Source: http://www.google.com/patents/US7665130?dq=7,249,099
Timestamp: 2017-04-26 18:39:36
Document Index: 210604522

Matched Legal Cases: ['Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60']

Patent US7665130 - System and method for double-capture/double-redirect to a different location - Google PatentsSearch Images Maps Play YouTube News Gmail Drive More »Sign inPatentsA system and method of providing network access comprising a processor, a first network interface coupled to the processor, a second network interface coupled to the processor, a storage media accessible by the processor and a set of computer instructions stored on the storage media, executable by the...http://www.google.com/patents/US7665130?utm_source=gb-gplus-sharePatent US7665130 - System and method for double-capture/double-redirect to a different locationAdvanced Patent SearchTry the new Google Patents, with machine-classified Google Scholar results, and Japanese and South Korean patents.Publication numberUS7665130 B2Publication typeGrantApplication numberUS 11/076,646Publication dateFeb 16, 2010Filing dateMar 10, 2005Priority dateMar 10, 2004Fee statusPaidAlso published asUS8356336, US20050204168, US20100064356Publication number076646, 11076646, US 7665130 B2, US 7665130B2, US-B2-7665130, US7665130 B2, US7665130B2InventorsKeith Johnston, Eric White, John MartinOriginal AssigneeEric WhiteExport CitationBiBTeX, EndNote, RefManPatent Citations (180), Non-Patent Citations (96), Referenced by (31), Classifications (10), Legal Events (6) External Links: USPTO, USPTO Assignment, EspacenetSystem and method for double-capture/double-redirect to a different location
US 7665130 B2Abstract
A system and method of providing network access comprising a processor, a first network interface coupled to the processor, a second network interface coupled to the processor, a storage media accessible by the processor and a set of computer instructions stored on the storage media, executable by the processor, where the computer instructions can be executable to receive a network communication over the first network interface from a user using a user device and determine if the network communication is associated with an authenticated user. If the network communication is not associated with an authenticated user, is not destined for a server in a walled garden, and a pre-authentication interface is specified, the computer instructions can be executable to direct the user to the pre-authentication interface. The computer instructions can be further executable to direct the user to an authentication interface when the network communication is not associated with an authenticated user, is not destined for a server in the walled garden, and a pre-authentication interface is not specified.
1. A system of providing network access comprising:
a first network interface coupled to the processor;
a second network interface coupled to the processor;
a storage media accessible by the processor;
a set of computer instructions executable by the processor to:
receive a network communication at the first network interface from a device associated with a user;
determine if the network communication is associated with an authenticated user; and
if the network communication is not associated with an authenticated user, does not identify an address within a walled garden, and a pre-authentication URL is not specified,
direct the user to an authentication interface;
receive credentials from the user;
authenticate the user based on the credentials; and
receive a user profile if the user is authenticated;
wherein the set of computer instructions are further executable by the processor to:
intercept an unauthenticated client access to a server outside of the walled garden;
determine whether an authentication token is present in the client request;
direct the client to an authentication URL if the authentication token is present; and
direct the client to the pre-authentication URL if the authentication token is not present.
2. The system of claim 1, wherein the computer instructions are further operable to grant access for an unauthenticated client to any destination server within the walled garden.
3. The system of claim 2, wherein the computer instructions are further operable to redirect an unauthenticated client to the pre-authentication URL destination, when such destination has been specified.
4. The system of claim 3, wherein the network communication comprises an HTTP request and wherein the computer instructions are further executable to:
receive the HTTP request; and
send a redirect request to the device to redirect a web browser to the authentication interface.
5. The system of claim 2, wherein the computer instructions are further executable to:
determine a network protocol for the network communication; and
send a reply to the device according to the network protocol directing the user to the authentication interface.
6. The system of claim 5, wherein the network protocol is one of HTTP, SMTP, POP, telnet, UDP or FTP. Description
This application claims priority under 35 U.S.C. 119(e) to U.S. Provisional Patent Application No. 60/551,705 entitled “System and Method for Double-Capture/Double-Redirect to a Different Location,” by Keith Johnston, et al., filed Mar. 10, 2004 and U.S. Provisional Patent Application No. 60/551,702 entitled “System and Method For Access Scope Control (“Walled Gardens”) For Clients of a Network Access Gateway”, by Patrick Turley, Keith Johnston and Steven D. Tonnesen, filed Mar. 10, 2004, which are both hereby fully incorporated by reference herein.
Embodiments of the present invention relate to network access control and security. More particularly, embodiments of the present invention relate to providing access control for a shared network.
Network access providers utilizing Access Controlled Network Sharing technology to provide user-specific provisioned access to private/public networks may also have a need to allow controlled access for unauthenticated users to a restricted collection of network destinations.
For example, a shopping mall owner may want to provide any on-site customer possessing a wireless device (such as a laptop computer, PDA, etc.) with access to the Web server for the mall, plus one or more other Web sites that are associated with the mall (e.g., the local Web server for a tenant in the mall, such as a department store or movie theater). The collection of Web servers that the mall owner will allow an anonymous user to visit is referred to as the “walled garden”.
In addition, the mall owner may intend to provide unlimited web access to customers who agree to register with the mall owner, and identify themselves (by providing credentials—typically, in the form of a user identifier and a password that were assigned at the time they registered) whenever they wish to be granted full access to the Internet. The process of verifying a customer's credentials is referred to as “authentication”.
Previous solutions would either 1) require that the network destination of the authentication service (i.e., the “captive” portal) be specified explicitly in a link on at least one of the web pages within the set of destinations that are members of the “walled garden”, or 2) require that the end-user manually enter the web address of the authentication service in the address bar of their web browser.
The invention is a software-based system and method that enhances the function of a network access controller by introducing a “Pre-Authentication Capture Destination”. In the standard Access Controlled Network Sharing solution, an unauthenticated client who attempts to access the network is re-directed to a challenge screen or “captive portal”, where they must provide their network login credentials (e.g., user name and password).
If a Pre-Authentication Capture Destination is specified, then this behavior changes. Any attempt by an unauthenticated client to access a network resource that is not in a list of allowed destinations (e.g., the list of servers that make up the “walled garden”) will result in the client being re-directed by the Network Access Controller to the Pre-Authentication Capture Destination. The unauthenticated client is then free to visit any of the servers that are included in the walled garden without authentication. Any attempt to access a web site or location that is outside of the walled garden will cause the client to be re-directed back to the Pre-Authentication Capture Destination.
At some point, the unauthenticated client may want to use network access privileges that are only available to an authenticated user. Consequently, the client must then be re-directed to an authentication URL (or “captive” portal), where they may login (or register as a new user). To accomplish this re-direction, at least one of the web sites within the walled garden can include an HTML link that references a site that is not in the walled garden and includes a special token within the “query” portion of the link's target HTTP URL (as defined in the IETF RFC-2616—“Hypertext Transfer Protocol—HTTP/1.1” and RFC-1738 “Uniform Resource Locators (URL)” specifications). This special token, referred to as the “Authentication Token”, is a unique sequence of characters that are valid for use in the query portion of a URL. When the client attempts to access the referenced site, they will be captured by the Network Access Controller. However, because of the presence of the Authentication token within the HTTP URL, the Network Access Controller will re-direct the client to the authentication screen, rather than redirecting them back to the Pre-Authentication Capture Destination.
Note that there is no requirement for any web page in the walled garden to have prior knowledge of the actual authentication screen location. Consequently, the same collection of walled garden sites may be used to service multiple Network Access controllers, where each controller may utilize a different authentication portal.
This invention enables a public/private network service provider to automatically redirect anonymous clients to a pre-defined destination within a limited set of network destinations, and provides a mechanism for accessing the authentication service without requiring that the web servers in the “walled garden” know the actual authentication URL. The automatic redirection occurs whenever the anonymous client attempts to access a network destination outside of the allowed set. The anonymous client does not have to enter the network URL of a server in the “walled garden”—instead, they just have to attempt to access any well-known URL (such as www.yahoo.com), and they will be redirected to the pre-defined destination.
FIG. 1 is a diagrammatic representation of a system depicting the network access capability afforded to an unauthenticated client, according to one embodiment of the present invention;
FIG. 2 is a diagrammatic representation of a system depicting the network access capability afforded to an authenticated client, according to one embodiment of the present invention; and
FIG. 3 is a diagrammatic representation of the flow of control (decision diagram) for a network access sharing device implementing the double-capture, double-redirect method, according to one embodiment of the present invention.
The following applications are hereby fully incorporated by reference herein in their entirety: U.S. application Ser. No. 10/683,317, filed Oct. 10, 2003, entitled “SYSTEM AND METHOD FOR PROVIDING ACCESS CONTROL,” by Richard MacKinnon, Kelly Looney, and Eric White; U.S. Provisional Application No. 60/551,698, filed Mar. 10, 2004, entitled “SYSTEM AND METHOD FOR BEHAVIOR-BASED FIREWALL MODELING,” by Patrick Turley which converted into U.S. application Ser. No. 11/076,719, filed Mar. 10, 2005, entitled “SYSTEM AND METHOD FOR BEHAVIOR-BASED FIREWALL MODELING,” by Richard MacKinnon, Kelly Looney, and Eric White; U.S. Provisional Application No. 60/551,754, filed Mar. 10, 2004, entitled “SYSTEM AND METHOD FOR COMPREHENSIVE CODE GENERATION FOR SYSTEM MANAGEMENT,” by Keith Johnston which converted into U.S. application Ser. No. 11/078,223, filed Mar. 10, 2005, entitled “SYSTEM AND METHOD FOR COMPREHENSIVE CODE GENERATION FOR SYSTEM MANAGEMENT,” by Keith Johnston; U.S. Provisional Application No. 60/551,703, filed Mar. 10, 2004, entitled “SYSTEM AND METHOD FOR PROVIDING A CENTRALIZED DESCRIPTION/CONFIGURATION OF CLIENT DEVICES ON A NETWORK ACCESS GATEWAY,” by Patrick Turley and Keith Johnston; U.S. Provisional Application No. 60/551,702, filed Mar. 10, 2004, entitled “SYSTEM AND METHOD FOR ACCESS SCOPE CONTROL (“WALLED GARDENS”) FOR CLIENTS OF A NETWORK ACCESS GATEWAY,” by Patrick Turley, Keith Johnston, and Steven D. Tonnesen which converted into U.S. application Ser. No. 11/076,591, filed Mar. 10, 2005, entitled “METHOD AND SYSTEM FOR CONTROLLING NETWORK ACCESS,” by Patrick Turley, Keith Johnston, and Steven D. Tonnesen; U.S. Provisional Application No. 60/551,699, filed Mar. 10, 2004, entitled “SYSTEM AND METHOD FOR DYNAMIC BANDWIDTH CONTROL,” by Patrick Turley, et al.; U.S. Provisional Application No. 60/551,697, filed Mar. 10, 2004, entitled “SYSTEM AND METHOD FOR DETECTION OF ABERRANT NETWORK BEHAVIOR BY CLIENTS OF A NETWORK ACCESS GATEWAY,” by Steven D. Tonnesen which converted into U.S. application Ser. No. 11/076,652, filed Mar. 10, 2005, entitled “SYSTEM AND METHOD FOR DETECTION OF ABERRANT NETWORK BEHAVIOR BY CLIENTS OF A NETWORK ACCESS GATEWAY,” by Steven D. Tonnesen; U.S. Provisional Application No. 60/551,704, filed Mar. 10, 2004, entitled “SYSTEM AND METHOD FOR NETWORK MANAGEMENT XML ARCHITECTURAL ABSTRACTION,” by Keith Johnston and Mario Garcia which converted into U.S. application Ser. No. 11/076,672, filed Mar. 10, 2005, entitled “SYSTEM AND METHOD FOR NETWORK MANAGEMENT XML ARCHITECTURAL ABSTRACTION,” by Keith Johnston and Mario Garcia; and U.S. Provisional Application No. 60/660,408 filed Mar. 10, 2005, entitled “SYSTEM AND METHOD FOR PROVIDING A CENTRALIZED DESCRIPTION/CONFIGURATION OF CLIENT DEVICES ON A NETWORK ACCESS GATEWAY,” by Patrick Turley, et al.
Network access providers utilizing Access Controlled Network Sharing (as, for example, described in U.S. patent application Ser. No. 10/683,317, filed Oct. 10, 2003, entitled “System and Method for Providing Access Control”, by Richard MacKinnon, Kelly Looney, and Eric White) technology to provide user-specific provisioned access to private/public networks may also have a need to allow controlled access for unauthenticated users to a restricted collection of network destinations (this can be referred to as the “walled garden”—see U.S. Provisional Patent Application No. 60/551,702 entitled “System and Method for Access Scope Control (“Walled Gardens”) for Clients of a Network Access Gateway” by Patrick Turley, Keith Johnston and Steven D. Tonnesen, filed Mar. 10, 2004, converted into U.S. patent application Ser. No. 11/076,591, entitled “Method and System for Controlling Network Access” by Patrick Turley, Keith Johnston and Steven D. Tonnesen, filed Mar. 10, 2005).
To illustrate this invention, assume that the following configuration has been set in the Network Access Controller 2, as depicted in FIG. 1:
Walled Garden 5 contains three servers:
wg1.com (Server 6) wg2.com (Server 7) auth.com (Server 8) The Pre-Authentication Capture Destination for the embodiment of FIG. 1 will be designated http://wg1.com/welcome.html.
The Authentication Capture Destination is https://auth.com/login.jsp.
As shown in the embodiment of FIG. 1, assume that an anonymous user has access to one of the Client network access devices 1. This user launches a Web browser and enters “www.yahoo.com” (an “external” URL, i.e., a destination that is not in the Walled Garden 5) in the address bar, and presses <Return>. The Network Access Controller 2 uses its internal Firewall 3 function to recognize the attempt by an unknown user to access an “external” location (represented by the Internet cloud 4 in FIG. 1), intercepts the request, and sends an HTTP redirect to the Client's browser, specifying the Pre-Authentication Capture URL “http://wg1.com/welcome.html”. The browser then automatically performs an HTTP Get to retrieve that Web page from the wg1.com server.
At this point, the anonymous user may access Web locations on any of the three servers that are in the Walled Garden 5. For this example, assume that the Web pages on the wg1.com Server 6 include links to Web pages on the wg2.com Server 7. The anonymous user would be able to click on any of these links and view the referenced pages hosted on Server 7. However, if one of these Web pages contained a link to an “external” web site, and the user clicked on that link, then the Network Access Controller 2 would again redirect the Client's browser back to the Pre-Authentication Capture URL http://wg1.com/welcome.html, hosted on Server 6.
Now, assume that the anonymous user decides that they want to be authenticated, so that they may be allowed access to an “external” network destination. To enable the user to login, an HTML link is included on the welcome page at “http://wg1.com/welcome.html”. The link's reference URL identifies a server that is outside of the Walled Garden 5, and includes the special token string “proceedToAuthenticationURL=true” within the query portion. (Note that the exact form of this special token need not be predefined; the special token is simply uniquely identifiable.)
When the user clicks on this link, the Network Access Controller 2 intercepts the request. However, instead of redirecting the Client's browser to the Pre-Authentication Capture URL, the Network Access Controller 2 recognizes the presence of the token, and redirects the browser to the Authentication URL http://auth.com/login.jsp, hosted on the “auth.com” Server 8.
At this point, the user is presented with a Login page, and enters a username/password. Assuming that these credentials are valid, the “auth.com” Server 8 sends an “authorize” command to the Network Access Controller 2. This command instructs the Network Access Controller 2 to allow “external” access for the authenticated user.
As shown in FIG. 2, the Client now has access to the Internet 4 (“External Network”). If the user now entered “www.yahoo.com” in the Web browser's address bar, the Network Access Controller 2 would no longer intercept this request, and the welcome page from the Yahoo web site would be displayed.
Note that in one embodiment, this “external” access is only granted to the authenticated user. An anonymous user on a different Client would still be restricted to the Walled Garden 5.
One embodiment of the decision logic (and associated flow) that can be executed by the Network Access Controller 2 is depicted in FIG. 3. The Network Access Controller continuously monitors for network access from network access client devices 1 on its first network interface at step 18.
When a network packet is received (step 19), the Network Access Controller 2 determines if the packet is being sent by an authenticated client (step 20).
If the packet is from an authenticated client, then the Network Access Controller 2 allows the packet to pass through and be routed to its target destination (“Yes” decision fork).
If the packet is from an unauthenticated client, then the Network Access Controller 2 determines if the destination of the packet is one of the servers within the Walled Garden 5 (step 21).
If the packet is from an unauthenticated client and the destination is a server in the Walled Garden 5, then the Network Access Controller 2 allows the packet to pass through and be routed to its target server (“Yes” decision fork).
If the packet is from an unauthenticated client and the destination is not a server in the Walled Garden 5, then the Network Access Controller 2 determines if a Pre-Authentication URL has been specified (step 22).
If the packet is from an unauthenticated client, the destination is not a server in the Walled Garden 5, and a Pre-Authentication URL has not been specified, then the Network Access Controller directs the client to the Authentication URL (step 24).
If the packet is from an unauthenticated client, the destination is not a server in the Walled Garden 5, and a Pre-Authentication URL has been specified, then the Network Access Controller 2 determines if the packet contains the Authentication Token (step 23).
If the packet is from an unauthenticated client, the destination is not a server in the Walled Garden 5, a Pre-Authentication URL has been specified, and the packet does not contain the Authentication Token, then the Network Access Controller 2 directs the client to the Pre-Authentication URL (step 25).
If the packet is from an unauthenticated client, the destination is not a server in the Walled Garden 5, a Pre-Authentication URL has been specified, and the packet contains the Authentication Token, then the Network Access Controller 2 directs the client to the Authentication URL (step 24).
Patent CitationsCited PatentFiling datePublication dateApplicantTitleUS5673393Feb 6, 1996Sep 30, 1997Intel CorporationManaging bandwidth over a computer network having a management computer that allocates bandwidth to client computers upon requestUS5706427Jun 27, 1996Jan 6, 1998Cadix Inc.Authentication method for networksUS5748901May 21, 1996May 5, 1998Ramot University Authority Ltd.Flow control algorithm for high speed networksUS5878231Feb 4, 1997Mar 2, 1999Sun Microsystems, Inc.System for packet filtering of data packets at a computer network interfaceUS5896499Feb 21, 1997Apr 20, 1999International Business Machines CorporationEmbedded security processorUS5901148Mar 6, 1997May 4, 1999Lockheed Martin CorporationRing domains for bandwidth sharingUS5936542Nov 24, 1995Aug 10, 1999Nomadix, LlcConvention ID badge systemUS5953506Dec 17, 1996Sep 14, 1999Adaptive Media TechnologiesMethod and apparatus that provides a scalable media delivery systemUS5987134Feb 24, 1997Nov 16, 1999Fuji Xerox Co., Ltd.Device and method for authenticating user's access rights to resourcesUS5996013Apr 30, 1997Nov 30, 1999International Business Machines CorporationMethod and apparatus for resource allocation with guaranteesUS6085241Jul 22, 1998Jul 4, 2000Amplify. Net, Inc.Internet user-bandwidth management and control toolUS6088451Jun 28, 1996Jul 11, 2000Mci Communications CorporationSecurity system and method for network element accessUS6092200Aug 1, 1997Jul 18, 2000Novell, Inc.Method and apparatus for providing a virtual private networkUS6108782Jun 24, 1997Aug 22, 20003Com CorporationDistributed remote monitoring (dRMON) for networksUS6130892Mar 12, 1998Oct 10, 2000Nomadix, Inc.Nomadic translator or routerUS6131116Dec 13, 1996Oct 10, 2000Visto CorporationSystem and method for globally accessing computer servicesUS6157953Jul 28, 1998Dec 5, 2000Sun Microsystems, Inc.Authentication and access control in a management console program for managing services in a computer networkUS6173331Oct 5, 1998Jan 9, 2001Nec CorporationNetwork node for sharing a common buffer among multiple connections while ensuring minimum bandwidth for each connectionUS6176883Nov 24, 1997Jan 23, 2001International Business Machines CorporationSystem and method for generating unsupported network information indicatorsUS6185567May 29, 1998Feb 6, 2001The Trustees Of The University Of PennsylvaniaAuthenticated access to internet based research and data servicesUS6194992Apr 24, 1997Feb 27, 2001Nomadix, LlcMobile webUS6199113 *Apr 15, 1998Mar 6, 2001Sun Microsystems, Inc.Apparatus and method for providing trusted network securityUS6205552Dec 31, 1998Mar 20, 2001Mci Worldcom, Inc.Method and apparatus for checking security vulnerability of networked devicesUS6212558Dec 24, 1997Apr 3, 2001Anand K. AnturMethod and apparatus for configuring and managing firewalls and security devicesUS6219706Oct 16, 1998Apr 17, 2001Cisco Technology, Inc.Access control for networksUS6233607Apr 1, 1999May 15, 2001Diva Systems Corp.Modular storage server architecture with dynamic data managementUS6243815Dec 24, 1997Jun 5, 2001Anand K. AnturMethod and apparatus for reconfiguring and managing firewalls and security devicesUS6275693Nov 22, 1999Aug 14, 2001Motorola, Inc.Method and apparatus for performing bearer independent wireless application service provisioningUS6295294Aug 7, 1997Sep 25, 2001At&T Corp.Technique for limiting network congestionUS6321339May 20, 1999Nov 20, 2001Equifax Inc.System and method for authentication of network users and issuing a digital certificateUS6324648Dec 23, 1999Nov 27, 2001Gte Service CorporationSecure gateway having user identification and password authenticationUS6336133May 13, 1998Jan 1, 2002America Online, Inc.Regulating users of online forumsUS6404743May 11, 1998Jun 11, 2002General Instrument CorporationEnhanced simple network management protocol (SNMP) for network and systems managementUS6421319Oct 29, 1998Jul 16, 2002Nec CorporationNetwork traffic monitoring systemUS6463474Jul 2, 1999Oct 8, 2002Cisco Technology, Inc.Local authentication of a client at a network deviceUS6473793Jan 19, 1999Oct 29, 2002Hughes Electronics CorporationMethod and apparatus for selectively allocating and enforcing bandwidth usage requirements on network usersUS6473801Mar 23, 1999Oct 29, 2002Lsi Logic CorporationSystem and method for arbitrating bandwidth on segmented network topologiesUS6477143Dec 30, 1998Nov 5, 2002Dror GinossarMethod and apparatus for packet network congestion avoidance and controlUS6502131Dec 4, 1998Dec 31, 2002Novell, Inc.Directory enabled policy management tool for intelligent traffic managementUS6516417Aug 7, 1998Feb 4, 2003Nortel Networks, LimitedVirtual private networksUS6535879Feb 18, 2000Mar 18, 2003Netscape Communications CorporationAccess control via properties systemUS6539431Aug 10, 1999Mar 25, 2003Cisco Technology, Inc.Support IP pool-based configurationUS6636894Dec 8, 1999Oct 21, 2003Nomadix, Inc.Systems and methods for redirecting users having transparent computer access to a network using a gateway device having redirection capabilityUS6678733 *Oct 26, 1999Jan 13, 2004At Home CorporationMethod and system for authorizing and authenticating usersUS6708212May 5, 2003Mar 16, 2004Sri InternationalNetwork surveillanceUS6732179Oct 26, 1999May 4, 2004At Home CorporationMethod and system for restricting access to user resourcesUS6735691Jan 27, 2000May 11, 2004Microsoft CorporationSystem and method for the automated migration of configuration informationUS6757740Mar 31, 2000Jun 29, 2004Digital Envoy, Inc.Systems and methods for determining collecting and using geographic locations of internet usersUS6785252Jul 11, 2000Aug 31, 2004Ensemble Communications, Inc.Method and apparatus for a self-correcting bandwidth request/grant protocol in a wireless communication systemUS6789110Apr 3, 2000Sep 7, 2004Nomadix, Inc.Information and control console for use with a network gateway interfaceUS6804783Apr 18, 2000Oct 12, 2004Network Engineering SoftwareFirewall providing enhanced network security and user transparencyUS6823385Mar 7, 2001Nov 23, 2004Scientifc Atlanta, Inc.Allocating access across a shared communications medium to user classesUS6917622Mar 7, 2001Jul 12, 2005Scientific-Atlanta, Inc.Allocating access across a shared communications medium in a carrier networkUS7013331Dec 20, 2002Mar 14, 2006Nokia, Inc.Automated bulk configuration of network devicesUS7120934Mar 29, 2001Oct 10, 2006Ishikawa Mark MSystem, method and apparatus for detecting, identifying and responding to fraudulent requests on a networkUS7143283Jul 31, 2002Nov 28, 2006Cisco Technology, Inc.Simplifying the selection of network paths for implementing and managing security policies on a networkUS7146639Jan 6, 2003Dec 5, 2006Lucent Technologies Inc.Method and apparatus for managing a firewallUS7181017Mar 25, 2002Feb 20, 2007David FelsherSystem and method for secure three-party communicationsUS7185368Nov 30, 2001Feb 27, 2007Lancope, Inc.Flow-based detection of network intrusionsUS7266754Aug 14, 2003Sep 4, 2007Cisco Technology, Inc.Detecting network denial of service attacksUS7272646Jun 14, 2001Sep 18, 2007Securify, Inc.Network monitor internals descriptionUS7324947Sep 30, 2002Jan 29, 2008Promptu Systems CorporationGlobal speech user interfaceUS7325042Jun 24, 2002Jan 29, 2008Microsoft CorporationSystems and methods to manage information pullsUS7406530Apr 30, 2004Jul 29, 2008At Home CorporationMethod and system for restricting access to user resourcesUS7420956Mar 30, 2005Sep 2, 2008Broadcom CorporationDistributed storage and aggregation of multimedia information via a broadband access gatewayUS20010038639Mar 7, 2001Nov 8, 2001Mckinnon Martin W.Monitoring and allocating access across a shared communications mediumUS20010038640Mar 7, 2001Nov 8, 2001Mckinnon Martin W.Computerized method for allocating access across a shared communication mediumUS20010038645Mar 7, 2001Nov 8, 2001Mckinnin Martin W.Allocating access across a shared communications medium of a DOCSIS 1.0 compliant cable networkUS20010039576Dec 7, 2000Nov 8, 2001Yasusi KanadaNetwork policy transmission method from policy server to network nodeUS20010039582Mar 7, 2001Nov 8, 2001Mckinnon Martin W.Allocating access across a shared communications medium in a carrier networkUS20020013844Mar 20, 2001Jan 31, 2002Garrett John W.Service selection in a shared access network supporting quality of serviceUS20020021665May 4, 2001Feb 21, 2002Nomadix, Inc.Network usage monitoring device and associated methodUS20020023160Mar 20, 2001Feb 21, 2002Garrett John W.Service selection in a shared access network providing access controlUS20020029260Jul 31, 2001Mar 7, 2002Dobbins Kurt A.Directory-enabled intelligent broadband service switchUS20020035699Jul 23, 2001Mar 21, 2002Bluesocket, Inc.Method and system for enabling seamless roaming in a wireless networkUS20020042883Mar 22, 2001Apr 11, 2002Soundvoice LimitedMethod and system for controlling access by clients to servers over an internet protocol networkUS20020046264Dec 7, 2001Apr 18, 2002Dillon Douglas M.Method and apparatus for selectively allocating and enforcing bandwidth usage requirements on network usersUS20020052950Dec 7, 2001May 2, 2002Silverback Technologies, Inc.Distributed network monitoring and control systemUS20020055968Jul 13, 2001May 9, 2002Clayton WishoffDistributed application interface and authentication processUS20020059408Jul 17, 2001May 16, 2002Krishna PattabhiramanDynamic traffic management on a shared mediumUS20020075844Apr 10, 2001Jun 20, 2002Hagen W. AlexanderIntegrating public and private network resources for optimized broadband wireless access and methodUS20020085719Oct 22, 2001Jul 4, 2002Bluesocket, Inc.Method and system for enabling centralized control of wireless local area networksUS20020087713Dec 28, 2000Jul 4, 2002Cunningham Ian M.Bandwidth allocation in ethernet networksUS20020090089Jan 5, 2001Jul 11, 2002Steven BraniganMethods and apparatus for secure wireless networkingUS20020091944Jan 10, 2002Jul 11, 2002Center 7, Inc.Reporting and maintenance systems for enterprise management from a central locationUS20020112183Feb 12, 2001Aug 15, 2002Baird Leemon C.Apparatus and method for authenticating access to a network resourceUS20020112186Sep 12, 2001Aug 15, 2002Tobias FordAuthentication and authorization for access to remote production devicesUS20020120741Nov 2, 2001Aug 29, 2002Webb Theodore S.Systems and methods for using distributed interconnects in information management enviromentsUS20020123335Oct 31, 2001Sep 5, 2002Luna Michael E.S.Method and apparatus for provisioning a mobile station over a wireless networkUS20020124078Mar 2, 2001Sep 5, 2002Jeff ConradSystem for self-monitoring of SNMP data collection processUS20020124103Feb 20, 2001Sep 5, 2002International Business Machines CorporationSystem and method for regulating incoming traffic to a server farmUS20020129143Mar 7, 2001Sep 12, 2002Mckinnon Martin W.Solicitations for allocations of access across a shared communications mediumUS20020131404Nov 28, 2001Sep 19, 20024Thpass Inc.Method and system for maintaining and distributing wireless applicationsUS20020133581Mar 16, 2001Sep 19, 2002Embrace Networks, Inc.System and method to manage network-enabled embedded devices operating under various protocolsUS20020133589Jul 20, 1999Sep 19, 2002Rajugopal R. GubbiDynamic bandwidth negotiation scheme for wireless computer networksUS20020136226Jan 23, 2002Sep 26, 2002Bluesocket, Inc.Methods and systems for enabling seamless roaming of mobile devices among wireless networksUS20020138762Nov 30, 2001Sep 26, 2002Horne Donald R.Management of log archival and reporting for data network security systemsUS20020138763Nov 30, 2001Sep 26, 2002Delany Shawn P.Runtime modification of entries in an identity systemUS20020143964Mar 30, 2001Oct 3, 2002Guo Wei-Quiang MichaelService routing and web integration in a distributed multi-site user authentication systemUS20020152284Apr 13, 2001Oct 17, 2002John CambraySystem and method for performing real time monitoring and control of an interactive networkUS20020162030Apr 30, 2001Oct 31, 2002Brezak John E.Methods and arrangements for controlling access to resources based on authentication methodUS20020164952May 3, 2001Nov 7, 2002Reefedge, Inc.Location-aware service proxies in a short-range wireless environmentUS20020165990May 3, 2001Nov 7, 2002Reefedge, Inc.Method and system for adapting short-range wireless access points for participation in a coordinated networked environmentUS20020169867Jan 4, 1999Nov 14, 2002Joe MannRemote system administration and seamless service integration of a data communication network management systemUS20020174227Jun 12, 2001Nov 21, 2002Hartsell Neal D.Systems and methods for prioritization in information management environmentsUS20020178282Jan 30, 2002Nov 28, 2002Nomadix, Inc.Methods and systems providing fair queuing and priority scheduling to enhance quality of service in a networkUS20020199007May 21, 2002Dec 26, 2002Tom ClaytonVirtual private network software systemUS20030041104Aug 6, 2002Feb 27, 2003Digeo, Inc.System and method to provide local content and corresponding applications via carousel transmission to thin-client interactive television terminalsUS20030043846Aug 31, 2001Mar 6, 2003Purpura William J.User bandwidth monitor and control management system and methodUS20030046370Aug 29, 2001Mar 6, 2003Mike CourtneySystem and method for modeling a network device's configurationUS20030055994Jul 9, 2002Mar 20, 2003Zone Labs, Inc.System and methods providing anti-virus cooperative enforcementUS20030059038Sep 24, 2001Mar 27, 2003Teleware, Inc.Teledata space and docking station with modular and integrated displayUS20030061506Jun 14, 2001Mar 27, 2003Geoffrey CooperSystem and method for security policyUS20030069956Oct 5, 2001Apr 10, 2003Gieseke Eric JamesObject oriented SNMP agentUS20030070170Apr 3, 2002Apr 10, 2003Eric LennonMethod and apparatus providing an improved electronic program guide in a cable television systemUS20030078784Sep 30, 2002Apr 24, 2003Adam JordanGlobal speech user interfaceUS20030087629Sep 27, 2002May 8, 2003Bluesocket, Inc.Method and system for managing data traffic in wireless networksUS20030126608Dec 31, 2001Jul 3, 2003General Instrument CorporationMethods and systems for providing streaming media content in existing video delivery systemsUS20030135753Aug 23, 2001Jul 17, 2003International Business Machines CorporationStandard format specification for automatically configuring IP security tunnelsUS20030149751Aug 5, 2002Aug 7, 2003Atreus Systems Corp.System and method for setting up user self-activating network-based servicesUS20030154399Feb 8, 2002Aug 14, 2003Nir ZukMulti-method gateway-based network security systems and methodsUS20030159072Feb 3, 2003Aug 21, 2003Atreus Systems Corp.Single sign-on for multiple network -based servicesUS20030163603Nov 26, 2002Aug 28, 2003Chris FrySystem and method for XML data bindingUS20030172167Mar 6, 2003Sep 11, 2003Paul JudgeSystems and methods for secure communication deliveryUS20030177477Dec 23, 2002Sep 18, 2003Daniel FuchsJava to NSMP MIB mappingUS20030212800Dec 3, 2001Nov 13, 2003Jones Bryce A.Method and system for allowing multiple service providers to serve users via a common access networkUS20030217126Dec 18, 2002Nov 20, 2003Polcha Andrew J.System and method for automatically configuring remote computerUS20040015719Jul 16, 2002Jan 22, 2004Dae-Hyung LeeIntelligent security engine and intelligent and integrated security system using the sameUS20040047356Sep 6, 2002Mar 11, 2004Bauer Blaine D.Network traffic monitoringUS20040049586Oct 22, 2002Mar 11, 2004Wholepoint CorporationSecurity apparatus and method for local area networksUS20040064836Sep 30, 2002Apr 1, 2004Ludvig Edward A.Systems and methods for generating a walled garden program for substantially optimized bandwidth deliveryUS20040073941Sep 30, 2002Apr 15, 2004Ludvig Edward A.Systems and methods for dynamic conversion of web content to an interactive walled garden programUS20040085906Apr 25, 2002May 6, 2004Hisamichi OhtaniPacket tracing systemUS20040093513Nov 7, 2002May 13, 2004Tippingpoint Technologies, Inc.Active network defense system and methodUS20040103426Nov 22, 2002May 27, 2004Ludvig Edward A.Tracking end-user content viewing and navigationUS20040122956Dec 19, 2002Jun 24, 2004Myers Robert L.Wireless local area communication network system and methodUS20040172557Aug 20, 2003Sep 2, 2004Masayuki NakaeAttack defending system and attack defending methodUS20040177276Oct 10, 2003Sep 9, 2004Mackinnon RichardSystem and method for providing access controlUS20040179822Mar 9, 2004Sep 16, 2004Yasufumi TsumagariInformation storage medium, information playback apparatus, and information playback methodUS20040181816Sep 25, 2003Sep 16, 2004Lg Electronics Inc.Method for processing connection request of a disk playerUS20040199635Oct 16, 2003Oct 7, 2004Tuan TaSystem and method for dynamic bandwidth provisioningUS20040210633Apr 30, 2004Oct 21, 2004Brown Ralph WMethod and system for restricting access to user resourcesUS20040268234Jun 25, 2003Dec 30, 2004Microsoft CorporationXSD inferenceUS20050021686Jun 20, 2003Jan 27, 2005Ben JaiAutomated transformation of specifications for devices into executable modulesUS20050044350Aug 19, 2004Feb 24, 2005Eric WhiteSystem and method for providing a secure connection between networked computersUS20050044422Aug 31, 2004Feb 24, 2005Craig CantrellActive network defense system and methodUS20050091303Sep 29, 2004Apr 28, 2005Nec CorporationFlow control system and method thereforUS20050138416Dec 19, 2003Jun 23, 2005Microsoft CorporationObject model for managing firewall servicesUS20050149721May 5, 2004Jul 7, 2005Chih-Chung LuMethod of speeding up packet filteringUS20050193103Oct 8, 2003Sep 1, 2005John DrabikMethod and apparatus for automatic configuration and management of a virtual private networkUS20050195854Nov 1, 2004Sep 8, 2005Gideon AgmonService connection method and architectureUS20050204022Mar 10, 2005Sep 15, 2005Keith JohnstonSystem and method for network management XML architectural abstractionUS20050204031Mar 10, 2005Sep 15, 2005Keith JohnstonSystem and method for comprehensive code generation for system managementUS20050204050Mar 10, 2005Sep 15, 2005Patrick TurleyMethod and system for controlling network accessUS20050204168Mar 10, 2005Sep 15, 2005Keith JohnstonSystem and method for double-capture/double-redirect to a different locationUS20050204169Mar 10, 2005Sep 15, 2005Tonnesen Steven D.System and method for detection of aberrant network behavior by clients of a network access gatewayUS20050204402Mar 10, 2005Sep 15, 2005Patrick TurleySystem and method for behavior-based firewall modelingUS20060036723Jul 30, 2004Feb 16, 2006Michael YipMethod and apparatus for converting network management protocol to markup languageUS20060168229Dec 29, 2004Jul 27, 2006Shim Choon BSystem and method for network management using extensible markup languageUS20060173992Nov 3, 2003Aug 3, 2006Daniel WeberEvent detection/anomaly correlation heuristicsUS20060184618Feb 13, 2006Aug 17, 2006Cox Communications, Inc.Methods and systems for providing self-registration of communication servicesUS20070073718May 10, 2006Mar 29, 2007Jorey RamerMobile search service instant activationUS20070186113Feb 6, 2006Aug 9, 2007Cuberson Russel DMethods, DSL modems, and computer program products for provisioning DSL service using downloaded username/passwordUS20070208936Dec 29, 2003Sep 6, 2007Luis Ramos RoblesMeans and Method for Single Sign-On Access to a Service Network Through an Access NetworkUS20070268878May 14, 2007Nov 22, 2007Koninlijke Kpn N.V.Nomadic InternetUS20080066096Aug 24, 2006Mar 13, 2008Sbc Knowledge Ventures L.P.Method and apparatus for sending stored advertising data from an internet protocol television end user network interface deviceUS20080120661Jan 31, 2008May 22, 2008Microsoft CorporationSystems and Methods for Dynamic Conversion of Web Content to an Interactive Walled Garden ProgramUS20080147840Dec 12, 2007Jun 19, 2008Alcatel LucentRemote activation of home devicesUS20080276305Dec 22, 2005Nov 6, 2008Bce Inc.Systems, Methods and Computer-Readable Media for Regulating Remote Access to a Data NetworkEP0587522B1Aug 24, 1993Jan 26, 2000International Business Machines CorporationRate-based congestion control in packet communications networksWO2001077787A3Mar 30, 2001Feb 21, 2002Siebel Systems IncDatabase access method and system for user role defined accessWO2002009458A2Jul 23, 2001Jan 31, 2002Bluesocket, Inc.Method and system for enabling seamless roaming in a wireless networkWO2002023825A1Sep 12, 2001Mar 21, 2002Wp Media IncWireless provisioning deviceWO2002041587A2Oct 22, 2001May 23, 2002Bluesocket, Inc.Method and system for enabling centralized control of wireless local area networksWO2002077820A1Mar 21, 2002Oct 3, 2002Bluesocket, Inc.Methods and systems for enabling seamless roaming of mobile devices among wireless networksWO2003021890A1Jul 1, 2002Mar 13, 2003The Boeing CompanyUser bandwidth monitor and control management system and methodWO2003098461A1May 14, 2003Nov 27, 2003Polcha Andrew JSystem and method for automatically configuring remote computerWO2004034229A2Oct 10, 2003Apr 22, 2004Rocksteady Networks, Inc.System and method for providing access controlWO2004036371A2Oct 16, 2003Apr 29, 2004Rocksteady Networks, Inc.System and method for dynamic bandwidth provisioningWO2005020035A2Aug 20, 2004Mar 3, 2005Rocksteady Networks, Inc.System and method for providing a secure connection between networked computers* Cited by examinerNon-Patent CitationsReference1"Boingo Wireless Service Installed at LaGuardia Airport" Copyright 2003 M2Communications Ltd., found at www.findarticles.com, Dec. 8, 2003, 1 page.2Albuquerque et al., "Network Border Patrol: Preventing Congestion Collapse and Promoting Fairness in the Internet", Feb. 2004, pp. 173-186.3Conry-Murray, A., "SSL VPNs: Remote Access for the Masses", Oct. 2003, pp. 26-32.4 *Crandell et al., "A Secure and Transparent Firewall Web Proxy", Oct. 2003, Usenix, Retrieved from the Internet on Jul. 15, 2009: <URL: http://www.usenix.org/event/lisa03/tech/full—papers/crandell/crandell.pdf>.5 *Crandell et al., "A Secure and Transparent Firewall Web Proxy", Oct. 2003, Usenix, Retrieved from the Internet on Jul. 15, 2009: -papers/crandell/crandell.pdf>.6Dornan, "Wireless LANs: Freedom vs. Security?" Network Magazine, Jul. 2005, pp. 36-39.7Estevez-Tapiador et al., "Measuring Normality in HTTP Traffic for Anomaly-Based Intrusion Detection", Jun. 6, 2004, pp. 175-193.8Fan et al, "Distributed Real Time Intrusion Detection System for 3G", 2004, pp. 1566-1570.9Fisher, D., "SSL Simplifies VPN Security", Nov. 10, 2003, p. 40.10Fortinet and Aventail Deliver Joint Solution for Clientless Remote Access with High-Performance Antivirus Protection; Integrated SSL VPN and Antivirus Offering Provides.11Guangzhi et al., "A Framework for Network Vulnerability Analysis", 2002, pp. 289-294.12Hamano et al., A Redirections-Based Defense Mechanism Against Flood-Type Attacks in Large Scale ISP Networks, 2004, pp. 543-547.13Hamblen, Matt, "Cisco Targets SSL VPN Vendors, Adds Support for Clientless Security Protoccol: Installed Base of VPN Devices May Give it an Edge, Despite Late Entry (News)".14Hamzeh, et al., "Point-to-Point Tunneling Protocol-PPTP RFC 2637" Network Working Group, Jul. 1999, pp. 1-54.15Hamzeh, et al., "Point-to-Point Tunneling Protocol—PPTP RFC 2637" Network Working Group, Jul. 1999, pp. 1-54.16International Preliminary Report on Patentability and Written Opinion of the International Searching Authority in PCT/US04/029249 dated Feb. 21, 2006, 6 pages.17International Preliminary Report on Patentability in PCT/US03/032268 dated Apr. 10, 2005, 3 pages.18International Preliminary Report on Patentability in PCT/US03/032912 dated Apr. 16, 2005, 3 pages.19International Search Report and Written Opinion for related International Application No. PCT/US04/29249, Dec. 15, 2005.20International Search Report for PCT/US03/32912, Apr. 8, 2004.21International Search Report from PCT/US03/32268 dated Oct. 29, 2004.22Jackson, "Wireless at West Point: Officers of the Future Use IT in Class Now, in the Field Later (Technology Report)" Apr. 21, 2003, pp. 1-3, www.gcn.com.23Lingblom, "Bluesocket's New Gateway Based on Open Standards-WGX-4000 Switch Wireless Gateway" CRN, Burlington, MA at www.crn.channelsupersearch.com, Apr. 21, 2003.24Lingblom, "Bluesocket's New Gateway Based on Open Standards—WGX-4000 Switch Wireless Gateway" CRN, Burlington, MA at www.crn.channelsupersearch.com, Apr. 21, 2003.25Lingblom, "Cranite Develops SMB Strategy," CRN, San Jose, CA, Jun. 23, 2003.26Macleod, Calum, "Freeing the Shackles with Secure Remote Working", 2003, pp. 66-67.27Molta, "Wireless Hotspots Heat Up," Mobile & Wireless Technology feature, pp. 1-8, Copyright 2003 M2Communications Ltd., found at www.networkcomputing.com, printed Dec. 8, 2003.28Netilla Lauches Secure Gateway Appliance Family of Application-Specific SSL VPN Products; Initial SGA-C Model Provides Secure Remote Access to Citrix MetaFrame Presentation.29No author, "Netilla Lauches SSL VPN for Citrix. (Industry Briefs) (Virtual Private Networks) (Brief Article)," Sep. 20, 2004, p. 43.30No author, "Secure Remote Access (Network Security) (VPN Gateway 4400 Series) (Brief Article)", Mar. 1, 2004, p. 50.31No author, Permeo Drives Out Operational Costs, Simplifies Secure Remote Access, Mar. 28, 2005, pages NA.32Office Action issued in U.S. Appl. No. 10/683,317 dated Feb. 11, 2009, MacKinnon, 17 pages.33Office Action issued in U.S. Appl. No. 10/683,317, mailed Apr. 5, 2007, MacKinnon, 6 pages.34Office Action issued in U.S. Appl. No. 10/683,317, mailed Aug. 18, 2009, 17 pages.35Office Action issued in U.S. Appl. No. 10/687,002 dated Jan. 7, 2009, Ta, 4 pages.36Office Action issued in U.S. Appl. No. 10/687,002, mailed May 2, 2007, Ta, 10 pages.37Office Action issued in U.S. Appl. No. 10/922,041, mailed Aug. 11, 2006, White, 19 pages.38Office Action issued in U.S. Appl. No. 10/922,041, mailed Dec. 6, 2005, White, 10 pages.39Office Action issued in U.S. Appl. No. 10/922,041, mailed Jan. 30, 2007, White, 20 pages.40Office Action issued in U.S. Appl. No. 10/922,041, mailed Mar. 30, 2006, White, 18 pages.41Office Action issued in U.S. Appl. No. 11/076,591 dated Feb. 13, 2009, Turley, 26 pages.42Office Action issued in U.S. Appl. No. 11/076,652 dated Dec. 11, 2008, Tonnesen, 8 pages.43Office Action issued in U.S. Appl. No. 11/076,672 dated Feb. 3, 2009, Johnston, 10 pages.44Office Action issued in U.S. Appl. No. 11/076,719 dated Mar. 17, 2009, 8 pages.45Office Action issued in U.S. Appl. No. 11/076,719, dated Sep. 4, 2008, Patrick Turley, 7 pages.46Oh et al., Interaction Translation Methods for XML/SNMP Gateway, Jul. 11, 2003, retrieved from . . . (citation continued in next line) . . . http://web-archive.org/web/20030711162412/http://dpnm.postech.ac.kr/paper s/DSOM/02/xml-snmp-gateway/xml-snmp-gateway.pdf, pp. 1-5.47O'Shea, "Boingo to Launch Initiative Aimed at Carrier Market" Telephony.online, Mar. 10, 2003, 1 page, found at www.telephonyonline.com.48O'Shea, "PCTEL looks past patent suite toward fusion of Wi-Fi, PC" Telephony.online, Jun. 2, 2003, pp. 1-2, found at www.telephonyonline.com.49Permeo Supports Microsoft Network Access Protection for Simplified Secure Remote Access; Permeo's Base5 Support for Microsoft Tech. Provides "Zero Touch" Policy Enforcement.50Pfleeger, Charles P., Security in Computing, PTR Prentice-Hall, Inc., 1989, Ch. 10.51Rashti et al, "A Multi-Dimensional Packet Classifier for NP-Based Firewalls," Jan. 2004, retrieved from the Internet on Aug. 12, 2009: .52Rashti et al, "A Multi-Dimensional Packet Classifier for NP-Based Firewalls," Jan. 2004, retrieved from the Internet on Aug. 12, 2009: <URL:http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=1266123&isnumber=28312>.53Sarolahti, "Congestion Control on Spurious TCP Retransmssion Timeouts," 2003, pp. 682-686.54SBC Technology Resources, Inc., XNMP-XML Network Management Protocol and Interface, Jul. 19, 2002, pp. 1-9, http://www.ietf.org/proceedings/02jul/slides.55Shim, Choon B., XNMP for IP Telephony Management, Enterprise Networks & Servers, Jun. 2006, pp. 1-7, http://www.enterprisenetworksandservers.com.56 *Sommerlad, "Reverse Proxy Patterns", 2003, Retrieved from the Internet on Jul. 15, 2009: .57 *Sommerlad, "Reverse Proxy Patterns", 2003, Retrieved from the Internet on Jul. 15, 2009: <URL: http://www.modsecurity.org/archive/ReverseProxy-book-1.pdf >.58Stone, David, "Securing Wireless LANs with VPN," May 2006, pages NA.59Thottethodi et al., "Exploiting Global Knowledge to Achieve Self-Tuned Congestion Control for K-ary n-cube Networks", Mar. 2004, pp. 257-272.60Trabelsi et al., "Malicious Sniffing Systems Detection Plafform", 2004, pp. 201-207.61U.S Appl. No. 10/469,206, Ohtani et al.62U.S. Appl. No. 08/816,174, Short et al.63U.S. Appl. No. 09/458,569, Short et al.64U.S. Appl. No. 09/458,602, Pagan et al.65U.S. Appl. No. 09/541,877, Short et al.66U.S. Appl. No. 09/821,565, Ishikawa.67U.S. Appl. No. 09/881,147, Cooper et al.68U.S. Appl. No. 10/000,396, Copeland.69U.S. Appl. No. 10/072,683, Zuk et al.70U.S. Appl. No. 10/195,326, Lee et al.71U.S. Appl. No. 10/236,402, Bauer.72U.S. Appl. No. 10/291,095, Cantrell et al.73U.S. Appl. No. 10/641,494, Valluri.74U.S. Appl. No. 10/643,864, Nakae et al.75U.S. Appl. No. 10/709,423, Lu et al.76U.S. Appl. No. 10/930,392, Cantrell et al.77U.S. Appl. No. 10/930,922, Cantrell et al.78U.S. Appl. No. 10/953,326, Suzuki.79U.S. Patent and Trademark Office, Office Action issued in 11/076,591, mailed Aug. 06, 2009, Turley, 29 pages.80U.S. Patent and Trademark Office, Office Action issued in U.S. Appl. No. 10/922,041, mailed May 8, 2009, White, 13 Pages.81U.S. Patent and Trademark Office, Office Action issued in U.S. Appl. No. 11/076,672, mailed Jul. 21, 2009, White, 11 Pages.82U.S. Patent Office Action issued Apr. 17, 2008, in U.S. Appl. No. 10/687,002, Tuan Ta, 13 pages.83U.S. Patent Office Action issued Aug. 13, 2008, in U.S. Appl. No. 11/076,591, Patrick Turley, 10 pages.84U.S. Patent Office Action issued Jul. 22, 2008, in U.S. Appl. No. 11/076,652, Steven D. Tonnesen, 8 pages.85U.S. Patent Office Action issued Jul. 9, 2008, in U.S. Appl. No. 11/076,672, Keith Johnston, 12 pages.86U.S. Patent Office Action issued Jun. 9, 2008, in U.S. Appl. No. 10/683,317, Richard MacKinnon, 15 pages.87U.S. Patent Office Official Action issued Jan. 25, 2008 in U.S. Appl. No. 11/076,652, Steven D. Tonnesen, Jan. 25, 2008.88U.S. Patent Office Official Action issued Jul. 13, 2007 in U.S. Appl. No. 10/922,041, Eric White, Jul. 13, 2007.89U.S. Patent Office Official Action issued Oct. 18, 2007 in U.S. Appl. No. 10/687,002, Tuan Ta, Oct. 18, 2007.90U.S. Patent Office Official Action issued Oct. 31, 2007 in U.S. Appl. No. 11/078,223, Keith Johnston, Oct. 31, 2007.91U.S. Patent Office Official Action issued Oct. 9, 2007 in U.S. Appl. No. 10/683,317, Richard MacKinnon, Oct. 9, 2007.92Wen et al. "Development of a Snort-Based Security Network Management and Real-Time Intrusion Detection System", Feb. 2004, pp. 40-43.93West Point Unwired: the Military Academy at West Point Continues to Lead the Way in High-Tech Curriculum with Wireless Classroom Networking Copyright 2003 M2Communications.94Wirbel, Loring, "Security Stampede Could Flatten IPSec", Jan. 2004, p. 12.95Xing et al., "A Survery of Computer Vulnerability Assessment", Jan. 2004, pp. 1-11.96Yu et al., "Fuzzy Logic Based Adaptive Congestion Control Scheme for High-Speed Network", Aug. 2004, pp. 389-393.* Cited by examinerReferenced byCiting PatentFiling datePublication dateApplicantTitleUS8032933Oct 15, 2009Oct 4, 2011Rocksteady Technologies, LlcDynamically adaptive network firewalls and method, system and computer program product implementing sameUS8108915Nov 12, 2009Jan 31, 2012Rocksteady Technologies LlcSystem and method for providing a secure connection between networked computersUS8117639Oct 10, 2003Feb 14, 2012Rocksteady Technologies, LlcSystem and method for providing access controlUS8224983Apr 2, 2010Jul 17, 2012Rocksteady Technologies, LlcSystem and method for dynamic bandwidth provisioningUS8310960 *Jan 13, 2006Nov 13, 2012Ricoh Technology Research, Inc.Communication apparatus, method for controlling communication apparatus, communication system, program and mediumUS8356336Nov 16, 2009Jan 15, 2013Rpx CorporationSystem and method for double-capture/double-redirect to a different locationUS8381273Dec 21, 2011Feb 19, 2013Rpx CorporationSystem and method for providing a secure connection between networked computersUS8397282Apr 22, 2011Mar 12, 2013Rpx CorporationDynamically adaptive network firewalls and method, system and computer program product implementing sameUS8429725Jun 30, 2011Apr 23, 2013Rpx CorporationSystem and method for providing a secure connection between networked computersUS8484695Jan 9, 2012Jul 9, 2013Rpx CorporationSystem and method for providing access controlUS8543710Mar 10, 2005Sep 24, 2013Rpx CorporationMethod and system for controlling network accessUS8661153Jul 20, 2009Feb 25, 2014Rpx CorporationSystem and method for dynamic bandwidth provisioningUS8789078 *Aug 24, 2006Jul 22, 2014At&T Intellectual Property I, LpMethod and apparatus for sending stored advertising data from an internet protocol television end user network interface deviceUS8886805Nov 15, 2010Nov 11, 2014Flash Networks, LtdMethod and system for dynamically allocating services for subscribers data trafficUS9148408Dec 19, 2014Sep 29, 2015Cryptzone North America, Inc.Systems and methods for protecting network devicesUS9215418 *Jul 15, 2014Dec 15, 2015At&T Intellectual Property I, LpMethod and apparatus for sending stored advertising data from an internet protocol television end user network interface deviceUS9456018 *Dec 22, 2010Sep 27, 2016Aruba Networks, Inc.HTTP proxy based captive portalUS9473806 *Nov 18, 2015Oct 18, 2016At&T Intellectual Property I, L.P.Method and apparatus for sending stored advertising data from an internet protocol television end user network interface deviceUS9560015May 31, 2016Jan 31, 2017Cryptzone North America, Inc.Systems and methods for protecting network devices by a firewallUS20040177276 *Oct 10, 2003Sep 9, 2004Mackinnon RichardSystem and method for providing access controlUS20050204050 *Mar 10, 2005Sep 15, 2005Patrick TurleyMethod and system for controlling network accessUS20060209708 *Jan 13, 2006Sep 21, 2006Soichi NakamuraCommunication apparatus, method for controlling communication apparatus, communication system, program and mediumUS20080066096 *Aug 24, 2006Mar 13, 2008Sbc Knowledge Ventures L.P.Method and apparatus for sending stored advertising data from an internet protocol television end user network interface deviceUS20090279567 *Jul 20, 2009Nov 12, 2009Eric WhiteSystem and method for dynamic bandwidth provisioningUS20100037310 *Oct 15, 2009Feb 11, 2010Eric WhiteDynamically adaptive network firewalls and method, system and computer program product implementing sameUS20100058458 *Nov 12, 2009Mar 4, 2010Eric WhiteSystem and method for providing a secure connection between networked computersUS20100064356 *Nov 16, 2009Mar 11, 2010Eric WhiteSystem and method for double-capture/double-redirect to a different locationUS20100192213 *Apr 2, 2010Jul 29, 2010EricSystem and method for dynamic bandwidth provisioningUS20110219444 *Apr 22, 2011Sep 8, 2011Patrick TurleyDynamically adaptive network firewalls and method, system and computer program product implementing sameUS20120166662 *Dec 22, 2010Jun 28, 2012Pradeep IyerHTTP Proxy based Captive PortalUS20150135205 *Jul 15, 2014May 14, 2015At&T Intellectual Property I, LpMethod and apparatus for sending stored advertising data from an internet protocol television end user network interface device* Cited by examinerClassifications U.S. Classification726/12, 726/5International ClassificationG06F11/30, G06F12/14, H04L29/02, H04K1/00, H04L9/00, H04L9/32Cooperative ClassificationH04L63/168, H04L63/08Legal EventsDateCodeEventDescriptionJun 22, 2005ASAssignmentOwner name: WHITE, ERIC, TEXASFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:JOHNSTON, KEITH;MARTIN, JOHN;REEL/FRAME:016175/0240Effective date: 20050531Owner name: WHITE, ERIC,TEXASFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:JOHNSTON, KEITH;MARTIN, JOHN;REEL/FRAME:016175/0240Effective date: 20050531Jan 27, 2011ASAssignmentOwner name: ROCKSTEADY TECHNOLOGIES, LLC, TEXASFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:WHITE, ERIC;REEL/FRAME:025715/0123Effective date: 20101214Jun 28, 2012ASAssignmentOwner name: ROCKSTEADY TECHNOLOGIES, LLC, TEXASFree format text: CONFIRMATORY ASSIGNMENT;ASSIGNOR:WHITE, ERIC;REEL/FRAME:028457/0012Effective date: 20120625Jul 2, 2012ASAssignmentOwner name: WHITE, ERIC, TEXASFree format text: CONFIRMATORY ASSIGNMENT;ASSIGNOR:MARTIN, JOHN H.;REEL/FRAME:028519/0299Effective date: 20120629Owner name: WHITE, ERIC, TEXASFree format text: CONFIRMATORY ASSIGNMENT;ASSIGNOR:JOHNSTON, KEITH;REEL/FRAME:028533/0893Effective date: 20120628Aug 13, 2012ASAssignmentOwner name: RPX CORPORATION, CALIFORNIAFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:ROCKSTEADY TECHNOLOGIES LLC;REEL/FRAME:028774/0036Effective date: 20120802Mar 14, 2013FPAYFee paymentYear of fee payment: 4RotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services