Federating trust in a heterogeneous network
View Patent ↗A check of a processing device is performed. A device may receive a network access request to access a network from a first processing device. A security check may be caused to be performed on the first processing device. Whether to grant the network access request to the first processing device is based on a result of the security check.
1. A method implemented by a service provider, the method comprising:
receiving, by a communication interface of the service provider, an access request to access a network from a first device;
determining, by a processor of the service provider, whether a security check is to be performed on the first device;
causing, by the processor of the service provider and when the security check is to be performed on the first device, the security check to be performed on the first device; and
granting, by the processor of the service provider, the access request or redirecting, by the processor of the service provider, traffic from the first device based on a result of the security check.
2. The method of claim 1 , where the redirecting includes:
redirecting the traffic to a predetermined network location based on the result of the security check, the redirecting causing the first device to receive and display a page that permits a user to perform one of purchasing a security product based on the result of the security check, updating a security product based on the result of the security check or continue network access without purchasing or updating the security product.
3. The method of claim 1 , where:
the causing the security check to be performed on the first device comprises:
installing security check software on the first device via the network,
executing the security check software to perform the security check on the first device, and
reporting the result of the security check by the first device.
4. The method of claim 1 , further comprising:
detecting, after granting access to the first device, a quantity of subscriber traffic exceeding a threshold; and
redirecting the subscriber traffic to a security device when the quantity of the subscriber traffic exceeds the threshold.
5. The method of claim 4 , further comprising:
determining, by the security device, whether a malicious activity is occurring on the first device; and
causing the first device to be redirected to a predetermined network location when a malicious activity is determined to be occurring on the first device.
6. The method of claim 5 , where the causing the first device to be redirected to a predetermined network location includes providing a user with an option to purchase a security product or update a security product.
7. The method of claim 5 , where the causing the first device to be redirected to a predetermined network location includes providing a user with an option to request access to the network.
8. The method of claim 7 , where the access includes limited access.
9. The method of claim 1 , further comprising:
redirecting a subscriber's traffic to a security device according to a schedule.
10. A system for performing a security check of a user device, the system comprising:
at least one device to:
cause the security check to be performed on the user device, and
cause traffic from the user device to be redirected when the security check indicates that the user device is not in conformance with a security policy, to present to a user, via the user device, an option to purchase or update a security product.
11. The system of claim 10 , where the at least one device is further to:
determine whether to perform the security check on the user device.
12. The system of claim 10 , where the at least one device is further to:
receive a result of the security check from the user device.
13. The system of claim 12 , where the at least one device is further to:
perform the security check by installing security software on the user device via a network, the security software to be executed by the user device.
14. The system of claim 12 , where the at least one device is further to:
receive the result of the security check through a network.
15. The system of claim 10 , where the at least one device is further to:
detect subscriber traffic exceeding a threshold, and
cause the subscriber traffic to be redirected to a security device when the subscriber traffic is detected to exceed the threshold.
16. The system of claim 15 , where the at least one device is further to:
receive a security processing result from the security device, and
cause the traffic from the user device to be redirected to a portal based on the received security processing result.
17. The system of claim 10 , where the at least one device is further to:
redirect a subscriber's traffic to a security device according to a schedule.
18. A system comprising:
a memory to store instructions; and
a processor to execute the instructions to implement:
means for causing a security check to be performed on a user device before permitting the user device to access a network;
means for redirecting traffic from a user device when a result of a security check indicates that the user device is not in conformance with a security policy, and
means for providing a user, via a user device, an option to purchase a security product, update a security product, or continue accessing the network without purchasing or updating the security product.
19. The system of claim 18 , where the means for causing a security check to be performed further comprises:
means for installing security software on the user device via a network, and
means for receiving an indication of a result of executing the security software on the user device.
20. The system of claim 18 , where the processor further implements:
means for detecting subscriber traffic that exceeds a threshold, and
means for causing the subscriber traffic to be redirected to a security device when the means for detecting detects that the subscriber traffic exceeds the threshold.
21. The system of claim 20 , where the processor further implements:
means for receiving a security processing result from a security device; and
means for causing traffic from a user device to be redirected based on a received security processing result.
22. The system of claim 18 , where the processor further implements:
means for redirecting a subscriber's traffic to a security device according to a schedule.
23. A method performed by a service provider device, the method comprising:
receiving a network access request at the service provider device from a user device; and
determining, via the service provider device, whether to grant the network access request based on a security scan of the user device.
24. A computer-readable memory device having instructions recorded thereon, the instructions comprising:
a first plurality of instructions to cause a processor to receive a network access request from a user device; and
a second plurality of instructions to cause the processor to determine whether to grant the network access request based on a security scan of the user device.
25. A method performed by a service provider device, the method comprising:
receiving a network access request at a service provider device from a user device; and
causing, via the service provider device, a security scan of the user device to be performed in response to receiving the network access request.