Patent US4798637A successfully refreshed from Google Patents.
Patent US6104716A successfully refreshed from Google Patents.
US6104716A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for lightweight secure communication tunneling over the internet
Assignee: International Business Machines Corp
•
Filing: 1997-03-28
•
Granted: 2000-08-15
•
Expires: 2017-03-28
Abstract
Abstract A lightweight secure tunneling protocol or LSTP permits communicating across one or more firewalls by using a middle server or proxy. Three proxies are used to establish an end-to-end connection that navigates through the firewalls. In a typical configuration, a server is behind a first firewall and a client behind a second firewall are interconnected by an untrusted network (e.g., the Internet) between the firewalls. A first inside firewall SOCKS-aware server-side end proxy connects to the server inside the first firewall. A second inside firewall SOCKS-aware client-side end proxy is connected to by the client inside the second firewall. Both server-side and client-side end proxies can address a third proxy (called a middle proxy) outside the two firewalls. The middle proxy is usually started first, as the other two end proxies (server and client) will initiate the connection to the middle proxy some time after they are started. Since the middle proxy is mutually addressable by both inside proxies, a complete end-to-end connection between the server and client is established. It is the use of one or more middle proxies together with the LSTP that establishes the secure communications link or tunnel across multiple firewalls.
Inventors
- 👤 Joseph M. Crichton
- 👤 Peter F. Garvin
- 👤 Jeffrey W. Staten
- 👤 Waiki L. Wright
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-01 13:07
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/029; H04L63/0281; H04L9/00; H04L9/40
Claims Analysis
Total Claims: 11
Claim 1
Independent Claim
156 words
A packet switched network communications system comprising: a first network including at least one server running a server application; a second network including at least one client running a client application; a first firewall guarding computer resources of one of the first and second networks and including a software application that enables the first firewall to make connections from inside to outside the first firewall; a server end proxy and a server application that are mutually addressable; a client end proxy and a client application that are mutually addressable; and a middle proxy outside the first firewall and in an untrusted network, the server end proxy making connection to the middle proxy through a first firewall, the client end proxy making connection to the middle proxy and the middle proxy connecting the connections from the server end proxy and the client end proxy to establish a pass through communication tunnel between the client and the server.
Claim 2
Dependent Claim
156 words
A packet switched network communications system comprising: a first network including at least one server running a server application; a second network including at least one client running a client application; a first firewall guarding computer resources of one of the first and second networks and including a software application that enables the first firewall to make connections from inside to outside the first firewall; a server end proxy and a server application that are mutually addressable; a client end proxy and a client application that are mutually addressable; and a middle proxy outside the first firewall and in an untrusted network, the server end proxy making connection to the middle proxy through a first firewall, the client end proxy making connection to the middle proxy and the middle proxy connecting the connections from the server end proxy and the client end proxy to establish a pass through communication tunnel between the client and the server.
Claim 3
Dependent Claim
48 words
The packet switched network communications system recited in claim 1 further comprising a second firewall guarding computer resources of the other one of the second and first networks and including a software application that enables the second firewall to make connections from inside to outside the second firewall.
Claim 4
Dependent Claim
40 words
The packet switched network communications system recited in claim 2 wherein the server end proxy, the client end proxy and the middle proxy constitute a tunnel having SOCKS server capability, the entire tunnel performing the job of a SOCKS server.
Claim 5
Dependent Claim
294 words
In packet switched network communications system including a first network including at least one server running a server application, a second network including at least one client running a client application, a first firewall guarding computer resources of one of the first and second networks and including a software application that enables the first firewall to make connections from inside to outside the first firewall, a server end proxy addressable by the server application, a client end proxy addressable by the server client application, and a middle proxy outside the first firewall and in an untrusted network between the first and second networks, a method of connecting the server end proxy and the client end proxy to the middle proxy through the first firewall and the middle proxy connecting the connections from the server end proxy and the client end proxy to establish a pass through communication tunnel between the client an the server comprising the steps of: starting the middle proxy and waiting for a first connection from an end proxy; starting the client end proxy and opening a connection to the middle proxy by sending client setup information to the middle proxy; storing by the middle proxy the end proxy setup information and then waiting for a second connection; starting the server end proxy and opening a connection to the middle proxy by sending end proxy setup information to the middle proxy; pairing by the middle proxy the connections of the client end proxy and the server end proxy and transmitting server and middle proxy setup information to the client end proxy and client and middle proxy setup information to the server end proxy; and the middle proxy thereafter acting as a pass through between the client end and server end proxies.
Claim 6
Dependent Claim
294 words
In packet switched network communications system including a first network including at least one server running a server application, a second network including at least one client running a client application, a first firewall guarding computer resources of one of the first and second networks and including a software application that enables the first firewall to make connections from inside to outside the first firewall, a server end proxy addressable by the server application, a client end proxy addressable by the server client application, and a middle proxy outside the first firewall and in an untrusted network between the first and second networks, a method of connecting the server end proxy and the client end proxy to the middle proxy through the first firewall and the middle proxy connecting the connections from the server end proxy and the client end proxy to establish a pass through communication tunnel between the client an the server comprising the steps of: starting the middle proxy and waiting for a first connection from an end proxy; starting the client end proxy and opening a connection to the middle proxy by sending client setup information to the middle proxy; storing by the middle proxy the end proxy setup information and then waiting for a second connection; starting the server end proxy and opening a connection to the middle proxy by sending end proxy setup information to the middle proxy; pairing by the middle proxy the connections of the client end proxy and the server end proxy and transmitting server and middle proxy setup information to the client end proxy and client and middle proxy setup information to the server end proxy; and the middle proxy thereafter acting as a pass through between the client end and server end proxies.
Claim 7
Dependent Claim
60 words
The method recited in claim 4 further comprising the steps of: after pairing by the middle proxy of the connections between the client end and server end proxies, exchanging by the client end and server end proxies security handshakes; and again exchanging setup information between the client end and server end proxies via the middle proxy over the secured line.
Claim 8
Dependent Claim
36 words
The method recited in claim 5 further comprising the step of releasing tunnel resources between the client end and server end proxies when data exchange between the client and server over the tunnel have been completed.
Claim 9
Dependent Claim
24 words
The packet switched network communications system recited in claim 1 wherein said middle proxy and said client end proxy reside on the same machine.
Claim 10
Dependent Claim
48 words
The packet switched network communications system recited in claim 1 wherein said middle proxy consists of a plurality of middle proxies, cascaded, allowing a single tunnel to be constructed across multiple firewalls, whereby some of the middle proxies are configured to establish a connection with neighboring middle proxies.
Claim 11
Dependent Claim
31 words
A packet switched network communications system as recited in claim 1, wherein the pass through communication tunnel supports multiple client applications multiplexed over a single tcp/ip (transmission control protocol/Internet protocol) connection.
References Cited (Backward Citations)
EP0713311A1
Cited
EP0743777A2
Cited
US5802320A
Cited
WO1997016911A1
Cited
GB2318031A
Cited
GB2317539A
Cited
US5898830A
Cited
WO1998018248A1
Cited
US5944823A
Cited
US5778174A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-08-15 | 2004-02-14 | 2004-08-15 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-08-15 | 2008-02-14 | 2008-08-15 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-08-15 | 2012-02-14 | 2012-08-15 | $7700.00 | Window Closed / Lapsed |