Utilizing a social graph for network access and admission control

Patent metadata

Field	Value
Publication number	US-9565194-B2
Application number	US-201313866788-A
Country	US
Kind code	B2
Filing date	Apr 19, 2013
Priority date	Oct 19, 2012
Publication date	Feb 7, 2017
Grant date	Feb 7, 2017

Abstract

Technologies for providing access control for a network are disclosed. The method may include receiving a request from a user to access a network, receiving a plurality of data associated with the user, the plurality of data comprising a plurality of social data associated with the user's relationship to a social circle, identifying an electronic security policy based at least on the plurality of social data, and authenticating the user to the network if the electronic security policy permits authentication based at least on the plurality of social data.

First claim

What is claimed:

1. At least one non-transitory machine readable storage medium, comprising computer-executable instructions carried on the medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to:
receive a request from a user to access a network;
receive a plurality of data associated with the user, the plurality of data comprising a plurality of social data associated with the user's relationship to a social circle;
select an electronic security policy based at least on the plurality of social data; and
authenticate the user to the network if the electronic security policy permits authentication based at least on the plurality of social data, wherein the instructions to authenticate the user to the network include instructions to authenticate the user, during attendance by the user at an event, based on a connection of the user through the social data to an entity of the network and on a policy for network access for attendees of the event.

2. The medium of claim 1 , further comprising computer executable instructions for causing the processor to require the user to authenticate using a social network from which the plurality of social data was received.

3. The medium of claim 1 , further comprising computer executable instructions for causing the processor to create a social graph, wherein the social graph reflects a plurality of social relationships associated with an administrator of the network.

4. The medium of claim 2 , wherein the computer executable instructions for causing the processor to authenticate the user to the network comprise computer executable instructions for causing the processor to determine whether the user is within a predetermined relationship to the administrator according to a social graph.

5. The medium of claim 4 , wherein the predetermined relationship comprises a personal relationship between the user and the administrator.

6. The medium of claim 4 , wherein the predetermined relationship comprises a geographical relationship between the user and the administrator.

7. The medium of claim 4 , wherein the predetermined relationship comprises a business relationship between the user and the administrator.

8. An electronic security device for providing access control for a network, the electronic security device comprising instructions for execution by a hardware processor, the instructions, when executed by the processor, cause the processor to:
receive a request from a user to access a network;
receive a plurality of data associated with the user, the plurality of data comprising a plurality of social data associated with the user's relationship to a social circle;
select an electronic security policy based at least on the plurality of social data; and
authenticate the user to the network if the electronic security policy permits authentication based at least on the plurality of social data, wherein the instructions to authenticate the user to the network include instructions to authenticate the user, during attendance by the user at an event, based on a connection of the user through the social data to an entity of the network and on a policy for network access for attendees of the event.

9. The electronic security device of claim 8 , further comprising instructions to cause the processor to require the user to authenticate using a social network from which the plurality of social data was received.

10. The electronic security device of claim 8 , further comprising instructions to cause the processor to create a social graph, wherein the social graph reflects a plurality of social relationships associated with an administrator of the network.

11. The electronic security device of claim 10 , further comprising instructions to cause the processor to authenticate the user to the network by determining whether the user is within a predetermined relationship to the administrator according to a social graph.

12. The electronic security device of claim 11 , wherein the predetermined relationship comprises a personal relationship between the user and the administrator.

13. The electronic security device of claim 11 , wherein the predetermined relationship comprises a geographical relationship between the user and the administrator.

14. The electronic security device of claim 11 , wherein the predetermined relationship comprises a business relationship between the user and the administrator.

15. A method for providing access control for a network, the method comprising:
receiving a request from a user to access a network;
receiving a plurality of data associated with the user, the plurality of data comprising a plurality of social data associated with the user's relationship to a social circle;
selecting an electronic security policy based at least on the plurality of social data; and
authenticating the user to the network if the electronic security policy permits authentication based at least on the plurality of social data, including authenticating the user, during attendance by the user at an event, based on a connection of the user through the social data to an entity of the network and on a policy for network access for attendees of the event.

16. The method of claim 15 , further comprising requiring the user to authenticate using a social network from which the plurality of social data was received.

17. The method of claim 15 , further comprising creating a social graph, wherein the social graph reflects a plurality of social relationships associated with an administrator of the network.

18. The method of claim 17 , wherein authenticating the user to the network comprises determining whether the user is within a predetermined relationship to the administrator according to the social graph.

19. The method of claim 18 , wherein the predetermined relationship comprises a personal relationship between the user and the administrator.

20. The method of claim 18 , wherein the predetermined relationship comprises a geographical relationship between the user and the administrator.

21. The method of claim 18 , wherein the predetermined relationship comprises a business relationship between the user and the administrator.

Assignees

• Nair Jayakrishnan K
• Hunt Simon
• Venkateswaran Prasanna
• Mcafee Inc

Inventors

• Nair Jayakrishnan K
• Hunt Simon
• Venkateswaran Prasanna

Classifications

• H04W12/06

  Authentication · CPC title

• H04L63/101

  Access control lists [ACL] · CPC title

• H04L63/104 Primary

  Grouping of entities · CPC title

• H04W12/08

  Access security · CPC title

• G06Q50/50 Primary

  Business processes related to the communications industry (charging, metering or billing arrangements specially adapted for data communications H04L12/14; telephonic communication involving automatic or semi-automatic exchanges H04M3/00; arrangements for metering, time-control or time indication H04M15/00; prepayment telephone systems H04M17/00; accounting or billing for wireless communication networks H04W4/24) · CPC title