US 10,382,444 B2Granted

Device blocking tool

AssigneeBank of America Corporation

InventorsRahul G. Isola, Anthony P. Grossi, Patrick M. Sweet

Life of this patent

Estimating the term…

Loading patent…

Abstract

A device blocking tool includes a user interface, a location engine, and a connection engine. The user interface receives at least one of a MAC address of a device and an IP address of the device. The location engine communicates a query to an access control server, receives a response, and determines, based on the response, that the device connected to a network through a wired connection. In response to a determination that the device connected through the wired connection, the location engine determines a switch through which the device connected. The location engine also determines a VLAN through which the device connected and determines, based on a type associated with the VLAN, that the device is an IP telephone. The connection engine connects to the determined switch in response to the determination that the device connected through the wired connection.

Claims14

Dependent claims

A method comprising:

receiving at least one of a Media Access Control (MAC) address of a device and an Internet Protocol (IP) address of the device;
communicating to an access control server at least one of the MAC address of the device and the IP address of the device;
receiving a response from the access control;
determining, based on the response, that the device connected to a network through a wired connection;
in response to a determination that the device connected to the network through the wired connection, determining a switch through which the device connected to the network;
determining a virtual local area network (VLAN) through which the device connected to the network;
and
determining, based on a type associated with the VLAN, that the device is an IP telephone;
connecting to the determined switch in response to the determination that the device connected to the network through the wired connection;
presenting, to a user, information in the response indicating a port through which the device connected to the network;
receiving, from the user, an indication that the device is compromised and should be blocked based on the port;
and
in response to receiving the indication, updating a wired access control list to prevent the IP telephone from connecting to the network.

10 more elements

A system comprising:

an access control server;
a switch;
and
a device blocking tool configured to:
receive at least one of a Media Access Control (MAC) address of a device and an Internet Protocol (IP) address of the device;
communicate to an access control server at least one of the MAC address of the device and the IP address of the device;
receive a response from the access control server;
determine, based on the response, that the device connected to a network through a wired connection;
in response to a determination that the device connected to the network through the wired connection, determine that the device connected to the network through the switch;
determine a virtual local area network (VLAN) through which the device connected to the network;
determine, based on a type associated with the VLAN, that the device is an IP telephone;
connect to the determined switch in response to the determination that the device connected to the network through the wired connection;
present, to a user, information in the response indicating a port through which the device connected to the network;
receive, from the user, an indication that the device is compromised and should be blocked based on the port;
and
in response to receiving the indication, update a wired access control list to prevent the IP telephone from connecting to the network.

13 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/161,911Filed 23 May 2016
Published: US 2017/0339155 A123 Nov 2017
Granted: 13 Aug 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification14 codes

H04L 63/101
For controlling access to devices or network resources: access control lists [ACL]
H04L 12/4641
Interconnection of networks: virtual LANs, VLANs, e.g. virtual private networks [VPN]
H04L 63/0236
Filtering policies: filtering by address, protocol, port number or service, e.g. IP-address or URL
H04L 63/0272
For separating internal from external traffic, e.g. firewalls: virtual private networks