METHOD AND SYSTEM FOR PROVIDING NETWORK ENFORCED ACCESS CONTROL
An approach is provided for controlling access to network resources. A metric (e.g. a voucher) is received corresponding to a policy for accessing a resource within a network. Rating of a user is updated based on the received metric. An access level is granted for accessing the resource to the user based on the rating.
1 . A method comprising:
receiving a metric corresponding to a policy for accessing a resource within a network;
updating rating of a user based on the received metric; and
granting an access level for accessing the resource to the user based on the rating.
2 . A method according to claim 1 , further comprising:
dynamically configuring a network device of the network according to the granted access level.
3 . A method according to claim 2 , wherein the metric is specified within a voucher that is generated by an application operating within the network.
4 . A method according to claim 3 , wherein the application is configured to measure an activity and to automatically generate the voucher in response to the measured activity.
5 . A method according to claim 3 , wherein the voucher is transmitted according to a Domain Name System (DNS) protocol.
6 . A method according to claim 1 , wherein the metric represents degree of compliance with the policy.
7 . An apparatus comprising:
a controller configured to receive a metric corresponding to a policy for accessing a resource within a network; and
an access rating module configured to update rating of a user based on the received metric, wherein an access level is granted for accessing the resource to the user based on the rating.
8 . An apparatus according to claim 7 , wherein the controller is further configured to dynamically configure a network device of the network according to the granted access level.
9 . An apparatus according to claim 8 , wherein the metric is specified within a voucher that is generated by an application operating within the network.
10 . An apparatus according to claim 9 , wherein the application is configured to measure an activity and to automatically generate the voucher in response to the measured activity.
11 . An apparatus according to claim 9 , wherein the voucher is transmitted according to a Domain Name System (DNS) protocol.
12 . An apparatus according to claim 7 , wherein the metric represents degree of compliance with the policy.
13 . A method comprising:
measuring an activity relating to a policy of a network;
generating a voucher including information about the measured activity; and
transmitting the voucher to a policy enforcement system that is configured to grant an access level to the network based on a rating that is generated based on the voucher.
14 . A method according to claim 13 , wherein the policy enforcement system is further configured to dynamically configure a network device of the network according to the granted access level.
15 . A method according to claim 13 , wherein the voucher is transmitted according to a Domain Name System (DNS) protocol.
16 . A method according to claim 13 , wherein the voucher indicates compliance with the policy.
17 . An apparatus comprising:
a process configured to execute an application capable of measuring an activity relating to a policy of a network, and to generate a voucher including information about the measured activity; and
a communication interface configured to transmit the voucher to a policy enforcement system that is configured to grant an access level to the network based on a rating that is generated based on the voucher.
18 . An apparatus according to claim 17 , wherein the policy enforcement system is further configured to dynamically configure a network device of the network according to the granted access level.
19 . An apparatus according to claim 17 , wherein the voucher is transmitted according to a Domain Name System (DNS) protocol.
20 . An apparatus according to claim 17 , wherein the voucher indicates compliance with the policy.
21 . A system comprising:
a voucher collector configured to store a plurality of vouchers generated by a plurality of assurance tools, each of the vouchers providing information relating to compliance with a network policy;
a policy engine configured to store the network policy;
an access rating module configured to update rating of a user based on one of the corresponding vouchers; and
granting an access level for accessing the resource to the user based on the rating.
22 . A system according to claim 21 , further comprising:
a controller configured to dynamically configure a network device of a network according to the granted access level.