Traversing firewalls

• US 20040187028A1
• Filed: 03/21/2003
• Published: 09/23/2004
• Est. Priority Date: 03/21/2003
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Reese, Curtis, Perkins, Gregory Eugene
• Granted Patent: US 9,106,526 B2
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/026 using e-messaging for transporting management information, e.g. email, instant messaging or chat
• CPC Class Codes: H04L 41/08 Configuration management of networks or network elements address allocation H04L61/50
• CPC Class Codes: H04L 43/0811 by checking connectivity
• CPC Class Codes: H04L 51/18 Commands or executable codes
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70

Abstract

Traversing a firewall. A method embodiment includes receiving, from behind the firewall, an electronic mail message with instructions to establish a connection with a device located outside the firewall. A connection is then established through the firewall with the device outside the firewall according to the instructions in the electronic mail message.

Claims

1. A method for traversing a firewall, comprising:

receiving, behind the firewall, an electronic mail message with instructions to establish a connection with a device located outside the firewall; and

establishing, through the firewall, a connection with the device outside the firewall according to the instructions in the electronic mail message.

2. A method for traversing a firewall, comprising:

receiving, behind the firewall, an electronic mail message originating from outside the firewall, the electronic mail message containing a network address for a device located outside the firewall; and

establishing, through the firewall, a connection with the device outside the firewall using the network address.

3. The method of claim 2, wherein the electronic mail message also includes credentials, the method further comprising validating the credentials before establishing a connection.

4. The method of claim 2, wherein the electronic mail message also includes timing instructions and wherein establishing comprises establishing a connection with the device outside the firewall using the network address and according to the timing instructions.

5. The method of claim 2, further comprising exchanging data between a device behind the firewall and a device outside the firewall using the established connection.

6. The method of claim 5, further comprising acquiring and validating credentials before any other data is exchanged.

7. A method for traversing a firewall to monitor a state machine, comprising:

sending an electronic mail message to a state machine located behind the firewall, the mail message containing instructions for the state machine to establish a connection with a remote computer located outside the firewall;

once a connection is established, receiving state data for the state machine sent over the connection; and

monitoring the state data.

8. The method of claim 7, further comprising, once a connection is established, sending a request for state data over the connection, and wherein receiving comprises receiving state data sent in response to the request.

9. The method of claim 7, further comprising, once a connection is established, determining if an access request is pending and sending a request for state data over the connection if it is determined that an access request is pending, and wherein receiving comprises receiving state data sent in response to the request.

10. The method of claim 7, further comprising adjusting the state data and sending the adjustment over the connection with instruction to apply the adjustment.

11. A method for traversing a firewall to allow remote monitoring of a state machine, comprising:

receiving, behind the firewall, an electronic mail message originating from outside the firewall, the electronic mail message containing instructions for establishing a connection with a remote computer located outside the firewall;

establishing, through the firewall, a connection with the remote computer according to the instruction in the electronic mail message; and

sending state data for the state machine over the connection.

12. The method of claim 11, further comprising, once a connection is established, receiving a request for state data sent over the connection, and wherein sending comprises sending state data only after receiving the request.

13. The method of claim 11, further comprising receiving an adjustment to the state data sent over the connection and applying the adjustment.

14. A method for traversing a firewall to allow remote monitoring of a state machine, comprising:

sending an electronic mail message to a state machine located behind the firewall, the mail message containing instructions for establishing a connection with a remote computer located outside the firewall;

receiving, behind the firewall, the electronic mail message;

establishing, through the firewall, a connection with the remote computer according to the instructions in the electronic mail message;

sending state data for the state machine over the connection; and

monitoring the state data sent over the connection.

15. The method of claim 14, further comprising, once a connection is established, sending a request for state data over the connection, and wherein sending state data comprises sending state data in response to the request.

16. The method of claim 14, further comprising, once a connection is established, determining if an access request is pending and sending a request for state data over the connection if it is determined that an access request is pending, and wherein sending state data comprises sending state data in response to the request.

17. The method of claim 14, further comprising:

adjusting the state data;

sending the adjustment over the connection; and

applying the adjustment.

18. Computer readable media having instructions for:

receiving, behind a firewall, an electronic mail message with instructions to establish a connection with a device located outside the firewall; and

establishing, through the firewall, a connection with the device outside the firewall according to the instructions in the electronic mail message.

19. Computer readable media having instructions for:

receiving, behind a firewall, an electronic mail message originating from outside the firewall, the electronic mail message containing a network address for a device located outside the firewall; and

establishing, through the firewall, a connection with the device outside the firewall using the network address.

20. The media of claim 19, wherein the electronic mail message also includes credentials, the media having further instructions for validating the credentials before establishing a connection.

21. The media of claim 19, wherein the electronic mail message also includes timing instructions and wherein the instructions for establishing comprises instructions for establishing a connection with the device outside the firewall using the network address and according to the timing instructions.

22. The media of claim 19, having further instructions for exchanging data between a device behind the firewall and a device outside the firewall using the established connection.

23. The media of claim 22, having further instructions for acquiring and validating credentials before any other data is exchanged.

24. Computer readable media having instructions for:

sending an electronic mail message to a state machine located behind a firewall, the mail message containing instructions for the state machine to establish a connection with a remote computer located outside the firewall;

receiving state data for the state machine sent over the connection; and

monitoring the state data.

25. The media of claim 24, having further instructions for sending a request for state data over the connection, and wherein the instructions for receiving comprise instructions for receiving state data sent in response to the request.

26. The media of claim 24, having further instructions for determining if an access request is pending and sending a request for state data over the connection if it is determined that an access request is pending, and wherein the instructions for receiving comprise instructions for receiving state data sent in response to the request.

27. The media of claim 24, having further instructions for adjusting the state data and sending the adjustment over the connection with instruction to apply the adjustment.

28. Computer readable media having instructions for:

receiving, behind a firewall, an electronic mail message originating from outside the firewall, the electronic mail message containing instructions for establishing a connection with a remote computer located outside the firewall;

establishing, through the firewall, a connection with the remote computer according to the instruction in the electronic mail message; and

sending state data for the state machine over the connection.

29. The media of claim 28, having further instructions for receiving a request for state data sent over the connection, and wherein the instructions for sending comprise instructions for sending state data only after receiving the request.

30. The media of claim 28, having further instructions for receiving an adjustment to the state data sent over the connection and applying the adjustment.

31. A system for traversing a firewall to monitor a state machine, comprising:

a mail module outside the firewall and operable to send an electronic mail message to a destination behind the firewall, the mail message containing instructions to establish a connection with a device located outside the firewall; and

a state module operable to receiving state data for the state machine sent over a connection established according to instructions in an electronic mail message sent by the mail module.

32. The system of claim 31, wherein the state module is further operable to send a request for state data over a connection established according to instructions in an electronic mail message sent by the mail module.

33. The system of claim 32, wherein the state module is further operable to determine if an access request is pending and to send a request for state data if it is determined that an access request is pending.

34. The system of claim 31 wherein the state module is further operable to adjust received state data and to send the adjustment over a connection established according to instructions in an electronic mail message sent by the mail module.

35. A system for traversing a firewall to allow remote monitoring of a state machine, comprising:

a mail service located behind the firewall and operable to receive an electronic mail message originating from outside the firewall, the electronic mail message containing instructions for establishing a connection with a device located outside the firewall; and

a state service behind the firewall and operable to establish connection according to instructions in an electronic mail message received by the mail service and to send state data for the state machine over the connection.

36. The system of claim 35, wherein the state service is further operable to receive a request for state data sent over the connection and to send state data only after receiving the request.

37. The system of claim 35, wherein the state service is further operable to receive an adjustment to the state data sent over the connection and to apply the adjustment.

38. A system for traversing a firewall to allow remote monitoring of a state machine, comprising:

a mail module outside the firewall and operable to send an electronic mail message to a destination behind the firewall, the mail message containing instructions for establishing a connection with a device outside the firewall;

a mail service behind the firewall and operable to receive an electronic mail message sent by the mail module;

a state service behind the firewall and operable to establish a connection according to instructions in an electronic mail message received by the mail service and to send state data for the state machine over the connection; and

a state monitor outside the firewall and operable to monitor state data sent over the connection.

39. The system of claim 38, further comprising a state module outside the firewall and operable to send a request for state data over a connection established by the state service, and wherein the state service is operable to send state data in response to the request sent by the state module.

40. The system of claim 38, further comprising a state module outside the firewall and operable to determine if an access request is pending and to send a request for state data over a connection established by the state service if it is determined that an access request is pending, and wherein the state service is operable to send state data in response to the request sent by the state module.

41. The system of claim 38, further comprising a state module outside the firewall and operable to adjust state data sent by the state service and to send the adjustment over a connection established by the state service, and wherein the state service is further operable to apply an adjustment sent by the state module.

42. A system for traversing a firewall to allow remote monitoring of a state machine, comprising:

a means, outside the firewall, for sending an electronic mail message to a destination behind the firewall, the mail message containing instructions for establishing a connection with a device outside the firewall;

a means, behind the firewall, for receiving an electronic mail message containing instructions for establishing a connection with a device outside the firewall;

a means, behind the firewall, for establishing a connection according to instructions in a received electronic mail message;

a means for sending state data for the state machine over an established connection; and

a means, outside the firewall, for monitoring state data sent over an established connection.