MICROKERNEL GATEWAY SERVER

• US 20110296026A1
• Filed: 12/23/2009
• Published: 12/01/2011
• Est. Priority Date: 12/30/2008
• Status: Active Grant

• Current Assignee: EADS Secure Networks
• Original Assignee: EADS Secure Networks
• Inventors: Hauguet, Francis, Clermont, Nicolas, Meier, Guillaume, Chaland, Marc
• Granted Patent: US 9,282,079 B2
• Time in Patent Office: Days
• US Class Current: 709/226
• CPC Class Codes: G06F 11/2043 where the redundant components share a common memory address space
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 9/544 Buffers; Shared memory; Pipes
• CPC Class Codes: H04L 12/4625 Single bridge functionality, e.g. connection of two networks over a single bridge
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 69/12 Protocol engines
• CPC Class Codes: H04L 69/32 Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level
• CPC Class Codes: H04L 69/321 Interlayer communication protocols or service data unit [SDU] definitions; Interfaces between layers

Abstract

A gateway server includes a first subsystem including a media level, a communication level and a control level; a microkernel; an IPC controller configured to manage communication between the server resources allocated to the first subsystem a second subsystem including a second media level, a second communication level and a second control level such that the microkernel and the IPC controller also manage communication between the server resources allocated to the second subsystem; and a memory with shared reading and writing, established under the control of the microkernel and the IPC controller, between the control level of the first subsystem and the control level of the second subsystem.

Claims

1. A gateway server comprising:

a first subsystem including a media level, a communication level and a control level;

a microkernel;

an IPC controller configured to manage communication between the server resources allocated to the first subsystem

a second subsystem including a second media level, a second communication level and a second control level such that the microkernel and the IPC controller also manage communication between the server resources allocated to said second subsystem; and

a memory with shared reading and writing, established under the control of the microkernel and the IPC controller, between the control level of the first subsystem and the control level of the second subsystem.

2. The server according to claim 1, wherein each subsystem includes means for encoding the information, received in a request in accordance with a network communications protocol, into a binary structure in accordance with a communications protocol for communication between the control levels of the first subsystem and of the second subsystem.

3. The server according to claim 2, wherein each subsystem includes means for encoding the information into a binary structure after processing of said information in the communication level and then in the control level of said subsystem.

4. The server according to claim 2, comprising means for identifying, as a function of the nature of the request, data which are characteristic of the request and have to be encoded in the binary structure.

5. The server according to claim 2, comprising means for associating the received request with a request predefined in a limited list of authorised requests.

6. The server according to claim 1, wherein the microkernel comprises means for associating each application implemented by a subsystem with the control of a server resource.

7. The server according to claim 1, comprising means for limiting communication in such a way that neither the media level nor the communication level of a subsystem can communicate directly with the media level or the communication level of the other subsystem without the intermediary of the control levels of the subsystems.

8. The server according to claim 1, comprising means for analysing the syntax and validity of the protocols filtered by each layer used in the server.

9. A method for controlling a gateway server comprising a first subsystem including a media level, a communication level and a control level, a microkernel an IPC controller configured to manage communication between the server resources allocated to the first subsystem, a second subsystem including a second media level, a second communication level and a second control level such that the microkernel and the IPC controller also manage communication between the server resources allocated to said second subsystem, the method comprising transmitting requests between the control level of the first subsystem and the control level of the second subsystem with the aid of a server according to claim 1, the requests transmitted using a memory with shared reading and writing, established under the control of the microkernel.

10. A computer program product including program code instructions recorded on a support which can be read by a computer to implement the method according to claim 9 when said program runs on a computer.