# US 7,395,341 B2 · System, method, apparatus and computer program product for facilitating digital communications > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 7,395,341 B2 - Document ID: US7395341B2 - Status: Granted - Kind: B2 - Application number: 10/918,362 - Filed: 2004-08-16 - Published: 2005-04-21 - Granted: 2008-07-01 - Earliest claimed: 2003-08-15 - Assignees: Fiberlink Communications Corporation - Inventors: Blair Gaver Nicodemus; Derek Bluestone; Clinton Adams; Joseph E. Pappano; Howard M. Pressman - Web page: https://patentgrep.com/patent/US7395341B2 ## CPC - H04L 63/0272: {Virtual private networks} - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 9/3271: {using challenge-response} - H04L 12/2898: {Subscriber equipments (DSL modems H04M11/062; cable modems H04L12/2801)} - H04L 63/0414: {during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/102: {Entity profiles} - H04L 69/168: specially adapted for link layer protocols, e.g. asynchronous transfer mode [ATM], synchronous optical network [SONET] or point-to-point protocol [PPP] - H04L 69/16: Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP] - H04W 74/00: Wireless channel access - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A computer-implemented method and apparatus prevents unsecured access to a computer over a network by a client running on a remote computer. In one aspect of the present invention, a client policy is stored on the remote computer. The client policy includes a configuration of the remote computer that reduces the likelihood of a security breach of the computer as a result of the remote computer accessing the computer. A request is received from a user for access to the computer. It is verified that the remote computer conforms with the client policy, and the client is connected to said computer. ## Claims ### Claim 1 A computer-implemented method for preventing unsecured access to a computer over a network by a client running on a remote computer comprising: storing at least one client policy, said client policy including a configuration of said remote computer that reduces the likelihood of a security breach of said computer as a result of said remote computer accessing said computer; receiving a request from a user for access to said computer; determining a location type of said remote computer; selecting a desired policy from among said at least one client policy based on said location type of said remote computer; selecting a connection type from available connections to said computer based on said desired policy; verifying that said remote computer conforms with said desired policy; and connecting said client to said computer. ### Claim 2 (depends on 1) The method recited in claim 1, wherein said determining step includes determining said location type of one of: non-corporate/non-roaming, corporate/non-roaming, and non-corporate/roaming. ### Claim 3 (depends on 1) The method recited in claim 1, wherein said verifying step includes verifying that none of a list of forbidden applications are running on said remote computer. ### Claim 4 (depends on 1) The method recited in claim 1, wherein said verifying step includes verifying that none of a list of forbidden applications are running on said remote computer, said list of forbidden applications including at least one of: viruses, spyware, instant messaging, unlicensed, and file sharing applications. ### Claim 5 (depends on 1) The method recited in claim 1, wherein said verifying step includes verifying that all of a list of required applications are running on said remote computer. ### Claim 6 (depends on 1) The method recited in claim 1, wherein said verifying step includes verifying that all of a list of required applications are running on said remote computer, said list of required applications including at least one of: firewall, anti-virus, and anti-spyware applications. ### Claim 7 (depends on 1) The method recited in claim 1, further comprising: periodically determining that said remote computer conforms with said client policy; and taking a policy based action, said policy based action including at least one of: correcting a non-conforming condition and notifying said user of said non-conforming condition. ### Claim 8 (depends on 7) The method recited in claim 7, further comprising: disconnecting said client from at least one of said computer and an Internet connection if said non-conforming condition cannot be corrected. ### Claim 9 (depends on 1) The method recited in claim 1, further comprising: transmitting a list of policy violations to an access control gateway. ### Claim 10 A computer program product including a computer storage medium, said computer storage medium comprising one of volatile media and non-volatile media, and a computer program code mechanism embedded in the computer storage medium for preventing unsecured access to a computer over a network by a client running on a remote computer, the computer code mechanism comprising: a computer code device configured to store at least one client policy, said client policy including a configuration of said remote computer that reduces the likelihood of a security breach of said computer as a result of said remote computer accessing said computer; a computer code device configured to receive a request from a user for access to said computer; a computer code device configured to determine a location type of said remote computer; a computer code device configured to select a desired policy from among said at least one client policy based on said location type of said remote computer; a computer code device configured to select a connection type from available connections to said computer based on said desired policy; a computer code device configured to verify that said remote computer conforms with said desired policy; and a computer code device configured to connect said client to said computer; wherein said remote computer accesses said computer over said network if said remote computer conforms with said desired policy. ### Claim 11 An apparatus for preventing unsecured access to a computer over a network by a client running on a remote computer comprising: means for storing at least one client policy, said client policy including a configuration of said remote computer that reduces the likelihood of a security breach of said computer as a result of said remote computer accessing said computer; means for receiving a request from a user for access to said computer; means for determining a location type of said remote computer; means for selecting a desired policy from among said at least one client policy based on said location type of said remote computer; means for selecting a connection type from available connections to said computer based on said desired policy; means for verifying that said remote computer conforms with said desired policy; and means for connecting said client to said computer. ### Claim 12 An apparatus for preventing unsecured access to a computer over a network by a client running on a remote computer comprising: a storage mechanism configured to store at least one client policy, said client policy including a configuration of said remote computer that reduces the likelihood of a security breach of said computer as a result of said remote computer accessing said computer; an input/output device configured to receive a request from a user for access to said computer; and a processor including: a location determination mechanism configured to determine a location type of said remote computer; a policy selection mechanism configured to select a desired policy from among said at least one client policy based on said location type of said remote computer; a connection selection mechanism configured to select a connection type from available connections to said computer based on said desired policy; and a verification mechanism configured to verify that said remote computer conforms with said desired policy, wherein said input/output device is configured to connect said client to said computer. ### Claim 13 (depends on 12) The apparatus recited in claim 12, wherein said verification mechanism is configured to verify that none of a list of forbidden applications are running on said remote computer. ### Claim 14 (depends on 13) The apparatus recited in claim 13, wherein said list of forbidden applications includes at least one of: viruses, spyware, instant messaging, unlicensed, and file sharing applications. ### Claim 15 (depends on 12) The apparatus recited in claim 12, wherein said verification mechanism is configured to verify that all of a list of required applications are running on said remote computer. ### Claim 16 (depends on 15) The apparatus recited in claim 15, wherein said list of required applications includes at least one of: firewall, anti-virus, and anti-spyware applications.