US5826029A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Secured gateway interface
Assignee: Trend Micro Inc
•
Filing: 1995-10-31
•
Granted: 1998-10-20
•
Expires: 2015-10-31
Abstract
Abstract Accordingly, a computer implemented method, uniquely programmed computer system, and article of manufacture embodying computer readable program means all allow a customer on an external network to initiate an authorized business transaction utilizing internal business resources on an internal network without violating security firewalls. Specifically, the method directs an internal computer system to allow an external computer system to initiate a transaction request using internal resources without violating a security firewall between the internal computer system and the external computer system. The method includes a first step of authenticating a connection initiated by the internal computer system between the internal computer system and the external computer system, thereby establishing an authenticated connection. The second step includes calling by the external computer system a transaction request received by the external computer system. In response to calling the transaction request, the third step includes creating by the external computer system a string comprising the transaction request, arguments, and process environment variables for executing the transaction request. The fourth step includes transmitting by the external computer system the string to the internal computer system through the authenticated connection. The fifth step includes verifying by the internal computer system the transaction request. The sixth step includes recreating by the internal computer system the original process environment. The final step includes executing by the internal computer system the transaction request, thereby generating an output.
Inventors
- 👤 Robert Cecil Gore, Jr.
- 👤 II John Frederick Haugh
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 15:21
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0281; H04L63/029; H04L9/00; H04L9/40; H04L63/08; H04L63/083
Claims Analysis
Total Claims: 15
Claim 1
Independent Claim
169 words
A method for directing an internal computer system to allow an external computer system to initiate a transaction request using internal resources without violating a security firewall between the internal computer system and the external computer system, comprising the steps of: authenticating a connection initiated by the internal computer system between the internal computer system and the external computer system, thereby establishing an authenticated connection; calling by the external computer system a transaction request received by the external computer system; in response to calling the transaction request, creating by the external computer system an original process environment containing process environment variables, and creating a string comprising the transaction request and the process environment variables for executing the transaction request; transmitting by the external computer system the string to the internal computer system through the authenticated connection; verifying by the internal computer system the transaction request; recreating by the internal computer system the original process environment; and executing by the internal computer system the transaction request, thereby generating an output.
Claim 2
Independent Claim
169 words
A method for directing an internal computer system to allow an external computer system to initiate a transaction request using internal resources without violating a security firewall between the internal computer system and the external computer system, comprising the steps of: authenticating a connection initiated by the internal computer system between the internal computer system and the external computer system, thereby establishing an authenticated connection; calling by the external computer system a transaction request received by the external computer system; in response to calling the transaction request, creating by the external computer system an original process environment containing process environment variables, and creating a string comprising the transaction request and the process environment variables for executing the transaction request; transmitting by the external computer system the string to the internal computer system through the authenticated connection; verifying by the internal computer system the transaction request; recreating by the internal computer system the original process environment; and executing by the internal computer system the transaction request, thereby generating an output.
Claim 3
Dependent Claim
104 words
The method according to claim 1 further comprising the steps of: (a) reading by the external computer system a first password and first communication port; (b) creating by the external computer system a first socket at the first communication port and listening at the first socket for a connect call from the internal computer system; (c) reading by the internal computer system a second password and a second communication port; and (d) creating by the internal computer system a second socket at the second communication port and sending a connect call to the external computer system through the second socket, thereby establishing a connection.
Claim 4
Dependent Claim
116 words
The method according to claim 2 wherein the authenticating step comprises the steps of: (e) sending a unique timestamp by the internal computer system to the external system through the second socket; (f) mangling by the external computer system the first password with the unique timestamp; (g) encrypting the mangled first password with an encryption algorithm, thereby creating a first password string; (h) transmitting by the external computer system to the internal computer system the first password string; (i) repeating steps (f) through (g) by the internal computer system using the second password, thereby creating a second password string; and (j) comparing by the internal computer system the first password string with the second password string.
Claim 5
Dependent Claim
48 words
The method according to claim 3 wherein the mangling step comprises the steps of: logically ANDing the timestamp with a hexadecimal number 0177 to produce a unique result; and logically exclusive ORing the unique result with each character of the first password, thereby producing the mangled first password.
Claim 6
Dependent Claim
30 words
The method according to claim 4 wherein the encrpytion step comprises the step of: encrypting each character of the mangled second password with a key, thereby creating the password string.
Claim 7
Dependent Claim
69 words
The method according to claim 5 wherein the calling step comprises the steps of: sending by an external network the transaction request to the external computer system, wherein the transaction request contains input data, arguments, and a command for executing a transaction program; and in response to receiving the transaction request by the external computer system, defining by a first daemon a process environment containing the process environment variables.
Claim 8
Dependent Claim
69 words
The method according to claim 6 further comprising the step of: in response to calling the transaction request by the external computer system, calling the command; in response to calling the command, executing a script, transmitting thereto the user input data, arguments, and transaction request; and creating by the script the string, wherein the string comprises the command, arguments, and the process environment variables for executing the transaction request.
Claim 9
Dependent Claim
58 words
The method according to claim 7 further comprising the step of: calling by the script a client routine residing in the external computer system, passing thereto the user input data, a third communication port for connecting to a second daemon residing on the external computer system, and identifier that identifies the type of transaction request, and the string.
Claim 10
Dependent Claim
87 words
The method according to claim 8 further comprising the step of: in response to receiving a call by the script, authenticating by the second daemon the client routine; forking by the second daemon, passing the third socket connection to a child process, whereby a parent process listens at the first socket connection for calls from the internal computer system; and in response to authenticating the client routine, transmitting by the child process the type of transaction request to a third daemon residing on the internal computer system.
Claim 11
Dependent Claim
64 words
The method according to claim 9, wherein the verifying step comprises the step of: reading by the third daemon a valid services table stored in memory on the internal computer system; and comparing the type of transaction request received from the child process with the valid service table, wherein if the type is found in the valid service table, the transaction request is verified.
Claim 12
Dependent Claim
186 words
A uniquely programmed system for directing an internal computer system to allow an external computer system to initiate a transaction request using internal resources without violating a security firewall between the internal computer system and the external computer system, comprising: means for authenticating a connection initiated by the internal computer system between the internal computer system and the external computer system, thereby establishing an authenticated connection; means for calling by the external computer system a transaction request received by the external computer system; in response to calling the transaction request, means for creating by the external computer system an original process environment containing process environment variables, and means for creating a string comprising the transaction request, the arguments, and the process environment variables for executing the transaction request; means for transmitting by the external computer system the string to the internal computer system through the authenticated connection; means for verifying by the internal computer system the transaction request; means for recreating by the internal computer system the original process environment; and means for executing by the internal computer system the transaction request, thereby generating an output.
Claim 13
Dependent Claim
186 words
A uniquely programmed system for directing an internal computer system to allow an external computer system to initiate a transaction request using internal resources without violating a security firewall between the internal computer system and the external computer system, comprising: means for authenticating a connection initiated by the internal computer system between the internal computer system and the external computer system, thereby establishing an authenticated connection; means for calling by the external computer system a transaction request received by the external computer system; in response to calling the transaction request, means for creating by the external computer system an original process environment containing process environment variables, and means for creating a string comprising the transaction request, the arguments, and the process environment variables for executing the transaction request; means for transmitting by the external computer system the string to the internal computer system through the authenticated connection; means for verifying by the internal computer system the transaction request; means for recreating by the internal computer system the original process environment; and means for executing by the internal computer system the transaction request, thereby generating an output.
Claim 14
Dependent Claim
232 words
An article of manufacture, comprising: a computer usable medium having computer readable program code means embodied therein for causing an internal computer system to allow an external computer system to initiate a transaction request using internal resources without violating a security firewall between the internal computer system and the external computer system, the computer readable program code means in said article of manufacture comprising: computer readable program means for authenticating a connection initiated by the internal computer system between the internal computer system and the external computer system, thereby establishing an authenticated connection; computer readable program means for calling by the external computer system a transaction request received by the external computer system; in response to calling the transaction request, computer readable program means for creating by the external computer system an original process environment containing process environment variables, and computer readable program means for creating a string comprising the transaction request and, the process environment variables for executing the transaction request; computer readable program means for transmitting by the external computer system the string to the internal computer system through the authenticated connection; computer readable program means for verifying by the internal computer system the transaction request; computer readable program means for recreating by the internal computer system the original process environment; and computer readable program means for executing by the internal computer system the transaction request, thereby generating an output.
Claim 15
Dependent Claim
232 words
An article of manufacture, comprising: a computer usable medium having computer readable program code means embodied therein for causing an internal computer system to allow an external computer system to initiate a transaction request using internal resources without violating a security firewall between the internal computer system and the external computer system, the computer readable program code means in said article of manufacture comprising: computer readable program means for authenticating a connection initiated by the internal computer system between the internal computer system and the external computer system, thereby establishing an authenticated connection; computer readable program means for calling by the external computer system a transaction request received by the external computer system; in response to calling the transaction request, computer readable program means for creating by the external computer system an original process environment containing process environment variables, and computer readable program means for creating a string comprising the transaction request and, the process environment variables for executing the transaction request; computer readable program means for transmitting by the external computer system the string to the internal computer system through the authenticated connection; computer readable program means for verifying by the internal computer system the transaction request; computer readable program means for recreating by the internal computer system the original process environment; and computer readable program means for executing by the internal computer system the transaction request, thereby generating an output.
References Cited (Backward Citations)
US3798605A
Cited
US4672572A
Cited
US5023907A
Cited
US5113499A
Cited
US5560008A
Cited
US5481720A
Cited
US5321841A
Cited
US5339403A
Cited
US5032979A
Cited
US5619657A
Cited
US5309563A
Cited
US5355474A
Cited
US5241594A
Cited
US5506961A
Cited
US5590199A
Cited
US5623601A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-10-19 | 2002-04-20 | 2002-10-20 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-10-19 | 2006-04-20 | 2006-10-20 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-10-19 | 2010-04-20 | 2010-10-20 | $7700.00 | Window Closed / Lapsed |