# US 10,374,973 B2 · Method for managing computer network access > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,374,973 B2 - Document ID: US10374973B2 - Status: Granted - Kind: B2 - Application number: 13/900,856 - Filed: 2013-05-23 - Published: 2013-09-26 - Granted: 2019-08-06 - Earliest claimed: 2001-01-23 - Assignees: Weserve Access, LLC - Applicants: Weserve Access, LLC - Inventors: David A. Fertell; Joseph I. Field, Jr. - Web page: https://patentgrep.com/patent/US10374973B2 ## CPC - H04L 61/00: Network arrangements, protocols or services for addressing or naming - H04L 41/20: {Network management software packages} - H04L 43/06: Generation of reports - H04L 47/803: {Application aware} - H04L 67/14: Session management (for real-time applications in data packet communications networks H04L65/1066) - H04L 67/34: {involving the movement of software or configuration parameters (network booting or remote initial program loading [RIPL] G06F9/4416)} - H04L 67/535: {Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract In a method of controlling computer network access, a server computer receives via a computer network from an endpoint computer of the computer network a request for an access configuration file. In response, the server computer dispatches to the endpoint computer an access configuration file. Thereafter, the server computer dispatches to the endpoint computer an update to the dispatched access configuration file or another access configuration file. The server computer can store data received from the endpoint computer regarding a violation of at least one policy included in the access configuration file, the updated access configuration file, or the other access configuration file. The server computer can either dispatch a unique access configuration file to each endpoint computer for which a unique access configuration file was prepared or dispatch a generic access configuration file to each endpoint computer for which a unique access configuration file was not prepared. ## Claims ### Claim 1 A method of controlling computer network access comprising: (a) a server computer receiving via a computer network from an endpoint computer of the computer network based on login data entered into the endpoint computer, a request for an access configuration file; (b) the server computer dispatching to said endpoint computer the access configuration file determined based on said login data entered into the endpoint computer; (c) the server computer dispatching to said endpoint computer at a time following step (b) an update to the access configuration file dispatched in step (b) or another access configuration file, wherein the access configuration file of step (a) and the update to the access configuration file dispatched in step (b) or the other access configuration file are both dispatched during a single login session on the endpoint computer, wherein, on the endpoint computer, the access configuration file, the updated access configuration file, or the other access configuration file causes a process running on the endpoint computer to allow, or block, or both allow and block conveyance of data between the computer network and one or more other processes running on the endpoint computer based on a comparison of the data being conveyed and settings in the access configuration file, the updated access configuration file, or the other access configuration file, each said one or more other processes utilizing a communication protocol; and (d) determining one of said settings for a communication protocol utilized by said one or more other processes. ### Claim 2 (depends on 1) The method of claim 1, comprising: (e) the server computer storing data received from said endpoint computer regarding a violation of at least one policy included in the access configuration file, the updated access configuration file, or the other access configuration file. ### Claim 3 A method of controlling computer network access comprising: (a) receiving, by a server computer via a computer network from each of one or more endpoint computers of the computer network in corresponding one or more first communication sessions initiated at the endpoint computers based on login data entered into the endpoint computer, a request for an access configuration file; (b) for each request received in step (a) from an endpoint computer for which a unique access configuration file stored at the server computer was prepared based on said login data entered into the endpoint computer, the server computer in a second communication session dispatching the unique access configuration file to a client control manager of the endpoint computer; and (c) for each request in step (a) from an endpoint computer for which a unique access configuration file is not stored at the server computer based on said login data entered into the endpoint computer, the server computer in the second communication session dispatching a generic access configuration file to the client control manager of the endpoint computer; (d) for each unique access configuration file dispatched in step (b) or each generic access configuration file dispatched in step (c) on the corresponding endpoint computer, the client control manager causing an access control process to allow and block conveyance of data in a third communication session for transactions between the computer network and one or more other processes running on the endpoint computer based on a comparison of the conveyed data in the third communication session for the transactions and settings in the access configuration file dispatched in step (b) or the generic access configuration file dispatched in step (c); and (e) for said access control process, determining one of said settings from a communication protocol utilized by said one or more other processes, said communication protocol determined based on the conveyed data in the third communication session. ### Claim 4 (depends on 3) The method of claim 3, comprising: (f) the server computer controlling storage of data received from each endpoint computer regarding violations of policies included in the access configuration files dispatched in step (b), or step (c), or both of steps (b) and (c). ### Claim 5 (depends on 3) The method of claim 3, comprising: the login data including a login name. ### Claim 6 (depends on 3) The method of claim 3, comprising: (g) transferring at least part of the conveyed data to the server computer in relation to said request. ### Claim 7 (depends on 3) The method of claim 3, comprising: the login data common to a class. ### Claim 8 (depends on 3) The method of claim 3, comprising: for each unique access configuration file dispatched in step (b) or each generic access configuration file dispatched in step (c), the access configuration including a list related to said control setting for said communication protocol; for the third communication session, controlling the conveyance of data based on the list. ### Claim 9 (depends on 8) The method of claim 8, comprising: the list including Allow Listed or Block Listed control settings. ### Claim 10 (depends on 1) The method of claim 1, comprising: said communication protocol determined from the conveyed data, one of said settings determined for said communication protocol. ### Claim 11 (depends on 1) The method of claim 1, comprising: the server computer controlling storage of data received from each endpoint computer regarding violations of policies included in the access configuration files dispatched in step (b), or step (c), or both of steps (b) and (c). ### Claim 12 (depends on 1) The method of claim 1, comprising: the login data including a login name. ### Claim 13 (depends on 1) The method of claim 1, comprising: transferring at least part of the conveyed data to the server computer in relation to said request. ### Claim 14 (depends on 1) The method of claim 1, comprising: the login data common to a class. ### Claim 15 (depends on 1) The method of claim 1, comprising: for each unique access configuration file dispatched in step (b) or each generic access configuration file dispatched in step (c), the access configuration including a list related to said control setting for said communication protocol; controlling the conveyance of data based on the list. ### Claim 16 (depends on 15) The method of claim 15, comprising: the list including Allow Listed or Block Listed control settings.