Firewall subscription service system and method

• US 6,941,474 B2
• Filed: 02/20/2001
• Issued: 09/06/2005
• Est. Priority Date: 02/20/2001
• Status: Expired due to Term

• Current Assignee: Trend Micro Inc.
• Original Assignee: International Business Machines Corporation
• Inventors: Yu, Philip S., Boies, Stephen J., Dinkin, Samuel H., Moskowitz, Paul A.
• Primary Examiner(s): Caldwell, Andrew
• Assistant Examiner(s): Davis, Zachary A
• Application Number:
  US09/790,065
• Publication Number:
  US 20020116607A1
• Time in Patent Office: 1,659 Days
• Field of Search: 713/153, 713/166, 713/200, 713/201, 709/217, 709/219, 709223-225, 709/227, 709/229, 709/230, 709/232
• US Class Current: 726/11
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls

Abstract

A method and system are described for creating and maintaining a firewall subscription service. A firewall is established within the firewall service. Customers are permitted to subscribe to the firewall subscription service. Each subscriber is an independent, paying party. A subscriber may subscribe to protect one or more computer systems. The firewall offers a particular level of security to a subscriber'"'"'s computer systems when the subscriber'"'"'s computer systems are communicating with an external network. All communications transmitted to any of the subscriber'"'"'s computer systems utilizing the external network are received first by the firewall. The firewall is utilized to protect the subscriber'"'"'s computer systems when the subscriber'"'"'s computer systems receive communications transmitted utilizing the external network.

Claims

1. A method for creating and maintaining a firewall subscription service, said method comprising the steps of:

permitting customers to subscribe to said firewall subscription service, said firewall subscription service providing a plurality of different firewalls;

subscribing, by a particular subscriber, to said firewall subscription service;

associating one of said plurality of different firewalls with said particular subscriber, said one of said plurality of firewalls being unrelated to and not associated with any one of a plurality of different computer systems;

accessing, by said particular subscriber, said firewall subscription service from one of said plurality of different computer systems;

initiating a session with said firewall subscription service in response to said particular subscriber accessing said firewall subscription service;

identifying, by said firewall subscription service, said particular subscriber;

selecting, by said firewall subscription service utilizing said identity of said particular subscriber, said one of said plurality of firewalls that is associated with said particular subscriber;

said one of said plurality of firewalls being selected regardless of which one of said plurality of said plurality of different computer systems is used by said particular subscriber to access said firewall subscription service;

dynamically and temporarily assigning, by said firewall subscription service, said one of said plurality of different firewalls to said one of said plurality of computer systems used by said particular subscriber to access said firewall subscription service, said assignment of said one of said plurality of different firewalls to said one of said plurality of computer systems being temporary and lasting only during said session;

said one of said plurality of firewalls offering a particular level of security to said one of said plurality of computer systems utilized by said subscriber when said one of said plurality of computer systems is communicating with an external network, said one of said plurality of firewalls receiving all communications transmitted to said one of said plurality of computer systems utilizing said external network, wherein all said communications transmitted to said one of said plurality of computer systems utilizing said external network are received first by said one of said plurality of firewalls; and

utilizing said one of said plurality of firewalls to protect said one of said plurality of computer systems when said one of said plurality of computer systems receive communication utilizing said external network.

2. The method according to claim 1, further comprising the step of permitting customers to subscribe to said firewall subscription service, each one of said customers paying for said firewall service independently from all others of said customers.

3. The method according to claim 1, further comprising the steps of:

intercepting, utilizing said one of said plurality of firewalls, each request transmitted utilizing said external network to access said one of said plurality of computer systems;

determining, utilizing said one of said plurality of firewalls, whether to forward each request to said one of said plurality of computer systems;

in response to a determination to forward a request, permitting access, utilizing said one of said plurality of firewalls, to said one of said plurality of computer systems; and

in response to a determination to not forward a request, prohibiting access, utilizing said one of said plurality of firewalls, to said one of said plurality of computer systems.

4. The method according to claim 1, further comprising the step of establishing said plurality of different firewalls within said firewall service, each one of said plurality of different firewalls offering a different level of security to one of said plurality of computer systems.

5. The method according to claim 4, further comprising the steps of:

permitting a first subscriber utilizing a first one of said plurality of computer systems to subscribe to said firewall subscription service to utilize a first one of said plurality of different firewalls, wherein said first one of said plurality of computer systems receives a first level of security; and

permitting a second subscriber utilizing a second one of said plurality of computer systems to subscribe to said firewall subscription service to utilize a second one of said plurality of different firewalls, wherein said second one of said plurality of computer systems receives a second level of security.

6. The method according to claim 4, further comprising the step of assigning a unique login identifier to each of said customers who subscribed to said firewall subscription service, said unique login identifier being used to uniquely identify each of said subscribers.

7. The method according to claim 6, further comprising the steps of:

receiving, utilizing said firewall subscription service, a login identifier;

identifying, utilizing said firewall subscription service, one of said subscribers utilizing said login identifier;

determining, utilizing said firewall subscription service, one of said plurality of different firewalls which is associated with said one of said subscribers;

identifying, utilizing said firewall subscription service, a client computer system currently being utilized by said one of said subscribers; and

utilizing said one of said plurality of different firewalls to protect said client customer computer system when said client computer system is coupled to said external network through said one of said plurality of different firewalls.

8. The method according to claim 7, further comprising the steps of:

determining a fixed network address of said client computer system currently being utilized by said one of said subscribers;

assigning a dynamic network address to said client computer system, said client computer system utilizing said dynamic network address when communicating utilizing said external network; and

intercepting, utilizing said one of said plurality of different firewalls, each transmission from said external network to said dynamic network address.

9. The method according to claim 4, further comprising the steps of:

permitting said subscriber to select said one of said plurality of different firewalls;

utilizing said one of said plurality of different firewalls to intercept communications transmitted via said external network to a client computer system being utilized by said subscriber;

permitting said subscriber to select a different one of said plurality of different firewalls; and

in response to a selection of said different one of said plurality of different firewalls, utilizing said different one of said plurality of different firewalls to intercept communications transmitted via said external network to said client computer system being utilized by said subscriber.

10. A system for creating and maintaining a firewall subscription service, comprising:

means for permitting customers to subscribe to said firewall subscription service, said firewall subscription service providing a plurality of different firewalls;

a particular subscriber subscribing to said firewall subscription service;

one of said plurality of different firewalls being associated with said particular subscriber, said one of said plurality of firewalls being unrelated to and not associated with any one of a plurality of different computer systems;

said particular subscriber accessing said firewall subscription service from one of said plurality of different computer systems;

a session being initiated with said firewall subscription service in response to said particular subscriber accessing said firewall subscription service;

said firewall subscription service identifying said particular subscriber,

said firewall subscription service selecting, utilizing said identity of said particular subscriber, said one of said plurality of firewalls that is associated with said particular subscriber;

said one of said plurality of firewalls being selected regardless of which one of said plurality of said plurality of different computer systems is used by said particular subscriber to access said firewall subscription service;

said firewall subscription service dynamically and temporarily assigning said one of said plurality of different firewalls to said one of said plurality of computer systems used by said particular subscriber to access said firewall subscription service, said assignment of said one of said plurality of different firewalls to said one of said plurality of computer systems being temporary and lasting only during said session;

said one of said plurality of firewalls offering a particular level of security to said one of said plurality of computer systems utilized by said subscriber when said one of said plurality of computer systems is communicating with an external network, said one of said plurality of firewalls receiving all communications transmitted to said one of said plurality of computer systems utilizing said external network, wherein all said communications transmitted to said one of said plurality of computer systems utilizing said external network are received first by said one of said plurality of firewalls; and

said one of said plurality of firewalls being utilized to protect said one of said plurality of computer systems when said one of said plurality of computer systems receive communications utilizing said external network.

11. The system according to claim 10, further comprising means for permitting customers to subscribe to said firewall subscription service, each one of said customers paying for said firewall service independently from all others of said customers.

12. The system according to claim 10, further comprising:

said one of said plurality of firewalls for intercepting each request transmitted utilizing said external network to access said one of said plurality of computer systems;

said one of said plurality of firewalls for determining whether to forward each request to said one of said plurality of computer systems;

in response to a determination to forward a request, said one of said plurality of firewalls for permitting access to said one of said plurality of computer systems; and

in response to a determination to not forward a request, said one of said of plurality of firewalls for prohibiting access to said one of said plurality of computer systems.

13. The system according to claim 10, further comprising said plurality of different firewalls being established within said firewall service, each one of said plurality of different firewalls offering a different level of security to one of said plurality of computer systems.

14. The system according to claim 13, further comprising:

means for permitting a first subscriber utilizing a first one of said plurality of computer systems to subscribe to said firewall subscription service to utilize a first one of said plurality of different firewalls, wherein said first one of said plurality of computer systems receives a first level of security; and

means for permitting a second subscriber utilizing a second one of said plurality of computer systems to subscribe to said firewall subscription service to utilize a second one of said plurality of different firewalls, wherein said second one of said plurality of computer systems receives a second level of security.

15. The system according to claim 13, further comprising a unique login identifier being assigned to each of said customers who subscribed to said firewall subscription service, said unique login identifier being used to uniquely identify each of said subscribers.

16. The system according to claim 15, further comprising:

said firewall subscription service for receiving a login identifier;

said firewall subscription service for identifying one of said subscribers utilizing said login identifier;

said firewall subscription service for determining one of said plurality of different firewalls which is associated with said one of said subscribers;

said firewall subscription service for identifying a client computer system currently being utilized by said one of said subscribers; and

said one of said plurality of different firewalls being utilized to protect said client customer computer system when said client computer system is coupled to said external network through said one of said plurality of different firewalls.

17. The system according to claim 16, further comprising:

said firewall subscription service for determining a fixed network address of said client computer system currently being utilized by said one of said subscribers;

said firewall subscription service for assigning a dynamic network address to said client computer system, said client computer system utilizing said dynamic network address when communicating utilizing said external network; and

said one of said plurality of different firewalls for intercepting each transmission from said external network to said dynamic network address.

18. The system according to claim 13, further comprising:

means for permitting said subscriber to select said one of said plurality of different firewalls;

said one of said plurality of different firewalls being utilized to intercept communications transmitted via said external network to a client computer system being utilized by said subscriber;

means for permitting said subscriber to select a different one of said plurality of different firewalls; and

in response to a selection of said different one of said plurality of different firewalls, said different one of said plurality of different firewalls being utilized to intercept communications transmitted via said external network to said client computer system being utilized by said subscriber.

19. A computer program product stored in a computer-readable medium for creating and maintaining a firewall subscription service, said computer program product comprising:

instruction means for permitting customers to subscribe to said firewall subscription service, said firewall subscription service providing a plurality of different firewalls;

instruction means for subscribing, by a particular subscriber, to said firewall subscription service;

instruction means for associating one of said plurality of different firewalls with said particular subscriber, said one of said plurality of firewalls being unrelated to and not associated with any one of a plurality of different computer systems;

instruction means for accessing, by said particular subscriber, said firewall subscription service from one of said plurality of different computer systems;

instruction means for initiating a session with said firewall subscription service in response to said particular subscriber accessing said firewall subscription service;

instruction means for identifying, by said firewall subscription service, said particular subscriber;

instruction means for selecting, by said firewall subscription service utilizing said identity of said particular subscriber, said one of said plurality of firewalls that is associated with said particular subscriber;

said one of said plurality of firewalls being selected regardless of which one of said plurality of said plurality of different computer systems is used by said particular subscriber to access said firewall subscription service;

instruction means for dynamically and temporarily assigning, by said firewall subscription service, said one of said plurality of different firewalls to said one of said plurality of computer systems used by said particular subscriber to access said firewall subscription service, said assignment of said one of said plurality of different firewalls to said one of said plurality of computer systems being temporary and lasting only during said session;

instruction means for said one of said plurality of firewalls offering a particular level of security to said one of said plurality of computer systems utilized by said subscriber when said one of said plurality of computer systems is communicating with an external network, said one of said plurality of firewalls receiving all communications transmitted to any of said one of plurality of computer systems utilizing said external network, wherein all said communications transmitted to said one of said plurality of computer systems utilizing said external network are received first by said one of said plurality of firewalls; and

instruction means for utilizing said one of said plurality of firewalls to protect said one of said plurality of computer systems when said one of said plurality of computer systems receive communications utilizing said external network.

20. The product according to claim 19, further comprising instruction means for permitting customers to subscribe to said firewall subscription service, each one of said customers paying for said firewall service independently from all others of said customers.

21. The product according to claim 19, further comprising:

instruction means for intercepting, utilizing said one of said plurality of firewalls, each request transmitted utilizing said external network to access said one of said plurality of computer systems;

instruction means for determining, utilizing said one of said plurality of firewalls, whether to forward each request to said one of said plurality of computer systems;

in response to a determination to forward a request, permitting access, instruction means for utilizing said one of said plurality of firewalls, to said one of said plurality of computer systems; and

in response to a determination to not forward a request, instruction means for prohibiting access, utilizing said one of said plurality of firewalls, to said one of said plurality of computer systems.

22. The product according to claim 19, further comprising instruction means for establishing said plurality of different firewalls within said firewall service, each one of said plurality of different firewalls offering a different level of security to said one of said plurality of computer systems.

23. The product according to claim 22, further comprising:

instruction means for permitting a first subscriber utilizing a first one of said plurality of computer systems to subscribe to said firewall subscription service to utilize a first one of said plurality of different firewalls, wherein said first one of said plurality of computer systems receives a first level of security; and

instruction means for permitting a second subscriber utilizing a second one of said plurality of computer systems to subscribe to said firewall subscription service to utilize a second one of said plurality of different firewalls, wherein said second one of said plurality of computer systems receives a second level of security.

24. The product according to claim 22, further comprising instruction means for assigning a unique login identifier to each of said customers who subscribed to said firewall subscription service, said unique login identifier being used to uniquely identify each of said subscribers.

25. The product according to claim 24, further comprising:

instruction means for receiving, utilizing said firewall subscription service, a login identifier;

instruction means for identifying, utilizing said firewall subscription service, one of said subscribers utilizing said login identifier;

instruction means for determining, utilizing said firewall subscription service, one of said plurality of different firewalls which is associated with said one of said subscribers;

instruction means for identifying, utilizing said firewall subscription service, a client computer system currently being utilized by said one of said subscribers; and

instruction means for utilizing said one of said plurality of different firewalls to protect said client customer computer system when said client computer system is coupled to said external network through said one of said plurality of different firewalls.

26. The product according to claim 25, further comprising:

instruction means for determining a fixed network address of said client computer system currently being utilized by said one of said subscribers;

instruction means for assigning a dynamic network address to said client computer system, said client computer system utilizing said dynamic network address when communicating utilizing said external network; and

instruction means for intercepting, utilizing said one of said plurality of different firewalls, each transmission from said external network to said dynamic network address.

27. The product according to claim 22, further comprising:

instruction means for permitting said subscriber to select one of said plurality of different firewalls;

instruction means for utilizing said one of said plurality of different firewalls to intercept communications transmitted via said external network to a client computer system being utilized by said subscriber;

instruction means for permitting said subscriber to select a different one of said plurality of different firewalls; and

in response to a selection of said different one of said plurality of different firewalls, instruction means for utilizing said different one of said plurality of different firewalls to intercept communications transmitted via said external network to said client computer system being utilized by said subscriber.