International Business Machines Corporation

Leonardo Coutinho Massarani

Tapas Kumar Som

In a computer network such as the Internet including one or more servers and one or more user units or clients wherein at least some user units do not transmit client identification information such as Web cookies, a method and system for performing the method for a server to communicate with at least one of the client units, comprising the steps of: receiving an access request from one of the user units, the user unit including a network browser; determining whether the access request received originated from a cookies capable or cookies enabled network browser; and simulate and proxy cookies support at the server, on behalf of the network browser, at the server when it is determined that the access request received did not originate from a non-cookies capable or non-cookies enabled network browser.

Simulating web cookies for non-cookie capable browsers

A system and method prevent unauthorized users and devices, in a dynamic user/device environment, from obtaining access to shared-medium public and semi-public IP networks. A network includes a layered communication system and routers/switches for coupling users and devices to a Dynamic Host Control Protocol (DHCP) server and an authentication server. Databases support the servers. The network incorporates Address Resolution Protocol (ARP). Authorized users and devices register for service by providing the DHCP with user identification for log-in, passwords, MAC addresses, etc. When users connect to the network access point, a DHCP exchange is initiated to obtain a valid IP address and other associated parameters. The DHCP client initiates a MAC broadcast for IP addresses which contain in the request the end user's device MAC address. The associated router switch will pick up and forward to a DHCP server the end user's device request. The DHCP server will process the end user's request and extract the end user's device MAC address. With the end user's MAC address, the DHCP server accesses its device and/or user information in the database. If the MAC address is not registered, the DHCP server refuses to handle the request and logs the attempt, potentially alerting network operators of a security breach. If the MAC address is registered, a DHCP server selects an appropriate IP address and associated parameters to be returned to the requesting end user and connects via programming or command interface to the router switch that is forwarding the DHCP request on behalf of the end user device. The server adds an ARP IP to the MAC address table entry with the selected IP address and end user's MAC address. End user device authentication and IP lease are marked as provisional. A timer is started for a suggested duration. Optionally, the DHCP dynamically sets up filter rules in the router switch limiting access to a subset of IP addresses such as the address of a log-in server. Initial DHCP processing is completed and an IP address is assigned to the requesting end user's device by DHCP. When the timer expires, if the DHCP server finds the authenticating user state is provisional, it will revoke the IP lease, invalidate the corresponding ARP to MAC table entry in the associated router switch, and reset any IP-permissive filtering for that device. If the user is in the full authenticated state, it will simply remove the restrictive filtering.

System and method for controlled access to shared-medium public and semi-public internet protocol (IP) networks

A content-indexing search system and method provides search results consistent with content filtering and blocking policies. The search system comprises a content-indexing search engine including a database coupled to an information network. A user provides search queries to the search engine through a gateway serving as a proxy server and cache and blocking engine. The blocking engine implements content filtering and blocking policies with respect to the search results. Alternative embodiments provide consistency between the results of the user content searches and the content filtering/blocking policies. One embodiment modifies the search engine to implement the same content blocking policy as the caching and filtering engine. Another embodiment modifies the search engine to build an indexing database by searching the caching and engine content. A third embodiment modifies the search engine to go through the cache and filter engine as the search engine builds its indexing database. A fourth embodiment modifies a search engine to go through a caching and filtering engine as it builds an indexing database.

Content-indexing search system and method providing search results consistent with content filtering and blocking policies implemented in a blocking engine

Growing community of inventors

Westport, CT, United States of America

Leonardo Coutinho Massarani