category that is associated with the requested Internet site, compares the predetermined network threshold value with the data transfer rate, and controls access through the network access point to the Internet site requested by the user based at least in part on the comparison.

2. The system of claim 1, wherein the data transfer rate is indicative of a total data transfer rate between the area network and the Internet.

3. The system of claim 1, wherein the data transfer rate is indicative of a portion of a total data transfer rate between the area network and the Internet that is associated with the category.

4. The system of claim 1, wherein the area network is a local area network.

5. The system of claim 1, wherein the area network is a wide area network.

6. The system of claim 5, wherein the wide area network includes a plurality of local area networks.

7. A method comprising:

associating a category with an Internet site requested by a user, the category being selected from a predetermined list of categories;

determining a bandwidth through a predetermined network access point, the network access point being between an area network and an Internet so that data received from the Internet site in response to the request passes through the network access point, the bandwidth being indicative of an amount of data traffic passing through the network access point;

identifying a predetermined network threshold value associated with the category that is associated with the requested Internet site;

comparing the predetermined network threshold value with the bandwidth; and

controlling access through the network access point to the internet site requested by the user based at least in part on the comparison.

8. The method of claim 7, wherein the bandwidth is indicative of a total data transfer rate between the area network and the Internet.

9. The method of claim 7, wherein the bandwidth is indicative of a portion of a total bandwidth between the area network and the Internet that is associated with the category.

10. The method of claim 7, wherein the area network is a local area network.

11. The method of claim 7, wherein the area network is a wide area network.

12. A system comprising:

means for associating a category with an Internet site requested by a user, the category being selected from a predetermined list of categories;

means for determining a data transfer rate through a predetermined network access point, the network access point being between an area network and the Internet so that data received from the Internet site in response to the request passes through the network access point, the data transfer rate being indicative of an amount of data traffic passing through the network access point;

means for identifying a predetermined network threshold value associated with the category that is associated with the requested Internet site;

means for comparing the predetermined network threshold value with the data transfer rate; and

means for controlling access through the network access point to the internet site requested by the user based at least in pan on the comparison.

13. A system comprising:

a first module that when executed determines a data transfer rate through a predetermined network access point, the network access point being between a user and an Internet so that data received from an Internet site in response to a request passes through the network access point, the data transfer rate being indicative of an amount of data traffic passing through the network access point;

a first database having categories associated with Internet sites;

a second database having a limit associated with the user; and

a second module that when executed controls the user'"'"'s requested access to the Internet based at least in part on the data transfer rate, the category of a requested Internet site, and the limit associated with the user.

14. The system of claim 13, wherein the data transfer rate is a measure of bytes transferred per time period.

15. The system of claim 13, wherein the data transfer rate is a measure of number of hits per time period.

16. A system comprising:

at least one processor;

a first module that when executed by the at least one processor identifies a software data traffic type associated with a software application running on a computer, the software data traffic type being selected from a predetermined list;

a second module that when executed by the at least one processor determines a data transfer rate through a predetermined network access point, the network access point being within an area network so that data received from the Internet site in response to the request passes though the network access point, the data transfer rate being indicative of an amount of data traffic passing through the network access point; and

a third module that when executed by the at least one processor identifies a predetermined network threshold value associated with the software data traffic type that is associated with the software application, compares the predetermined network threshold value with the data transfer rate, and controls transmission of data through the network access point and between the computer and the area network based at least in part on the comparison.

17. The system of claim 16, wherein the software data traffic type is instant messaging.

18. The system of claim 16, wherein the software data traffic type is e-mail.

19. The system of claim 16, wherein the software data traffic type is audio files.

20. The system of claim 16, wherein the software data traffic type is video files.

21. The system of claim 16, wherein the software data traffic type is streaming audio.

22. The system of claim 16, wherein the software data traffic type is streaming video.

23. A method comprising:

capturing a first data packet transmitted between an area network and an Internet;

determining a software data traffic type to associate with the first data packet;

determining a data transfer rate through a predetermined network access point, the network access point being between the area network and the Internet so that data packets received from the Internet passes through the network access point, the data transfer rate being indicative of an amount of data traffic passing through the network access point;

identifying a predetermined network threshold value associated with the software data traffic type;

comparing the predetermined network threshold value with the data transfer rate; and

controlling flow of a second data packet through the network access point based at least in part on the comparison, wherein the first data packet and the second data packet are associated with the same software data traffic type.

24. The method of claim 23, wherein the software data traffic type is instant messaging.

25. The method of claim 23, wherein the software data traffic type is e-mail.

26. The method of claim 23, wherein the software data traffic type is audio files.

27. The method of claim 23, wherein the software data traffic type is video files.

28. The method of claim 23, wherein the software data traffic type is streaming audio.

29. The method of claim 23, wherein the software data traffic type is streaming video.