Network hop count network location identifier
AssigneeCA, Inc.
InventorsHimanshu Ashiya, Atmaram Shetye, Roshan Mathews
Life of this patent
Estimating the term…
Abstract
Identifying a communication source includes receiving a message from a client computer requesting access to a computer-based resource; and receiving, a network signature from the client computer, wherein the network-related signature comprises a value representing how many routing devices are on a network path between the client computer and a predetermined computer. Also included is determining whether the vector of values matches a vector of stored values, each stored value potentially corresponding to a respective one of the values in the vector of values; and limiting access to the computer-based resource based at least in part on the vector of values not matching the vector of stored values.
Claims20
A method, comprising:
- receiving, by a server system from a client device, a request to access a computer-based resource;
- receiving, by the server system, a network-related signature from the client device, wherein the network-related signature specifies a particular value representing a number of routing devices on a network path between the client device and a predetermined computer;
- determining, by the server system, whether to provide the client device with access to the computer-based resource, including by:
- accessing network-related signature information indicative of previous access attempts by the client device, wherein the network-related signature information includes an average value of the number of routing devices on the network path between the client device and the predetermined computer during a plurality of the previous access attempts;
- and
- comparing the particular value to the average value;
- and
- limiting, by the server system, access to the computer-based resource in response to the particular value exceeding a particular range from the average value.
A system, comprising:
- at least one processor;
- and
- a non-transitory, computer-readable medium having instructions stored thereon that are executable by the at least one processor to cause the system to:
- receive a request from a client computer to access a computer-based resource;
- receive a network-related signature from the client computer, wherein the network-related signature specifies a particular value representing a number of routing devices on a network path between the client computer and a predetermined computer;
- determine whether to provide the client computer with access to the computer-based resource, including by:
- accessing network-related signature information indicative of previous access attempts by the client computer, wherein the network-related signature information includes an average value of the number of routing devices on the network path between the client computer and the predetermined computer during a plurality of the previous access attempts;
- and
- comparing the particular value to the average value;
- provide the client computer with access to the computer-based resource in response to the particular value matching the average value within a particular threshold;
- and
- limit access, by the client computer, to the computer-based resource in response to the particular value not matching the average value within the particular threshold.
A non-transitory, computer-readable medium having instructions stored thereon that are executable by a server system to perform operations comprising:
- receiving a request from a client computer to access a computer-based resource;
- receiving a network-related signature from the client computer, wherein the network-related signature specifies a particular value representing a number of routing devices on a network path between the client computer and a static network location;
- determining whether to provide the client computer with access to the computer-based resource, including by:
- accessing network-related signature information indicative of previous access attempts by the client computer, wherein the network-related signature information includes an average value of the number of routing devices calculated to be on the network path between the client computer and the static network location during a plurality of the previous access attempts;
- and
- comparing the particular value to the average value;
- providing access to the computer-based resource in response to the particular value matching the average value within a particular range;
- and
- limiting access to the computer-based resource in response to the particular value not matching the average value within the particular range.
Dependencies are inferred from the claim text.