US 11,641,341 B2 · System and method for remotely filtering network traffic of a customer premise device

Abstract

Systems, methods, and devices for performing targeted filtering of network traffic generated by user equipment (UE) devices connected to a customer premise equipment (CPE) device in a communication system that includes a distributed residential gateway. A network server may determine that the communication system includes a UE device that is compromised, misconfigured, or operating outside normal communication parameters, identify the UE device, determine an Internet protocol (IP) address or a media access control (MAC) address of the identified UE device, generate a quarantine request message that includes the IP address or the MAC address of the identified UE device in response to determining that the preconfigured virtual local area network access control list (VACL) on the CPE lists source IP addresses from which the CPE will filter outbound traffic, and send the generated quarantine request message to a bridged residential gateway (BRG) associated with the CPE device.

Claims27

Dependent claims

A method for performing targeted filtering of network traffic generated by user equipment (UE) devices connected to a customer premise equipment (CPE) device in a communication system that includes a distributed residential gateway, the method comprising:

determining, by a processor in a computing device, that the communication system includes a UE device that is compromised, misconfigured, or operating outside normal communication parameters;
determining, by the processor in the computing device, at least one of an Internet protocol (IP) address or a media access control (MAC) address of the UE device;
determining, by the processor in the computing device, whether the UE device is a RFC 3203 compliant device connected to the CPE device in a home network;
determining, by the processor in the computing device, whether there is a preconfigured virtual local area network access control list (VACL) on the CPE device that lists source IP addresses from which the CPE device will filter outbound traffic in response to determining that the UE device is the RFC 3203 compliant device connected to the CPE device in the home network;
generating, by the processor in the computing device, a quarantine request message that includes at least one of the IP address or the MAC address of the UE device in response to determining that the preconfigured VACL on the CPE device lists source IP addresses from which the CPE device will filter outbound traffic;
and
sending, by the processor in the computing device, the generated quarantine request message to a bridged residential gateway (BRG) associated with the CPE device.

4 more elements

A server computing device, comprising:

a processor configured with processor-executable instructions to:
determine that a communication system includes a user equipment (UE) device that is compromised, misconfigured, or operating outside normal communication parameters;
determine at least one of an Internet protocol (IP) address or a media access control (MAC) address of the UE device;
determine whether the UE device is a RFC 3203 compliant device connected to a customer premise equipment (CPE) device in a home network;
determine whether there is a preconfigured virtual local area network access control list (VACL) on the CPE device that lists source IP addresses from which the CPE device will filter outbound traffic in response to determining that the UE device is the RFC 3203 compliant device connected to the CPE device in the home network;
generate a quarantine request message that includes at least one of the IP address or the MAC address of the UE device in response to determining that the preconfigured VACL on the CPE device lists source IP addresses from which the CPE device will filter outbound traffic;
and
send the generated quarantine request message to a bridged residential gateway (BRG) associated with the CPE device.

5 more elements

A non-transitory computer readable storage medium having stored thereon processor-executable software instructions configured to cause a server processor to perform operations for accomplishing targeted filtering of network traffic generated by user equipment (UE) devices connected to a customer premise equipment (CPE) device in a communication system that includes a distributed residential gateway, the operations comprising:

determining that the communication system includes a UE device that is compromised, misconfigured, or operating outside normal communication parameters;
determining at least one of an Internet protocol (IP) address or a media access control (MAC) address of the UE device;
determining whether the UE device is a RFC 3203 compliant device connected to the CPE device in a home network;
determining whether there is a preconfigured virtual local area network access control list (VACL) on the CPE device that lists source IP addresses from which the CPE device will filter outbound traffic in response to determining that the UE device is the RFC 3203 compliant device connected to the CPE device in the home network;
generating a quarantine request message that includes at least one of the IP address or the MAC address of the UE device in response to determining that the preconfigured VACL on the CPE device lists source IP addresses from which the CPE device will filter outbound traffic;
and
sending the generated quarantine request message to a bridged residential gateway (BRG) associated with the CPE device.

4 more elements

Dependencies are inferred from the claim text.

System and method for remotely filtering network traffic of a customer premise device

Life of this patent

System and method for remotely filtering network traffic of a customer premise device

Life of this patent

Abstract

Claims27