System and method for projecting content beyond firewalls

• US 20020023143A1
• Filed: 04/03/2001
• Published: 02/21/2002
• Est. Priority Date: 04/11/2000
• Status: Active Grant

• Current Assignee: Leidos, Inc. (Leidos Holdings, Inc.)
• Original Assignee: Science Applications International Corporation
• Inventors: Stephenson, Mark M., Walters, Steven A.
• Granted Patent: US 7,814,208 B2
• Time in Patent Office: Days
• US Class Current: 709/218
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

A system and method for exchanging information between clients separated by firewalls is disclosed. A server may receive the information as posted through a browser client from beyond a first firewall and relay it to another client beyond a second firewall without lowering the security levels of the firewalls.

Claims

1. A system for establishing communications across a firewall comprising:

a communications network;

a first server within said communications network;

a first computer separated from said communications network, said first computer sending information to said first server; and

,

a second computer separated from said communications network, said second computer receiving information from said first server related to the information sent from said first computer,

wherein at least one of said first computer and said second computer are separated from said communications network by at least one firewall.

2. The system according to claim 1, wherein said first computer transmits a message to said first server with an encrypted message and said server transmits said encrypted message to said second computer.

3. The system according to claim 1, wherein said first computer transmits a message to said first server with an encrypted address of said second computer and

wherein said first server decrypts said encrypted address to an unencrypted address of said second computer and forwards said message to said second computer using said unencrypted address.

4. The system according to claim 1, wherein said first computer further includes a first client and said second computer includes a second client and wherein each of said first client and said second client use an open port to access said communications network.

5. The system according to claim 4, wherein said open port is at least one of port 80 and port 8080.

6. The system according to claim 1, further comprising a second server that operates in the event of an error with said first server.

7. The system according to claim 1, wherein the information received at said second computer has the same content as the information sent from said first computer.

8. The system according to claim 1, wherein the information received at said second computer has different but related content as the information sent from said first computer.

9. The system according to claim 1, further comprising

a second server, said second server being connected to said network,

wherein said second server replaces said first server when an error occurs between said first server and at least one of said first computer and said second computer.

10. The system according to claim 1, further comprising

a second server, said second server being connected to said network,

wherein said second server replaces said first server when an error occurs with said first server.

11. The system according to claim 1, further comprising:

at least a third computer,

wherein at least said third computer receives information from said first server related to the information sent from said first computer,

wherein at least said third computer is separated from said communication network by at least one of said first or at least a second firewall.

12. The system according to claim 1, wherein a communication pathway between said first server and at least one of said first computer and said second computer is kept open by repeated transmissions from said first server.

13. The system according to claim 1, wherein a communication pathway between said first server and at least one of said first computer and said second computer is kept open by repeated transmissions from at least one of said first computer and said second computer.

14. The system according to claim 1, wherein said first computer transmits a message to said first server with a header, the header including at least an encrypted address of said second computer and

wherein said first server decrypts said encrypted address to an unencrypted address of said second computer and forwards said message to said second computer using said unencrypted address.

15. The system according to claim 1, wherein said first computer transmits a message to said first server with a header, the header including at least one of an encrypted header, an encrypted size, an encrypted CRC, an encrypted header length, an encrypted message length, an encrypted asset identifier, an encrypted name of at least one client, and an encrypted application ID, an encrypted time and date stamp, an encrypted location ID, an encrypted message types, an encrypted attachment identifier, an encrypted packet number, and an encrypted pre-compressed data size for an associated message.

17. The method according to claim 16, wherein said encrypted message is also compressed.

18. The method according to claim 16, wherein said encrypted address is associated with a header, the header including at least one of an encrypted header, an encrypted size, an encrypted CRC, an encrypted header length, an encrypted message length, an encrypted asset identifier, an encrypted name of at least one client, and an encrypted application ID, an encrypted time and date stamp, an encrypted location ID, an encrypted message types, an encrypted attachment identifier, an encrypted packet number, and an encrypted pre-compressed data size for an associated message.

20. The method according to claim 19, wherein said encrypted message is also compressed.

16. A method for transmitting information across a network comprising the steps of:

receiving an encrypted address of a second computer from a first computer;

receiving an encrypted message from said first computer;

decrypting said encrypted address into an unencrypted address of said second computer; and

,

transmitting said encrypted message to said second computer.

19. A method for transmitting information across a network comprising the steps of:

receiving an encrypted address of a second computer from a first computer;

receiving an encrypted message from said first computer;

decrypting said encrypted address into an unencrypted address of said second computer; and

,

transmitting said encrypted message to said second computer,

wherein at least one of said receiving steps and said transmitting step includes receiving or transmitting through a firewall.

21. A computer-readable medium storing a program for transmitting information across a network, said program comprising the steps of:

receiving an encrypted address of a second computer from a first computer;

receiving an encrypted message from said first computer;

decrypting said encrypted address into an unencrypted address of said second computer;

transmitting said encrypted message to said second computer,

wherein at least one of said receiving steps and said transmitting step includes receiving or transmitting through a firewall.

22. The computer readable medium according to claim 21, wherein said encrypted message is also compressed.

28. The system according to claim 27, wherein said first application is hosted by a third computer that communicates with said first computer.

29. The system according to claim 27, wherein said first application is hosted by said first computer.

30. The system according to claim 27, wherein at least one of at least said second application is hosted by a third computer that communicates with said second computer.

31. The system according to claim 27, wherein at least one of at least said second application is hosted by said second computer.

32. The system according to claim 27, wherein said first computer transmits said data as encrypted data and said server transmits said encrypted data to said second computer.

33. The system according to claim 27, wherein said first computer transmits a message to said server with an encrypted address of said second computer and

wherein said server decrypts said encrypted address to an unencrypted address of said second computer and forwards said message to said second computer using said unencrypted address.

34. The system according to claim 27, wherein said first computer and said second computer each use an open port to access to said communications network.

35. The system according to claim 34, wherein said open port is at least one of port 80 and port 8080.

36. The system according to claim 27, wherein said first client communicates with said first application by an application programming interface.

37. The system according to claim 27, wherein said first client communicates with said first application by a proxy.

38. The system according to claim 27, wherein said first client communicates with said first application by sockets.

40. The method according to claim 39, wherein said header includes at least one of an encrypted address, an encrypted size, an encrypted CRC, an encrypted header length, an encrypted message length, an encrypted asset identifier, an encrypted name of at least one client, and an encrypted application ID, an encrypted time and date stamp, an encrypted location ID, an encrypted message types, an encrypted attachment identifier, an encrypted packet number, and an encrypted pre-compressed data size for an associated message.

23. A method for transmitting information across a network comprising the steps of:

encrypting an address of a second computer at a first computer;

encrypting a message;

transmitting to a server said encrypted address and said encrypted message, wherein said server later decrypts said encrypted address and transmits said encrypted message to said second computer.

24. A method for transmitting information across a network comprising the steps of:

encrypting an address of a second computer at a first computer;

encrypting a message;

transmitting to a server said encrypted address and said encrypted message, wherein said server later decrypts said encrypted address and transmits said encrypted message to said second computer,

wherein at least one of said first computer and said second computer are separated from a server by a firewall.

25. A computer-readable medium storing a program for transmitting information across a network, said program comprising the steps of:

encrypting an address of a second computer at a first computer;

encrypting a message;

transmitting to a server said encrypted address and said encrypted message, wherein said server later decrypts said encrypted address and transmits said encrypted message to said second computer.

26. A computer readable medium storing a program for transmitting information across a network, said program comprising the steps of:

encrypting an address of a second computer at a first computer;

encrypting a message;

transmitting to a server said encrypted address and said encrypted message, wherein said server later decrypts said encrypted address and transmits said encrypted message to said second computer,

wherein at least one of said first computer and said second computer are separated from said server by a firewall.

27. A system for transmitting information between a first computer and a second computer comprising:

a first application;

a first computer hosting a first client, said first client receiving data from said first application, said first computer transmitting said data to a server, said server forwarding said data to a second client residing on said second computer, said second client forwarding said data to at least a second application,

wherein at least one of said first computer and said second computer are separated from said server by a firewall.

39. A method for transmitting information across a network between a first computer and a second computer comprising the steps of:

receiving at said second computer from a server a header with encrypted information and an encrypted message,

decrypting said encrypted information;

decrypting said encrypted message,

wherein said server received a previously encrypted address of said second computer, said server decrypted said previously encrypted address, and said server transmitted said encrypted message to said second computer using the decrypted address of said second computer.

41. A method for transmitting information across a network between a first computer and a second computer comprising the steps of:

receiving at said second computer from a server a header with encrypted information and an encrypted message,

decrypting said encrypted information;

decrypting said encrypted message,

wherein said server received a previously encrypted address of said second computer, said server decrypted said previously encrypted address, and said server transmitted said encrypted message to said second computer using the decrypted address of said second computer, and

wherein at least one of said first computer and said second computer are separated from said server by a firewall.

42. The method according to claim 41, wherein said header includes at least one of an encrypted address, an encrypted size, an encrypted CRC, an encrypted header length, an encrypted message length, an encrypted asset identifier, an encrypted name of at least one client, and an encrypted application ID, an encrypted time and date stamp, an encrypted location ID, an encrypted message types, an encrypted attachment identifier, an encrypted packet number, and an encrypted pre-compressed data size for an associated message.

43. A computer readable medium storing a program for transmitting information across a network between a first computer and a second computer, said program comprising the steps of:

receiving at said second computer from a server a header with encrypted information and an encrypted message,

decrypting said encrypted information;

decrypting said encrypted message,

wherein said server received a previously encrypted address of said second computer, said server decrypted said previously encrypted address, and said server transmitted said encrypted message to said second computer using the decrypted address of said second computer.

44. The computer readable medium according to claim 43, wherein said header includes at least one of an encrypted address, an encrypted size, an encrypted CRC, an encrypted header length, an encrypted message length, an encrypted asset identifier, an encrypted name of at least one client, and an encrypted application ID, an encrypted time and date stamp, an encrypted location ID, an encrypted message types, an encrypted attachment identifier, an encrypted packet number, and an encrypted pre-compressed data size for an associated message.

46. The computer readable medium according to claim 45, wherein said header includes at least one of an encrypted address, an encrypted size, an encrypted CRC, an encrypted header length, an encrypted message length, an encrypted asset identifier, an encrypted name of at least one client, and an encrypted application ID, an encrypted time and date stamp, an encrypted location ID, an encrypted message types, an encrypted attachment identifier, an encrypted packet number, and an encrypted pre-compressed data size for an associated message.

45. A computer readable medium storing a program for transmitting information across a network between a first computer and a second computer, said program comprising the steps of:

receiving at said second computer from a server a header with encrypted information and an encrypted message,

decrypting said encrypted information;

decrypting said encrypted message,

wherein said server received a previously encrypted address of said second computer, said server decrypted said previously encrypted address, and said server transmitted said encrypted message to said second computer using the decrypted address of said second computer, and

wherein at least one of said first computer and said second computer are separated from said server by a firewall.