Patent ID: 9015090
Filing Date: 2015-04-21
Classification: G06F,H04L

Abstract:
1. A method in a computing system for controlling communication, comprising: in a computing system, evaluating a network communication, by: receiving a predefined white list of trusted network addresses that does not include addresses for any unauthenticated network nodes and that includes, of the trusted network addresses, one or more indications of allowable communication properties; determining a first internet protocol (IP) address corresponding to the network communication; determining a first communication property that is associated with the network communication; determining a second communication property that is an allowable communication property specified by an entry in the white list that corresponds to the first IP address; evaluating the network communication with respect the white list, by determining whether or not the first communication property is encompassed by the second communication property; in response to determining that the first communication property is not encompassed by the second communication property, setting an indicator that the network communication is not allowed; and in response to determining that the first communication property is encompassed by the second communication property, setting an indicator that the network communication is allowed, wherein the allowable communication properties in the white list include, for each of the network addresses in the white list, an indication of allowable access times, and further comprising and further comprising: wherein the allowable communication properties in the white list include, for each of the network addresses in the white list, an indication of whether non-interactive programs are allowed to communicate via the network address, and further comprising: