Location discovery in a data network

• US 7,706,369 B2
• Filed: 11/12/2007
• Issued: 04/27/2010
• Est. Priority Date: 03/01/2002
• Status: Expired due to Term

• Current Assignee: Extreme Networks, Inc.
• Original Assignee: Enterasys Networks Incorporated (Extreme Networks, Inc.)
• Inventors: Fee, Brendan J., Graham, Richard W., Frattura, David, Allen, Anja A., Roese, John J.
• Primary Examiner(s): PHAM, BRENDA H
• Application Number:
  US11/938,518
• Publication Number:
  US 20080155094A1
• Time in Patent Office: 897 Days
• Field of Search: 370/252, 370/389, 370/349, 370/400, 370/401, 370/402, 370/471, 370/248, 370/395.3, 370/395.2, 370/395.54, 370/230, 370/235, 370/392
• US Class Current: 370/389
• CPC Class Codes: G01S 5/02 using radio waves using satellite radio beacon systems for determining position G01S19/00
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 61/10 of different types
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/20 Services signaling; Auxiliary data signalling, i.e. transmitting data via a non-traffic channel
• CPC Class Codes: H04W 4/50 : Service provisioning or reconfiguring
• CPC Class Codes: H04W 64/00 : Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 8/26 : Network addressing or numbering for mobility support
• CPC Class Codes: Y10S 707/99932 : Access augmentation or optimizing
• CPC Class Codes: Y10S 707/99939 : Privileged access

Abstract

A method for location discovery in a data network includes receiving, at a first device, connection information from a neighboring network device and determining a physical location of the first device based on the connection information. The method can include receiving, at the first device, the physical location transmitted from the neighboring network device. The method can further include associating a level of trust with the physical location based on the neighboring network device. The first device be one of a variety of devices, such as a router, a switch, a network entry device, a firewall device, or a gateway.

Claims

1. A system comprising:

a physical location module configured to determine a physical location of a connection point and to transmit the physical location to a client device in communication with the connection point;

a client device is configured to receive the physical location from the physical location module;

a network device in communication with the client device, the network device including the physical location module;

a first client device physical location, wherein the first client device physical location is determined based, at least in part, on the physical location; and

a network switch, wherein a policy of the network switch is provisioned based, at least in part, on the first client device physical location.

2. The system of claim 1, further comprising:

a second network device in communication with the client device, the second network device including a second physical location module, wherein the second physical location module is configured to determine a second client device physical location.

3. The system of claim 2, further comprising:

a network switch, wherein a policy of the network switch is provisioned, based, at least in part, on one or more of the first client device physical location and the second client device physical location.

4. A computer-implemented method comprising:

determining, by a physical location module, a physical location of a connection point;

transmitting, by the physical location module, the physical location to a client device in communication with the connection point;

configuring the client device to receive the physical location from the physical location module;

communicating with the client device, by a network device, wherein the network device includes the physical location module;

determining a first client device physical location based, at least in part, on the physical location; and

provisioning, in a network switch, a policy based, at least in part, on the first client device physical location.

5. The computer-implemented method of claim 4, further comprising:

configuring a second physical location module to determine a second client device physical location, wherein the second physical location module is included within a second network device that is in communication with the client device.

6. The computer-implemented method of claim 5, further comprising:

provisioning, in a network switch, a policy based, at least in part, on one or more of the first client device physical location and the second client device physical location.

7. A computer program product residing on a computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising:

determining, by a physical location module, a physical location of a connection point;

transmitting, by the physical location module, a physical location to a client device in communication with the connection point;

configuring the client device to receive the physical location from the physical location module;

communicating with the client device, by a network device, wherein the network device includes the physical location module;

determining a first client device physical location based, at least in part, on the physical location; and

provisioning, in a network switch, a policy based, at least in part, on the first client device physical location.

8. The computer program product of claim 7, further comprising:

configuring a second physical location module to determine a second client device physical location, wherein the second physical location module is included within a second network device that is in communication with the client device.

9. The computer program product of claim 8, further comprising:

provisioning, in a network switch, a policy based, at least in part, on one or more of the first client device physical location and the second client device physical location.