Back to results
US 8,477,747 B1Granted
Automatic capture of wireless endpoints for connection enforcement
AssigneeSymantec Corporation
InventorsWilliam E. Sobel, Brian Hernacki
Life of this patent
Estimating the term…
Abstract
Wireless endpoints to be secured in a wireless network context are automatically identified. More specifically, wireless endpoints connecting to a wireless access point are detected. It is determined whether detected endpoints are connecting to the wireless access point to join a wireless network. Wireless access points determined to be connecting to the wireless access point to join a wireless network are automatically identified as endpoints to be managed. Identifying information concerning endpoints to be managed (e.g., MAC addresses) is gleaned, and automatically provided to an endpoint management system.
Claims19
A method for automatically identifying wireless endpoints to be secured in a wireless network context, the method comprising the steps of:
- detecting wireless endpoints connecting to a wireless access point;
- determining that at least one detected endpoint is connecting to the wireless access point to join a wireless network;
- for at least one endpoint determined to be connecting to the wireless access point to join a wireless network, automatically identifying that at least one endpoint as an endpoint to be managed as authorized, but with network controls, comprising:
- providing a controlled SSID (service set identifier) for selecting a wireless access point and a controlled passphrase pair for successfully accessing a wireless network by controlled users, and a non-controlled SSID and a non-controlled passphrase pair for successfully accessing a wireless network by non-controlled users;
- for at least one endpoint determined to be connecting to the wireless access point to join a wireless network, determining that the at least one endpoint is using the controlled SSID and controlled passphrase pair;
- responsive to determining that the at least one endpoint is using the controlled SSID and controlled passphrase pair, automatically identifying that at least one endpoint as an endpoint to be managed;
- for at least one endpoint determined to be connecting to the wireless access point to join a wireless network, determining that the at least one endpoint is using the non-controlled SSID and non-controlled passphrase pair;
- and
- responsive to determining that the at least one endpoint is using the non-controlled SSID and non-controlled passphrase pair, automatically identifying the at least one endpoint as an endpoint not to be managed;
- and
- automatically identifying at least one identified endpoint, as determined by the controlled SSID and controlled passphrase pair, to be managed to an endpoint management system.
8 more elements
At least one non-transitory computer readable storage medium storing a computer program product for automatically identifying wireless endpoints to be secured in a wireless network context, the computer program product comprising:
- program code for detecting wireless endpoints connecting to a wireless access point;
- program code for determining that at least one detected endpoint is connecting to the wireless access point to join a wireless network;
- program code for, for at least one endpoint determined to be connecting to the wireless access point to join a wireless network, automatically identifying that at least one endpoint as an endpoint to be managed as authorized, but with network controls, comprising:
- program code for, providing a controlled SSID (service set identifier) to select a wireless access point and a controlled passphrase pair for successfully accessing a wireless network by controlled users, and a non-controlled SSID and non-controlled passphrase pair for successfully accessing a wireless network by non-controlled users;
- program code for, for at least one endpoint determined to be connecting to the wireless access point to join a wireless network, determining that the at least one endpoint is using the controlled SSID and controlled passphrase pair;
- program code for, responsive to determining that the at least one endpoint is using the controlled SSID and controlled passphrase pair, automatically identifying that at least one endpoint as an endpoint to be managed;
- program code for, for at least one endpoint determined to be connecting to the wireless access point to join a wireless network, determining that the at least one endpoint is using the non-controlled SSID and non-controlled passphrase pair;
- and
- program code for, responsive to determining that the at least one endpoint is using the non-controlled SSID and non-controlled passphrase pair, automatically identifying the at least one endpoint as an endpoint not to be managed;
- and
- program code for, automatically identifying at least one identified endpoint, as determined by the controlled SSID and the controlled passphrase pair, to be managed to an endpoint management system.
8 more elements
A computer system for automatically identifying wireless endpoints to be secured in a wireless network context, the computer system comprising:
- means for detecting wireless endpoints connecting to a wireless access point;
- means for determining that at least one detected endpoint is connecting to the wireless access point to join a wireless network;
- means for, for at least one endpoint determined to be connecting to the wireless access point to join a wireless network, automatically identifying that at least one endpoint as an endpoint to be managed as authorized, but with network controls, comprising:
- means for providing a controlled SSID (service set identifier) for selecting a wireless access point and a controlled passphrase pair for successfully accessing a wireless network by controlled users, and a non-controlled SSID and a non-controlled passphrase pair for successfully accessing a wireless network by non-controlled users;
- means for, for at least one endpoint determined to be connecting to the wireless access point to join a wireless network, determining that the at least one endpoint is using the controlled SSID and controlled passphrase pair;
- means for, responsive to determining that the at least one endpoint is using the controlled SSID and controlled passphrase pair, automatically identifying that at least one endpoint as an endpoint to be managed;
- means for, for at least one endpoint determined to be connecting to the wireless access point to join a wireless network, determining that the at least one endpoint is using the non-controlled SSID and non-controlled passphrase pair;
- and
- means for, responsive to determining that the at least one endpoint is using the non-controlled SSID and non-controlled passphrase pair, automatically identifying the at least one endpoint as an endpoint not to be managed;
- and
- means for, automatically identifying at least one identified endpoint, as determined by the controlled SSID and controlled passphrase pair, to be managed to an endpoint management system.
8 more elements
Dependencies are inferred from the claim text.