Secure remote access to enterprise networks employing enterprise gateway servers

• US 6,957,249 B2
• Filed: 06/19/2003
• Issued: 10/18/2005
• Est. Priority Date: 11/10/1999
• Status: Expired due to Fees

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Deacon, D. Brian, Van Hamersveld, Chris, Shelton, Barry K., Fayal, Kenneth Eugene Jr., Salo, Randy, Herbinaux, Larry
• Primary Examiner(s): EL HADY, NABIL M
• Application Number:
  US10/600,318
• Publication Number:
  US 20040010620A1
• Time in Patent Office: 852 Days
• Field of Search: 709217-219, 709201-203, 707/10, 707/102
• US Class Current: 709/217
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/50 Address allocation
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: Y10S 707/99943 Generating database or data structure, e.g. via user interface

Abstract

A computer system includes an enterprise gateway server and a remote gateway server connected via a data network, such as the Internet, that is relatively inefficient compared to typical private networks. The remote gateway server interfaces the enterprise gateway server to corporate messaging and collaboration data stored locally relative to the remote gateway server. The enterprise gateway server converts multiple data requests for the messaging and collaboration data into a single higher-level data request that is transmitted across the data network. The remote gateway server receives the request and converts the single high level request back into the original multiple request format for presentation to the messaging and collaboration database.

Claims

1. A method comprising:

converting a plurality of data requests for messaging and collaboration data into a single higher level request in an enterprise gateway server;

transmiting the higher level request over a data network;

receiving the higher level request in a remote gateway server;

converting the higher level request to the plurality of data requests; and

providing messaging and collaboration data from the remote gateway server to the enterprise gateway server in response to receiving the plurality of data requests.

2. The method of claim 1, wherein the data network is a public network.

3. The method of claim 2, wherein the data transmitted over the public network is encrypted so as to form a virtual private network (VPN).

4. The method of claim 3, wherein the VPN is formed with a Point-to-Point Tunneling Protocol (PPTP) connection.

5. The method of claim 3, wherein the VPN is formed using the Internet Protocol Security (IPSEC) standard.

6. The method of claim 1, wherein the messaging and collaboration data is one of email, calendar, or contact information.

7. The method of claim 1, wherein the data network is a private network.

8. The method of claim 1, wherein the single higher level request is produced by a Distributed Component Object Model (DCOM) proxy program.

9. The method of claim 1, wherein a Distributed Component Object Model (DCOM) stub program receives the higher level request and converts the higher level request to the plurality of data requests.

10. A computer-readable medium embodying a method, the method comprising:

converting a plurality of data requests for messaging and collaboration data into a single higher level request in an enterprise gateway server;

transmiting the higher level request over a data network;

receiving the higher level request in a remote gateway server;

converting the higher level request to the plurality of data requests; and

providing messaging and collaboration data from the remote gateway server to the enterprise gateway server in response to receiving the plurality of data requests.

11. The computer-readable medium of claim 10, wherein the data network is a public network.

12. The computer-readable medium of claim 11, wherein the data transmitted over the public network is encrypted so as to form a virtual private network (VPN).

13. The computer-readable medium of claim 12, wherein the VPN is formed with a Point-to-Point Tunneling Protocol (PPTP) connection.

14. The computer-readable medium of claim 12, wherein the VPN is formed using the Internet Protocol Security (IPSEC) standard.

15. The computer-readable medium of claim 10, wherein the messaging and collaboration data is one of email, calendar, or contact information.

16. The computer-readable medium of claim 10, wherein the data network is a private network.

17. The computer-readable medium of claim 10, wherein the single higher level request is produced by a Distributed Component Object Model (DCOM) proxy program.

18. The computer-readable medium of claim 10, wherein a Distributed Component Object Model (DCOM) stub program receives the higher level request and converts the higher level request to the plurality of data requests.