Patent ID: 8683059

Claim:
A method for enhancing network security of a computer network, comprising: configuring one or more computing devices responsible for device address based access control to the computer network, to execute: after authentication of a user and/or a network device to access the computer network, interpreting service and/or data access privileges relating to the user and/or the network device into network access rules for privileges or rights to send and receive messages to destinations or from destinations to access a service and/or data available on the accessed computer network; and incorporating data that pertains to the network access rules relating to access by the user and/or the network device to the service and/or data on the accessed computer network, into device address based filtering rules enforced at a Media Access Control (MAC) layer to control at the MAC layer monitoring and filtering of network message traffic for the user and/or the network device to access the service and/or data on the accessed computer network.