Controlling network access using risk levels determined by user activity and program versioning
AssigneeCalix, Inc.
InventorsYouwu Tu, Jie Zhang
Life of this patent
Estimating the term…
Abstract
A component controlling network access between a client and a server using application software versions to determine a risk level of the client. The component uses a first set of programs for negotiation with the client if the risk level is high, wherein the first set of programs includes programs with high security level, and it uses a second set of programs for negotiation with the client if the risk level is not high, wherein the second set of programs includes programs with high security level and programs with low security level. The component may utilize secure network protocols for communication between the client and server, and may be included as a gateway in a zero trust network access (ZTNA) system.
Claims18
A method for controlling network access, executed by a component between a client and a server, comprising:
- determining a risk level of the client;
- using a first set of programs for negotiation with the client if the risk level is high, wherein the first set of programs includes programs with high security level and that only include current or new versions of the programs;
- and
- using a second set of programs for negotiation with the client if the risk level is not high, wherein the second set of programs includes programs with high security level and programs with low security level and that include at least one or more old or outdated versions of the programs so as to facilitate flexibility of program use to accommodate different clients.
An apparatus for controlling network access, wherein the apparatus is between a client and a server, comprising:
- one or more hardware processors;
- and
- a hardware-based memory for storing one or more programs;
- wherein the one or more programs, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
- determining a risk level of the client;
- using a first set of programs for negotiation with the client if the risk level is high, wherein the first set of programs includes programs with high security level and that only include current or new versions of the programs;
- and using a second set of programs for negotiation with the client if the risk level is not high, wherein the second set of programs includes programs with high security level and programs with low security level and that include at least one or more old or outdated versions of the programs so as to facilitate flexibility of program use to accommodate different clients.
A non-transitory computer-readable storage medium storing instructions thereon that when executed cause one or more processors to:
- determine a risk level of a client;
- use a first set of programs for negotiation with the client if the risk level is high, wherein the first set of programs includes programs with high security level and that only include current or new versions of the programs;
- and
- use a second set of programs for negotiation with the client if the risk level is not high, wherein the second set of programs includes programs with high security level and programs with low security level and that include at least one or more old or outdated versions of the programs so as to facilitate flexibility of program use to accommodate different clients.
Dependencies are inferred from the claim text.