System and method to define internet control rules in Wi-Fi based on layout

A method for controlling and restricting access to Internet-based content based on location, comprising the steps of:

• importing a layout of an environment to a Wi-Fi computer program on a computing device;
• surveying the environment with the computing device having the Wi-Fi computer program to create a first virtual boundary and a second virtual boundary of the environment;
• loading the first virtual boundary and the second virtual boundary of the environment onto a Wi-Fi router;
• assigning, at the Wi-Fi router, a first control rule to the first virtual boundary and a second control rule to the second virtual boundary;
• receiving, at the Wi-Fi router, a data packet with location data from a Wi-Fi enabled mobile device connected to an access point;
• associating the location data with the first virtual boundary of the layout;
• and
• applying the first control rule to the data packet transmitted from the Wi-Fi enabled mobile, device to the Wi-Fi router based on the Wi-Fi enabled mobile device being located within the virtual boundary and an ID sent by the Wi-Fi enabled mobile device to the Wi-Fi router, wherein the control rule regulates the transmission of the data packet by the Wi-Fi router based on at least one of a firewall policy and a class of service (COS);
• and
• wherein the first control rule and the second control rule may be overridden based on the received ID;
• and
• wherein additional control rules may be dynamically changed by an administrator utilizing a graphical user interface (GUI).

A computer implemented method comprising:

• receiving region definition data including information indicative or three dimensional spatial boundaries that define a plurality of three dimensional subspaces within a building structure;
• receiving a plurality of maximum permissible number-of-connection values respectively corresponding to the plurality of three dimensional subspaces;
• receiving, from a user device and by a wireless network implementation device, a request to connect the user device to a communication network through the wireless network implementation device and an ID;
• receiving location data including information indicative of a location of the user device in three dimensional space;
• determining that the user device is located in a first three dimensional subspace of the plurality of three dimensional subspaces based, at least in part, upon:
• (i) the region definition data and the location data;
• determining a current number-of-connection values corresponding to the number of devices located in the first three dimension subspace that are currently connected to the communication network through the wireless network implementation device;
• determining that the current number-of-connection values is equal to or greater than the maximum permissible number-of-connections value or the first three dimensional subspace;
• and
• communicating, from the wireless network implementation device and to the user device, that the user device cannot be connected to the communication network through the wireless network implementation device;
• and wherein the maximum permissible number-of-connection value is associated with a control rule that may be overridden by utilizing the ID received from the user device;
• and
• wherein additional control rules may be dynamically changed by an administrator utilizing a graphical user interface (GUI).