US5991807A
Expired / Lapsed
US
⏱️ 0.0 years remaining
System for controlling users access to a distributive network in accordance with constraints present in common access distributive network interface separate from a server
Assignee: Avaya Inc
•
Filing: 1996-06-24
•
Granted: 1999-11-23
•
Expires: 2016-06-24
Abstract
Abstract A method of managing access to a distributive network provides both time and site access restraints for users or groups of users on a LAN or WAN adapted for accessing the network through a common network access interface system. The method utilizes the LAN server to develop and monitor the constraints, minimizing the utilization of the access interface system. The management parameters for each group or individual having access to the distributive network via the LAN or WAN is entered into the interface box by the administrator as a compact reference, a series of pointers to the larger database of users and groups stored in the existing LAN server directory services. The existing database of users and groups and their relationships exist already in the LAN servers as a normal consequence of LAN operation and a simple, graphical user interface in the preferred embodiment of the invention permits familiar selection of objects of that database and assignment of access constraints.
Inventors
- 👤 Jonathan Schmidt
- 👤 Lewis Donzis
- 👤 Henry Donzis
- 👤 John Murphy
- 👤 Peter Baron
- 👤 Herb Savage
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-26 19:27
CPC Classifications
H; H04; H04L; H04L12/00; H04L12/28; H04L12/2854; H04L12/2856; H04L12/2869; H04L12/287; H04L12/2876; H04L12/2858
Claims Analysis
Total Claims: 32
Claim 1
Independent Claim
185 words
A method for controlling access to a distributive network by users and user groups utilizing personal computers (PCs) on a local area network (LAN) comprising: utilizing a server for centralized, common access by the PCs on the LAN; establishing a database for the server to identify users and user group assignments for the LAN, the database including users and user groups native to normal LAN operation, each user group comprising one or more users; establishing a common access distributive network interface separate from the server and communicatively coupling the LAN to the distributive network without directly connecting through the server; programming user and user group control parameters into the database at the server, including constraints for access by users and user groups to the distributive network; transferring the constraints to the distributive network interface; and controlling access to the distributive network for a particular user at the distributive network interface without routing the particular user's access through the server and in accordance with the constraints present in the distributive network interface for the particular user or the group to which the particular user is assigned.
Claim 2
Independent Claim
185 words
A method for controlling access to a distributive network by users and user groups utilizing personal computers (PCs) on a local area network (LAN) comprising: utilizing a server for centralized, common access by the PCs on the LAN; establishing a database for the server to identify users and user group assignments for the LAN, the database including users and user groups native to normal LAN operation, each user group comprising one or more users; establishing a common access distributive network interface separate from the server and communicatively coupling the LAN to the distributive network without directly connecting through the server; programming user and user group control parameters into the database at the server, including constraints for access by users and user groups to the distributive network; transferring the constraints to the distributive network interface; and controlling access to the distributive network for a particular user at the distributive network interface without routing the particular user's access through the server and in accordance with the constraints present in the distributive network interface for the particular user or the group to which the particular user is assigned.
Claim 3
Dependent Claim
19 words
The method of claim 1, further including defining a plurality of groups each having a unique set of parameters.
Claim 4
Dependent Claim
13 words
The method of claim 2, further including assigning a user to multiple groups.
Claim 5
Dependent Claim
33 words
The method of claim 3, wherein distributive network access by said user is limited to the parameters of the combined access restrictions of all the group memberships to which the user is assigned.
Claim 6
Dependent Claim
37 words
The method of claim 1, wherein each group is assigned a time parameter for defining specific time blocks during which the user may gain access to the distributive network via the central, common access distributive network interface.
Claim 7
Dependent Claim
18 words
The method of claim 5, further including disconnecting users attempting to remain connected outside the specific time blocks.
Claim 8
Dependent Claim
34 words
The method of claim 1, wherein the parameters include specific distributive network destinations and services to which the user may gain access on the distributive network via the central, common access distributive network interface.
Claim 9
Dependent Claim
46 words
The method of claim 7, wherein each distributive network destination and service is an address defined by an address locator and a port number, and wherein each group includes an address parameter to which is assigned a combination of specified address locators and specified port numbers.
Claim 10
Dependent Claim
17 words
The method of claim 8, wherein the address parameter includes all address locators with specific port numbers.
Claim 11
Dependent Claim
18 words
The method of claim 8, wherein the address parameter includes all specific address locators with all port numbers.
Claim 12
Dependent Claim
15 words
The method of claim 1, including logging of actual user access to the distributive network.
Claim 13
Dependent Claim
25 words
The method of claim 11, wherein the logging further includes maintaining a log of the time blocks when accessed and the distributive network locators accessed.
Claim 14
Dependent Claim
18 words
The method of claim 12, wherein the logging further includes maintaining a log of the port numbers accessed.
Claim 15
Dependent Claim
36 words
The method of claim 12, wherein the logging further includes the reverse name lookup of each IP address to display in the log the name of the accessed domain rather than only the numeric IP address.
Claim 16
Dependent Claim
190 words
A storage medium having therein a plurality of programming instructions which, when executed by a processor, implement a service for controlling access of users on a local area network (LAN) to a distributive network, the service including a function for: accessing a database of a server for centralized, common access by personal computers (PCs) on the LAN to identify users and user group assignments native to the normal LAN operation, each user group comprising one or more users; assigning user and user group control parameters into the database at the server, including constraints for access by users and user groups to the distributive network; transferring the constraints to a distributed network interface which is separate from the server, the distributed network interface providing a communicative coupling of the LAN to the distributive network without directly connecting through the server; and controlling access to the distributive network for a particular user at the distributive network interface without routing the particular user's access through the server and in accordance with the constraints present in the distributive network interface for the particular user or the group to which the particular user is assigned.
Claim 17
Dependent Claim
190 words
A storage medium having therein a plurality of programming instructions which, when executed by a processor, implement a service for controlling access of users on a local area network (LAN) to a distributive network, the service including a function for: accessing a database of a server for centralized, common access by personal computers (PCs) on the LAN to identify users and user group assignments native to the normal LAN operation, each user group comprising one or more users; assigning user and user group control parameters into the database at the server, including constraints for access by users and user groups to the distributive network; transferring the constraints to a distributed network interface which is separate from the server, the distributed network interface providing a communicative coupling of the LAN to the distributive network without directly connecting through the server; and controlling access to the distributive network for a particular user at the distributive network interface without routing the particular user's access through the server and in accordance with the constraints present in the distributive network interface for the particular user or the group to which the particular user is assigned.
Claim 18
Dependent Claim
24 words
The storage medium of claim 15, wherein the function is further for defining a plurality of groups each having a unique set of parameters.
Claim 19
Dependent Claim
30 words
The storage medium of claim 15, wherein each group is assigned a time parameter for defining specific time blocks during which the user may gain access to the distributive network.
Claim 20
Dependent Claim
23 words
The storage medium of claim 17, wherein the function is further for disconnecting users attempting to remain connected outside the specific time blocks.
Claim 21
Dependent Claim
25 words
The storage medium of claim 15, wherein the parameters include specific distributive network sites to which the user may gain access on the distributive network.
Claim 22
Dependent Claim
47 words
The storage medium of claim 19, wherein each distributive network destination or service is an address defined by an address locator and a port number, and wherein each group includes an address parameter to which is assigned a combination of specified address locators and specified port numbers.
Claim 23
Dependent Claim
36 words
The storage medium of claim 15, wherein each distributive network access to a newsgroup is defined by the hierarchical newsgroup name and access constraints are forged by floating text strings for allow or disallow of access.
Claim 24
Dependent Claim
21 words
The storage medium of claim 15, wherein the function is further for logging of actual user access to the distributive network.
Claim 25
Dependent Claim
26 words
The storage medium of claim 22, wherein the logging further includes maintaining a log of the time blocks when accessed and the distributive network locators accessed.
Claim 26
Dependent Claim
19 words
The storage medium of claim 22, wherein the logging further includes maintaining a log of the port numbers accessed.
Claim 27
Independent Claim
181 words
An apparatus comprising: a storage medium having stored therein a plurality of programming instructions; and an execution unit, coupled to the storage medium, to execute the programming instructions to, access a database of a server for centralized, common access by personal computers (PCs) on a local area network (LAN) to identify users and user group assignments native to the normal LAN operation, each user group comprising one or more users, assign user and user group control parameters into the database at the server, including constraints for access by users and user groups to a distributive network, transfer the constraints to a distributed network interface which is separate from the server, the distributed network interface providing a communicative coupling of the LAN to the distributive network without directly connecting through the server, control access to the distributive network for a particular user at the distributive network interface without routing the particular user's access through the server and in accordance with the constraints present in the distributive network interface for the particular user or the group to which the particular user is assigned.
Claim 28
Independent Claim
181 words
An apparatus comprising: a storage medium having stored therein a plurality of programming instructions; and an execution unit, coupled to the storage medium, to execute the programming instructions to, access a database of a server for centralized, common access by personal computers (PCs) on a local area network (LAN) to identify users and user group assignments native to the normal LAN operation, each user group comprising one or more users, assign user and user group control parameters into the database at the server, including constraints for access by users and user groups to a distributive network, transfer the constraints to a distributed network interface which is separate from the server, the distributed network interface providing a communicative coupling of the LAN to the distributive network without directly connecting through the server, control access to the distributive network for a particular user at the distributive network interface without routing the particular user's access through the server and in accordance with the constraints present in the distributive network interface for the particular user or the group to which the particular user is assigned.
Claim 29
Dependent Claim
25 words
The apparatus of claim 25, wherein each group is assigned a time parameter for defining specific time blocks during which the user may gain access.
Claim 30
Dependent Claim
21 words
The apparatus of claim 25, wherein the parameters include specific Internet addresses and ports to which the user may gain access.
Claim 31
Dependent Claim
27 words
The apparatus of claim 25, wherein the execution unit is further to execute the programming instructions to maintain a log of actual user access to the Internet.
Claim 32
Dependent Claim
32 words
The apparatus of claim 28, wherein the execution unit is further to execute the programming instructions to include a log of the time blocks when accessed and the distributive network locators accessed.
References Cited (Backward Citations)
US5321841A
Cited
US5315657A
Cited
US5552776A
Cited
US5276901A
Cited
US5483596A
Cited
US5655077A
Cited
US5671354A
Cited
US5675782A
Cited
US5678041A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-11-22 | 2003-05-24 | 2003-11-23 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-11-22 | 2007-05-24 | 2007-11-23 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-11-22 | 2011-05-24 | 2011-11-23 | $7700.00 | Window Closed / Lapsed |