IP Library › Granted Patent US 10,917,384
Granted Patent B2
US 10,917,384 · App. 15/702,355 · Granted Feb 9, 2021

Methods, systems, and media for modifying firewalls based on dynamic IP addresses

Inventor: Thien Van Pham (Lacey, WA)
Assignees: Synergex Group; Pham Holdings, Inc.; Wayne Taylor
H04L63/0263H04L61/2015H04L63/0236H04L63/08H04L63/105H04L63/14H04L63/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,917,384
App. No.
15/702,355
Granted
Feb 9, 2021
Kind
B2
Abstract

Methods, systems, and media for modifying firewall rules based on dynamic Internet Protocol (IP) addresses are provided. In some embodiments, the method comprises: receiving, from a database server, a request to modify a firewall rule of a firewall protecting a remote computer, wherein the request includes an IP address of a user device initiating a connection to the remote computer, and wherein the firewall rule indicates IP addresses of devices allowed to establish connections to the remote computer; determining whether the IP address of the user device is to be added to the firewall rule; and in response to determining that the IP address of the user device is to be added to the firewall rule, adding the current IP address to the firewall rule.

Claims (56)

1. A method for modifying firewall rules based on dynamic Internet Protocol (IP) addresses, comprising:

identifying, using a hardware processor, at least one computer that a user of a user device has permission to establish a remote connection with;

causing indications of the at least one computer to be presented to the user for selection by the user;

receiving a selection of a name of a computer of the at least one computer from the user;

receiving, from a server, a request to modify a firewall rule of a firewall protecting the computer, wherein the request includes a current IP address of the user device, and wherein the firewall rule indicates IP addresses of devices allowed to establish connections to the computer;

determining whether the user device is using a particular type of encryption;

determining whether the current IP address of the user device is to be added to the firewall rule based on whether the user device is using the particular type of encryption; and

in response to determining that the current IP address of the user device is to be added to the firewall rule, adding the current IP address to the firewall rule.

2. The method of claim 1 , further comprising:

determining whether the current IP address of the user device is to be removed from the firewall rule; and

in response to determining that the current IP address of the user device is to be removed from the firewall rule, removing the current IP address from the firewall rule.

3. The method of claim 1 , further comprising:

determining that the firewall rule does not exist; and

in response to determining that the firewall rule does not exist, creating the firewall rule.

4. The method of claim 1 , wherein the request includes a firewall rule name that indicates the firewall rule.

5. The method of claim 1 , wherein the request is received from the server in response to a query transmitted to the server.

6. The method of claim 1 , wherein determining whether the current IP address of the user device is to be added to the firewall rule is also based on whether the user device is using a particular type of authentication.

7. The method of claim 6 , wherein determining whether the current IP address of the user device is to be added to the firewall rule is also based on whether the user device is using a particular type of remote desktop protocol.

8. A system for modifying firewall rules based on dynamic Internet Protocol (IP) addresses, the system comprising:

a first hardware processor that is programmed to:

identify, using a hardware processor, at least one computer that a user of a user device has permission to establish a remote connection with;

cause indications of the at least one computer to be presented to the user for selection by the user; and

receive a selection of a name of a computer of the at least one computer from the user; and

a second hardware processor that is programmed to:

receive, from a server, a request to modify a firewall rule of a firewall protecting the computer, wherein the request includes a current IP address of the user device, and wherein the firewall rule indicates IP addresses of devices allowed to establish connections to the computer;

determine whether the user device is using a particular type of encryption;

determine whether the current IP address of the user device is to be added to the firewall rule based on whether the user device is using the particular type of encryption; and

in response to determining that the current IP address of the user device is to be added to the firewall rule, add the current IP address to the firewall rule.

9. The system of claim 8 , wherein the second hardware processor is further programmed to:

determine whether the current IP address of the user device is to be removed from the firewall rule; and

in response to determining that the current IP address of the user device is to be removed from the firewall rule, remove the current IP address from the firewall rule.

10. The system of claim 8 , wherein the second hardware processor is further programmed to:

determine that the firewall rule does not exist; and

in response to determining that the firewall rule does not exist, create the firewall rule.

11. The system of claim 8 , wherein the request includes a firewall rule name that indicates the firewall rule.

12. The system of claim 8 , wherein the request is received from the server in response to a query transmitted to the server.

13. The system of claim 8 , wherein determining whether the current IP address of the user device is to be added to the firewall rule is also based on whether the user device is using a particular type of authentication.

14. The system of claim 13 , wherein determining whether the current IP address of the user device is to be added to the firewall rule is also based on whether the user device is using a particular type of remote desktop protocol.

15. A non-transitory computer-readable medium containing computer executable instructions that, when executed by a plurality of processors, cause the plurality of processors to perform a method for modifying firewall rules based on dynamic Internet Protocol (IP) addresses, the method comprising:

identifying, using a hardware processor, at least one computer that a user of a user device has permission to establish a remote connection with;

causing indications of the at least one computer to be presented to the user for selection by the user;

receiving a selection of a name of a computer of the at least one computer from the user;

receiving, from a server, a request to modify a firewall rule of a firewall protecting the computer, wherein the request includes a current IP address of the user device, and wherein the firewall rule indicates IP addresses of devices allowed to establish connections to the computer;

determining whether the user device is using a particular type of encryption;

determining whether the current IP address of the user device is to be added to the firewall rule based on whether the user device is using the particular type of encryption; and

in response to determining that the current IP address of the user device is to be added to the firewall rule, adding the current IP address to the firewall rule.

16. The non-transitory computer-readable medium of claim 15 , wherein the method further comprises:

determining whether the current IP address of the user device is to be removed from the firewall rule; and

in response to determining that the current IP address of the user device is to be removed from the firewall rule, removing the current IP address from the firewall rule.

17. The non-transitory computer-readable medium of claim 15 , wherein the method further comprises:

determining that the firewall rule does not exist; and

in response to determining that the firewall rule does not exist, creating the firewall rule.

18. The non-transitory computer-readable medium of claim 15 , wherein the request includes a firewall rule name that indicates the firewall rule.

19. The non-transitory computer-readable medium of claim 15 , wherein the request is received from the server in response to a query transmitted to the server.

20. The non-transitory computer-readable medium of claim 15 , wherein determining whether the current IP address of the user device is to be added to the firewall rule is also based on whether the user device is using a particular type of authentication.

21. The non-transitory computer-readable medium of claim 20 , wherein determining whether the current IP address of the user device is to be added to the firewall rule is also based on whether the user device is using a particular type of remote desktop protocol.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 12, 2017
From: PHAM, THIEN VAN
To: SYNERGEX GROUP; TAYLOR, WAYNE; PHAM HOLDINGS INC.
Reel/Frame 044369/0290 →
Continuity (1)
Related Publication 20190081927A1 · Mar 14, 2019
Cited By (1)
US 12,289,308