Secure gateway interconnection in an e-commerce based environment

• US 6,704,873 B1
• Filed: 07/30/1999
• Issued: 03/09/2004
• Est. Priority Date: 07/30/1999
• Status: Expired due to Term

• Current Assignee: Accenture Global Services Limited (Accenture PLC)
• Original Assignee: Accenture LLP (Accenture PLC)
• Inventors: Underwood, Roy Aaron
• Primary Examiner(s): Wiley, David
• Assistant Examiner(s): NEURAUTER, GEORGE C
• Application Number:
  US09/364,490
• Time in Patent Office: 1,684 Days
• Field of Search: 709/249, 709/223, 713/200-202
• US Class Current: 726/12
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A system and method of providing a global internetworking gateway architecture in an e-commerce environment are provided. A plurality of gateways each situated in a distinct geographic location are coupled to an internet. A wide area network, separate from the internet, is coupled to each of the gateways for providing communication between the wide area network and the internet. Coupled to the wide area network is a central database for providing a central storage for data used in e-commerce carried out over the internet. In one embodiment, at least one of the gateways includes at least one screening router coupled to the internet service provider, at least one firewall connected to the screening router, and a choker router coupled between the wide area network and the firewall.

Claims

1. A computer system for interconnecting a development framework, for collaborating developers, with corporate wide area networks and the internet, comprising:

(a) a firewall;

(b) a development network for developing Internet applications, wherein the development network is implemented by a set of first developers and a set of second developers;

(c) a first choke router, wherein the first choke router is situated between the development network and the firewall for providing security to the development network if the firewall is compromised;

(d) an internet;

(e) a first screening router, wherein the first screening router is situated between the internet and the firewall for providing security to the firewall from the internet;

(f) a first wide area network, wherein the first wide area network contains resources usable by the set of first developers;

(g) a second choke router, wherein the second choke router is situated between the first wide area network and the firewall for providing security to the first wide area network if the firewall is compromised, and wherein the firewall does not permit the first wide area network to communicate with the internet;

(h) a second wide area network, wherein the second wide area network contains resources usable by the set of second developers; and

(i) a second screening router, wherein the second screening router is situated between the second wide area network and the firewall for providing security to the firewall from the second wide area network.

2. The computer system of claim 1, wherein the development network includes a first computer system and a second computer system, and where in the first computer system is usable by the set of first developers and the second computer system is usable by the set of second developers.

3. The computer system of claim 2, wherein the firewall prevents the first computer system from communicating with second wide area network and the firewall prevents the second computer system from communicating with first wide area network.

4. The computer system of claim 1, wherein the firewall permits the second wide area network to communicate with the internet.

5. A method for providing a global internetworking gateway architecture in an e-commerce environment comprising the steps of:

(a) providing an internet;

(b) coupling a plurality of gateways to the internet, wherein each gateway is situated in a distinct geographic location;

(c) connecting a wide area network to each of the gateways for providing communication between the wide area network and the internet, wherein the wide area network is a corporate packet switched network, wherein the wide area network is separate from the internet, and wherein at least one gateway includes at least one screening router coupled to the internet via an internet service provider, at least one firewall connected to the screening router, and a choke router coupled between the wide area network and the firewall; and

(d) coupling a central database to the wide area network for providing a central storage for data used in e-commerce carried out over the internet, wherein the central database is implemented only within the wide area network.

6. A method as recited in claim 5, wherein a pair of gateways, a pair of screening routers, a pair of firewalls, and a pair of choke routers are provided.

7. A method as recited in claim 5, wherein a plurality of servers are coupled to the firewall for storing the data.

8. A method as recited in claim 5, wherein a central management station is coupled to the wide area network for providing fault and performance management.

9. A method as recited in claim 5, wherein the gateways are intercontinental.

10. A method as recited in claim 5, wherein a second wide area network is connected to the firewall via a screening router.

11. A system for providing a global internetworking gateway architecture in an e-commerce environment comprising:

(a) an internet;

(b) a plurality of gateways coupled to the internet, wherein each gateway is situated in a distinct geographic location;

(c) a wide area network coupled to each of the gateways for providing communication between the wide area network and the internet, wherein the wide area network is a corporate packet switched network, n wherein the wide area network is separate from the internet, and wherein at least one gateway includes at least one screening router coupled to the internet via an internet service provider, at least one firewall connected to the screening router, and a choke router coupled between the wide area network and the firewall; and

(d) a central database coupled to the wide area network for providing a central storage for data used in e-commerce carried out over the internet, wherein the central database is implemented only within the wide area network.

12. A system as recited in claim 11, wherein a pair of gateways, a pair of screening routers, a pair of firewalls, and a pair of choke routers are provided.

13. A system as recited in claim 11, wherein a plurality of servers are coupled to the firewall for storing the data.

14. A system as recited in claim 11, wherein a central management station is coupled to the wide area network for providing fault and performance management.

15. A system as recited in claim 11, wherein the gateways are intercontinental.

16. A system as recited in claim 11, wherein a second wide area network is connected to the firewall via a screening router.