US5835727A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for controlling access to services within a computer network
Assignee: Amazon.com Inc
•
Filing: 1996-12-09
•
Granted: 1998-11-10
•
Expires: 2016-12-09
Abstract
Abstract A method and apparatus for controlling access to services within a computer network is provided. More specifically, the present invention includes a services management system, or SMS. The SMS manages network connections between a series of client systems and a router. An access network control server (ANCS) manages the configuration of the router. For each network user, the SMS maintains a profile of filtering rules. When the user accesses the network, the SMS downloads the user's filtering profiles to the ANCS. The ANCS then uses the downloaded filtering profiles to reconfigure the router. The router then uses the filtering rules to selectively forward IP packets originating from the user's host system and directed at the network services.
Inventors
- 👤 Thomas K. Wong
- 👤 Sanjay R. Radia
- 👤 Swee Boon Lim
- 👤 Panagiotis Tsirigotis
- 👤 Robert J. Goedman
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-06 20:12
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0227; H04L63/0263; H04L63/10; H04L63/102
Claims Analysis
Total Claims: 21
Claim 1
Independent Claim
119 words
A method for providing access control to services in a computer network including one or more server systems and one or more client systems, the method comprising the steps of: providing a filtering profile for each service, each filtering profile including one or more filtering rules, establishing the identity of a network user that is using a host client system, selecting one of more filtering profiles in accordance with the identity of the network user, and establishing a packet filter in the computer network, the packet filter using the filtering rules included in the selected profiles to selectively forward packets originating at the host client system and directed at one or more of the services included in the network.
Claim 2
Independent Claim
119 words
A method for providing access control to services in a computer network including one or more server systems and one or more client systems, the method comprising the steps of: providing a filtering profile for each service, each filtering profile including one or more filtering rules, establishing the identity of a network user that is using a host client system, selecting one of more filtering profiles in accordance with the identity of the network user, and establishing a packet filter in the computer network, the packet filter using the filtering rules included in the selected profiles to selectively forward packets originating at the host client system and directed at one or more of the services included in the network.
Claim 3
Dependent Claim
51 words
A method as recited in claim 1 wherein the computer network includes a router and wherein the step of establishing a packet filter includes the step of reconfiguring the router to selectively forward packets originating at the host client system in accordance with the filtering rules included in the selected profiles.
Claim 4
Dependent Claim
59 words
A method as recited in claim 1 wherein the host client system is connected to the network using a cable modem and wherein the step of establishing a packet filter includes the step of reconfiguring the cable modem to selectively forward packets originating at the host client system in accordance with the filtering rules included in the selected profiles.
Claim 5
Dependent Claim
29 words
A method as recited in claim 1 wherein the step of providing one or more filtering profiles further comprises the step of selecting the filtering profiles from a database.
Claim 6
Dependent Claim
55 words
A method as recited in claim 1 wherein each service includes one or more applications, each application being located on one or more servers systems and wherein the filtering profile for each service includes one or more filtering rules for selectively forwarding packets directed to servers on which the applications of the service are located.
Claim 7
Dependent Claim
31 words
A method as recited in claim 1 wherein each filtering rule includes a protocol type, the protocol type corresponding to the protocol used to send messages to one of the services.
Claim 8
Dependent Claim
30 words
A method as recited in claim 1 wherein each filtering rule includes a destination address where the destination address corresponds to the IP address of one of the server systems.
Claim 9
Dependent Claim
15 words
A method as recited in claim 5 wherein each filtering rule includes a destination mask.
Claim 10
Dependent Claim
18 words
A method as recited in claim 5 wherein each filtering rule includes a range of destination port numbers.
Claim 11
Dependent Claim
39 words
A method as recited in claim 5 wherein the step of selecting one of more filtering profiles in accordance with the identity of the network user selects filtering profiles corresponding to services to which the user is a subscriber.
Claim 12
Dependent Claim
183 words
A computer program product comprising: a computer usable medium having computer readable code embodied therein for providing access control to services in a computer network including one or more server systems and one or more client systems, the computer program product comprising: first computer readable program code devices configured to cause a computer system to maintain a filtering profile for each service, each filtering profile including one or more filtering rules, second computer readable program code devices configured to cause a computer system to establishing the identity of a network user that is using a host client system, third computer readable program code devices configured to cause a computer system to select one of more filtering profiles in accordance with the identity of the network user, and fourth computer readable program code devices configured to cause a computer system to establish a packet filter in the computer network, the packet filter using the filtering rules included in the selected profiles to selectively forward packets originating at the host client system and directed at one or more of the services included in the network.
Claim 13
Dependent Claim
183 words
A computer program product comprising: a computer usable medium having computer readable code embodied therein for providing access control to services in a computer network including one or more server systems and one or more client systems, the computer program product comprising: first computer readable program code devices configured to cause a computer system to maintain a filtering profile for each service, each filtering profile including one or more filtering rules, second computer readable program code devices configured to cause a computer system to establishing the identity of a network user that is using a host client system, third computer readable program code devices configured to cause a computer system to select one of more filtering profiles in accordance with the identity of the network user, and fourth computer readable program code devices configured to cause a computer system to establish a packet filter in the computer network, the packet filter using the filtering rules included in the selected profiles to selectively forward packets originating at the host client system and directed at one or more of the services included in the network.
Claim 14
Dependent Claim
62 words
A computer program product as recited in claim 11 wherein the computer network includes a router and wherein the fourth computer readable program code devices includes computer readable program code devices configured to cause a computer system to reconfigure the router to selectively forward packets originating at the host client system in accordance with the filtering rules included in the selected profiles.
Claim 15
Dependent Claim
70 words
A computer program product as recited in claim 11 wherein the host client system is connected to the network using a cable modem and wherein the fourth computer readable program code devices includes computer readable program code devices configured to cause a computer system to reconfigure the cable modem to selectively forward packets originating at the host client system in accordance with the filtering rules included in the selected profiles.
Claim 16
Dependent Claim
37 words
A computer program product as recited in claim 8 wherein the third computer readable program code devices includes computer readable program code devices configured to cause a computer system to select the filtering profiles from a database.
Claim 17
Independent Claim
145 words
An apparatus for providing access control to services in a computer network including one or more server systems and one or more client systems, the apparatus comprising: a filtering profile for each service, each filtering profile including one or more filtering rules, a first portion configured to cause a computer system to establish the identity of a network user that is using a host client system, a second portion configured to cause a computer system to select one of more filtering profiles in accordance with the identity of the network user, and a third portion configured to cause a computer system to establish a packet filter in the computer network, the packet filter using the filtering rules included in the selected profiles to selectively forward packets originating at the host client system and directed at one or more of the services included in the network.
Claim 18
Independent Claim
145 words
An apparatus for providing access control to services in a computer network including one or more server systems and one or more client systems, the apparatus comprising: a filtering profile for each service, each filtering profile including one or more filtering rules, a first portion configured to cause a computer system to establish the identity of a network user that is using a host client system, a second portion configured to cause a computer system to select one of more filtering profiles in accordance with the identity of the network user, and a third portion configured to cause a computer system to establish a packet filter in the computer network, the packet filter using the filtering rules included in the selected profiles to selectively forward packets originating at the host client system and directed at one or more of the services included in the network.
Claim 19
Dependent Claim
54 words
An apparatus as recited in claim 15 wherein the computer network includes a router and wherein the third portion includes a fourth portion configured to cause a computer system to reconfigure the router to selectively forward packets originating at the host client system in accordance with the filtering rules included in the selected profiles.
Claim 20
Dependent Claim
62 words
An apparatus as recited in claim 15 wherein the host client system is connected to the network using a cable modem and wherein the third portion includes a fourth portion configured to cause a computer system to reconfigure the cable modem to selectively forward packets originating at the host client system in accordance with the filtering rules included in the selected profiles.
Claim 21
Dependent Claim
29 words
An apparatus as recited in claim 15 wherein the second portion includes a fifth portion configured to cause a computer system to select the filtering profiles from a database.
References Cited (Backward Citations)
EP0442838A2
Cited
US5463777A
Cited
US5574910A
Cited
US5627829A
Cited
EP0658837A2
Cited
US5530703A
Cited
US5541911A
Cited
US5572533A
Cited
US5570366A
Cited
US5648965A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-11-09 | 2002-05-11 | 2002-11-10 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-11-09 | 2006-05-11 | 2006-11-10 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-11-09 | 2010-05-11 | 2010-11-10 | $7700.00 | Window Closed / Lapsed |