System and method for controlling access to internet sites

• US 9,565,235 B2
• Filed: 09/09/2013
• Issued: 02/07/2017
• Est. Priority Date: 01/28/2000
• Status: Expired due to Fees

• Current Assignee: Forcepoint LLC
• Original Assignee: Websense, Llc (Forcepoint LLC)
• Inventors: Hegli, Ronald, Carrington, John, Oei, David
• Primary Examiner(s): BLAIR, DOUGLAS B
• Application Number:
  US14/021,961
• Publication Number:
  US 20140019618A1
• Time in Patent Office: 1,247 Days
• Field of Search: 709/229, 726/4
• US Class Current: 1/1
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method and system for providing flexible access to Internet sites is described. In one aspect, a method includes receiving, via a computing device, a request to access content associated with the URL. The method further includes transmitting a response to the request, the response indicating that access to the URL is restricted, receiving a second request to access the content associated with the URL, the second request acknowledging that access to the URL is restricted, logging the second request; and transmitting a second response to the second request, the second response allowing access to the requested content associated with the URL.

Claims

1. A method of managing access to an Internet content identified by a uniform resource locator (URL), comprising:

receiving, via a computing device, a uses request from a local area network to access content associated with the URL, the user having particular access rights;

determining, using a central device of the local area network, a content category of the Internet content identified by the URL, the Internet content associated with the content category based upon a comparison between a total page relevancy score and an alpha score, the total page relevancy score being defined at least in part by a relevancy score for a word pair from the Internet content to said content category;

determining whether the Internet content is blocked based on the determined content category;

after determining the Internet content is blocked, transmitting a response over the network to the request, the response indicating that the requested Internet content has been blocked and that further access to the URL by the user will be logged;

determining whether the user still requests access to the Internet content after the user receives the transmitted response; and

allowing access to the URL by the user with the particular access rights in response to a determination that the user still requests access to the Internet content.

2. The method of claim 1, wherein the notice indicates that access to the URL will be recorded.

3. The method of claim 1, wherein the notice indicates that access to the URL is blocked.

4. The method of claim 1, further comprising generating a warning page, the warning page including the notice.

5. The method of claim 1, wherein the request is received from the user, and wherein the notice indicates that access to the URL will be reported to a supervisor of the user.

6. The method of claim 1, further comprising:

determining, via the computing device, a policy to apply to the request;

determining that access to the URL requires acknowledgment of the notice based on at least the determined content category and the determined policy.

7. The method of claim 1, further comprising:

receiving credentials of the user; and

authenticating the user based at least partially on the user'"'"'s credentials.

8. A system for managing access to content associated with a uniform resource locator (URL), comprising:

one or more processors;

one or more memories, each memory coupled to at least one of the one or more processors and collectively configured to store instructions that when executed, cause the one or more processors to perform a method of;

receiving, via a computing device, a uses request from a local area network to access content associated with the URL, the user having particular access rights;

determining a content category of the Internet content identified by the URL, the Internet content associated with the content category based upon a comparison between a total page relevancy score and an alpha score, the total page relevancy score being defined at least in part by a relevancy score for a word pair from the Internet content to said content category;

determining whether the Internet content is blocked based on the determined content category;

after determining the Internet content is blocked, transmitting a response to the request, the response including a notice and indicating the requested Internet content has been blocked and that further access to the requested Internet content by the user will be logged;

determining whether the user still requests access to the Internet content after the user receives the transmitted response; and

allowing access to the URL for the user with the particular access rights in response to a determination that the user still requests access to the Internet content.

9. The system of claim 8, wherein the notice indicates that access to the requested content associated with the URL will be recorded.

10. The system of claim 8, further comprising generating a warning page, the warning page including the notice.

11. The system of claim 8, wherein the request is received from the user, and the method further comprises generating the notice to indicate that access to the requested content will be reported to a supervisor of the user.

12. The system of claim 8, wherein the method further comprises:

determining a policy to apply to the request; and

determining access to the requested content requires acknowledgment of the notice based on the determined category and the determined policy.

13. The system of claim 8, further comprising a site management module, the site management module being configured to receive the request.