Firewall providing enhanced network security and user transparency

• US 7,269,847 B2
• Filed: 11/12/2003
• Issued: 09/11/2007
• Est. Priority Date: 02/06/1996
• Status: Expired due to Fees

• Current Assignee: Christopher D. Coley, Ralph E. Wesinger Jr
• Original Assignee: Christopher D. Coley, Ralph E. Wesinger Jr
• Inventors: Wesinger, Jr., Ralph E., Coley, Christopher D.
• Primary Examiner(s): ZIA, SYED
• Application Number:
  US10/712,190
• Publication Number:
  US 20040073812A1
• Time in Patent Office: 1,399 Days
• Field of Search: 713/1
• US Class Current: 726/11
• CPC Class Codes: B65B 11/004 in blanks, e.g. sheets precut and creased for folding
• CPC Class Codes: G06F 16/958 Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: H04L 2101/677 Multiple interfaces, e.g. multihomed nodes
• CPC Class Codes: H04L 61/25 of the same type
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2521 Translation architectures other than single NAT servers
• CPC Class Codes: H04L 61/256 NAT traversal
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/4552 Lookup mechanisms between a plurality of directories; Synchronisation of directories, e.g. metadirectories
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/164 Adaptation or special uses of UDP protocol
• CPC Class Codes: H04L 9/40 : Network security protocols

Abstract

A remote configurator for a gateway device is disclosed. The remote configurator module is operatively disposed in a gateway device for providing network connectivity between a source and destination of IP-compliant traffic. Embodiments of the remote configurator module are disclosed providing an HTML-based configuration interface for allowing remote management of gateway configuration files over an IP-compliant connection.

Claims

1. A remotely configurable firewall comprising:

a multi-homing firewall comprising at least one set of virtual hosts for providing network connectivity between a source and destination of IP-compliant traffic, the at least one set of virtual hosts having associated configuration files;

each of said virtual hosts of said at least one set of virtual hosts corresponding to a distinct home through which a connection may be made through the multi-homing firewall;

a configuration virtual host associated with said at least one set of virtual hosts, said configuration virtual host including an HTML-based configuration interface for allowing remote management of said associated configuration files over an IP-compliant connection using a standard Web browser; and

wherein a configuration file associated with a selected one of said virtual hosts of said at least one set of virtual hosts may be remotely configured using a point-and-click interface provided by said HTML-based configuration interface.

2. The firewall of claim 1, wherein said remote management of said configuration files is only allowed from a specified secure client.

3. The firewall of claim 2, wherein a plurality of virtual hosts may be configured using said configuration virtual host.

4. The firewall of claim 3, wherein a remote user is authenticated prior to being granted access to said configuration interface.

5. The firewall of claim 1, wherein said remote management of said configuration files occurs using a Web browser.

6. An apparatus for remotely configuring a gateway device comprising:

gateway device means for providing network connectivity between a source and destination of IP-compliant traffic, the gateway means including multiple homes through which a connection may be made through the multi-homing firewall;

configuration means for configuring said gateway device means;

remote management means for remotely managing said configuration means, the remote management means comprising an HTML-based configuration interface for allowing remote management of said configuration means over an IP-compliant connection; and

means for providing a point-and-click interface for said HTML-based configuration interface configuring a selected one of said homes.

7. The apparatus of claim 6, wherein said remote management of said configuration files is only allowed from a specified secure client.

8. The apparatus of claim 7, wherein a plurality of virtual hosts may be configured using said configuration virtual host.

9. The apparatus of claim 8, wherein a remote user is authenticated prior to being granted access to said configuration interface.

10. The apparatus of claim 6, wherein said remote management of said configuration files occurs using a Web browser.

11. A remote configurator for a gateway device comprising:

a remote configurator module operatively disposed in a gateway device;

at least one set of virtual hosts for providing network connectivity between a source and destination of IP-compliant traffic, the at least one set of virtual hosts having associated configuration files;

each of said virtual hosts of said at least one set of virtual hosts corresponding to a distinct home through which a connection may be made through the multi-homing firewall;

the remote configurator module being configured to provide an HTML-based configuration interface for allowing remote management of said configuration files associated with a selected one of said virtual hosts of said at least one set of virtual hosts over an IP-compliant connection; and

wherein said firewall may be remotely configured using a point-and-click interface provided by said HTML-based configuration interface.

12. The remote configurator of claim 11, wherein said remote management of said configuration files is only allowed from a specified secure client.

13. The remote configurator of claim 12, wherein a plurality of virtual hosts may be configured using said configuration virtual host.

14. The remote configurator of claim 13, wherein a remote user is authenticated prior to being granted access to said configuration interface.

15. The remote configurator of claim 11, wherein said remote management of said configuration files occurs using a Web browser.

16. A remotely configurable gateway device comprising:

a gateway device for providing network connectivity between a source and destination of IP-compliant traffic;

a plurality of virtual hosts operable in said gateway device, each of the virtual hosts having associated configuration files;

each of said virtual hosts corresponding to a distinct home through which a connection may be made through the multi-homing firewall;

at least one of said plurality of virtual hosts comprising a remote configurator host;

the remote configurator host being configured to provide an HTML-based configuration interface for allowing remote management of said configuration files over an IP-compliant connection; and

wherein a configuration file associated with a selected one of said virtual hosts may be remotely configured using a point-at-click interface provided by said HTML-based configuration interface.

17. The remotely configurable gateway device of claim 16, wherein said remote management of said configuration files is only allowed from a specified secure client.

18. The remotely configurable gateway device of claim 17, wherein a plurality of virtual hosts may be configured using said configuration virtual host.

19. The remotely configurable gateway device of claim 18, wherein a remote user is authenticated prior to being granted access to said configuration interface.

20. The remotely configurable gateway device of claim 16, wherein said remote management of said configuration files occurs using a Web browser.