Patent ID: 7886335
Filing Date: 2011-02-08
Classification: H04L

Abstract:
1. A method comprising: receiving a network communication with a network access control policy decision point (“PDP”), wherein the network communication includes a first access request from an endpoint device for access to a network; identifying a first set of access policies based on the first access request; causing access policies in the first set of access policies to be enforced with regard to the endpoint device; while the first set of access policies is being enforced with regard to the endpoint device, receiving another network communication from the endpoint device with the PDP, wherein the other network communication includes a second access request from the endpoint device for access to the same network; determining, in response to receiving the second access request, that the first set of access policies is currently enforced with regard to the endpoint device due to the network communication received by the PDP; identifying, when the first set of access policies is currently enforced with regard to the endpoint device, a second set of access policies based on the second access request; and causing only access policies in the second set of access policies to be enforced with regard to the endpoint device.