Method and apparatus for sharing data between a server and a plurality of clients

• US 20040039905A1
• Filed: 08/26/2002
• Published: 02/26/2004
• Est. Priority Date: 08/26/2002
• Status: Active Grant

• Current Assignee: Axxia Technologies
• Original Assignee: Axxia Technologies
• Inventors: Leoutsarakos, Nicholaos I.
• Granted Patent: US 7,849,305 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A method and apparatus is disclosed for controlling the sharing of data in a network between a plurality of client units and a corporate server using a secure bridging unit. Each of the plurality of client units, the corporate server and the secure bridging unit are identified using an identifier. A client unit communicates with the corporate server using the secure bridging unit. A central management unit manages the plurality of client units, the corporate server and the secure bridging unit.

Claims

1. A method for managing a sharing of data between a plurality of client units and a corporate server located on a network, the method comprising the steps of:

authenticating a client unit with a central management server, the authenticating comprising the providing of an identification of the client unit to the central management server;

providing from the client unit to the central management server an identification of a corporate server to which the client unit wishes to communicate;

providing from the central management server to the client unit an address on the network of the location of a suitable secure bridging unit using at least one of the identification of the client unit;

providing a message to communicate to the suitable secure bridging unit from the client unit, said message comprising said identification of the corporate server to which said client unit wishes to communicate and data to provide to said corporate server;

if said message to communicate with the suitable secure bridging unit is accepted by said secure bridging unit, transferring at least one part of said message to said corporate server;

whereby the use of the corporate server and the secure bridging unit enables a control of the communication between the client unit and the corporate server.

2. The method as claimed in claim 1, further comprising the authenticating of said client unit by said corporate server.

3. The method as claimed in claim 1, wherein the authenticating of said client unit by said central management server is performed using a bilateral secure authentication.

4. The method as claimed in claim 3, wherein the bilateral secure authentication is performed using Secure Socket Layer (SSL).

5. The method as claimed in claim 1, wherein the selecting of a suitable secure bridging unit according to said identification provided, further comprises providing, from said central management server to the client unit, a corporate server session key encrypting at least one part of said message for said corporate server.

6. The method as claimed in claim 5, wherein the selecting of a suitable secure bridging unit according to said identification provided, further comprises providing, from said central management server to the client unit, a secure bridging encryption key for encrypting at least one part of said encrypted message to communicate transmitted to said secure bridging unit.

7. The method as claimed in claim 5 wherein said providing of said server session key is performed randomly in time and kept in volatile memory.

8. The method as claimed in claim 6, wherein said providing of said secure bridging encryption key is performed randomly in time and kept in volatile memory.

9. The method as claimed in claim 1, in which the sharing of data is performed between a plurality of client units and a plurality of corporate servers.

10. The method as claimed in claim 1, wherein said network is a Wide Area Network (WAN).

11. The method as claimed in claim 10, wherein said Wide Area Network is Internet, further wherein the authenticating is performed by accessing a Web server.

12. The method as claimed in claim 1, wherein said secure bridging unit is chosen according to a location of a secure bridging unit with respect to said client unit and to said corporate server on said network.

13. The method as claimed in claim 1, wherein said secure bridging unit is chosen according to a workload of a secure bridging unit.

14. A method for managing a sharing of data between a plurality of parking lot units and a central computer of a party located on a network, the method comprising the steps of:

authenticating a parking lot unit with a central management server, the authenticating comprising the providing of an identification of the parking lot unit to the central management server;

providing from the parking lot unit to the central management server an identification of a central computer to which the parking lot unit wishes to communicate;

providing from the central management server to the parking lot unit an address on the network of the location of a suitable secure bridging unit using at least one of the identification of the parking lot unit;

providing a message to communicate to the suitable secure bridging unit from the parking lot unit, said message comprising said identification of the central computer to which said parking lot unit wishes to communicate and data to provide to said central computer;

if said message to communicate with the suitable secure bridging unit is accepted by said secure bridging unit, transferring at least one part of said message to said central computer;

whereby the use of the central computer and the secure bridging unit enables a control of the communication between the parking lot unit and the central computer.

15. The method as claimed in claim 14, further comprising the step of storing at least one part of said message to communicate in said central management server.

16. The method as claimed in claim 15, further comprising the step of sending an invoice to said party using said at least one part of said message stored.

17. The method as claimed in claim 14, further comprising the step of providing a client username and a client password to said central management server for adding a new parking lot unit to said plurality of parking lot units and receiving, from said central management server, an identification for said new parking lot unit.

18. The method as claimed in claim 17, wherein said providing of said client username and said client password is performed via a webserver.

19. The method as claimed in claim 17, further comprising the step of providing an encryption key from said central management server to said new parking lot unit.

20. The method as claimed in claim 16, wherein the step of sending an invoice to said party comprises the step of computing a number of session created using the at least one part of said message stored.

21. The message as claimed in claim 16, wherein the step of sending an invoice to said party comprises the step of computing a number indicative of an amount of data transferred using the at least one part of said message stored.

22. A system for managing sharing of data between a plurality of client units and a corporate server located on a network, the system comprising:

a plurality of client units, each client unit comprising a client unit identifier identifying said client unit, the client unit further comprising a corporate server identifying said corporate server to which said client unit intends to share said data;

a corporate server and comprising a corporate server identifier;

a central management server, located on said network, comprising a list of secure bridging unit identifier, the central management server further comprising an authentication module receiving an authentication request from a client unit for a corporate server and providing, in response, to said client unit, an address on said network of a suitable secure bridging unit according to said list of secure bridging unit identifier;

at least one secure bridging unit comprising at least one relation between a client unit identifier and a corporate server identifier, the secure bridging unit further comprising an address on said network of said corporate server, the secure bridging unit receiving a communication request from a client unit and-forwarding at least one part of said communication request to said corporate server;

wherein data shared between said corporate server and said client unit are managed using the central management server in combination with the secure bridging unit.

23. The system as claimed in claim 22, wherein the central management server comprises a list of corporate server encryption session key, further wherein said corporate server comprises a corporate server encryption session key provided from said list of corporate server encryption session key by said central management server.

24. The system as claimed in claimed in claim 22, wherein the central management server comprises a list of secure bridging unit encryption key, further wherein said secure bridging unit comprises a secure bridging unit encryption key provided from said list of secure bridging unit encryption key by said central management server.

25. The system as claimed in claim 22, wherein said authentication module operates using Secure Socket Layer (SSL) protocol.

26. The system as claimed in claim 22, wherein said at least one secure bridging unit, said plurality of client units, said corporate server are identified using a username and a password, the central management server further comprising a list of said username and said password.

27. The system as claimed in claim 22, wherein said plurality of client units are identified using a username and a password, at least one corporate server further comprises a list of said username and said password.

28. The system as claimed in claim 22, wherein Kerberos is used to authenticate.