Locating devices in a data network

• US 7,739,402 B2
• Filed: 02/28/2003
• Issued: 06/15/2010
• Est. Priority Date: 03/01/2002
• Status: Expired due to Term

• Current Assignee: Extreme Networks, Inc.
• Original Assignee: Enterasys Networks Incorporated (Extreme Networks, Inc.)
• Inventors: Roese, John J., Gorsky, John-Paul, Frattura, David, Harrington, David, Graham, Richard W., Durand, Roger P.
• Primary Examiner(s): Etienne, Ario
• Assistant Examiner(s): Todd, Gregory G
• Application Number:
  US10/377,180
• Publication Number:
  US 20030225893A1
• Time in Patent Office: 2,664 Days
• Field of Search: 209/220, 209/223, 209/225, 209/229, 342/450, 342/451, 342/457, 342/465, 713/201, 713/154, 713/162, 713/168, 713/170, 701/213, 340/988, 340/426.19, 4554561-4566, 709/238, 709242-244, 726/3, 726/4, 726/17, 726/26, 726/28, 726/29
• US Class Current: 709/242
• CPC Class Codes: G01S 5/02 using radio waves using satellite radio beacon systems for determining position G01S19/00
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 61/10 of different types
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/20 Services signaling; Auxiliary data signalling, i.e. transmitting data via a non-traffic channel
• CPC Class Codes: H04W 4/50 : Service provisioning or reconfiguring
• CPC Class Codes: H04W 64/00 : Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 8/26 : Network addressing or numbering for mobility support
• CPC Class Codes: Y10S 707/99932 : Access augmentation or optimizing
• CPC Class Codes: Y10S 707/99939 : Privileged access

Abstract

A system that associates physical locations with network-linked devices in a network to which such devices are connected. This system employs a variety of techniques for establishing device location. The system configuration can vary and can include any type of data network, including LANs, MANs, Wide Area Networks (WANs), Personal Area Networks (PANs), and Home Networks. The system provides location information for particular devices to the network devices and management, and may be used in any of a variety of ways to improve configuration accuracy, control, and security. The location information may also be used to control or secure a device itself.

Claims

1. A method of determining a physical location of a client in a data communication network, the method comprising:

assigning a connection point identifier to a bidirectional connection point through which the client communicates with a packet forwarding network device of the data communication network;

establishing communication between the client and the data communication network, via a cable-based communication path that includes the bidirectional connection point and the packet forwarding network device;

providing connection information to the client via the cable-based communication path, from the packet forwarding network device;

determining the connection point identifier by the client based at least in part on the provided connection information;

determining a physical location of the client, by the data communication network, based at least in part on the connection point identifier, including accessing a stored association between the connection point identifier and the physical location, wherein the connection point identifier is transmitted to the data communication network by the client via the cable-based communication path;

providing the determined physical location to the client via the cable-based communication path from the data communication network, wherein the physical location includes location information configured to identify a location of the client distinct from a location of the packet forwarding network device;

establishing the client as an authenticated user;

establishing at least one packet forwarding policy based, at least in part, upon the determined physical location and the authenticated user; and

forwarding one or more packets to or from the client, by the packet forwarding network device based, at least in part, upon the at least one packet forwarding policy.

2. The method of claim 1 wherein determining the physical location is in response to the client connecting to the bidirectional connection point.

3. The method of claim 1 further comprising storing a plurality of associations of connection point identifiers with respective physical locations, including storing the association between the connection point identifier and the physical location prior to the client connecting to the bidirectional connection point.

4. The method of claim 1 wherein the connection information comprises a first portion that identifies the packet forwarding network device.

5. The method of claim 4 wherein the first portion comprises an address of the packet forwarding network device.

6. The method of claim 5 wherein the first portion comprises a MAC address of the packet forwarding network device.

7. The method of claim 5 wherein the first portion comprises an Internet Protocol (IP) address of the packet forwarding network device.

8. The method of claim 1 wherein the connection information comprises a second portion that identifies a connection port of the packet forwarding network device.

9. The method of claim 8 where the second portion comprises a MAC address of the connection port.

10. The method of claim 1 wherein the connection information comprises a second portion, and where the second portion comprises an index attribute contained in a device ID.

11. The method of claim 1 wherein determining the physical location further comprises:

receiving a signal from the client; and

measuring, by a network device in the data communication network, a first characteristic of the signal.

12. The method of claim 11 wherein determining the physical location further comprises determining the physical location based on the measured first characteristic.

13. The method of claim 11 wherein determining the physical location further comprises:

storing associations of previously measured characteristics with respective physical locations; and

determining the physical location using the measured first characteristic and the previously measured characteristics.

14. The method of claim 11 wherein measuring further comprises:

measuring, by a first network device, the first characteristic of the signal received via a cable-based transmission medium from the client; and

measuring, by a second network device, a second characteristic of a signal received via a wireless transmission medium from the client, and wherein determining the physical location further comprises determining the physical location using the measured first characteristic and the measured second characteristic.

15. The method of claim 1 further comprising storing the association between the connection point identifier and the physical location using a location database.

16. The method of claim 15 wherein storing the association comprises storing the association between the connection point identifier and the physical location in a centralized location server.

17. The method of claim 15 wherein storing the association comprises storing the association between the connection point identifier and the physical location distributed among network devices.

18. The method of claim 1 wherein the bidirectional connection point comprises a jack.

19. The method of claim 1 further comprising storing an association between the physical location and at least one of a MAC address, a network layer address, a phone number, a protocol type, an asset ID, and an owner.

20. The method of claim 1 further comprising determining an authentication using the determined physical location.

21. The method of claim 1 further comprising determining a level of service using the determined physical location.

22. The method of claim 1 further comprising employing a security feature that uses the physical location.

23. The method of claim 22 wherein employing the security feature comprises encrypting data based on the physical location.

24. The method of claim 22 wherein employing the security feature comprises employing a temporary key associated with the physical location.

25. The method of claim 1 wherein determining the physical location further comprises:

searching a plurality of stored associations for the determined connection point identifier; and

identifying the physical location associated with the connection point identifier in the stored associations.

26. The method of claim 1 wherein the determined physical location includes location information that comprises at least one of:

a latitude and longitude format,

a latitude, longitude, altitude, and accuracy format,

a location identification number,

a textual string representation, and

a relative physical location with relationship information.

27. The method of claim 1 further comprising establishing a connection policy using the determined physical location.

28. The method of claim 27 further comprising authenticating a user using the connection policy.

29. The method of claim 1 further comprising transmitting the determined physical location to a device associated with the bidirectional connection point.

30. The method of claim 1 further comprising transmitting configuration information to a device associated with the bidirectional connection point based on the physical location.

31. The method of claim 1 wherein determining the physical location further comprises determining, by a trusted device, the physical location based on the bidirectional connection point.

32. The method of claim 31 wherein the trusted device is located within a network infrastructure.

33. The method of claim 1 further comprising storing an association between the physical location and a trust level.

34. The method of claim 33 further comprising determining the trust level of the physical location using a device that determines the physical location.

35. A method of determining a physical location of a client in a data communication network, the method comprising:

connecting the client to a bidirectional connection point, wherein the bidirectional connection point is part of a cable-based communication path from the client to a packet forwarding network device of the data communication network;

identifying, by the client, the bidirectional connection point through which the client communicates;

determining a physical location of the client, by the data communication network, based on the identified bidirectional connection point, wherein the physical location includes location information configured to identify a location of the client distinct from a location of the packet forwarding network device;

providing the determined physical location to the client from the data communication network via the cable-based communication path;

storing an association between the identified bidirectional connection point and the determined physical location;

establishing the client as an authenticated user;

establishing at least one packet forwarding policy based, at least in part, upon the determined physical location and the authenticated user; and

forwarding one or more packets to or from the client, by the packet forwarding network device based, at least in part, upon the at least one packet forwarding policy.

36. The method of claim 35 wherein the determined physical location includes location information that comprises at least one of:

a latitude and longitude format,

a latitude, longitude, altitude, and accuracy format,

a location identification number,

a textual string representation, and

a relative physical location with relationship information.

37. The method of claim 35 wherein determining the physical location further comprises:

receiving a signal from the client; and

measuring, by a network device in the data communication network, a first characteristic of the signal.

38. The method of claim 37 wherein determining the physical location further comprises determining the physical location based on the measured first characteristic.

39. The method of claim 37 wherein determining the physical location further comprises:

storing associations of previously measured characteristics with respective physical locations; and

determining the physical location using the measured first characteristic and the previously measured characteristics.

40. The method of claim 37 wherein measuring further comprises:

measuring, by a first network device, the first characteristic of the signal received via a cable-based transmission medium from the client; and

measuring, by a second network device, a second characteristic of a signal received via a wireless transmission medium from the client, and wherein determining the physical location further comprises determining the physical location using the measured first characteristic and the measured second characteristic.