System and method of configuring a remotely managed secure network interface

• US 6,012,100 A
• Filed: 07/14/1997
• Issued: 01/04/2000
• Est. Priority Date: 07/14/1997
• Status: Expired due to Fees

• Current Assignee: FreeGate Corp (Motorola Solutions, Inc.)
• Original Assignee: FreeGate Corp (Motorola Solutions, Inc.)
• Inventors: McManis, Charles, Gastinel, Jean Antoine, Herbert, Mark James, Frailong, Jean-Marc, Tardo, Joseph John, Price, Charles A.
• Primary Examiner(s): Maung, Zarni
• Application Number:
  US08/892,522
• Time in Patent Office: 904 Days
• Field of Search: 395/200.5, 395/200.53, 395/200.54, 395/200.55, 395/200.62, 395/200.47, 395/200.33, 395/200.8, 709/250, 709/223, 709/220, 709/224, 709/225, 709/232, 709/203
• US Class Current: 709/250
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/0856 by backing up or archiving configuration information
• CPC Class Codes: H04L 41/0886 Fully automatic configuration
• CPC Class Codes: H04L 43/065 related to network devices
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

The present invention discloses a network interface device for connecting a client computer system to an external network. The network interface device is configured for the client system by automated procedures and protocols initiated from a remote server. Software programs within the network interface device provide transparent communication between the client computer system and services available on the external network. Similar software programs and a configuration database within the network interface device provide transparent communication between the client computer system and the remote server.

Claims

1. A method of securely providing a service to a client computer coupled to a first network, said method comprising the steps of:

providing said service in a network interface device coupled between said first network and a second network;

providing a service request from said client computer to said network interface device, said service request capable of altering said service in said network interface device;

transmitting said service request to a configuration manager, said configuration manager configured to provide an application program interface between a user interface on said client computer and said service; and

transmitting said service request from said configuration manager to a service manager, said service manager being configured to provide an application program interface between said configuration manager and said service.

2. The method of claim 1 further comprising the steps of:

receiving one or more diagnostic messages from said service in a diagnostic log process;

transmitting said one or more diagnostic messages to one or more diagnostic agents, each diagnostic agent being configured to automatically receive a predetermined type of message from said diagnostic log process;

transmitting one or more reporting messages from said one or more diagnostic log agents to a reporting process, said reporting process being configured to receive reporting messages from said one or more diagnostic agents; and

transmitting commands from said reporting process to a user interface on said client computer based on said reporting messages.

3. The method of claim 1 wherein said service request is input to said user interface on said client computer.

4. The method of claim 1 wherein said service request is generated by a process on a remote management server, said remote management server coupled to said network interface device through said second network.

5. The method of claim 1 wherein said service request is generated by a process on a remote management server, said remote management server coupled to said network interface device through an alternate communication network.

6. The method of claim 1 wherein said service manager is further configured to perform a syntax check on said service request, said syntax check comprising a first level test and a second level test, wherein

said first level test comprises a test of a parameter included in said service request and a failure of said first level test results in a rejection of said parameter;

and

said second level test comprises a test of the entire service request and a failure of said second level test results in a rejection of said service request.

7. The method of claim 4 further comprising the step of establishing a trust relationship between said first network and said second network, said trust relationship implemented through cryptographic encoding of communications between said first network and said second network through said network interface device.

8. In a network interface device, a method of providing one or more services to a client computer on a first network, the method comprising the steps of:

providing a configuration manager server process, said configuration manager providing an application program interface between said client computer and said one or more services allowing for alteration of said one or more services;

providing a database for storing configuration and status information related to said one or more services accessed by said client computer; and

providing one or more service manager dynamic library processes, each service manager corresponding to one of said one or more services, each service manager providing an application program interface to a corresponding service and adapting commands and data transfers between said corresponding service and said configuration manager.

9. The method of claim 8 further comprising the steps of:

providing a diagnostic log process which is configured to receive diagnostic and error messages from said one or more services;

providing one or more diagnostic agents, each of which are configured to automatically receive a predetermined type of diagnostic message from said diagnostic log process; and

providing a reporting process which is configured to receive reporting messages from said one or more diagnostic agents and send commands to a user interface on said client computer based on said reporting messages.

10. The method of claim 8 wherein said configuration manager is configured to accept a service request from either said user interface on said client computer or a remote process on a remote management server coupled to said network interface device through a second network.

11. The method of claim 8 wherein said service request includes one or more program instructions which initially configure said network interface device for operation on said first network in accordance with system software of a first revision level.

12. The method of claim 8 wherein said service request includes one or more program instructions which upgrade said network interface device for operation on said first network in accordance with system software of a second revision level.

13. The method of claim 8 wherein said service request comprises a reconfiguration notification, said reconfiguration notification including one or more data words to be stored in said database.

14. The method of claim 8 wherein said service managers are implemented in architecture independent program modules, said service managers capable of being loaded on demand by said configuration manager, and wherein said configuration manager is also implemented in an architecture independent program module.

15. A system for interfacing a first network to a second network, wherein said system provides one or more network services, said system comprising:

means for receiving a network service request directed to one of said one or more network services;

means for managing configuration information and adapting said request to a format recognized by said system allowing for alteration of said one or more network services;

means for storing data related to configuration of said system; and

means for adapting said request to a format recognized by said network service to which said network request is directed.

16. The system of claim 15 further comprising

means for receiving diagnostic information generated by said network service;

means for responding to said diagnostic information based on the type of diagnostic message contained within said diagnostic information and content of said diagnostic message; and

means for transmitting a command to a user interface on said computer coupled to said first network in response to a pre-determined type of diagnostic message.

17. The system of claim 15 wherein said service request is input to a user interface on said computer coupled to said first network.

18. The system of claim 15 wherein said input request is generated by a remote process executed on a remote management server coupled to said system through said second network.

19. The system of claim 15 further comprising push-button means for resetting said system, said push-button means accessing a first reset state and a second reset state, and wherein

said first reset state causes the execution of a diagnostic program by said system, said first reset state being accessed by depressing said push-button means for a first duration;

and

said second reset state causes a restart of said system, said second reset state being accessed by depressing said push-button means for a second duration.

20. An article of manufacture embodying a program of instructions executable by a machine for securely providing a service to a client computer coupled to a first network, the program of instructions including instructions for:

providing said service in a network interface device coupled between said first network and a second network;

providing a service request from said client computer to said network interface device, said service request capable of altering said service in said network interface device;

transmitting said service request to a configuration manager, said configuration manager configured to provide an application program interface between a user interface on said client computer and said service; and

transmitting said service request from said configuration manager to a service manager, said service manager being configured to provide an application program interface between said configuration manager and said service.

21. An article of manufacture according to claim 20, wherein said program of instructions further includes instructions for:

receiving one or more diagnostic messages from said network service in a diagnostic log process;

transmitting said one or more diagnostic messages to one or more diagnostic agents, each diagnostic agent being configured to automatically receive diagnostic messages from said diagnostic log process, and each diagnostic agent being configured to receive a predetermined type of message from said diagnostic log process;

transmitting one or more reporting messages from said one or more diagnostic log agents to a reporting process, said reporting process being configured to receive reporting messages from said one or more diagnostic agents; and

transmitting commands from said reporting process to a user interface on said client computer based on said reporting messages.