IP Library Granted Patent US 12,170,900
Granted Patent B2
US 12,170,900 · App. 18/384,103 · Granted Dec 17, 2024

Method for providing an elastic content filtering security service in a mesh network

Inventor: Zhuangzhi Duo (Fremont, CA)
Assignee: SONICWALL INC.
H04W12/088H04W12/122H04W80/06H04W84/18
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,170,900
App. No.
18/384,103
Granted
Dec 17, 2024
Kind
B2
Abstract

The present disclosure is directed to distributing processing capabilities throughout different nodes in a wireless mesh network. Methods and apparatus consistent with the present disclosure increase the efficiency of communications in a wireless mesh network because they help minimize the need to forward communications to other nodes in the wireless mesh network such that an evaluation can be performed. Apparatus and methods consistent with the present disclosure may distribute ratings or verdicts associated with previous requests to access data to different nodes in a wireless mesh network without generating additional wireless communications through the wireless mesh network. Apparatus and methods consistent with the present disclosure distribute content ratings to different nodes in a wireless network such that different wireless nodes may block redundant requests to undesired content without increasing messaging traffic.

Claims (58)

1. A method for preventing access to undesired content, the method comprising:

receiving a request to access content at a first wireless mesh node, the request identifying a content source device;

determining that information associated with the request does not have a match in contents stored in a first cache memory of the first wireless mesh node;

transmitting the request to a second wireless mesh node;

transmitting the request to an alternate wireless mesh node upon determining that the second wireless mesh node is unable to process the request;

identifying a match stored in an alternate cache memory of the alternate wireless mesh node;

receiving a response from the alternate wireless mesh node indicating that the request is associated with a matching result stored in the alternate cache memory;

storing the response in the first cache memory of the first wireless mesh node;

determining that the content source device is associated with a bad reputation based on the stored response indicating the matching result in the first cache memory;

transmitting instructions from the first wireless mesh node to one or more additional wireless mesh nodes indicating that the request should be blocked in accordance with the response indicating the matching result stored in the first cache memory; and

rejecting the request based on the matching result stored in the first cache memory.

2. The method of claim 1 , wherein a user computing device stores data identifying previous access requests for links associated with a bad reputation.

3. The method of claim 2 , wherein the user computing device prevents access to the links associated with the stored bad reputation data without transmitting the access request to the alternate wireless mesh node.

4. The method of claim 2 , further comprising dynamically adapting a routing of the request from the user computing device based on one or more network parameters when the user computing device is relocated from one physical location to another location associated with a wireless mesh network.

5. The method of claim 1 , further comprising storing a start time associated with each entry in the first cache memory in accordance with previous requests to access content.

6. The method of claim 1 , further comprising:

monitoring a duration of time elapsed since a data entry is stored in the first cache memory;

determining whether the elapsed time exceeds a time-to-live (TTL) value associated with the data entry; and

automatically removing the data entry from the first cache memory when the elapsed time exceeds the TTL value in accordance with an access control policy of a wireless mesh network associated with the first wireless mesh node.

7. A non-transitory computer-readable storage medium having embodied thereon a program executable by a processor to implement a method for distributing rating information, the method comprising:

receiving a request to access content at a first wireless mesh node, the request identifying a content source device;

determining that information associated with the request does not have a match in contents stored in a first cache memory of the first wireless mesh node;

transmitting the request to a second wireless mesh node;

transmitting the request to an alternate wireless mesh node upon determining that the second wireless mesh node is unable to process the request;

identifying a match stored in an alternate cache memory of the alternate wireless mesh node;

receiving a response from the alternate wireless mesh node indicating that the request is associated with a matching result stored in the alternate cache memory;

storing the response in the first cache memory of the first wireless mesh node;

determining that the content source device is associated with a bad reputation based on the stored response indicating the matching result in the first cache memory;

transmitting instructions from the first wireless mesh node to one or more additional wireless mesh nodes indicating that the request should be blocked in accordance with the response indicating the matching result stored in the first cache memory; and

rejecting the request based on the matching result stored in the first cache memory.

8. The non-transitory computer-readable storage medium of claim 7 , wherein a user computing device stores data identifying previous access requests for links associated with a bad reputation.

9. The non-transitory computer-readable storage medium of claim 8 , wherein the user computing device prevents access to the links associated with the stored bad reputation data without transmitting the access request to the alternate wireless mesh node.

10. The non-transitory computer-readable storage medium of claim 8 , the program further executable to dynamically adapt a routing of the request from the user computing device based on one or more network parameters when the user computing device is relocated from one physical location to another location associated with a wireless mesh network.

11. The non-transitory computer-readable storage medium of claim 7 , the program further executable to store a start time associated with each entry in the first cache memory in accordance with previous requests to access content.

12. The non-transitory computer-readable storage medium of claim 7 , the program further executable to:

monitor a duration of time elapsed since a data entry is stored in the first cache memory;

determine whether the elapsed time exceeds a time-to-live (TTL) value associated with the data entry; and

automatically remove the data entry from the first cache memory when the elapsed time exceeds the TTL value in accordance with an access control policy of a wireless mesh network associated with the first wireless mesh node.

13. A system for preventing access to undesired content, the system comprising:

a communication interface of a first wireless mesh node, wherein the communication interface communicates over a communication network to receive a request to access content, the request identifying a content source device;

a first cache memory of the first wireless mesh node; and

a processor of the first wireless mesh node that executes instructions stored in memory, wherein the processor executes instructions to determine that information associated with a request does not have a match in contents stored in the first cache memory;

wherein the communication interface further:

transmits the request to a second wireless mesh node;

transmits the request to an alternate wireless mesh node upon determining that the second wireless mesh node is unable to process the request, wherein the alternate wireless mesh node identifies a match stored in an alternate cache memory of the alternate wireless mesh node; and

receives a response from the alternate wireless mesh node indicating that the request is associated with a matching result stored in the alternate cache memory;

wherein the first cache memory further stores the response;

determines that the content source device is associated with a bad reputation based on the stored response indicating the matching result in the first cache memory; and

transmits instructions from the first wireless mesh node to one or more additional wireless mesh nodes indicating that the request should be blocked in accordance with the response indicating the matching result stored in the first cache memory, and

wherein the processor executes further instructions to reject the request based on the matching result stored in the first cache memory.

14. The system of claim 13 , wherein the processor executes further instructions to determine that the content source device is associated with a website having a bad reputation based on the response indicating the matching result stored in the first cache memory, and wherein the communication interface transmits instructions from the first wireless mesh node to one or more additional wireless mesh nodes indicating that the request should be blocked in accordance with the response indicating the matching result stored in the first cache memory.

15. The system of claim 13 , wherein a user computing device stores data identifying previous access requests for links associated with a bad reputation.

16. The system of claim 15 , wherein the user computing device prevents access to the links associated with the stored bad reputation data without transmitting the access request to the alternate wireless mesh node.

17. The system of claim 15 , wherein the processor executes further instructions to dynamically adapt a routing of the request from the user computing device based on one or more network parameters when the user computing device is relocated from one physical location to another location associated with a wireless mesh network.

18. The system of claim 13 , wherein the processor executes further instructions to:

monitor a duration of time elapsed since a data entry is stored in the first cache memory;

determine whether the elapsed time exceeds a time-to-live (TTL) value associated with the data entry; and

automatically remove the data entry from the first cache memory when the elapsed time exceeds the TTL value in accordance with an access control policy of a wireless mesh network associated with the first wireless mesh node.

Assignments (2)
FIRST LIEN IP SUPPLEMENT Recorded Jun 30, 2025
From: SONICWALL INC.
To: UBS AG, STAMFORD BRANCH, AS COLLATERAL AGENT
Reel/Frame 071758/0159 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 26, 2023
From: DUO, ZHUANGZHI
To: SONICWALL INC.
Reel/Frame 065356/0831 →
Continuity (5)
Continuation 18088273 · Dec 23, 2022
Continuation 17111391 · Dec 3, 2020
Continuation In Part 16397951 · Apr 29, 2019
Provisional Application 62943126 · Dec 3, 2019
Related Publication 20240056813A1 · Feb 15, 2024
Cited By (1)
US 12,641,430