Mcafee, Inc.

Charles Slate

Manuel Nedbal

Manoj Ahluwalia

Ranjit S Narjala

Siddaraya B Revashetti

Vani Yalapalli

John R McDowell

Ramkumar Ram Chary Venkatachary

Sahar Mostafa

Neeraj Kaul

Pavan Kumar V Bharathapudi

The present disclosure relates to a system and method for providing conditional login promotion. An example system includes at least one processor and at least one memory element, wherein the system is configured for receiving an indication of a local operating system login by a user from a client device associated with the user; receiving one or more authentication factors associated with the user from the client device; and determining whether the local operating system login is to be promoted to a relying party entity based upon the one or more authentication factors associated with the user.

Conditional login promotion

An example method includes capturing session attributes associated with a communication session initiated by a node in a network environment, querying external attributes associated with the node, deriving a response attribute according to an access control policy rule based on at least one of the session attributes and at least one of the external attributes, and applying the response attribute to the communication session. The session attributes can include remote authentication dial in user service RADIUS vendor specific attribute information from an unknown vendor. The method may further include auditing the communication session, enforcing the response attribute, or ignoring the access control policy. Enforcing the response attribute can include taking an access control action according to the response attribute. The access control action may include allowing the node to access a virtual local area network in the network environment, denying access to the network environment, etc.

System and method for flexible network access control policies in a network environment

Growing community of inventors

Milton, MA, United States of America

Charles Slate