System and method for remotely accessing a home server while preserving end-to-end security

• US 7,010,608 B2
• Filed: 09/28/2001
• Issued: 03/07/2006
• Est. Priority Date: 09/28/2001
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Warrier, Ulhas, Garg, Ajay
• Primary Examiner(s): Cardone, Jason D
• Application Number:
  US09/965,934
• Publication Number:
  US 20030065791A1
• Time in Patent Office: 1,621 Days
• Field of Search: 713200-202, 709/229, 709/237, 709/225, 726/3, 726/11, 726/12, 726/15
• US Class Current: 709/229
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2567 for reachability, e.g. inquiring the address of a correspondent behind a NAT server
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/289 Intermediate processing functionally located close to the data consumer application, e.g. in same machine, in same home or in same sub-network
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

The invention relates to a system and method to allow a remote client to remotely access a home server of a home or private network while preserving end-to-end security. A home server includes a service component. When a server application performs a network operation to start listening for a connection from a remote client, it is detected by the service component. The remote client is coupled through the Internet and through an Internet agent to a home gateway running a Network Address Translation (NAT) software program. The gateway connects to a forwarding agent. The forwarding agent is connected to the home server and provides the Internet agent with access parameters received from the home server. If the remote client provides proper access parameters to the Internet agent, the Internet agent provides the remote client access to services running on the home server.

Claims

1. A system comprising:

a home server including a service component installed in a network software stack, the service component to detect when a server application listens for a connection;

a remote client coupled through the Internet and to the system by an Internet agent, the Internet agent listening on behalf of the home server for connection requests from a remote client;

a forwarding agent directly connected to the home server, wherein the service component informs the forwarding agent that the server application is listening for a connection and forwards the access parameters to the forwarding agent, the forwarding agent to provide the Internet agent with access parameters received from the home server; and

a gateway running a Network Address Translation (NAT) software program, the gateway connecting the forwarding agent to the Internet agent via the Internet;

wherein, if the remote client provides proper access parameters to the Internet agent, the Internet agent provides the remote client access to a service running on the home server and the Internet agent and the forwarding agent act as layer 4 routers.

2. The system of claim 1, wherein the forwarding agent establishes an outgoing connection with the Internet agent through the NAT, to provide a channel for incoming connection requests.

3. The system of claim 2, wherein the service component allows access to the server application by a remote client by:

a) inquiring whether a user would like the server application to be accessible from a remote client; and

b) setting required access parameters.

4. A method comprising:

detecting when a server application of a home server listens for a connection utilizing a service component installed in a network software stack;

utilizing an Internet agent to couple a remote server through the Internet to the home server, the Internet agent listening on behalf of the home server for connection requests from a remote client;

utilizing a forwarding agent directly connected to the home server to provide the Internet agent with access parameters received from the home server, wherein a service component of the home server informs the forwarding agent that the server application is listening for a connection and forwards the access parameters to the forwarding agent; and

connecting the forwarding agent to the Internet and the Internet agent using a gateway running a Network Address Translation (NAT) software program;

wherein, if the remote client provides proper access parameters to the Internet agent, the Internet agent provides the remote client access to a service running on the home server and the Internet agent and the forwarding agent act as layer 4 routers.

5. The method of claim 4, wherein the forwarding agent establishes an outgoing connection with the Internet agent through the NAT, to provide a channel for incoming connection requests.

6. The method of claim 5, wherein the service component allows access to the server application by a remote client by:

a) inquiring whether a user would like the server application to be accessible from a remote client; and

b) setting required access parameters.