Back to results
US 10,567,433 B2Granted
Network device authorization for access control and information security
AssigneeBank of America Corporation
InventorsRahul Isola, Anthony P. Grossi
Life of this patent
Estimating the term…
Abstract
A system that includes a switch, a network authentication server (NAS), and a threat management server. The NAS sends a device identifier for an endpoint device and a port identifier identifying a port on the switch to a threat management server in response to the device passing authentication. The threat management server determines the endpoint device is present in the black list using the device identifier. The threat management server determines the endpoint device has a block on the port of the switch using the port identifier. The threat management server removes the block for the endpoint device on the port on the switch in response to determining the endpoint device has the block on the port of the switch.
Claims20
A system comprising:
- a switch configured to provide network connectivity for one or more endpoint devices to a network;
- a network authentication server operably coupled to the switch and configured to:
- receive device information from an endpoint device connected to a port on the switch;
- authenticate the endpoint device based at least in part on the device information;
- send a device identifier for the endpoint device and a port identifier identifying the port on the switch to a threat management server in response to authenticating the endpoint device;
- and
- the threat management server operably coupled to the switch and the network authentication server, comprising:
- a memory configured to store:
- a black list identifying:
- one or more endpoint devices blocked from accessing the network;
- and
- ports on the switch each of the one or more endpoint devices have been blocked from;
- and
- a threat management engine implemented by a processor configured to:
- receive the device identifier and the port identifier in response to the endpoint device passing authentication with the network authentication server,
- determine the endpoint device is present in the black list using the device identifier in response to receiving the device identifier, wherein the endpoint device is blocked from accessing the network in response to previously failing to authenticate with the network authentication server;
- determine the endpoint device has a block on the port of the switch using the port identifier in response to determining the endpoint device is present in the black list;
- and
- remove the block for the endpoint device on the port on the switch in response to determining the endpoint device has passed authentication with the network authentication server.
16 more elements
A threat management server, comprising:
- a memory configured to store:
- a black list identifying:
- one or more endpoint devices blocked from accessing a network;
- and
- ports on a switch each of the one or more endpoint devices have been blocked from;
- and
- a threat management engine implemented by a processor configured to:
- receive a device identifier for an endpoint device and a port identifier identifying a port on the switch in response to a network authentication server authenticating the endpoint device based at least in part on device information received from the endpoint device;
- determine the endpoint device is present in the black list using the device identifier in response to receiving the device identifier, wherein the endpoint device is blocked from assessing the network in response to previously falling to authenticate with the network authentication server;
- determine the endpoint device has a block on the port of the switch using the port identifier in response to determining the endpoint device is present in the black list;
- and
- remove the block for the endpoint device on the port on the switch in response to determining the endpoint device has passed authentication with the network authentication server.
9 more elements
A method, comprising:
- receiving, by a network authentication server, device information from an endpoint device connected to a port on a switch;
- authenticating, by the network authentication server, the endpoint device based at least in part on the device information;
- receiving, by a threat management server, a device identifier for an endpoint device and a port identifier for the port on the switch in response to the network authentication server authenticating the endpoint device;
- determining, by the threat management server, the endpoint device is present in a black list using the device identifier in response to receiving the device identifier, wherein the endpoint device is blocked from accessing the network in response to previously failing to authenticate with the network authentication server, and wherein the blacklist identifies:
- one or more endpoint devices blocked from accessing the network;
- and
- ports on a switch each of the one or more endpoint devices have been blocked from;
- determining, by the threat management server, the endpoint device has a block on the port of the switch using port identifier in response to determining the endpoint device is present in the black list;
- and
- removing, by the threat management server, the block for the endpoint device on the port on the switch in response to determining the endpoint device has passed authentication with the network server.
7 more elements
Dependencies are inferred from the claim text.