Loading patent…
AssigneeInternational Business Machines Corporation
InventorsFranck Barillaud, Insoo Cho, Daniel M. Christiani, Mark R. Thill, David S. Zhang
Estimating the term…
Provided is a method for managing a software defined network using a software control layer to regulate a geo-fenced volume. The software control layer can use a Global Positioning System (GPS) including a range of latitudes, a range of longitudes and a range of altitudes. A resource within the geo-fenced volume can be assigned a location using the GPS coordinates. The resource can be managed by external applications that are operating through the software control layer. To determine an access of a device to the geo-fenced volume, the GPS coordinates, are gathered as a geographical location of the device. A user profile can be accessed to determine an access path of the user. Depending on the geographical location of the device a first condition can be generated based on the device being within the geo-fenced volume. A network permission can be granted to the device based on the first condition.
A system for managing a software defined network, comprising:
A computer program product for managing a software defined network comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor in a wireless access point hardware security device to cause the processor to perform a method comprising:
Dependencies are inferred from the claim text.
From the US filing history. Foreign family members aren’t listed.
Drawings are temporarily unavailable. Open the PDF at USPTO
For authentication of entities: using biometrical features, e.g. fingerprint, retina-scan
Configuration setting: characterised by the conditions triggering a change of settings
Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks: using virtualisation of…
Services making use of location information: services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
About 8 years 6 months of term left · ends 8 May 2035 (estimated)
The present disclosure relates to network security, more particular aspects relate to granting or limiting access to a network depending on a device and the geographic location of the device.
Location based software is currently quickly emerging on the internet, most search engines already used geographical information to tailor search results to the user. If a device is used to search for nearby shopping centers, or current weather information results, can be generated. These information results can include the closest shopping centers, or relevant weather information, relative to the geographical location of the device. The information results can use hypertext transformation protocol (HTTP) geographical headers generated by the device which are communicated to a server when accessing a website, or a database.
According to embodiments of the present disclosure, a proposed method to enhance the security of a software defined network that manages an access of a device based on the geographical location of the device.
The drawings included in the present application are incorporated into, and form part of, the specification. They illustrate embodiments of the present disclosure and, along with the description, serve to explain the principles of the disclosure. The drawings are only illustrative of certain embodiments and do not limit the disclosure.
FIG. 1 illustrates a geo-fenced volume of a network where devices are located within the geo-fenced volume and are attempting to connect to the network, according to various embodiments.
FIG. 2A illustrates a geo-fenced volume of a network where a wireless device is located outside the geo-fenced volume and is attempting to connect to the network, according to various embodiments.
While the invention is amenable to various modifications and alternative forms, specifics thereof have been shown by way of example in the drawings and will be described in detail. It should be understood, however, that the intention is not to limit the invention to the particular embodiments described. On the contrary, the intention is to cover all modifications, equivalents, and alternatives falling within the spirit and scope of the invention.
Aspects of the present disclosure relate to network security, more particular aspects relate to granting or limiting access to a network depending on a device and the geographic location of the device. A software defined network (SDN) can be managed by a SDN controller to determine an access of a device based on the geographical location of the device. The SDN controller can be an access point (AP) or wireless access point (WAP) the device can connect to depending on the configuration of the device. The WAP can allow the device to connect wirelessly to the SDN to gain access to the resources of the network. The WAP can be communicatively coupled with the SDN controller to apply the policies which are capabilities or constraints of the SDN. The SDN controller can be implemented to define a geo-fenced volume of a network, and determine if a geographical location of the device is within the geo-fenced volume. The geo-fenced volume can be defined by data gathered from a Global Position System (GPS). The GPS data of the geo-fenced volume can include a range of latitudes, a range of longitudes, and a range of altitudes. If the device is within the geo-fenced volume, or within the range of latitudes, the range of longitudes, and the range of altitudes the device can be granted access to the geo-fenced volume. While the present disclosure is not necessarily limited to such applications, various aspects of the disclosure can be appreciated through a discussion of various examples using this context.
Software defined networking (SDN) is an emerging technology which can allow for the control of a network to become directly programmable, centrally manageable, and allow for on-the-fly service injection. When a data stream is being accessed, location-based software of a software defined network can be used to gather geographical information on the system accessing the data stream to determine the networks security level.