Tracking multiple interface connections by mobile stations

Abstract

A method and apparatus for communicating between devices is described. In one embodiment, the method comprises allowing a mobile station to have a first connection to a network over a first interface and determining that the mobile station is attempting to have a second connection to the network over a second interface other than the first interface.

1 - 25 . (canceled)  
   
   
       26 . A method for tracking multiple interface connections by stations comprising: 
 allowing a station to have a first connection to a network over a first interface; and    denying the station a second connection to the network over a second interface other than a first interface by checking an indicator bit associated with the second interface to determine whether a MAC address for the second interface is allowed to register for access to the network.    
   
   
       27 . The method of  claim 26 , wherein the denying step includes checking whether the indicator bit is stored in an access control list.  
   
   
       28 . The method of  claim 27 , wherein checking whether the indicator bit is stored in an access control list further includes checking a table having an entry for each station and fields to store a MAC address associated with each interface of the station.  
   
   
       29 . The method of  claim 27 , further comprising clearing the indicator bit from the access control list by an IP manager.  
   
   
       30 . The method of  claim 26 , wherein the station is selected from a group comprising a mobile phone, a cellular phone, a cordless phone, a headset, a voice-enabled mobile station, a laptop computer system, a personal digital assistant, a computer-data-enabled mobile station, or a fixed station.  
   
   
       31 . A device for providing access to a network for one or more stations, the device comprising: 
 a switch having a plurality of ports; and    a controller coupled to the switch;    wherein the controller allows a station to have a first connection to a network over a first interface and determines that the station is attempting to have a second connection to the network over a second interface other than the first interface, and wherein the controller determines whether to allow connection to the network by querying a server to check whether media access control (MAC) addresses associated with the first and second interfaces belong to the station.    
   
   
       32 . The device of  claim 31 , wherein the station is selected from a group comprising a mobile phone, a cellular phone, a cordless phone, a headset, a voice-enabled mobile station, a laptop computer system, a personal digital assistant, a computer-data-enabled mobile station, or a fixed station.  
   
   
       33 . The device of  claim 31 , wherein the server stores and maintains media access control (MAC) addresses associated with one or more interfaces belonging to the station.  
   
   
       34 . An apparatus for providing access to a network for one or more stations comprising: 
 means for allowing a station to have a first connection to a network over a first interface;    means for determining that the station is attempting to have a second connection to the network over a second interface other than the first interface; and    means for checking whether media access control (MAC) addresses associated with the first and second interfaces belong to the station.    
   
   
       35 . The apparatus of  claim 34 , wherein the station is one selected from a group comprising a mobile phone, a cellular phone, a cordless phone, a headset, a voice-enabled mobile station, a laptop computer system, a personal digital assistant, a computer-data-enabled mobile station, or a fixed station.  
   
   
       36 . The apparatus of  claim 34 , further comprising means for accessing a memory.  
   
   
       37 . The apparatus of  claim 36 , wherein the memory is local, and stores an active stations list and an access control list.  
   
   
       38 . The apparatus of  claim 36 , wherein the memory is remote, and stores an active stations list and an access control list.  
   
   
       39 . The apparatus of  claim 34 , further comprising means for enforcing a security policy if the station is attempting to connect to the network over the second interface.  
   
   
       40 . The apparatus of  claim 39 , further comprising means for denying connection to the network through multiple interfaces of the same station, and wherein the means for enforcing the security policy comprises means for denying the second connection to the network.  
   
   
       41 . The apparatus of  claim 40 , further comprising means for disabling a MAC address associated with the second interface.  
   
   
       42 . The apparatus of  claim 39 , further comprising means for denying connection to the network through multiple interfaces of the same station, and wherein means for enforcing the security policy comprises means for disabling the first connection to the network.  
   
   
       43 . The apparatus of  claim 42 , further comprising means for removing a MAC address associated with the first interface from a list of active stations.  
   
   
       44 . The apparatus of  claim 39 , further comprising means for denying connection to the network through multiple interfaces of the same station, and wherein enforcing the security policy comprises denying the first and second connections to the network.  
   
   
       45 . The apparatus of  claim 39 , further comprising means for allowing access to the network by the station over multiple interfaces.