Secured system for accessing application services from a remote station

• US 20020169878A1
• Filed: 04/17/2002
• Published: 11/14/2002
• Est. Priority Date: 12/18/1996
• Status: Abandoned Application

• Current Assignee: Alexander S. Orenshteyn
• Original Assignee: Alexander S. Orenshteyn
• Inventors: Orenshteyn, Alexander S.
• Application Number:
  US10/124,051
• Publication Number:
  US 20020169878A1
• Time in Patent Office: Days
• US Class Current: 709/227
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 9/5055 considering software capabilities, i.e. software resources associated or available to the machine
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/08 specially adapted for terminal emulation, e.g. Telnet
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A secured system for accessing application services from at least one application program where at least one client station having low-level application independent logics stored therein and at least one controller for controlling the low-level application independent logics, the low-level application logics including a user interface logic, a device control logic for controlling devices, a file system logic, and a communication interface logic, and wherein at least one client station has means to restrict access to said application independent logics, at least one application server having high-level application logic stored in a server device for running at least one application program, the server device being coupled to said at least one application server and low-level interface between said at least one client station and said at least one server for connecting said at least one client station to said at least one application server, wherein upon accessing by said at least one client station, said at least one application server runs at least one application program which selectively controls said low-level application independent logics for controlling devices of said a t least one client station and accessing data of said at least one client station without permanently storing said at least one client station data in said at least one server. There is also a description of a secure operating system and method and a secured system and method of construction of a computer system as well as description of system and method of how to preserve a running current state of an application program for security and relocation purpose.

Claims

1. A computing and communication device, comprising:

a set “

A”

of processing element(s) with at least one processing element containing application-independent data processing logics therein;

a set “

B”

of processing element(s) containing at least one processing element capable of executing application logics therein;

at least one interface between said set “

A”

of processing element(s) and said set “

B”

of processing element(s);

wherein said interface includes a means to enable said application logics to interact with said application-independent logics to do at least one of obtaining data and controlling functioning of said set “

A”

of processing element(s) by application logics contained therein said set “

B”

of processing element(s).

2. System of claim 1, wherein said application-independent logics are digital signal processing logics.

3. System of claim 1, wherein said set “

B”

of processing element(s) further has at least one communications interface.

4. System of claim 3, wherein said set “

B”

is able to use said at least one communications interface to load application logics.

5. System of claim 1, wherein said set “

A”

has means to do at least one one of input data from and output data to the physical world outside of said computing device.

6. System of claim 1, wherein said at least one processing element contained in said set “

A”

is optimized to processes said application-independent logics.

7. System of claim 1, wherein said application-independent logics are optimized to be executed by said at least one processing element of said set “

A”

.

8. System of claim 1, wherein said application-independent logics cannot be changed by said application logics.

9. System of claim 1, wherein said set “

A”

has means to restrict access to said application independent logics.

10. System of claim 1, wherein said set “

A”

has means to associate a particular subset of said application-independent logics with particular application logics and to restrict access by said application logics to said subset.

12. Method of claim 10, wherein said at least one client device has means to restrict access to said at least one of specific operating system or device operations of said client device.

13. Method of claim 10, wherein said replacements of said actions take place during at least one step of application service program life, i.e. pre-processing step, compiling step, lining step, executable code post-processing step, process loading step, or application program process run-time step.

11. A method of converting a conventional application program, which is designed to interact with a particular operating software and hardware platform, to a network application service program which communicates with at least one client device via a standard service interface communications protocol, comprising the steps of:

replacing actions of code, said actions designed to interact with said particular operating platform, of said conventional application program with actions for generating command data packets using said standard service interface communications protocol, without modifying application logics of said conventional application program, to convert said conventional application program to said network application program, so that an application server is able to transport said command data packets to said client device for controlling at least one of specific operating software or device operations of said client device;

wherein said network application program runs within an application server, accesses data of said client device, and is able to control at least one of specific operating software or device operations of said client device, when said client device connects to said network application program, as required by said network application program logics.

15. Method of claim 13, wherein said at least one client device is unable to read or copy the code of said at least one application logic.

16. Method of claim 13, wherein said at least one application server is able process data of said at least one client device without having to permanently co-locate said data corresponding to said at least one client device with said at least one application server.

18. Method of claim 17, without said at least one application server having to permanently store said data in a server device coupled to said at least one application server or within said application server.

19. Method of claim 17, wherein said application logics can be accessed and interacted with by at least one managing client device so that said at least one managing client device is able to control and access application-independent logics of said at least one managed client device via said at least one application server.

20. Method of claim 17, wherein different client devices may use different communication protocols to interface with said at least one application server.

14. A method of securely accessing application services from at least one application server, comprising the steps of:

accessing at least one application server by at least one client device to connect to said at least one application logic on said at least one application server;

wherein said at least one client device has application-independent logics stored therein and at least one controller for controlling said application-independent logics, said application-independent logics including at least one of a user interface logic, a device control logic for controlling devices, a file system logic, and a communications interface logic; and

wherein said at least one application server has application logic stored in a server device coupled to said at least one application server, for executing said at least one application logic;

having said oat least one application server selectively interact with said application-independent logics to retrieve data corresponding to said at least one application logic from said at least one client device upon optional authorization from said at least one client device;

processing said corresponding data on said at least one application logic.

17. A secure method for managing devices, and/or data storage systems of at least one client device, comprising steps:

at least one application server having application logic stored within a server device coupled to said at least one application server for running at least one management application program, and said at least one application server being capable of accessing multiple devices and data storage systems, each coupled to at least one respective client device, when each client device interfaces with said at least one application server to access said at least one application program;

wherein each interfaced server selectively accesses said devices, said storage systems or both to form a centralized device and storage management system for controlling and accessing devices, storage systems, states, or configurations of said at least one client device;

wherein upon accessing by said at least one client device, said at least one application server runs at least one application program and selectively controls application-independent logics of said at least one client device for controlling devices of said at least one client device and for manipulating data of said at least one client device; and

wherein said at least one application server is able to process said corresponding data of said at least one client device on said at least one managing application program.