System for determining whether to block internet access of a portable system based on its current network configuration

• US 8,856,330 B2
• Filed: 06/13/2013
• Issued: 10/07/2014
• Est. Priority Date: 03/04/2013
• Status: Active Grant

• Current Assignee: FMR LLC
• Original Assignee: FMR LLC
• Inventors: Rangappan, Narayanan
• Primary Examiner(s): Luu, Le H
• Application Number:
  US13/916,738
• Publication Number:
  US 20140250222A1
• Time in Patent Office: 481 Days
• Field of Search: 709/223, 709/224, 709/225, 709/221, 709/238, 709/217, 455/411, 726/30, 726/3, 370/331
• US Class Current: 709/225
• CPC Class Codes: H04L 12/2854 Wide area networks, e.g. public data networks
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 12/2872 Termination of subscriber connections
• CPC Class Codes: H04L 43/0811 by checking connectivity
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/086 using security domains

Abstract

A system for monitoring a portable system external to an enterprise network is provided that includes a network monitoring system that monitors any changes to the network configuration of the portable system. If a change is detected the network monitoring system determines if the portable system is not currently connected to the enterprise network and has access to Internet so as to block access to the Internet until the portable system is properly connected to the enterprise network. An event logger receives notification from the network monitoring system and logs the status as to whether the portable system has Internet access.

Claims

1. A system for monitoring a portable system external to an enterprise network comprising:

a network monitoring system that monitors any changes to the network configuration of the portable system, if a change is detected the network monitoring system determines if the portable system is not currently connected to the enterprise network and has access to Internet so as to block access to the Internet until the portable system is properly connected to the enterprise network, the network monitoring system executing within the portable device, the network monitoring system monitors and detects changes that have occurred in the network configuration of the portable system, wherein upon detection of a change, a user is prevented from browsing the internet from the portable system unless certain conditions are met, if the portable system is connected to the Internet and not connected to the enterprise network, access to the Internet is disabled and all traffic other than those deemed acceptable is blocked as defined by a whitelist; and

an event logger that receives notification from the network monitoring system and logs the status as to whether the portable system has Internet access.

2. The system of claim 1, wherein the network monitoring system checks if the portable system is Internet accessible and connected to enterprise network allowing the portable system access to the Internet.

3. The system of claim 1, wherein the network monitoring system is in active mode once a network configuration change has been detected.

4. The system of claim 1, wherein the network monitoring system determines if the portable system is Internet accessible and not connected to the enterprise network denying the portable system access to the Internet.

5. The system of claim 1, wherein the network monitoring system determines if the portable system is not Internet accessible and not connected to the enterprise network and not blocking the portable system access to the Internet.

6. A method of monitoring a portable system external to an enterprise network comprising:

monitoring any changes to the network configuration of the portable system using a network monitoring system, if a change is detected the network monitoring system determines if the portable system is not currently connected to the enterprise network and has access to Internet to block access to the Internet until the portable system is properly connected to the enterprise network, the network monitoring system executing within the portable device, the network monitoring system monitors and detects changes that have occurred in the network configuration of the portable system, wherein upon detection of a change, a user is prevented from browsing the Internet from the portable system unless certain conditions are met, if the portable system is connected to the Internet and not connected to the enterprise network, access to the Internet is disabled and all traffic other than those deemed acceptable is blocked as defined by a whitelist; and

receiving notification from the network monitoring system the status as to whether the portable system has Internet access and logs that information for later retrieval using an event logger.

7. The method of claim 6, wherein the network monitoring system checks if the portable system is Internet accessible and connected to enterprise network allowing the portable system access to the Internet.

8. The method of claim 6, wherein the network monitoring system determines if the portable system is Internet accessible and connected to the enterprise network allowing the portable system access to the Internet.

9. The method of claim 6, wherein the network monitoring system is in active mode once a network configuration has been detected.

10. The method of claim 6, wherein the network monitoring system determines if the portable system is not Internet accessible and not connected to the enterprise network and not blocking the portable system access to the Internet.

11. A non-transitory computer-readable storage medium containing thereon a computer program for monitoring a portable system external to an enterprise network, said computer program comprising:

monitoring any changes to the network configuration of the portable system using a network monitoring system, if a change is detected the network monitoring system determines if the portable system is not currently connected to the enterprise server and has access to Internet to block access to the Internet until the portable system is properly connected to the enterprise server, the network monitoring system executing within the portable device, the network monitoring system monitors and detects changes that have occurred in the network configuration of the portable system, wherein upon detection of a change, a user is prevented from browsing the interne from the portable system unless certain conditions are met, if the portable system is connected to the Internet and not connected to the enterprise network, access to the Internet is disabled and all traffic other than those deemed acceptable is blocked as defined by a whitelist; and

receiving notification from the network monitoring system the status as to whether the portable system has Internet access and logs that information for later retrieval using an event logger.

12. The non-transitory computer-readable storage medium of claim 11, wherein the network monitoring system checks if the portable system is Internet accessible and connected to the enterprise network allowing the portable system access to the Internet.

13. The non-transitory computer-readable storage medium of claim 11, wherein the network monitoring system is in active mode once a network configuration has been detected.

14. The non-transitory computer-readable storage medium of claim 11, wherein the network monitoring system determines if the portable system is Internet accessible and not connected to the enterprise network denying the portable system access to the Internet

15. The non-transitory computer-readable storage medium of claim 11, wherein the network monitoring system determines if the portable system is not Internet accessible and not connected to the enterprise network so as to not block the portable system access to the Internet.