METHOD, SYSTEM AND ARTICLE OF MANUFACTURE FOR CONTROLLING CLIENT ACCESS

• US 20100257237A1
• Filed: 06/23/2010
• Published: 10/07/2010
• Est. Priority Date: 03/31/2004
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Fruchtman, Barry
• Granted Patent: US 8,127,023 B2
• Time in Patent Office: Days
• US Class Current: 709/203
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL

Abstract

Provided are a method, system, and article of manufacture, wherein in certain embodiments a request is received to initiate a session. A determination is made whether the session should be initiated with addressing information provided by a client. The session is initiated with trusted addressing information corresponding to the client, in response to determining that the session should not be initiated with the addressing information provided by the client.

Claims

1. A method, comprising:

maintaining a server in a networked computing environment, wherein the server is coupled to a plurality of clients via a network, and wherein storage is coupled to the server within the networked computing environment;

receiving a request, from a client, to initiate a session with the server, wherein the client provides an addressing information for initiating the session;

determining whether the session should be initiated from the server to the client with the addressing information provided by the client; and

initiating the session with trusted addressing information corresponding to the client, wherein the trusted addressing information includes the Internet Protocol Address of the client, in response to determining that the session should not be initiated with the addressing information provided by the client.

2. The method of claim 1, wherein the addressing information provided by the client is different from the Internet Protocol Address of the client.

3. The method of claim 1, wherein:

the network comprises the Internet;

the server and the plurality of clients are configurable to communicate within the networked computing environment; and

the server and the plurality of clients comprise computational devices.

4. The method of claim 1,

wherein receiving the request, determining whether the session should be initiated, and initiating the session are performed by a storage manager,

wherein the storage manager is implemented in the server, wherein the client is separated from the server by a firewall,

wherein the firewall prevents the client from initiating the session with the server, and

wherein the request indicates to a server that the client is ready to perform a task, and that the server should initiate the session with the client.

5. The method of claim 1, further comprising:

receiving the trusted addressing information corresponding to the client from a trusted administrative client, prior to receiving the request to initiate the session.

6. The method of claim 1, further comprising:

initiating the session with the addressing information provided by the client, in response to determining that the session should be initiated with the addressing information provided by the client.

7. A server coupled to a plurality of clients in a networked computing environment, wherein storage is coupled to the server within the networked computing environment, the server comprising:

a memory; and

a processor, wherein the processor performs operations, the operations comprising;

receiving a request, from a client of the plurality of clients, to initiate a session with the server, wherein the client provides an addressing information for initiating the session;

determining whether the session should be initiated from the server to the client with the addressing information provided by the client; and

initiating the session with trusted addressing information corresponding to the client, wherein the trusted addressing information includes the Internet Protocol Address of the client, in response to determining that the session should not be initiated with the addressing information provided by the client.

8. The server of claim 7, wherein the addressing information provided by the client is different from the Internet Protocol Address of the client.

9. The server of claim 7, wherein:

the network comprises the Internet;

the server and the plurality of clients are configurable to communicate within the networked computing environment; and

the server and the plurality of clients comprise computational devices.

10. The server of claim 7,

wherein receiving the request, determining whether the session should be initiated, and initiating the session are performed by a storage manager,

wherein the storage manager is implemented in the server, wherein the client is separated from the server by a firewall,

wherein the firewall prevents the client from initiating the session with the server, and

wherein the request indicates to a server that the client is ready to perform a task, and that the server should initiate the session with the client.

11. The server of claim 7, the operations further comprising:

receiving the trusted addressing information corresponding to the client from a trusted administrative client, prior to receiving the request to initiate the session.

12. The server of claim 7, the operations further comprising:

initiating the session with the addressing information provided by the client, in response to determining that the session should be initiated with the addressing information provided by the client.

13. A computer readable storage medium, wherein code stored in the computer readable storage medium when executed by a processor causes operations, the operations comprising:

maintaining a server in a networked computing environment, wherein the server is coupled to a plurality of clients via a network, and wherein storage is coupled to the server within the networked computing environment;

receiving a request, from a client, to initiate a session with the server, wherein the client provides an addressing information for initiating the session;

determining whether the session should be initiated from the server to the client with the addressing information provided by the client; and

initiating the session with trusted addressing information corresponding to the client, wherein the trusted addressing information includes the Internet Protocol Address of the client, in response to determining that the session should not be initiated with the addressing information provided by the client.

14. The computer readable storage medium of claim 13, wherein the addressing information provided by the client is different from the Internet Protocol Address of the client.

15. The computer readable storage medium of claim 13, wherein:

the network comprises the Internet;

the server and the plurality of clients are configurable to communicate within the networked computing environment; and

the server and the plurality of clients comprise computational devices.

16. The computer readable storage medium of claim 13,

wherein receiving the request, determining whether the session should be initiated, and initiating the session are performed by a storage manager,

wherein the storage manager is implemented in the server, wherein the client is separated from the server by a firewall,

wherein the firewall prevents the client from initiating the session with the server, and

wherein the request indicates to a server that the client is ready to perform a task, and that the server should initiate the session with the client.

17. The computer readable storage medium of claim 13, the operations further comprising:

receiving the trusted addressing information corresponding to the client from a trusted administrative client, prior to receiving the request to initiate the session.

18. The computer readable storage medium of claim 13, the operations further comprising:

initiating the session with the addressing information provided by the client, in response to determining that the session should be initiated with the addressing information provided by the client.