# US 9,521,113 B2 · Self-configuring local area network security > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,521,113 B2 - Document ID: US9521113B2 - Status: Granted - Kind: B2 - Application number: 13/931,075 - Filed: 2013-06-28 - Published: 2014-09-18 - Granted: 2016-12-13 - Earliest claimed: 2013-03-14 - Assignees: McAfee, Inc. - Applicants: Jayakrishnan K. Nair; Simon Hunt; Prasanna Venkateswaran; Venkata Ramanan - Inventors: Jayakrishnan K. Nair; Simon Hunt; Prasanna Venkateswaran; Venkata Ramanan - Web page: https://patentgrep.com/patent/US9521113B2 ## CPC - H04W 12/06: Authentication - H04L 63/02: {for separating internal from external traffic, e.g. firewalls} - H04L 63/14: {for detecting or protecting against malicious traffic} - H04L 63/1408: {by monitoring network traffic (monitoring network traffic per se H04L43/00)} - H04L 63/1425: {Traffic logging, e.g. anomaly detection} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04W 12/08: Access security - H04W 88/08: Access point devices - H04L 63/164: {at the network layer} - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Technologies for providing electronic security to a first network are disclosed. The system may include a user equipment, a gateway device configured to mediate communication between a first network and a second network for the user equipment, and an electronic security device communicatively coupled to the gateway device. The electronic security device may include a gateway interface module configured to assume an identity associated with the gateway device, a network interface module configured to present the identity to the second network, and a traffic inspection module configured to monitor traffic without substantially affecting a topology of the first network, wherein the electronic security device is configured to identify undesirable traffic; and implement a security policy. ## Claims ### Claim 1 An electronic security device for providing electronic security to a first network, the electronic security device comprising: a processor; a gateway interface module comprising instructions, when loaded and executed by the processor, configured to assume an identity of a gateway device communicatively coupled to the electronic security device and configured to mediate communication between the first network and a second network, wherein assuming the identity of the gateway device is performed by altering an Address Resolution Protocol; a network interface module comprising instructions, when loaded and executed by the processor, configured to present the identity to the second network; a traffic inspection module comprising instructions, when loaded and executed by the processor, configured to: monitor traffic from the first network to the second network without substantially affecting a topology of the first network, wherein the electronic security device is configured to identify undesirable traffic; and implement a security policy, the security policy comprising instructions for handling the undesirable traffic; wherein the electronic security device is: communicatively coupled to the first network and to the second network through the gateway device; resident in the first network with the gateway device; and configured to, through the gateway device, present the identity to the second network, monitor traffic from the first network to the second network, and implement the security policy. ### Claim 2 (depends on 1) The electronic security device of claim 1, wherein the gateway interface module is further configured to alter an Address Resolution Protocol (“ARP”) request. ### Claim 3 (depends on 1) The electronic security device of claim 1, wherein the gateway interface module is configured to assume the identity of the gateway device by obtaining a public IP address associated with the gateway device. ### Claim 4 (depends on 3) The electronic security device of claim 3, wherein: the gateway interface module is further configured to obtain a local IP address associated with the first network; and the network interface module is further configured to communicate data associated with the local IP address and data associated with the public IP address to a user equipment associated with the first network. ### Claim 5 (depends on 4) The electronic security device of claim 4, wherein the electronic security device further comprises a web service, wherein the web service is configured to provide the user equipment with access to the data associated with the local IP address and the data associated with the public IP address. ### Claim 6 At least one non-transitory machine readable storage medium, comprising computer-executable instructions carried on the machine readable storage medium, the instructions readable by a processor incorporated by an electronic security device, the instructions, when read and executed, causing the electronic security device to: assume an identity of a gateway device communicatively coupled to the electronic security device and resident in a same first network as the electronic security device, the gateway device configured to mediate communication between the first network and a second network, wherein assuming the identity of the gateway device is performed by altering an Address Resolution Protocol; present the identity to the second network; monitor traffic from the first network to the second network without substantially affecting a topology of the first network, wherein the electronic security device is configured to identify undesirable traffic; and implement a security policy, the security policy comprising instructions for handling the undesirable traffic; wherein the electronic security device is communicatively coupled to the first network and to the second network through the gateway device; and wherein the electronic security device is caused to, through the gateway device, present the identity to the second network, monitor traffic from the first network to the second network, and implement the security policy. ### Claim 7 (depends on 6) The medium of claim 6, further comprising machine executable instructions for causing the processor to alter an Address Resolution Protocol (“ARP”) request. ### Claim 8 (depends on 6) The medium of claim 6, wherein assuming the identity of the gateway device comprises obtaining a public IP address associated with the gateway device. ### Claim 9 (depends on 8) The medium of claim 8, further comprising machine executable instructions for causing the processor to: obtain a local IP address associated with the first network; and communicate data associated with the local IP address and data associated with the public IP address to a user equipment associated with the first network. ### Claim 10 (depends on 9) The medium of claim 9, further comprising machine executable instructions for causing the processor to provide the user equipment with access to the data associated with the local IP address and the data associated with the public IP address. ### Claim 11 A method for providing electronic security to a first network, the method comprising: assuming, by an electronic security device, an identity of a gateway device communicatively coupled to the electronic security device and resident in the same first network as the electronic security device, the gateway device configured to mediate communication between the first network and a second network, wherein assuming the identity of the gateway device is performed by altering an Address Resolution Protocol; presenting, by the electronic security device, the identity to the second network; monitoring, by the electronic security device, traffic from the first network to the second network without substantially affecting a topology of the first network, wherein the electronic security device is configured to identify undesirable traffic; and implementing, by the electronic security device, a security policy, the security policy comprising instructions for handling the undesirable traffic; wherein the electronic security device is communicatively coupled to the first network and to the second network through the gateway device; and wherein presenting the identity to the second network, monitoring traffic from the first network to the second network, and implementing the security policy is performed through the gateway device. ### Claim 12 (depends on 11) The method of claim 11, further comprising altering an Address Resolution Protocol (“ARP”) request. ### Claim 13 (depends on 11) The method of claim 11, wherein assuming the identity of the gateway device comprises obtaining a public IP address associated with the gateway device. ### Claim 14 (depends on 13) The method of claim 13, further comprising obtaining a local IP address associated with the first network; and communicating data associated with the local IP address and data associated with the public IP address to a user equipment associated with the first network. ### Claim 15 (depends on 14) The method of claim 14, further comprising providing the user equipment with access to the data associated with the local IP address and the data associated with the public IP address.