Aggregating filters
AssigneeNortel Networks Limited
InventorsYin Pan, Al Villarica, Eric Edwards
Life of this patent
Estimating the term…
Abstract
Access is provided to a resource on a network by installing instructions on the network that define a fixed level of access to the resource. The instructions are modified to change the level of access to the resource. The instructions may be a filter that is installed on a device on the network. The filter is defined by matching criteria and an action. The matching criteria identify a network address and perform the action with respect to the network address.
Claims37
A method of aggregating filters on a network device for providing access to a resource on a network, comprising:
- installing instructions on the network for implementing a filter having matching criteria that specify a network address, the filter limiting access to the resource to a first network device associated with a network address that matches the network address specified by the matching criteria;
- determining that a second network device requests access to the resource;
- identifying a range of network addresses based on the network addresses associated with the first and second network devices;
- and
- in automated response to determining that the second network device requests access to the resource, modifying the matching criteria of the filter to specify the range of network addresses, the filter granting access to the resource to any network device associated with a network address within the range of network addresses specified by the matching criteria.
A computer program stored on a computer-readable medium aggregating filters on a network device for providing access to a resource on a network, the computer program comprising executable code that causes a computer to:
- install instructions on the network for implementing a filter having matching criteria that specify a network address, the filter limiting access to the resource to a first network device associated with a network address that matches the network address specified by the matching criteria;
- determine that a second network device requests access to the resource;
- identify a range of network addresses based on the network addresses associated with the first and second network devices;
- and
- in automated response to determining that the second network device requests access to the resource, modify the matching criteria of the filter to specify the range of network addresses, the filter granting access to the resource to any network device associated with a network address within the range of network addresses specified by the matching criteria.
An apparatus for aggregating filters on a network device for providing access to resource on a network, comprising:
- a memory which stores executable code;
- and
- a processor which executes the code to:
- install instructions on the network for implementing a filter having matching criteria that that specify a network address, the filter limiting access to the resource to a first network device associated with a network address that matches the network address specified by the matching criteria;
- determine that a second network device requests access to the resource;
- identify a range of network addresses based on the network addresses associated with the first and second network devices;
- and
- in automated response to determining that the second network device requests access to the resource, modify the matching criteria of the filter to specify the range of network addresses, the filter granting access to the resource to any network device having a network address within the range of network addresses specified by the matching criteria.
An apparatus for aggregating filters on a network device for providing access to a resource on a network, comprising:
- means for installing instructions on the network for implementing a filter having matching criteria that specify a network address, the filter limiting access to the resource to a first network device associated with a network address that matches the network address specified by the matching criteria;
- means for determining that a second network device requests access to the resource;
- means for identifying a range of network addresses based on the network addresses associated with the first and second network devices;
- means for modifying the matching criteria of the filter to specify the range of network addresses in automated response to determining that the second network device requests access to the resource, the filter granting access to the resource to any network device associated with a network address within the range of network addresses specified by the matching criteria.
Dependencies are inferred from the claim text.