High performance server data delivery system and method

• US 20030191717A1
• Filed: 06/04/2001
• Published: 10/09/2003
• Est. Priority Date: 06/05/1998
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Johnson, Teddy C.
• Application Number:
  US09/873,517
• Publication Number:
  US 20030191717A1
• Time in Patent Office: Days
• US Class Current: 705/51
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A secure, high-throughput, scalable apparatus and method of downloading software products and other data to authorized customers over the internet. A plurality of processes are run on different host machines. The machines communicate with each other via a secured link. This link uses DES encryption and an index to the DES keys, rather than passing the key itself over the link. Once derived, the indexed key is used for encryption and decryption over the communication link. File staging is accomplished by using a hard link between the file storage area and the customer account area. A customer account database is maintained on a secure machine as protected via a firewall. A secured link is also used through the firewall to securely allocate user access to file downloads.

Claims

1. A method of facilitating the transfer of data to authorized users over the Internet, the method comprising:

(i) running a web server process on at least one host machine;

(ii) running an ftp server process on a separate host machine;

(iii) establishing a secure communication link between the host machines;

(iv) establishing at least one hard link between storeroom file storage areas and customer account file storage areas, the at least one hard link comprising a pointer to a file; and

(v) dynamically allocating customer access information from a secured database.

2. The method of claim 1, wherein said establishing a secure communication link comprises using a protocol for the exchange of arbitrary sized packets of ASCII data delimited by carriage return and newline boundary markers, and using DES encryption with N keys, said establishing a secure communication link comprising:

(a) finding the port number P used for the connection;

(b) computing an index value I, where I=P modulo N; and

(c) using the DES key residing at index I to encrypt and decrypt the data stream.

3. The method of claim 2, wherein the DES encryption creates a cipher string, further comprising filtering the cipher string.

4. The method of claim 1, further comprising issuing at least one change root command to limit access by the authorized users in the customer account file storage areas.

5. The method of claim 1, wherein the establishing at least one hard link between storeroom file storage areas and customer account file storage areas comprises creating a file pointer in the customer account file storage areas which points to a file in the storeroom file storage areas so that the file in the storeroom file storage areas can be accessed from the customer account file storage areas without copying the file to the customer account file storage areas.

6. The method of claim 1, further comprising said web server process receiving a request from one of said authorized users for at least one file.

7. The method of claim 6, further comprising said web server process determining whether to provide said at least one file by accessing a database on a host machine through a firewall.

8. The method of claim 1, further comprising said ftp server process allocating space on said customer account file storage areas for said at least one file.

9. The method of claim 8, further comprising creating a hard link on said space on said customer account file storage areas, said hard link pointing to said at least one file, wherein said at least one file resides in said storeroom file storage areas.

10. The method of claim 8, further comprising allowing at least one of said authorized users to access said space on said customer account file storage areas.

11. The method of claim 10, wherein the allowing at least one of said authorized users to access said space on said customer account file storage areas comprises issuing a change root command making said space a root directory for said at least one of said authorized users.