# US 12,225,007 B2 · Systems and methods for using a network access device to secure a network prior to requesting access to the network by the network access device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,225,007 B2 - Document ID: US12225007B2 - Status: Granted - Kind: B2 - Application number: 18/396,393 - Filed: 2023-12-26 - Published: 2024-04-18 - Granted: 2025-02-11 - Earliest claimed: 2021-02-25 - Assignees: Fortinet, Inc. - Applicants: Fortinet, Inc. - Inventors: Emilio Borbolla Galindo - Web page: https://patentgrep.com/patent/US12225007B2 ## CPC - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL} - H04L 63/0272: {Virtual private networks} - H04L 63/102: {Entity profiles} - H04L 63/1433: {Vulnerability analysis} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Various approaches for securing networks against access from off network devices. In some cases, embodiments discussed relate to systems and methods for identifying potential threats included in a remote network by a network access device prior to requesting access to a known secure network via the remote network. ## Claims ### Claim 1 A non-transitory computer-readable storage medium embodying instructions, which when executed by one or more processing resources of a secure corporate access device, representing a known access device to a corporate network, causes the secure corporate access device to: receive a request to access the corporate network, representing a known network to the secure corporate access device; based on a determination that the requested access will result in an indirect connection from the secure corporate network access device to the corporate network from a remote network through which the secure corporate access device is coupled to the corporate network, identify whether the remote network includes one or more unsecure network elements by scanning the remote network; based on an unsecure network element being identified on the remote network as a result of the scanning; deny the request to access the corporate network; and mitigate a security issue of the unsecure network element by coupling the secure corporate access device in communication with the corporate network through another remote network; and based on no unsecure network elements being identified on the remote network as a result of the scanning, request a grant of access from the corporate network to the secure corporate access device. ### Claim 2 (depends on 1) The non-transitory computer-readable storage medium of claim 1, wherein access by the secure corporate access device to the corporate network is granted upon a combination of the requested grant of access and a correct authorization credential presented by the secure corporate access device to the corporate network. ### Claim 3 (depends on 1) The non-transitory computer-readable storage medium of claim 1, wherein the unsecure network element comprises an Internet of Things (IOT) device. ### Claim 4 (depends on 1) The non-transitory computer-readable storage medium of claim 1, wherein administration of the secure corporate access device and the corporate network is controlled by a common administration entity. ### Claim 5 (depends on 1) The non-transitory computer-readable storage medium of claim 1, wherein the instructions further cause the secure corporate access device to after denial of access to the corporate network, provide a message to a user of the secure corporate access device, to access the corporate network via another remote network. ### Claim 6 (depends on 1) The non-transitory computer-readable storage medium of claim 1, wherein the instructions further cause the secure corporate access device to: based on mitigation of the security issue, request access to the corporate network. ### Claim 7 (depends on 1) The non-transitory computer-readable storage medium of claim 1, wherein the instructions further cause the secure corporate access device to start a virtual private network application on the secure corporate access device, and wherein access to the corporate network is requested via a virtual private network. ### Claim 8 (depends on 1) The non-transitory computer-readable storage medium of claim 1, wherein the instructions further cause the secure corporate access device to: use a network connection between the secure corporate access device and the corporate network; and while using the network connection between the secure corporate access device and the corporate network, periodically scan the remote network through which access to the corporate network is established, to identify existence of any unsecure network elements on the remote network. ### Claim 9 (depends on 8) The non-transitory computer-readable storage medium of claim 8, wherein the instructions further cause the secure corporate access device to after identification of an unsecure network element on the remote network as a result of the periodic scan while using the network connection between the secure corporate access device and the corporate network, disconnect the secure corporate access device from the corporate network. ### Claim 10 (depends on 9) The non-transitory computer-readable storage medium of claim 9, wherein the instructions further cause the secure corporate access device to after disconnection of the secure corporate access device from the corporate network, provide a message to a user of the secure corporate access device requesting the user to access the corporate network via another remote network. ### Claim 11 A method comprising: receiving, by secure corporate access device, representing a known access device to a corporate network, a request to access the corporate network, representing a known network to the secure corporate access device; based on a determination that the requested access will result in an indirect connection from the secure corporate network access device to the corporate network from a remote network through which the secure corporate access device is coupled to the corporate network, identifying, by the secure corporate access device, whether the remote network includes one or more unsecure network elements by scanning the remote network; based on an unsecure network element being identified on the remote network as a result of the scanning; denying the request to access the corporate network; and mitigating a security issue of the unsecure network elements by coupling the secure corporate access device in communication with the corporate network through another remote network; and based on no unsecure network elements being identified on the remote network as a result of the scanning, requesting, by the secure corporate access device, a grant of access from the corporate network to the secure corporate access device. ### Claim 12 (depends on 11) The method of claim 11, wherein access by the secure corporate access device to the corporate network is granted upon a combination of the requested grant of access and a correct authorization credential presented by the secure corporate access device to the corporate network. ### Claim 13 (depends on 11) The method of claim 11, wherein the unsecure network element comprises an Internet of Things (IOT) device. ### Claim 14 (depends on 11) The method of claim 11, wherein administration of the secure corporate access device and the corporate network is controlled by a common administration entity. ### Claim 15 (depends on 11) The method of claim 11, further comprising after denying access to the corporate network by the secure corporate access device, providing, by the secure corporate access device, a message to a user of the secure corporate access device, to access the corporate network via said another remote network. ### Claim 16 (depends on 11) The method of claim 11, further comprising: based on mitigation of the security issue, requesting, by the secure corporate access device, access to the corporate network. ### Claim 17 (depends on 11) The method of claim 11, wherein said mitigating the security issue of the unsecure network element includes further comprising: starting, by the secure corporate access device, a virtual private network application on the secure corporate access device, and wherein said requesting, by the secure corporate access device, access to the corporate network is done over a virtual private network. ### Claim 18 A secure corporate access device comprising: one or more processing resources; a non-transitory computer-readable medium coupled to the one or more processing resources and having stored therein instructions that when executed by the one or more processing resources cause the secure corporate access device to: receive a request to access the corporate network, representing a known network to the secure corporate access device; based on a determination that the requested access will result in an indirect connection from the secure corporate network access device to the corporate network from a remote network through which the secure corporate access device is coupled to the corporate network, identify whether the remote network includes one or more unsecure network elements by scanning the remote network; based on an unsecure network element being identified on the remote network as a result of the scanning; deny the request to access the corporate network; and mitigate a security issue of the unsecure network element by coupling the secure corporate access device in communication with the corporate network through another remote network; and based on no unsecure network elements being identified on the remote network as a result of the scanning, request a grant of access from the corporate network to the secure corporate access device. ### Claim 19 (depends on 18) The secure corporate access device of claim 18, wherein the instructions further cause the secure corporate access device to after denial of access to the corporate network, provide a message to a user of the secure corporate access device, to access the corporate network via said another remote network. ### Claim 20 (depends on 18) The secure corporate access device of claim 18, wherein the instructions further cause the secure corporate access device to: based on mitigation of the security issue of the unsecure network element, request access to the corporate network. ### Claim 21 (depends on 20) The secure corporate access device of claim 20, wherein the instructions further cause the secure corporate access device to: start a virtual private network application on the secure corporate access device, and wherein access to the corporate network is requested via a virtual private network.