Method and Apparatus for Content Based Authentication for Network Access

Abstract

A method and apparatus are provided for authenticating the contents of a device requesting access to a first network, such as an enterprise network. If a device has connected to at least one other network then the content of the device is evaluated prior to obtaining access. The scope of the content evaluation may be based, for example, on properties of the other network or on one or more defined content authentication rules. If a device attempts to access a network, the content of the device is evaluated and the device may be restricted to accessing only one or more restoration services if the content fails to satisfy one or more predefined criteria, such as a content item that is out of date or a determination that the device connected to one or more external networks. The restoration service(s) can update a content item that is out of date, reinstall one or more programs or return configuration settings to default values.

1 . A method for evaluating a device connecting to a network, comprising:
 evaluating a content of said device upon a request to access said network; and   restricting access of said device to one or more restoration services if said content tails to satisfy one or more predefined criteria.   
     
     
         2 . The method of  claim 1 , wherein said one or more predefined criteria includes a content item that is out of date. 
     
     
         3 . The method of  claim 1 , wherein said one or more restoration service updates a content item that is out of date. 
     
     
         4 . The method of  claim 1 , wherein said one or more predefined criteria evaluates a history of one or more previously terminated connections of said device to one or more external networks. 
     
     
         5 . The method of  claim 1 , wherein said one or more restoration service reinstalls one or more programs. 
     
     
         6 . The method of  claim 1 , wherein said one or more restoration service returns one or more configuration settings of said device to default values. 
     
     
         7 . An apparatus for evaluating a device connecting to a network, comprising:
 a memory; and   at least one processor, coupled to the memory, operative to:   evaluate a content of said device upon a request to access said network; and   restrict access of said device to one or more restoration services if said content fails to satisfy one or more predefined criteria.   
     
     
         8 . The apparatus of  claim 7 , wherein said one or more predefined criteria includes a content item that is out of date. 
     
     
         9 . The apparatus of  claim 7 , wherein said one or more restoration service updates a content item that is out of date. 
     
     
         10 . The apparatus of  claim 7 , wherein said one or more predefined criteria evaluates a history of one or more previously terminated connections of said device to one or more external networks. 
     
     
         11 . The apparatus of  claim 7 , wherein said one or more restoration service reinstalls one or more programs. 
     
     
         12 . The apparatus of  claim 7 , wherein said one or more restoration service returns one or more configuration settings of said device to default values. 
     
     
         13 . An article of manufacture for evaluating a device connecting to a network, comprising a machine readable storage medium containing one or more programs which when executed implement the steps of:
 evaluating a content of said device upon a request to access said network; and   restricting access of said device to one or more restoration services if said content fails to satisfy one or more predefined criteria.   
     
     
         14 . The article of manufacture of  claim 13 , wherein said one or more predefined criteria includes a content item that is out of date. 
     
     
         15 . The article of manufacture of  claim 13 , wherein said one or more restoration service updates a content item that is out of date. 
     
     
         16 . The article of manufacture of  claim 13 , wherein said one or more predefined criteria evaluates a history of one or more previously terminated connections of said device to one or more external networks. 
     
     
         17 . The article of manufacture of  claim 13 , wherein said one or more restoration service reinstalls one or more programs. 
     
     
         18 . The article of manufacture of  claim 13 , wherein said one or more restoration service returns one or more configuration settings of said device to default values.