Patent ID: 7124197
Filing Date: 2006-10-17
Classification: H04L

Abstract:
1. A method for blocking access to one or more protected devices each having a physical device address and being connected to a computer network by a client device having a physical device address and being connected to the computer network, comprising the steps of: (a) receiving address resolution requests broadcast on the network by the client device seeking access to one of the protected devices; (b) processing the address resolution requests to determine whether the client device is an unknown device; (c) if the client device is unknown as determined in step (b), adding a record identifying the client device in a restricted client list; (d) while the client device record is present in the restricted client list, transmitting address resolution replies on the computer network to block access to the protected devices and allow access to an authentication server, and monitoring the authentication server to determine if the client device is authorized or unauthorized by the authentication server; (e) if the client device is authorized as determined in step (d), removing the client device record from the restricted client list and adding the client device record to an allowed client list; (f) while the client device record is present in the allowed client list, allowing access to the protected devices; (g) if the client device is unauthorized as determined in step (d), removing the client device record from the restricted client list and adding the client device record to a blocked client list; and (h) while the client device record is present in the blocked client list, transmitting blocking address resolution replies on the computer network to block access to the protected devices.