Patent ID: 9154459
Filing Date: 2015-10-06
Classification: H04L

Abstract:
1. A method for domain-based network access management in a computer, comprising: receiving a session data transfer packet specifying a network address; determining whether the network address corresponds to a session on a session graylist, the graylist indicating sessions that are associated with an network address that is not permitted access and at least one domain that is permitted access; determining a domain associated with the session data transfer packet; determining whether the domain is a permissible domain; responsive to determining that the network address corresponds to a session on the session graylist and the domain is a permissible domain, associating the session with a session whitelist and permitting the session data transfer packet access to a network interface; receiving an initiate session packet specifying a session address; determining whether the session address matches an address in an address graylist, the address graylist indicating a set of addresses that are selectively permitted access to the network interface; responsive to determining that the session address matches an address in the address graylist, permitting the initiate session packet access to the network interface and adding the session to the session graylist; receiving, from a requester, a domain resolution request packet specifying a resolution domain and permitting the domain resolution request packet access to the network interface; receiving a domain resolution response from the network interface specifying a domain network address; determining whether the resolution domain is a permissible domain and whether the network address is a permissible address; and responsive to determining that the domain is a permissible domain and the network address is not a permissible address, adding the network address to the address graylist.