Data transformation architecture

• US 6,826,627 B2
• Filed: 12/31/2002
• Issued: 11/30/2004
• Est. Priority Date: 09/03/2002
• Status: Expired due to Fees

• Current Assignee: Burnbag Limited
• Original Assignee: Burnbag Limited
• Inventors: Odom, Greg, Sjollema, Mark
• Primary Examiner(s): Eng, David Y.
• Application Number:
  US10/334,684
• Publication Number:
  US 20040044792A1
• Time in Patent Office: 700 Days
• Field of Search: 709/250, 709/220, 709/223, 709/227, 709/230, 709/238, 709/245, 709/246
• US Class Current: 709/250
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

An architecture in which data outputs from an application program into a communication interface are diverted, by changing their address to a reserved address, and then are processed further by an added program which is invisible to the application program. The added program can provide authentication, privacy, data reformatting, or other such desired features to the data outputs without requiring it to be integrated with the application program.

Claims

1. A system, comprising:

a communications interface module which

transmits data over a communication channel

according to an addressing protocol which includes one or more reserved addresses which are not freely available for external communication, and also includes non-reserved addresses;

at least one active program which

sends first communications into said channel through said interface module, using non-reserved addresses, and which

also sends second communications through said interface module using ones of said reserved addresses; and

an additional module which

a) detects ones of said second communications,

b) modifies data in ones of said second communications, and

c) transmits results of said operation b);

wherein said operations a), b), and c) by said additional module are transparent to said active program.

2. The system of claim 1, wherein said additional module is a software module.

3. The system of claim 1, wherein said additional module is a software module, running on the same processor as said active program.

4. The system of claim 1, wherein said protocol is TCP/IP.

5. The system of claim 1, wherein said additional module transmits results of said operation b) through said interface module to a non-reserved address.

6. The system of claim 1, wherein said additional module separates protocol-related header portions of said transmission from data content portions thereof, and performs data translation operations on said data content portions without operating on said header portions.

7. The system of claim 1, wherein said processing step b) is performed only conditionally, in dependence on information in the header of the transmission as received.

8. The system of claim 1, wherein said modification includes data compression.

9. The system of claim 1, wherein said modification includes data hashing.

10. The system of claim 1, wherein said modification includes data encryption and decryption.

11. The system of claim 1, wherein said modification includes data filtering.

12. The system of claim 1, wherein said modification includes digital signature and identification.

13. The system of claim 1, wherein said modification includes interfacing to software programs.

14. The system of claim 1, wherein said modification includes dongles.

15. A system, comprising:

a communications interface module which

transmits data over a communication channel

according to an addressing protocol which includes non-reserved addresses and also one or more reserved loopback addresses which are not freely available for external communication, and

which echoes back data addressed to one of said reserved addresses;

at least one active program which

sends first communications into said channel through said interface module, using non-reserved addresses, and which

also sends second communications through said interface module using ones of said reserved loopback addresses; and

an additional module which

a) detects ones of said second communications,

b) modifies data in ones of said second communications, and

c) transmits results of said operation b);

wherein said operations a), b), and c) by said additional module are transparent to said active program.

16. The system of claim 15, wherein said additional module is a software module.

17. The system of claim 15, wherein said protocol is TCP/IP.

18. The system of claim 15, wherein said additional module transmits results of said operation b) through said interface module to a non-reserved address.

19. The system of claim 15, wherein said processing step b) is performed only conditionally, in dependence on information in the header of the transmission as received.

20. The system of claim 15, wherein said additional module separates protocol-related header portions of said transmission from data content portions thereof, and performs data translation operations on said data content portions without operating on said header portions.

21. The system of claim 15, wherein said modification includes data compression.

22. The system of claim 15, wherein said modification includes data hashing.

23. The system of claim 15, wherein said modification includes data encryption and decryption.

24. The system of claim 15, wherein said modification includes data filtering.

25. The system of claim 15, wherein said modification includes digital signature and identification.

26. The system of claim 15, wherein said modification includes interfacing to software programs.

27. The system of claim 15, wherein said modification includes dongles.

28. A system, comprising:

a communications interface module which

transmits data over a communication channel

according to an addressing protocol which includes one or more reserved addresses which are not freely available for external communication, and also includes non-reserved addresses;

at least one active program which

sends first communications into said channel through said interface module, using non-reserved addresses, and which

also sends second communications through said interface module using ones of said reserved addresses; and

an additional module which

a) detects ones of said second communications,

b) modifies data content portions thereof but not protocol-related header portions thereof, and

c) transmits results of said operation b);

wherein said operations a), b), and c) by said additional module are transparent to said active program.

29. The system of claim 28, wherein said additional module is a software module.

30. The system of claim 28, wherein said additional module is a software module, running on the same processor as said active program.

31. The system of claim 28, wherein said additional module separates protocol-related header portions of said transmission from data content portions thereof, and performs data translation operations on said data content portions without operating on said header portions.

32. The system of claim 28, wherein said protocol is TCP/IP.

33. The system of claim 28, wherein said additional module transmits results of said operation b) through said interface module to a non-reserved address.

34. The system of claim 28, wherein said processing step b) is performed only conditionally, in dependence on information in the header and/or content of the transmission as received.

35. The system of claim 28, wherein said modification includes data compression.

36. The system of claim 28, wherein said modification includes data hashing.

37. The system of claim 28, wherein said modification includes data encryption and decryption.

38. The system of claim 28, wherein said modification includes data filtering.

39. The system of claim 28, wherein said modification includes digital signature and identification.

40. The system of claim 28, wherein said modification includes interfacing to software programs.

41. The system of claim 28, wherein said modification includes dongles.

42. A system, comprising:

a communications interface module which

transmits data over a communication channel

according to an addressing protocol which includes one or more reserved addresses which are not freely available for external communication, and also includes non-reserved addresses;

at least one active program which

sends first communications into said channel through said interface module, using non-reserved addresses, and which

also sends second communications through said interface module using ones of said reserved addresses; and

an additional module which

a) detects ones of said second communications,

b) modifies data in ones of said second communications, and

c) transmits results of said operation b); and

which also

d) intercepts and modifies at least some incoming transmissions directed to said active program;

wherein said operations a), b), and c) by said additional module are transparent to said active program.

43. The system of claim 42, wherein said additional module is a software module.

44. The system of claim 42, wherein said additional module is a software module, running on the same processor as said active program.

45. The system of claim 42, wherein said protocol is TCP/IP.

46. The system of claim 42, wherein said additional module transmits results of said operation b) through said interface module to a non-reserved address.

47. The system of claim 42, wherein said processing step b) is performed only conditionally.

48. The system of claim 42, wherein said processing step d) is performed only conditionally, in dependence on information in the content of the transmission as received.

49. The system of claim 42, wherein said additional module separates protocol-related header portions of said transmission from data content portions thereof, and performs data translation operations on said data content portions without operating on said header portions.

50. The system of claim 42, wherein said modification includes data compression.

51. The system of claim 42, wherein said modification includes data hashing.

52. The system of claim 42, wherein said modification includes data encryption and decryption.

53. The system of claim 42, wherein said modification includes data filtering.

54. The system of claim 42, wherein said modification includes digital signature and identification.

55. The system of claim 42, wherein said modification includes interfacing to software programs.

56. The system of claim 42, wherein said modification includes dongles.

57. A system, comprising:

a communications interface module which

transmits data over a communication channel

according to an addressing protocol which includes one or more reserved addresses which are not freely available for external communication, and also includes non-reserved addresses;

at least one active program which

sends first communications into said channel through said interface module, using non-reserved addresses, and which

also sends second communications through said interface module using ones of said reserved addresses; and

an additional module which

a) detects ones of said second communications,

b) selectively modifies data in only some ones of said second communications, and

c) transmits results of said operation b);

wherein said operations a), b), and c) by said additional module are transparent to said active program.

58. The system of claim 57, wherein said additional module is a software module.

59. The system of claim 57, wherein said additional module is a software module, running on the same processor as said active program.

60. The system of claim 57, wherein said protocol is TCP/IP.

61. The system of claim 57, wherein said additional module transmits results of said operation b) through said interface module to a non-reserved address.

62. The system of claim 57, wherein said processing step b) is performed only conditionally.

63. The system of claim 57, wherein said processing step b) is performed only conditionally, in dependence on information in the content of the transmission as received.

64. The system of claim 57, wherein said modification includes data compression.

65. The system of claim 57, wherein said modification includes data hashing.

66. The system of claim 57, wherein said modification includes data encryption and decryption.

67. The system of claim 57, wherein said modification includes data filtering.

68. The system of claim 57, wherein said modification includes digital signature and identification.

69. The system of claim 57, wherein said modification includes interfacing to software programs.

70. The system of claim 57, wherein said modification includes dongles.

71. A computer, comprising:

a network interface module which

transmits and receives data over a communication channel

according to an addressing protocol which includes non-reserved addresses and also one or more reserved addresses which are not freely available for external communication;

at least one active program, running on a CPU of said computer, which

sends first communications into said channel through said interface module, using non-reserved addresses, and which

also sends second communications through said interface module using ones of said reserved addresses; and

an additional module, running on a CPU of said computer, which

a) detects ones of said second communications,

b) modifies data in ones of said second communications, and

c) transmits results of said operation b);

wherein said operations a), b), and c) by said additional module are transparent to said active program.

72. The computer of claim 71, wherein said additional module is a software module.

73. The computer of claim 71, wherein said additional module is a software module, and is running on the same hardware as said active program.

74. The computer of claim 71, wherein said modification includes data compression.

75. The computer of claim 71, wherein said modification includes data hashing.

76. The computer of claim 71, wherein said modification includes data encryption and decryption.

77. The computer of claim 71, wherein said modification includes data filtering.

78. The computer of claim 71, wherein said modification includes digital signature and identification.

79. The computer of claim 71, wherein said modification includes interfacing to software programs.

80. The computer of claim 71, wherein said modification includes dongles.

81. A macro-system, comprising:

multiple complex systems executing respective instruction streams; and

at least one network linking said multiple complex systems;

wherein multiple ones of said complex systems each comprise;

a communications interface module which transmits data over said network according to an addressing protocol which includes non-reserved addresses and also one or more reserved addresses which are not freely available for external communication;

at least one active program which sends first communications into said network through said interface module, using non-reserved addresses, and which also sends second communications through said interface module using ones of said reserved addresses; and

an additional module which

a) detects ones of said second communications,

b) transforming data in ones of said second communications, and

c) transmits results of said operation b);

wherein said operations a), b), and c) by said additional module are transparent to said active program.

82. The macro-system of claim 81, wherein said additional module is a software module.

83. The macro-system of claim 81, wherein said additional module is a software module, and is running on the same hardware as said active program.

84. The macro-system of claim 81, wherein said additional module separates protocol-related header portions of said transmission from data content portions thereof, and performs data translation operations on said data content portions without operating on said header portions.

85. The macro-system of claim 81, wherein said processing includes data compression.

86. The macro-system of claim 81, wherein said processing includes data hashing.

87. The macro-system of claim 81, wherein said processing includes data encryption and decryption.

88. The macro-system of claim 81, wherein said processing includes data filtering.

89. The macro-system of claim 81, wherein said processing includes digital signature and identification.

90. The macro-system of claim 81, wherein said processing includes interfacing to software programs.

91. A modular expandable software architecture stored in a storage medium, comprising:

an application program which performs at least one class of interface operations by looking up, in a configuration file, a network address which is used for said interface operations;

said configuration file containing a reserved address, which does not correspond to any externally routable address, in place of the network address expected by said application program; and

a functional module which, when said application program attempts to send data to said reserved address,

performs data translation on said data, and

retransmits said data, as modified by said data translation, to an externally routable network address;

wherein said operations by said functional module are transparent to said active program.

92. The architecture of claim 91, wherein said module is a software module.

93. The architecture of claim 91, wherein said module is a software module, and is running on the same hardware as said active program.

94. The architecture of claim 91, wherein said translation includes data compression.

95. The architecture of claim 91, wherein said translation includes data hashing.

96. The architecture of claim 91, wherein said translation includes data encryption and decryption.

97. The architecture of claim 91, wherein said translation includes data filtering.

98. The architecture of claim 91, wherein said translation includes digital signature and identification.

99. The architecture of claim 91, wherein said translation includes interfacing to software programs.

100. A method, comprising the steps of:

(a.) from an application program, sending out a packet, which is intended for a real destination, to a first reserved address which cannot correspond to any real destination; and

(b.) in a translation program,

looking up a second address, corresponding to said real destination in a table in memory, and

transforming the data of said packet, and

rerouting said packet thereafter to said second address;

wherein said operations by said translation program are transparent to said application program.

101. A software structure in a storage medium, comprising instructions which, when activated by at least one processor, will direct the processor to perform operations to implement the method of claim 100.

102. The method of claim 100, wherein said transformation includes data compression.

103. The method of claim 100, wherein said transformation includes data hashing.

104. The method of claim 100, wherein said transformation includes data encryption and decryption.

105. The method of claim 100, wherein said transformation includes data filtering.

106. The method of claim 100, wherein said transformation includes digital signature and identification.

107. The method of claim 100, wherein said transformation includes interfacing to software programs.

108. The method of claim 100, wherein said transformation includes dongles.

109. A method for adding a data conversion function to a third-party software program, comprising the steps of:

in a configuration file, replacing at least one target address with a respective non-routable address; and

adding a functional module which,

when the third-party program attempts to send a packet to said non-routable address,

performs data translation on the content of the packet according to stored algorithms, and

retransmits the content, as modified by said data translation, to an externally routable address;

wherein said operations by said functional module are transparent to said third-party software program.

110. A software structure in a storage medium, comprising instructions which, when activated by at least one processor, will direct the processor to perform operations to implement the method of claim 109.

111. A method for adding data translation functions to a third-party e-mail program, comprising the steps of:

in a configuration file, substituting a reserved address, which does not correspond to any externally routable address, for a correct e-mail upload address; and

adding a functional module which,

when the e-mail program attempts to send a packet to said reserved address,

performs data translation on the content of the packet according to stored algorithms, and

retransmits the translated content to the correct e-mail upload address;

wherein said operations by said functional module are transparent to said third-party software program.

112. A software structure in a storage medium, comprising instructions which, when activated by at least one processor, will direct the processor to perform operations to implement the method of claim 111.