Granted Patent B2

US 9,088,627 · App. 11/239,707 · Granted Jul 21, 2015

Abstract

Claims (52)

1. A non-transitory machine-readable storage medium including instructions which when executed by a computer cause the computer to perform operations for classifying a network, the operations comprising:

detecting, by a client executing on the computer, a network indicator associated with the network, the network provided by a network provider;

classifying the network as being in one of a plurality of network classes based on the network indicator and stored network information;

after the classifying, verifying whether the network is correctly classified into the one of the plurality of network classes, the verifying comprising,

interacting with a component associated with the network to receive an actual attribute of the network;

determining an expected attribute for the network, wherein the expected attribute is derived from the network indicator associated with the network; and

determining whether the expected attribute matches the actual attribute;

in response to determining the actual attribute matches the expected attribute, determining that the network is correctly classified; and

in response to determining the actual attribute does not match the expected attribute, reclassifying, based on an interaction with the component and the actual attribute, the network into another one of the plurality of network classes.

2. The non-transitory machine-readable storage medium of claim 1 , the operations further comprising:

after classifying the network as being in the one of the plurality of network classes, connecting to the network without user input.

3. The non-transitory machine-readable storage medium of claim 1 , the operations further comprising:

presenting, in a graphical user interface controlled by the client, an icon indicating the network is available for a full network connection;

establishing, in response to user input, the full network connection between the computer and the network.

4. The non-transitory machine-readable storage medium of claim 1 , the operations further comprising:

after classifying the network as being in the one of the plurality of network classes, precluding presentation of an icon indicating the network is available for connection.

5. The non-transitory machine-readable storage medium of claim 1 , the operations further comprising:

obtaining, via interaction with the network provider, another actual attribute of the network; and

determining that the stored network information about the network includes another expected attribute that matches the another actual attribute;

classifying the network into a different one of the plurality of network classes based on the another actual attribute.

6. The non-transitory machine-readable storage medium of claim 5 , the operations further comprising:

after classifying the network into the different one of the plurality of network classes, precluding presentation of an icon indicating that the network is available for connection.

7. The non-transitory machine-readable storage medium of claim 5 , the operations further comprising:

after classifying the network into the different one of the plurality of network classes, displaying an icon indicating the network is available for connection.

8. The non-transitory machine-readable storage medium of claim 1 , wherein the network indicator is a Service Set Identifier.

9. The non-transitory machine-readable storage medium of claim 1 , wherein the network indicator is a network address.

10. The non-transitory machine-readable storage medium of claim 1 , wherein the actual attribute is selected from the group consisting of a Media Access Control address of the network attachment point, media access control address of a network-resident component, IP address of a network-resident component, VLAN association, and Wireless Equivalent Privacy key.

11. The non-transitory machine-readable storage medium of claim 1 , wherein the actual attribute includes an identity certificate.

12. The non-transitory machine-readable storage medium of claim 1 , wherein the network indicator is a device identifier.

13. The non-transitory machine-readable storage medium of claim 1 , wherein the plurality of network classes include trusted network or untrusted network.

14. The non-transitory machine-readable storage medium of claim 1 , wherein the plurality of network classes include public access networks, known private networks, discovered corporate networks, and untrusted networks.

15. A computer-implemented method comprising:

receiving, in a computer, a network indicator associated with a network;

classifying the network into one of a plurality of network classes, the classifying based on the network indicator and stored network information;

presenting, on a display of the computer, a first indication that the network is classified into the one of a plurality of network classes;

verifying whether the network is correctly classified into the one of the plurality of network classes, the verifying including interacting with a component associated with the network; and

if the network has been incorrectly classified in the one of the plurality of network classes,

reclassifying, based on an interaction with the component and the stored network information, the network into another one of the plurality of network classes;

presenting, on the display, a second indication that the network belongs in the other one of the plurality of network classes;

precluding a connection between the computer and the network;

if the network has been correctly classified, facilitating a connection between the computer and the network.

16. The computer-implemented method of claim 15 , wherein the interacting includes:

receiving an identity certificate from an aggregator; and

authenticating the identity certificate.

17. The computer-implemented method of claim 15 , wherein the interacting includes:

receiving an identity certificate from the component; and

authenticating the identity certificate.

18. The computer-implemented method of claim 15 , wherein the interacting includes:

receiving one or more network attributes; and

comparing the one or more network attributes to one or more stored attributes.

19. The computer implemented method claim 15 , wherein the plurality of network classes include a trusted network class and an untrusted network class.

20. The computer-implemented method of claim 15 , wherein the plurality of network classes include public access networks, known private networks, discovered corporate networks, and untrusted networks.

Assignments (10)