Patent ID: 7924850

Claim:
A method of controlling access to a network from a computer terminal, comprising: capturing a first packet from a switching hub by a first interface; determining whether the captured first packet is transmitted from a first terminal or a second terminal; in response to determining that the captured first packet is a security setting violation report packet transmitted from the first terminal, generating and sending a first address resolution protocol information, changing a first media access control address for a security patch download server of a first address resolution protocol table of the first terminal into a second media access control address of a second interface, and changing a third media access control address into the first media access control address; in response to determining that the captured first packet is a second address resolution protocol packet transmitted from the second terminal, generating and sending a second address resolution protocol information and changing a fourth media access control address of a second address resolution protocol table of the second terminal into the first media access control address; capturing a second packet at the second interface; determining whether the captured second packet at the second interface is related to a security patch of a first server; redirecting the captured second packet at the second interface related to the security patch of the first server without bandwidth control; determining whether the captured second packet at the second interface is related to a security patch of a second server; redirecting the captured second packet at the second interface related to the security patch of the second server with bandwidth control; discarding a captured second packet at the second interface unrelated to the security patch of the second server; and disposing the captured first packet from the first terminal and the second terminal that passes through the first interface, wherein the first terminal is a security setting violation terminal, and the second terminal is an illegal connection terminal.