Invalidity dossier

US 8117639

System and method for providing access control

Current assignee: Netskope Inc

Added 5/13/2026, 6:00:21 AM

Active provider: Google · gemini-2.5-flash

Auto-generating section 1 of 2: Extensions

Each section takes ~30-60s with web-search grounding. Keep this tab open — sections will fill in below as they complete.

Patent summary

Title, assignee, inventors, filing/issue dates, abstract, and a plain-language overview of the claims.

✓ Generated

Here is a concise summary of US patent 8,117,639:

Title: System and method for providing access control

Assignee: Netskope Inc. (Current Assignee as of July 05, 2024)

  • Note: Original Assignee was Rocksteady Technologies LLC.

Inventors: Richard MacKinnon, Kelly Looney, Eric White

Filing Date: 2003-10-10

Issue Date: 2012-02-14

Abstract: Embodiments disclosed in this patent describe systems and methods for managing network access for users, specifically focusing on access control to one or more networks. A user is authenticated, and based on their associated user profile, specific provisioning rules are set up. These rules control the user's network access, including limitations on network resources. This per-user access control aims to prevent any single user or group of users from monopolizing network resources to the detriment of others.


Independent Claims Overview:

The patent US8117639B2 includes several independent claims, detailed below in plain language:

  • Independent Claim 1 (System Claim):
    A system for controlling network access, comprising: a processor; a first network interface connected to the processor (e.g., for user devices) and a second network interface also connected to the processor (e.g., for a controlled network). The system also has storage accessible by the processor, containing computer instructions. These instructions, when run by the processor, enable the system to:

    1. Receive network communications from a user device over the first network interface.
    2. Determine if the user sending the communication is already authenticated.
    3. If not authenticated, direct the user to an authentication screen (e.g., a login web page).
    4. Receive login credentials from the user.
    5. Authenticate the user using these credentials.
    6. If authentication is successful, receive a user profile associated with that user.
  • Independent Claim 7 (System Claim):
    A system that provides network access, comprising: a processor; a first network interface and a second network interface, both connected to the processor. It also includes storage media with computer instructions executable by the processor. These instructions allow the system to:

    1. Receive a user profile.
    2. Provide the user with access to a network, with the access permissions based on the received user profile.
  • Independent Claim 12 (Computer Program Product Claim):
    A computer program product stored on a non-transitory computer-readable medium, with instructions that, when executed by a processor, perform a method comprising:

    1. Receiving a network communication from a user device over a first network interface.
    2. Checking if the user associated with the communication is authenticated.
    3. If not authenticated, sending the user to an authentication interface.
    4. Receiving user credentials.
    5. Authenticating the user based on these credentials.
    6. If the user is authenticated, receiving a user profile.
  • Independent Claim 17 (Computer Program Product Claim):
    A computer program product stored on a non-transitory computer-readable medium, with instructions that, when executed by a processor, perform a method comprising:

    1. Receiving a user profile.
    2. Provisioning (setting up) a user's access to a network according to the received user profile.
  • Independent Claim 22 (Method Claim):
    A method comprising:

    1. Receiving a user profile.
    2. Provisioning a user with access to a network based on that user profile.
  • Independent Claim 23 (Method Claim):
    A method comprising:

    1. Receiving a network communication from a user device over a first network interface.
    2. Determining if the network communication is from an authenticated user.
    3. If the user is not authenticated, directing them to an authentication interface.
    4. Receiving user credentials.
    5. Authenticating the user based on the credentials.
    6. If the user is authenticated, receiving a user profile.

CAFC 2026 Dockets:
As of April 26, 2026, no specific cases for US patent 8,117,639 were found in the CAFC 2026 dockets. The search results included information about a CAFC case related to U.S. Patent No. 8,078,540, but this is a different patent and not relevant to the current request.

Generated 5/25/2026, 6:45:48 AM