System and method for remotely accessing a home server while preserving end-to-end security

• US 20030065791A1
• Filed: 09/28/2001
• Published: 04/03/2003
• Est. Priority Date: 09/28/2001
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Warrier, Ulhas, Garg, Ajay
• Granted Patent: US 7,010,608 B2
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2567 for reachability, e.g. inquiring the address of a correspondent behind a NAT server
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/289 Intermediate processing functionally located close to the data consumer application, e.g. in same machine, in same home or in same sub-network
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

The invention relates to a system and method to allow a remote client to remotely access a home server of a home or private network while preserving end-to-end security. A home server includes a service component. When a server application performs a network operation to start listening for a connection from a remote client, it is detected by the service component. The remote client is coupled through the Internet and through an Internet agent to a home gateway running a Network Address Translation (NAT) software program. The gateway connects to a forwarding agent. The forwarding agent is connected to the home server and provides the Internet agent with access parameters received from the home server. If the remote client provides proper access parameters to the Internet agent, the Internet agent provides the remote client access to services running on the home server.

Claims

1. A system comprising:

a home server including a service component, the service component to detect when a server application listens for a connection;

a forwarding agent connected to the home server, the forwarding agent to provide an Internet agent with access parameters received from the home server;

a remote client coupled through the Internet and to the system by the Internet agent; and

wherein, if the remote client provides proper access parameters to the Internet agent, the Internet agent provides the remote client access to a service running on the home server.

2. The system of claim 1, wherein, the access parameters include a username and a password.

3. The system of claim 1, wherein, the service component informs the forwarding agent that the server application is listening for a connection and forwards the access parameters to the forwarding agent.

4. The system of claim 1, further comprising, a gateway running a Network Address Translation (NAT) software program, the gateway connecting the forwarding agent to the Internet agent via the Internet.

5. The system of claim 4, wherein the forwarding agent establishes an outgoing connection with the Internet agent through the NAT, to provide a channel for incoming connection requests.

6. The system of claim 5, wherein the Internet agent and the forwarding agent become layer 4 routers.

7. The system of claim 1, wherein the service component allows access to the server application by a remote client by:

a) inquiring whether a user would like the server application to be accessible from a remote client; and

b) setting required access parameters.

8. A system comprising:

a home server including a service component, the service component to detect when a server application listens for a connection;

a remote client coupled through the Internet and to the system by an Internet agent, the Internet agent listening on behalf of the home server for connection requests from a remote client;

a forwarding agent connected to the home server, wherein the service component informs the forwarding agent that the server application is listening for a connection and forwards the access parameters to the forwarding agent, the forwarding agent to provide the Internet agent with access parameters received from the home server; and

a gateway running a Network Address Translation (NAT) software program, the gateway connecting the forwarding agent to the Internet agent via the Internet;

wherein, if the remote client provides proper access parameters to the Internet agent, the Internet agent provides the remote client access to a service running on the home server.

9. The system of claim 8, wherein the forwarding agent establishes an outgoing connection with the Internet agent through the NAT, to provide a channel for incoming connection requests.

10. The system of claim 9, wherein the Internet agent and the forwarding agent become layer 4 routers.

11. The system of claim 10, wherein the service component allows access to the server application by a remote client by:

a) inquiring whether a user would like the server application to be accessible from a remote client; and

b) setting required access parameters.

12. A method comprising:

detecting when a server application listens for a connection from a remote client on a home server, the remote client coupled through the Internet to the home server by an Internet agent; and

providing the Internet agent with access parameters from the home server;

wherein, if the remote client provides proper access parameters to the Internet agent, the Internet agent provides the remote client access to a service running on the home server.

13. The method of claim 12, wherein, the access parameters include a username and a password.

14. The method of claim 12, wherein, the home server executes a server application.

15. The method of claim 12, wherein, a gateway runs a Network Address Translation (NAT) software program and connects the Internet agent to the home server.

16. The method of claim 15, further comprising establishing an outgoing connection with the Internet agent through the NAT, to provide a channel for incoming connection requests.

17. The method of claim 12, further comprising:

a) inquiring whether a user would like a server application to be accessible from a remote client; and

b) setting required access parameters.

18. A machine-readable medium having stored thereon instructions, which when executed by a machine, causes the machine to perform operations comprising:

detecting when a server application listens for a connection from a remote client on a home server, the remote client coupled through the Internet to the home server by an Internet agent; and

providing the Internet agent with access parameters from the home server;

wherein, if the remote client provides proper access parameters to the Internet agent, the Internet agent provides the remote client access to a service running on the home server.

19. The machine-readable medium of claim 18, wherein, the access parameters include a username and a password.

20. The machine-readable medium of claim 18, wherein, a gateway runs a Network Address Translation (NAT) software program and connects to the Internet agent.

21. The machine-readable medium of claim 20, further comprising establishing an outgoing connection with the Internet agent through the NAT, to provide a channel for incoming connection requests.

22. The machine-readable medium of claim 18, further comprising:

a) inquiring whether a user would like a server application to be accessible from a remote client; and

b) setting required access parameters.

23. An apparatus comprising:

a home server having a processor to perform operations including,

detecting when a server application listens for a connection from a remote client on a home server, the remote client coupled through the Internet to the home server by an Internet agent; and

providing the Internet agent with access parameters;

wherein, if the remote client provides proper access parameters to the Internet agent, the Internet agent provides the remote client access to a service running on the home server and the home server responds to requests from the remote client.

24. The apparatus of claim 23, wherein, the access parameters include a username and a password.

25. The apparatus of claim 23, wherein, a gateway runs a Network Address Translation (NAT) software program and connects the home server to the Internet agent.

26. The apparatus of claim 25, further comprising establishing an outgoing connection with the Internet agent through the NAT, to provide a channel for incoming connection requests.

27. The apparatus of claim 23, further comprising:

a) inquiring whether a user would like a server application to be accessible from a remote client; and

b) setting required access parameters.