System and method for processing callback requests included in web-based procedure calls through a firewall

• US 20040019804A1
• Filed: 07/24/2002
• Published: 01/29/2004
• Est. Priority Date: 07/24/2002
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: St. Pierre, Robert P.
• Granted Patent: US 7,526,797 B2
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

A method of utilizing transport protocols to provide bi-directional web procedure calls through a fireball is disclosed. A callback request included with a web procedure call provides a destination address and port on the requesting device to be used for receiving results of the requested operation, as well as the address of a broker device. The broker device is authorized to receive messages from addresses outside the fireball and communicate with addresses inside the fireball. The utilization of a callback request included with a web procedure call enables a receiving device to terminate the original connection upon which it received the web procedure call while performing the requested procedure. In situations where the requested procedure takes an extended period of time or the receiving device is responding to a large number of requests, the ability to drop the original connection, perform the procedure, and respond to the requesting device via a new connection with the broker device saves resources on the receiving device. Replies to the request are sent to the requesting device utilizing the destination address and port included as a parameter in the callback request. Access to the receiving and requesting devices is increased as connections do not need to be held open.

Claims

1. In a network having a plurality of interfaced electronic devices, said interfaced electronic devices including a requesting device and a receiving device, said requesting device accessing said receiving device from behind a fireball, a method, comprising the steps of:

receiving over a connection at said receiving device a request from said requesting device, said request including a callback request, said callback request including a return destination on the requesting device and the address of a broker, said broker being an electronic device authorized to contact the requesting device;

dissolving said connection between said requesting device and receiving device;

performing an operation specified in said request;

establishing a new connection between said receiving device and said broker, said new connection utilizing the address of said broker included with said callback request; and

transmitting a message containing the results of said operation over said new connection to the broker, said message including the return destination on said requesting device.

2. The method of claim 1, comprising the further steps of:

receiving a password with said callback request, said password being required to establish said connection with said broker; and

transmitting said password to said broker as part of a connection request prior to establishing said new connection.

3. The method of claim 1, comprising the further step of:

transmitting a pre-determined password to said broker as part of a connection request prior to establishing said new connection.

4. The method of claim 1, comprising the further step of:

receiving in said callback request a uniform resource locator (URL) address for a handler on said requesting device, said handler designated to receive the results of said operation.

5. The method of claim 4, comprising the further step of:

including the address of said handler in the message containing the results of said operation.

6. The method of claim 1 comprising the further steps:

using using the Hypertext Transfer Protocol (HTTP) to make said request; and

including at least one of a PUT request, POST request, and GET request in said request

7. The method of claim 1 wherein said results are transmitted in a protocol different from the protocol used in the request.

8. In a network having a plurality of interfaced electronic devices, said interfaced electronic devices including a requesting device and a receiving device, said requesting device separated from said network by a fireball, a method, comprising the steps of:

sending a message from said requesting device to a broker, said broker being an electronic device authorized to contact said requesting device, said message identifying the address of said receiving device as a future transmitter of data to said broker;

sending a request from said requesting device over a connection to said receiving device, said request including a callback request, said callback request including a return destination on said requesting device and the address of said broker;

receiving the results of an operation specified in said request, said results transmitted from said broker, said broker transmitting said results received from said receiving device to said return destination on said requesting device.

9. The method of claim 8 wherein said message from the requesting device to said broker includes the designation of a password for inclusion by said receiving device in future messages to said broker.

10. The method of claim 9, comprising the further step of:

including a time parameter in said message from the requesting device to said broker, said time parameter limiting the validity of said password to a specified time period.

11. The method of claim 8 wherein said request is an HTTP request.

12. The method of claim 8 wherein said results are received in a protocol different from the protocol used to send the request.

13. The method of claim 8, comprising the further steps of:

creating a separate handler on said requesting device to receive the results of said operation, said handler having a unique uniform resource locator (URL) address;

including said URL address in said callback request; and

receiving the results of said operation at said handler.

14. In a network having a plurality of interfaced electronic devices, said interfaced electronic devices including a requesting device and a receiving device, said requesting device separated from said network by a fireball, a method, comprising the steps of:

providing a broker, said broker being an electronic device authorized to contact said requesting device;

receiving a registration message with said broker from said requesting device, said registration message identifying the address of said receiving device as a future transmitter of data to said broker;

establishing a connection between said broker device and said receiving device in response to a connection request from said receiving device;

receiving a message with said broker over said connection, said message containing the results of an operation specified in a request transmitted from said requesting device to said receiving device, said message including a return destination on said requesting device.

15. The method of claim 14, comprising the further step of:

transmitting from said broker the message received from said receiving device to said destination port address.

16. The method of claim 14 wherein said registration message is accompanied by a password and time parameter to be used by the receiving device in future communications with said broker, said time parameter indicating the period of time for which said password remains valid.

17. The method of claim 16, comprising the further steps of:

receiving a password with said connection request;

comparing the time said password is received by said broker to said time parameter; and

establishing a connection between said receiving device and said broker based on said password being received within the time period specified by said time parameter.

18. The method of claim 16, comprising the further steps of:

receiving a password with said connection request;

comparing the time said password is received by said broker to said time parameter; and

refusing said connection request between said receiving device and said broker based on the expiration of said time parameter.

19. In a network having a plurality of interfaced electronic devices, said interfaced electronic devices including a requesting device and a receiving device, said requesting device accessing said receiving device through a fireball, a medium, said medium holding computer-executable steps for a method, said method comprising the steps of:

receiving over a connection at said receiving device a request from said requesting device, said request including a callback request, said callback request including a return destination on the requesting device and the address of a broker, said broker being an electronic device authorized to contact said requesting device;

dissolving said connection between said requesting device and receiving device;

performing an operation specified in said request;

establishing a new connection between said receiving device and said broker, said new connection utilizing the address of said broker included with said callback request; and

transmitting a message containing the results of said operation over said new connection to the broker for subsequent forwarding to said requesting device, said message including the return destination on said requesting device.

20. The medium of claim 19, wherein said method comprises the further steps of:

receiving a password from said requesting device at said receiving device;

including said password in a connection request sent to said broker to establish said new connection.