Network system using a firewall dynamic control method

• US 6,643,778 B1
• Filed: 03/30/1999
• Issued: 11/04/2003
• Est. Priority Date: 10/23/1998
• Status: Expired due to Term

• Current Assignee: Longhorn HD LLC (Alpha Alpha Intellectual Partners LLC)
• Original Assignee: OKI Electric Industry Company Limited
• Inventors: Nakazawa, Osamu
• Primary Examiner(s): Hayes, Gail
• Assistant Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US09/280,453
• Time in Patent Office: 1,680 Days
• Field of Search: 713/200, 713/201, 709/203, 709/223, 709/225-228, 709/230
• US Class Current: 726/11
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 67/133 Protocols for remote procedure calls [RPC]

Abstract

When a remote access terminal connected to a first Intranet receives provision of services from a second Intranet, a web server of the first Intranet loads a remote service execution environment to the remote access terminal. The second Intranet dynamically installs a service proxy on the second dynamic proxy server. Next, the second Intranet supplies a remote service interface to the remote access terminal via a first dynamic proxy server and second dynamic proxy server. The service proxy receives provision of services from the second Intranet instead of the remote service interface. The network of the present invention dynamically install service proxies on a dynamic proxy server when multiple Intranets are connected, and therefore, firewall tunneling by service unit is possible.

Claims

1. A network system using a firewall dynamic control method, comprising:

a first Intranet and a second Intranet connected to each other with the internet as a base;

a first dynamic proxy server for forming a firewall to protect said first Intranet;

a second dynamic proxy server for forming a firewall to protect said second Intranet;

a remote access terminal connected to said first Intranet;

a first object directory server provided within said first Intranet for judging whether a service requested by said remote access terminal is provided in said first Intranet or is provided in said second Intranet; and

a second object directory server provided within said second Intranet to dynamically install a service proxy in said second dynamic proxy server when said service is provided in said second Intranet;

wherein said first object directory server comprises a first local site reference section that stores services provided in said first Intranet and a remote site reference section that makes requests for searches of services provided in said second Intranet to said second dynamic proxy server.

2. The network system using a firewall dynamic control method according to claim 1, wherein said first Intranet comprises a first authentication server that judges whether access from said remote access terminal is approved or not, and when access is approved, issues a connection permission certification.

3. The network system using a firewall dynamic control method according to claim 2, wherein said second Intranet comprises a second authentication server that uses said connection permission certification to judge whether or not to permit use of services by said remote access terminal.

4. The network system using a firewall dynamic control method according to claim 1, wherein said first Intranet comprises a web server for providing a remote service execution environment to said remote access terminal.

5. The network system using a firewall dynamic control method according to claim 1, wherein said second object directory server comprises a second local site reference section that judges services provided in said second Intranet according to requests from said second dynamic proxy server.

6. The network system using a firewall dynamic control method according to claim 1, characterized in that said first Intranet and second Intranet are connected via a Virtual Private Network.

7. The network system using a firewall dynamic control method according to claim 1, characterized in that communication between said remote access terminal and said service proxy is performed according to Remote Object Protocol.

8. The network system using a firewall dynamic control method according to claim 1, characterized in that communication between said service proxy and said second Intranet is performed according to Remote Object Protocol.

9. A network system using a firewall dynamic control method, comprising:

a first Intranet and a second Intranet connected to each other with the internet as a base;

a first dynamic proxy server for forming a firewall to protect said first Intranet;

a second dynamic proxy server for forming a firewall to protect said second Intranet;

a remote access terminal connected to said first Intranet;

a first object directory server provided within said first Intranet for judging whether a service requested by said remote access terminal is provided in said first Intranet or is provided in said second Intranet; and

a second object directory server provided within said second Intranet to dynamically install a service proxy in said second dynamic proxy server when said service is provided in said second Intranet;

wherein said second object directory server comprises a means for sending remote service interfaces for accessing said service proxies from a remote site to said second dynamic proxy server.

10. The network system using a firewall dynamic control method according to claim 9, wherein said second dynamic proxy server comprises a means of providing said remote service interfaces to said remote access terminal according to requests from said remote access terminal.

11. The network system using a firewall dynamic control method according to claim 10, characterized in that said service proxy receives provision of said services from said second Intranet according to requests from said remote service interface executed by said remote access terminal.

12. The network system using a firewall dynamic control method according to claim 11, characterized in that said remote access terminal receives provision of said services from said service proxy by executing said remote service interface.

13. The network system using a firewall dynamic control method according to claim 9, wherein said first Intranet comprises a first authentication server that judges whether access from said remote access terminal is approved or not, and when access is approved, issues a connection permission certification.

14. The network system using a firewall dynamic control method according to claim 13, wherein said second Intranet comprises a second authentication server that uses said connection permission certification to judge whether or not to permit use of services by said remote access terminal.

15. The network system using a firewall dynamic control method according to claim 9, wherein said first Intranet comprises a web server for providing a remote service execution environment to said remote access terminal.

16. The network system using a firewall dynamic control method according to claim 9, characterized in that said first Intranet and second Intranet are connected via a Virtual Private Network.

17. The network system using a firewall dynamic control method according to claim 9, characterized in that communication between said remote access terminal and said service proxy is performed according to Remote Object Protocol.

18. The network system using a firewall dynamic control method according to claim 9, characterized in that communication between said service proxy and said second Intranet is performed according to Remote Object Protocol.

19. A network system using a firewall dynamic control method, comprising:

a first Intranet and a second Intranet connected to each other with the internet as a base;

a first dynamic proxy server for forming a firewall to protect said first Intranet;

a second dynamic proxy server for forming a firewall to protect said second Intranet;

a remote access terminal connected to said first Intranet;

a first object directory server provided within said first Intranet for judging whether a service requested by said remote access terminal is provided in said first Intranet or is provided in said second Intranet; and

a second object directory server provided within said second Intranet to dynamically install a service proxy in said second dynamic proxy server when said service is provided in said second Intranet;

wherein a call back proxy for performing call back to said remote access terminal from said second Intranet is dynamically installed in said first dynamic proxy server by said second Intranet, and

wherein said second dynamic proxy server comprises a means for simultaneously sending a remote service interface for accessing said service proxy from remote sites and said call back proxy to said first dynamic proxy server.

20. The network system using a firewall dynamic control method according to claim 19, wherein said first Intranet comprises a first authentication server that judges whether access from said remote access terminal is approved or not, and when access is approved, issues a connection permission certification.

21. The network system using a firewall dynamic control method according to claim 20, wherein said second Intranet comprises a second authentication server that uses said connection permission certification to judge whether or not to permit use of services by said remote access terminal.

22. The network system using a firewall dynamic control method according to claim 19, wherein said first Intranet comprises a web server for providing a remote service execution environment to said remote access terminal.

23. The network system using a firewall dynamic control method according to claim 19, characterized in that said first Intranet and second Intranet are connected via a Virtual Private Network.

24. The network system using a firewall dynamic control method according to claim 19, characterized in that communication between said remote access terminal and said service proxy is performed according to Remote Object Protocol.

25. The network system using a firewall dynamic control method according to claim 19, characterized in that communication between said service proxy and said second Intranet is performed according to Remote Object Protocol.