US5699513A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method for secure network access via message intercept
Assignee: General Dynamics Mission Systems Inc
•
Filing: 1995-03-31
•
Granted: 1997-12-16
•
Expires: 2015-03-31
Abstract
Abstract Security is provided for an inside network (14) by a security host (26). Connection request messages sent from source hosts (22) in an outside network (12) are intercepted (94) in the security host (26) and prevented from being transmitted on the inside network (14). The user of the source host (22) then establishes a connection (78) to the security host (26) where a dialog session (80, 98, 100) occurs to confirm the user's authenticity and authorization. After the user is confirmed, the intercepted connection request message is released (116) for transmission on the inside network (14) where the intended application service will respond and a communication session will commence.
Inventors
- 👤 Ronald Glen Feigen
- 👤 Paul Aerick Lambert
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 10:00
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/10; H04L63/101; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/34; H04L63/02; H04L63/0227
Claims Analysis
Total Claims: 19
Claim 1
Independent Claim
170 words
A method of providing security for a network having one or more application services to which connections may be made from outside said network, said method comprising the steps of: intercepting a plurality of connection request messages each of which establishes a first connection request for an application service provided on said network; establishing a second connection, said second connection being established with a security service; confirming, through said second connection, said first connection request; transmitting a message on said network after said confirming step confirms said first connection request; establishing said second connection with a source hose having a source host address; sending data describing ones of said intercepted connection request messages which originated from said source host address to said source host through said second connection; and receiving selection data from said source host through said second connection, said selection data identifying a selected one of intercepted connection request messages wherein said message transmitted by said transmitting step corresponds to said selected one of intercepted connection request messages.
Claim 2
Independent Claim
170 words
A method of providing security for a network having one or more application services to which connections may be made from outside said network, said method comprising the steps of: intercepting a plurality of connection request messages each of which establishes a first connection request for an application service provided on said network; establishing a second connection, said second connection being established with a security service; confirming, through said second connection, said first connection request; transmitting a message on said network after said confirming step confirms said first connection request; establishing said second connection with a source hose having a source host address; sending data describing ones of said intercepted connection request messages which originated from said source host address to said source host through said second connection; and receiving selection data from said source host through said second connection, said selection data identifying a selected one of intercepted connection request messages wherein said message transmitted by said transmitting step corresponds to said selected one of intercepted connection request messages.
Claim 3
Dependent Claim
32 words
A method as claimed in claim 1 wherein said intercepting, establishing, confirming, and transmitting steps comprise the step of intercepting, establishing, confirming, and transmitting by a security host residing on said network.
Claim 4
Dependent Claim
20 words
A method as claimed in claim 1 wherein said intercepting step comprises the step of saving said connection request message.
Claim 5
Dependent Claim
20 words
A method as claimed in claim 3 wherein said saving step comprises the step of eliminating duplicate connection request messages.
Claim 6
Dependent Claim
26 words
A method as claimed in claim 1 wherein said intercepting step comprises the step of preventing said connection request message from being transmitted on said network.
Claim 7
Dependent Claim
63 words
A method as claimed in claim 1 wherein said establishing step comprises the steps of: receiving a second connection request message, said second connection request message identifying a source which originated said second connection request message, and said second connection request message requesting establishment of a connection to said security service; and sending an acknowledgment message from said security service to said source.
Claim 8
Dependent Claim
36 words
A method as claimed in claim 1 wherein: said connection request message originates in response to actions taken by a user at a source host; and said confirming step comprises the step of authenticating said user.
Claim 9
Dependent Claim
36 words
A method as claimed in claim 1 wherein: said connection request message originates in response to actions taken by a user at a source host; and said confirming step comprises the, step of authorizing said user.
Claim 10
Dependent Claim
75 words
A method as claimed in claim 1 wherein said intercepting step intercepts a plurality of connection request messages each of which requests establishment of a connection to an application service provided on said network, and said method additionally comprises the steps of: identifying ones of said plurality of connection request messages which are not confirmed within a predetermined period of time following their interception; and dropping said ones of said plurality of connection request messages.
Claim 11
Dependent Claim
32 words
A method as claimed in claim 1 additionally comprising the step of preventing said message from being transmitted on said network when said confirming step fails to confirm said first connection request.
Claim 12
Independent Claim
134 words
A method of providing security for a network having one or more application services to which connections may be made from outside said network, said method comprising the steps of: receiving a connection request message at a security host coupled to said network, said connection request message providing a first connection request to an application service provided on said network whereby said connection request message is originated in response to actions taken by a user at a source host; establishing a second connection at said security host; confirming, through said second connection, said first connection request thereby authenticating a user; preventing, prior to said confirming step, said connection request message from being transmitted on said network; and transmitting said connection request message on said network after said confirming step confirms said first connection request.
Claim 13
Independent Claim
134 words
A method of providing security for a network having one or more application services to which connections may be made from outside said network, said method comprising the steps of: receiving a connection request message at a security host coupled to said network, said connection request message providing a first connection request to an application service provided on said network whereby said connection request message is originated in response to actions taken by a user at a source host; establishing a second connection at said security host; confirming, through said second connection, said first connection request thereby authenticating a user; preventing, prior to said confirming step, said connection request message from being transmitted on said network; and transmitting said connection request message on said network after said confirming step confirms said first connection request.
Claim 14
Dependent Claim
34 words
A method as claimed in claim 11 additionally comprising the step of preventing said connection request message from being transmitted on said network when said confirming step fails to confirm said first connection request.
Claim 15
Independent Claim
203 words
A method of providing security for a network having an application service to which a connection may be established from outside said network, said connection being initiated through actions taken by a user at a source host having a source host address, and said method comprising the steps of: intercepting a plurality of connection request messages from said source host, each of said connection request messages requesting establishment of a first connection to said application service provided on said network; establishing a connection between said source host and a security service; authenticating said user through said connection between said source host and said security service; and transmitting said connection request message on said network after said authenticating step authenticates said user; sending data describing ones of intercepted connection request messages which originated from said source host address to said source host through said connection between said source host and said security service; and receiving selection data from said source host through said connection between said source host and said security service, said selection data identifying a selected one of said intercepted connection request messages, wherein said message transmitted by said transmitting step corresponds to said selected one of said intercepted connection request messages.
Claim 16
Independent Claim
203 words
A method of providing security for a network having an application service to which a connection may be established from outside said network, said connection being initiated through actions taken by a user at a source host having a source host address, and said method comprising the steps of: intercepting a plurality of connection request messages from said source host, each of said connection request messages requesting establishment of a first connection to said application service provided on said network; establishing a connection between said source host and a security service; authenticating said user through said connection between said source host and said security service; and transmitting said connection request message on said network after said authenticating step authenticates said user; sending data describing ones of intercepted connection request messages which originated from said source host address to said source host through said connection between said source host and said security service; and receiving selection data from said source host through said connection between said source host and said security service, said selection data identifying a selected one of said intercepted connection request messages, wherein said message transmitted by said transmitting step corresponds to said selected one of said intercepted connection request messages.
Claim 17
Dependent Claim
28 words
A method as claimed in claim 13 additionally comprising the step of preventing, prior to said authenticating step, said connection request message from being transmitted on said network.
Claim 18
Dependent Claim
75 words
A method as claimed in claim 13 wherein said intercepting step intercepts a plurality of connection request messages each of which requests establishment of a connection to an application service provided on said network, and said method additionally comprises the steps of: identifying ones of said plurality of connection request messages which are not confirmed within a predetermined period of time following their interception; and dropping said connection request messages identified in said identifying step.
Claim 19
Dependent Claim
24 words
A method as claimed in claim 13 additionally comprising, prior to said transmitting step, the step of authorizing said user for said application service.
References Cited (Backward Citations)
US4727243A
Cited
US4799153A
Cited
US5560008A
Cited
US5577209A
Cited
US5434920A
Cited
US5455861A
Cited
US5537099A
Cited
US5499297A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-12-15 | 2001-06-16 | 2001-12-16 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-12-15 | 2005-06-16 | 2005-12-16 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-12-15 | 2009-06-16 | 2009-12-16 | $7700.00 | Window Closed / Lapsed |