Patent ID: 9730066
Date: 2017-08-08
CPC Classifications: G06F,G06Q,H04L,H04W

Claim:
1. A method of securing a WiFi computer network communicatively coupled to a second computer network via a WiFi network access point, the WiFi network access point managing access of one or more of a wireless device, a user of the wireless device and an application executing on the wireless device to the second computer network, the method comprising: identifying by the WiFi network access point one or more of (i) the application, (ii) the wireless device, (iii) a context within which the WiFi network access point is deployed, and (iv) the user; enforcing, at a WiFi network access point, network access policies, said network access policies dependent upon one or more of (i) an identity of the application, (ii) an identity of the wireless device, (iii) the context within which the WiFi network access point is deployed, and (iv) an identity of the user, as identified by the WiFi network access point; in response to the WiFi network access point recognizing the application executing on the wireless device as potentially malicious, sending an alert, by the WiFi network access point, to the wireless device so as to alert the user of the potentially malicious application; and preventing, by the WiFi network access point, out-of-band data communications from within a network coverage zone of the WiFi network access point from bypassing policy enforcements by the WiFi network access point, wherein the out-of-band data communications comprise data communications through a channel other than a WiFi communication channel for which the WiFi network access point provides policy enforcement.