Devices and methods of using network information in an authorization process

• US 7,793,339 B2
• Filed: 09/28/2005
• Issued: 09/07/2010
• Est. Priority Date: 09/28/2005
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Lagnado, Isaac
• Primary Examiner(s): Parthasarathy; Pramila
• Application Number:
  US11/237,355
• Publication Number:
  US 20070079359A1
• Time in Patent Office: 1,805 Days
• Field of Search: 726/4, 713/200, 395/200.59, 395/186, 395/187.01, 395/188.01, 380/3, 380/4, 380/23, 380/25, 380/30, 370/352
• US Class Current: 726/4
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 48/16 Discovering, processing access restriction or access information

Abstract

A device comprises a network interface and a programmable processor to execute software that performs an authorization process that is a function of network information received by the network interface. The network information comprises information indicative of a network with which the network interface is able to communicate, and the software causes the device to perform a boot process such that if the authorization process is not successful, the device does not successfully complete the boot process.

Claims

1. A device comprising:

a network interface; and

a programmable processor to execute software that performs an authorization process that is a function of network information received by the network interface;

wherein the network information comprises information identifies a network with which the network interface is able to communicate, and the software causes the device to perform a boot process such that if the authorization process is not successful, the device does not successfully complete the boot process; and

wherein, for the authorization process, the processor compares network profiles stored in the device to the network information received by the network interface, wherein the stored network profiles identifies those networks associated with one or more respective authorized locations.

2. The device of claim 1, wherein access to the device is prohibited if the authorization process is not successful.

3. The device of claim 1, wherein the software causes the device to perform a wake-up process, wherein the wake-up process causes the device to exit a sleep state, wherein if the authorization process is not successful, the device does not successfully complete the wakeup process.

4. The device of claim 1, wherein the network interface comprises at least one of a wireless network interface and a wired network interface.

5. The device of claim 1, wherein the authorization process is not successful if the network information received by the network interface does not match at least a portion of network information stored by the device.

6. The device of claim 5, wherein the network information stored by the device comprises information associated with at least one location.

7. The device of claim 5, wherein the network interface information stored by the device comprises at least one stored network profile and the network information received by the network interface comprises at least one current network profile.

8. A portable computer comprising:

a network interface;

wherein an authorization process is performed for the portable computer that is a function of network information received by the network interface;

wherein the network information identifies a network with which the network interface is able to communicate; and

wherein failure of the authorization process precludes the portable computer from completing a boot process;

wherein, for the authorization process, the portable computer compares network profiles stored in the portable computer to the network information received by the network interface, wherein the stored network profiles identifies those networks associated with one or more respective authorized locations.

9. The portable computer of claim 8, wherein the portable computer performs the authorization process.

10. The portable computer of claim 8, further comprising a programmable processor to execute software that performs the authorization process.

11. The portable computer of claim 8, wherein the network interface comprises at least one of a wireless network interface and a wired network interface.

12. A computer comprising:

a network interface;

a programmable processor to execute software that performs an authorization process that uses network information received by the network interface, said network information identifies a network over which the computer communicates;

wherein the software comprises an input/output system that performs a boot process such that if the authorization process is not successful, the input/output system does not successfully complete the boot process;

wherein the network information comprises at least one of;

dynamic name service information, gateway information, dynamic host configuration protocol information, and network authentication information.

13. The computer of claim 12, wherein if the input/output system does not successfully complete the boot process, then access to the computer is denied.

14. The computer of claim 12, wherein the input/output system performs a wake-up process that causes the computer to exit a sleep state, wherein if the authorization process is not successful, the input/output system does not successfully complete the wake-up process.

15. A method comprising:

receiving network information from a network interface included in a computing device, wherein the network information is indicative of a network with which the network interface is able to communicate;

performing an authorization process using the network information received by the network interface included in the computing device; and

denying access to the computing device unless the authorization process validates the network information;

wherein the network information comprises at least one of;

dynamic name service information, gateway information, dynamic host configuration protocol information, and network authentication information.

16. The method of claim 15, wherein the information indicative of the network comprises information indicative of a network element included in the network.

17. The method of claim 15, wherein the network information comprises at least one of:

a service set identifier (SSID) of a network element included in a wireless network, a media access control (MAC) address of the network element included in the wireless access network, and security features supported by the wireless network.

18. The method of claim 15, wherein denying access further comprises prohibiting the computing device from completing a boot process to power-on the computing device.

19. A processor-readable storage medium comprising program instructions, wherein the program instructions are operable to cause a programmable processor included in a device to:

receive network information from a network interface included in the device, wherein the network information identifies a network with which the network interface is able to communicate;

perform an authorization process using the network information received by the network interface included in the device, wherein the authorization process comprises a comparison of network profiles stored in the device to the network information received by the network interface, wherein the stored network profiles identifies those networks associated with one or more respective authorized locations; and

prohibit the device from completing a power-up sequence unless the authorization process validates the network information received from the device.