US6003084A — Secure network proxy for connecting entities

Claim 1

Independent Claim 124 words

A network communication session manager comprising: a connection manager that responds to an entity requesting a connection to a remote responding entity by simultaneously establishing a transparent session connection operable at a plurality of distinct protocol layers, between the communication session manager and the requesting entity; a security monitor, operatively coupled to the connection manager that monitors communication from the requesting entity for conformance to predefined conditions and wherein the connection manager, responsive to the security monitor establishes an independent connection to the responding entity; and a relay, operatively coupled to the connection manager, that relays communication between the requesting entity and the responding entity when both connections are operative, and wherein the relay operates at or below the plurality of distinct protocol layers.

Claim 2

Dependent Claim 124 words

A network communication session manager comprising: a connection manager that responds to an entity requesting a connection to a remote responding entity by simultaneously establishing a transparent session connection operable at a plurality of distinct protocol layers, between the communication session manager and the requesting entity; a security monitor, operatively coupled to the connection manager that monitors communication from the requesting entity for conformance to predefined conditions and wherein the connection manager, responsive to the security monitor establishes an independent connection to the responding entity; and a relay, operatively coupled to the connection manager, that relays communication between the requesting entity and the responding entity when both connections are operative, and wherein the relay operates at or below the plurality of distinct protocol layers.

Claim 3

Dependent Claim 41 words

The network communication session manager of claim 1 wherein the connection manager responds to the requesting entity and further wherein the security monitor identifies protocol and security violations on a first layer and responds on a plurality of distinct protocol layers.

Claim 4

Dependent Claim 26 words

The network communication session manager of claim 2 wherein Open Systems Interconnect (OSI) communication is implemented and wherein the relay operates at an OSI transport layer.

Claim 5

Dependent Claim 37 words

The network communication session manager of claim 3 wherein the security monitor monitors protocol information and data (PDUs) at the OSI transport, session, presentation and application layers and the relay relays such PDUs to the responding entity.

Claim 6

Dependent Claim 50 words

The network communication session manager of claim 2 wherein the plurality of distinct layers includes a presentation layer, a session layer and a transport layer and wherein the connection manager rejects a remote responding entity by generating a response at the presentation layer, the session layer, and the transport layer.

Claim 7

Dependent Claim 55 words

The network communication session manager of claim 2 wherein the plurality of distinct layers includes a presentation layer, a session layer and a transport layer and wherein the connection manager rejects a remote responding entity by generating a presentation layer P -- CONNECT response, a session layer S-CONNECT response, and a transport layer T-DATA response.

Claim 8

Dependent Claim 26 words

The network communication session manager of claim 1 and further comprising a connection monitor that monitors connection time and detects and responds to session failure conditions.

Claim 9

Dependent Claim 37 words

The network communication session manager of claim 1 wherein the communication session manager acts as an RFC-1006 proxy for Open System Interconnect (OSI) application which employ Association Control Service Elements (ACSE) and Remote Operations Service Elements (ROSE).

Claim 10

Dependent Claim 132 words

A network communication session manager comprising: a connection manager that responds to a requesting entity for a connection to a remote device and transparently, and sinultaneously, establishes an independent connection operable at a plurality of distant protocol layers, between the network communication session manager and the remote device; a security monitor, operatively coupled to the connection manager that monitors and selectively modifies data communicated from the requesting entity for conformance to supported protocol standards and adherence to a defined security policy; and a relay, operatively coupled to the connection manger, that relays communication between the requesting entity and the remote device when both connections are operative, wherein the relay operates under the control of the security monitor, and further wherein the relay operates at or below the plurality of distinct protocol layers.

Claim 11

Dependent Claim 132 words

A network communication session manager comprising: a connection manager that responds to a requesting entity for a connection to a remote device and transparently, and sinultaneously, establishes an independent connection operable at a plurality of distant protocol layers, between the network communication session manager and the remote device; a security monitor, operatively coupled to the connection manager that monitors and selectively modifies data communicated from the requesting entity for conformance to supported protocol standards and adherence to a defined security policy; and a relay, operatively coupled to the connection manger, that relays communication between the requesting entity and the remote device when both connections are operative, wherein the relay operates under the control of the security monitor, and further wherein the relay operates at or below the plurality of distinct protocol layers.

Claim 12

Independent Claim 106 words

A method of ensuring secure communications between a requesting application entity and a serving application entity by use of a proxy therebetween, comprising: responding to an entity requesting a connection to the serving application entity; establishing a transparent session connection operable at a plurality of layers, between the proxy and the requesting entity; monitoring, at a plurality of distinct layer, communication from the requesting entity for conformance to a selected communication protocol; and relaying communication between the requesting entity and the serving entity responsive to the conformance to the selected communication protocol, and further wherein the relay operates at or below the plurality of distinct layers.

Claim 13

Independent Claim 106 words

A method of ensuring secure communications between a requesting application entity and a serving application entity by use of a proxy therebetween, comprising: responding to an entity requesting a connection to the serving application entity; establishing a transparent session connection operable at a plurality of layers, between the proxy and the requesting entity; monitoring, at a plurality of distinct layer, communication from the requesting entity for conformance to a selected communication protocol; and relaying communication between the requesting entity and the serving entity responsive to the conformance to the selected communication protocol, and further wherein the relay operates at or below the plurality of distinct layers.

Claim 14

Dependent Claim 33 words

The method of claim 10 and further comprising: checking an address of the requesting entity against a list of authorized addresses; and modifying the response to the requesting entity based on the check.

Claim 15

Dependent Claim 35 words

The method of claim 11 wherein checking, modifying and responsing are performed at any of a plurality of layers of a communication protocol, and wherein relaying is performed at different layers of the communication protocol.

Claim 16

Dependent Claim 30 words

The method of claim 10 wherein monitoring communication from the requesting entity for conformance to a selected communication protocol includes monitoring for conformance to Open Systems Interconnect (OSI) communication protocol.

Claim 17

Dependent Claim 14 words

The method of claim 13 wherein monitoring includes monitoring at an OSI transport layer.

Claim 18

Dependent Claim 17 words

The method of claim 10 and further comprising monitoring connection time and responding to session failure conditions.

Claim 19

Dependent Claim 126 words

A storage medium having a computer program stored thereon for causing a suitably programmed system to ensure communications between a requesting application entity and a serving application entity, by performing the following steps when such program is executed on the system: responding to an entity requesting a connection to the serving application entity; establishing a transparent session connection operable at a plurality of layers, between the system and the requesting entity; monitoring, at a plurality of distinct protocol layers, communication from the requesting entity for conformance to a selected communication protocol; and relaying communication between the requesting entity and the serving entity responsive to the conformance to the selected communication protocol, and further wherein the relay operates at or below the plurality of distinct protocol layers.

Claim 20

Dependent Claim 126 words

A storage medium having a computer program stored thereon for causing a suitably programmed system to ensure communications between a requesting application entity and a serving application entity, by performing the following steps when such program is executed on the system: responding to an entity requesting a connection to the serving application entity; establishing a transparent session connection operable at a plurality of layers, between the system and the requesting entity; monitoring, at a plurality of distinct protocol layers, communication from the requesting entity for conformance to a selected communication protocol; and relaying communication between the requesting entity and the serving entity responsive to the conformance to the selected communication protocol, and further wherein the relay operates at or below the plurality of distinct protocol layers.

Claim 21

Dependent Claim 44 words

The storage medium of claim 16 and further comprising programming for causing the system to perform the steps of: checking an address of the requesting entity against a list of authorized addresses; and modifying the response to the requesting entity based on the check.

Claim 22

Dependent Claim 40 words

The storage medium of claim 17 wherein programming causes the system to perform checking, modifying and responding for any of a plurality of layers of a communication protocol, and wherein relaying is performed at different layers of the communication protocol.

Claim 23

Dependent Claim 31 words

The storage medium of claim 16 wherein monitoring communication from the requesting entity for conformance to a selected communication protocol includes monitoring for conformance to Open Systems Interconnect (OSI) communication protocol.

Claim 24

Dependent Claim 15 words

The storage medium of claim 19 wherein monitoring includes monitoring at an OSI transport layer.

Claim 25

Dependent Claim 20 words

The storage medium of claim 16 and further comprising programming for monitoring connection time and responding to session failure conditions.

Claim 26

Dependent Claim 172 words

A network communication controller, comprising: a processor; a memory coupled to the processor; a communications device operatively coupled to the processor and to the memory, wherein the communications device provides any of a plurality of communication connections; and a firewall module operatively coupled to the processor that implements with the processor a communications protocol that controls communication at a plurality of distinct protocol layers, between a requestor and a server via the communications device, wherein the firewall module further comprises: a connection manger that responds to the requestor requesting a connection to the server and establishes a transparent session connection between the communication controller and the requestor; an interrogator, operatively coupled to the connection manager that monitors communication from the requestor for conformance to a selected communication protocol; and a relay, operatively coupled to the connection manager and to the server, that relays communication between the requestor and the server under the control of the connection manager and further wherein the relay operates at or below the plurality of distinct protocol layers.

Claim 27

Dependent Claim 172 words

A network communication controller, comprising: a processor; a memory coupled to the processor; a communications device operatively coupled to the processor and to the memory, wherein the communications device provides any of a plurality of communication connections; and a firewall module operatively coupled to the processor that implements with the processor a communications protocol that controls communication at a plurality of distinct protocol layers, between a requestor and a server via the communications device, wherein the firewall module further comprises: a connection manger that responds to the requestor requesting a connection to the server and establishes a transparent session connection between the communication controller and the requestor; an interrogator, operatively coupled to the connection manager that monitors communication from the requestor for conformance to a selected communication protocol; and a relay, operatively coupled to the connection manager and to the server, that relays communication between the requestor and the server under the control of the connection manager and further wherein the relay operates at or below the plurality of distinct protocol layers.

Claim 28

Dependent Claim 38 words

The network communication controller of claim 22 wherein the communication protocol is a dual stack communication protocol which places communication between the processor and the server and the processor and the requestor in first and second burbs respectively.

Claim 29

Dependent Claim 51 words

The network communication controller of claim 23 wherein the communication controller is operative in a multilayer communication system and wherein the connection manager responds to the requestor and further wherein the security monitor identifies protocol and security violations on a first layer and responds on a plurality of distinct protocol layers.

Claim 30

Dependent Claim 27 words

The communication controller of claim 24 wherein the communication system is Open Systems Interconnect (OSI) communication architecture and wherein the relay operates at an OSI transport layer.

Claim 31

Dependent Claim 29 words

The communication controller of claim 25 wherein the interrogator monitors protocol information and data (PDUs) at an OSI transport layer and the relay relays such PDUs to the server.

Claim 32

Dependent Claim 34 words

The communication controller of claim 22 wherein the connection manager establishes a session connection between the communication controller and the requestor, and also established a session connection between the communication controller and the server.

Claim 33

Dependent Claim 28 words

The communication controller of claim 27 and wherein the firewall module further comprises a connection monitor that monitors connection time and detects and responds to session failure conditions.

Claim 34

Dependent Claim 34 words

The communication controller of claim 22 wherein the communication controller acts as an RFC-1006 proxy for Open System Interconnect (OSI) applications which employ Association Control Service Elements (ACSE) and Remote Operations Service Elements (ROSE).

Annuity Stage	Window Opens	Payment Deadline	Surcharge Period Until	Estimated Fee	Status
3.5 Years (Year 4)	2002-12-13	2003-06-14	2003-12-14	$2000.00	Window Closed / Lapsed
7.5 Years (Year 8)	2006-12-13	2007-06-14	2007-12-14	$3760.00	Window Closed / Lapsed
11.5 Years (Year 12)	2010-12-13	2011-06-14	2011-12-14	$7700.00	Window Closed / Lapsed

Secure network proxy for connecting entities

Abstract

Inventors

Bibliographic Details

Claims Analysis

References Cited (Backward Citations)

USPTO Annuity & Maintenance Windows

Assigned Categories & Tags

Assign Category Tag