Network infrastructure management and data routing framework and method thereof

• US 7,373,423 B2
• Filed: 09/11/2002
• Issued: 05/13/2008
• Est. Priority Date: 09/11/2002
• Status: Active Grant

• Current Assignee: Trend Micro Inc.
• Original Assignee: Trend Micro Inc.
• Inventors: Chen, Chih-Yu, Li, Chi-Bin, Luo, Jiann-Cherng, Lo, Chung-Ling, Song, Feng-Shiuh
• Primary Examiner(s): Jacobs; LaShonda T
• Application Number:
  US10/243,490
• Publication Number:
  US 20040049594A1
• Time in Patent Office: 2,071 Days
• Field of Search: 709/220, 709/227, 709/238, 709248-249, 370/389, 370/392, 370400-401
• US Class Current: 709/238
• CPC Class Codes: H04L 45/22 Alternate routing
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

The invention generally provides a method for routing data into and out of a network having a plurality of host computers corresponding to a plurality of network topologies. The method of the invention primarily comprises the steps of electing a destination host from the plurality of host computers in the network, determining an addressing methodology for the destination host in accordance with a destination topology out of the plurality of network topologies corresponding to the destination host, addressing the destination host according to the determined addressing methodology, determining a routing path corresponding to the determined addressing methodology, and routing the data to the destination host through the determined routing path. The routing path can be an inbound or an outbound routing path with respect to the network. The method according to the invention further comprises the step of defining the routing path with a host ID comprising a sequence of at least one host address corresponding to at least one of the plurality of host computers.

Claims

1. A method for routing data into and out of a computer network having a plurality of host computers, each host computer associated with a respective network within said computer network, the method comprising:

electing a destination host from said host computers;

determining an addressing methodology for said destination host in accordance with a network configuration of a destination network associated with said destination host;

assigning a host ID to said destination host according to said determined addressing methodology, said host ID comprising a sequence of destination internet protocol (IP) addresses corresponding to the destination network configuration, said sequence of destination IP addresses defining a routing path within the destination network; and

routing said data to said destination host through said routing path in accordance with said host ID.

2. The method of claim 1 wherein said network configurations include at least one of:

a packet filtering firewall server;

a port forwarding firewall server;

a proxy server;

a private Internet protocol (IP);

a multiple Internet protocol (IP);

a dynamic host configuration protocol;

a relay host;

multiple host servers;

or a directly accessible destination host.

3. The method of claim 1 wherein said host ID further comprises:

a domain name;

a network port number;

a hypertext transfer protocol (HTTP) proxy separator;

a SOCKS proxy separator; and

a concatenator.

4. The method of claim 1 wherein said routing path comprises an inbound routing path and an outbound routing path with respect to said network.

5. The method of claim 1 further comprising the steps of:

determining if said destination host is directly accessible; and

assigning a host address of said destination host as said host ID if it is determined that said destination host is directly accessible.

6. The method of claim 5 wherein said host address comprises an Internet protocol (IP) address with a network port number.

7. The method of claim 5 wherein said host address comprises a domain name plus a network port number.

8. The method of claim 5 further comprising the step of:

determining if said destination host comprises two or more Internet protocol (IP) addresses; and

wherein said host address comprises said IP addresses separated by an address separator if it is determined that said destination host is directly accessible and said destination host comprises two or more Internet protocol (IP) addresses.

9. The method of claim 8 wherein said host address comprises a domain name plus a network port number.

10. The method of claim 5 wherein said host address comprises, in sequential order, an Internet protocol (IP) address with a network port number, an address separator, and a further IP address with a further network port number.

11. The method of claim 5 further comprising the steps of:

determining if said destination host comprises a private Internet protocol (IP) address and a public IP address; and

assigning said public IP address as said host address if it is determined that said destination host is directly accessible.

12. The method of claim 5 further comprising the steps of:

determining if said destination host comprises a private Internet protocol (IP) address in a private network and a public IP address; and

assigning said private IP address as said host address wherein said destination host is located within said private network.

13. The method of claim 5 wherein said host address comprises, in sequential order, an Internet protocol (IP) address with a network port number, an address separator, and a further IP address with a further network port number.

14. The method of claim 1, further comprising the steps of:

determining if said destination configuration includes a packet filtering firewall server; and

assigning a host address of said destination host as said host ID if it is determined that said destination configuration includes a packet filtering firewall server.

15. The method of claim 14 wherein said host address comprises an Internet protocol (IP) address with a network port number.

16. The method of claim 14 wherein said host address comprises a domain name plus a network port number.

17. The method of claim 1, further comprising the steps of:

determining if said destination configuration includes a port forwarding firewall server; and

assigning a port address of a firewall port connected to said destination host as said host ID if it is determined that said destination configuration includes a port forwarding firewall server.

18. The method of claim 17 wherein said port address comprises an Internet protocol (IP) address with a network port number.

19. The method of claim 17 wherein said port address comprises a domain name plus a network port number.

20. The method of claim 1, further comprising the steps of:

determining if said destination configuration includes a proxy server; and

assigning a host address of said destination host with a port address of a proxy port connected to said destination host as said host ID if it is determined that said destination configuration includes a proxy server.

21. The method of claim 20 wherein said host address and said port address are separated by an address separator.

22. The method of claim 21 wherein said address separator further comprises a hypertext transfer protocol (HTTP) proxy separator and a SOCKS proxy separator.

23. The method of claim 20 wherein said host address comprises, in sequential order, an Internet protocol (IP) address with a network port number, an address separator, and a further IP address with a further network port number.

24. The method of claim 1, wherein said elected destination host is the Internet.

25. The method of claim 24 further comprising the steps of:

determining if the Internet is directly accessible; and

directly routing said data to the Internet if it is determined that the Internet is directly accessible.

26. The method of claim 24 further comprising the steps of:

determining if said destination configuration includes a proxy server; and

assigning a proxy address with a port address of a proxy port connected to the Internet as said host ID if it is determined that said destination configuration includes a proxy server.

27. The method of claim 26 wherein said host ID comprises an Internet protocol (IP) address with a network port number.

28. The method of claim 1, further comprising the step of embedding authentication data in said host ID.

29. The method of claim 1 further comprising the steps of:

defining said routing path in a host ID comprising an Internet protocol (IP) address;

determining if said destination configuration includes a dynamic host configuration protocol (DHCP);

determining if said IP address has dynamically changed if it is determined that said destination configuration includes a DHCP; and

substituting said IP address in said host ID with said dynamically changed IP address.

30. The method of claim 1, wherein said host ID further comprises an address separator.

32. The method of claim 1 wherein said network configurations include at least one of:

a packet filtering firewall server;

a port forwarding firewall server;

a proxy server;

a private Internet protocol (IP);

a multiple Internet protocol (IP);

a dynamic host configuration protocol;

a relay host;

multiple host servers;

or a directly accessible destination host.

60. The method of claim 1 wherein said network configurations include at least one of:

a packet filtering firewall server;

a port forwarding firewall server;

a proxy server;

a private Internet protocol (IP);

a multiple Internet protocol (IP);

a dynamic host configuration protocol;

a relay host;

multiple host servers;

or

a directly accessible destination host.

31. A method for routing data into and out of a network having a plurality of computers, each host computer associated with a respective network within said computer network, the method comprising:

determining if said data are routed inbound or outbound with respect to said network;

electing a destination computer from said computers if it is determined that said data are routed inbound;

assigning an inbound host ID to said destination computer in accordance with an inbound network configuration, if it is determined that said data are routed inbound, said inbound host ID comprising a sequence of destination internet protocol (IP) addresses conesponding to said inbound network configuration, said sequence of destination IP addresses defining an inbound routing path within the inbound network;

determining an outbound routing path to the Internet having an outbound host ID in accordance with an outbound configuration with respect to the Internet out of said network configurations, if it is determined that said data are routed outbound, said outbound configuration conesponding to said outbound routing path to the Internet;

routing said data to said destination computer according to said inbound routing path if it is determined that said data are routed inbound; and

routing said data to the Internet according to said outbound routing path if it is determined that said data are routed outbound.

33. The method of claim 31 wherein said inbound host ID further comprises:

a domain name;

a network port number;

a hypertext transfer protocol (HTTP) proxy separator;

a SOCKS proxy separator; and

a concatenator.

34. The method of claim 31 wherein said outbound host ID comprises:

an Internet protocol (IP) address;

a domain name;

a network port number;

a hypertext transfer protocol (HTTP) proxy separator;

a SOCKS proxy separator; and

a concatenator.

35. The method of claim 31 further comprising the steps of:

determining if said destination computer is directly accessible; and

assigning a host address of said destination computer as said inbound host ID if it is determined that said destination computer is directly accessible.

36. The method of claim 35 wherein said host address comprises an Internet protocol (IP) address with a network port number.

37. The method of claim 35 wherein said host address comprises a domain name plus a network port number.

38. The method of claim 35 further comprising the step of:

determining if said destination computer comprises two or more Internet protocol (IP) addresses; and

wherein said host address comprises said IP addresses separated by an address separator if it is determined that said destination computer is directly accessible and said destination computer comprises two or more IP addresses.

39. The method of claim 38 wherein said host address comprises a domain name plus a network port number.

40. The method of claim 35 further comprising the steps of:

determining if said destination computer comprises a private Internet protocol (IP) address and a public IP address; and

assigning said public IP address as said host address if it is determined that said destination computer is directly accessible.

41. The method of claim 35 further comprising the steps of:

determining if said destination computer comprises a private Internet protocol (IP) address in a private network and a public IP address; and

assigning said private IP address as said host address wherein said destination computer is located within said private network.

42. The method of claim 31 further comprising the steps of:

determining if said inbound configuration includes a packet filtering firewall server; and

assigning a host address of said destination computer as said inbound host ID if it is determined that said inbound configuration includes a packet filtering firewall server.

43. The method of claim 42 wherein said host address comprises an Internet protocol (IP) address with a network port number.

44. The method of claim 42 wherein said host address comprises a domain name plus a network port number.

45. The method of claim 31 further comprising the steps of:

determining if said inbound configuration includes a port forwarding firewall server; and

assigning a port address of a firewall port connected to said destination computer as said inbound host ID if it is determined that said inbound configuration includes a port forwarding firewall server.

46. The method of claim 45 wherein said port address comprises an Internet protocol (IP) address with a network port number.

47. The method of claim 45 wherein said port address comprises a domain name plus a network port number.

48. The method of claim 31 further comprising the steps of:

determining if said inbound configuration includes a proxy server; and

assigning a host address of said destination computer with a port address of a proxy port connected to said destination computer as said inbound host ID if it is determined that said inbound configuration includes a proxy server.

49. The method of claim 48 wherein said host address and said port address are separated by an address separator.

50. The method of claim 49 wherein said address separator further comprises a hypertext transfer protocol (HTTP) proxy separator and a SOCKS proxy separator.

51. The method of claim 48 wherein said host address comprises, in sequential order, an Internet protocol (IP) address with a network port number, an address separator, and a further IP address with a further network port number.

52. The method of claim 31 wherein said data are routed to an external network through the Internet if it is determined that said data are routed outbound.

53. The method of claim 31 further comprising the steps of:

if it is determined that said data are routed outbound, determining if the Internet is directly accessible; and

directly routing said data to the Internet if it is determined that the Internet is directly accessible.

54. The method of claim 31 further comprising the steps of:

if it is determined that said data are routed outbound, determining if said outbound configuration includes a proxy server; and

assigning a proxy address with a port address of a proxy port connected to the Internet as said outbound host ID if it is determined that said outbound configuration includes a proxy server.

55. The method of claim 54 wherein said outbound host ID comprises an Internet protocol (IP) address with a network port number.

56. The method of claim 31 further comprising the step of embedding authentication data in said inbound host ID and said outbound host ID.

57. The method of claim 31 further comprising the steps of:

if it is determined that said data are routed inbound, determining if said inbound configuration includes a dynamic host configuration protocol (DHCP);

determining if an IP address in said inbound host ID has dynamically changed if it is determined that said inbound configuration includes a DHCP; and

substituting said IP address in said inbound host ID with said dynamically changed IP address.

58. The method of claim 31 wherein each of said inbound host ID and said outbound host ID further comprises an address separator.

59. A computer network for routing data thereto and therefrom, the computer network comprising:

a plurality of host computers, each host computer associated with a respective network within said computer network;

means for determining if said data are routed inbound or outbound with respect to said computer network;

an elector electing a destination host computer from said host computers if it is determined that said data are routed inbound;

means for assigning an inbound host ID to said destination computer in accordance with an inbound network configuration, if it is determined that said data are routed inbound, said inbound host ID comprising a sequence of destination internet protocol (IP) addresses corresponding to said inbound network configuration, said sequence of destination IP addresses defining an inbound routing path within the inbound network;

means for determining an outbound routing path to the Internet having an outbound host ID in accordance with an outbound configuration with respect to the Internet out of said network configurations, if it is determined that said data are routed outbound, said outbound configuration conesponding to said outbound routing path to the Internet;

means for an inbound routing said data to said destination computer according to said inbound routing path if it is determined that said data are routed inbound; and

means for routing said data to said Internet according to said outbound routing path if it is determined that said data are routed outbound.

61. The network of claim 59 wherein said inbound host ID further comprises:

a domain name;

a network port number;

a hypertext transfer protocol (HTTP) proxy separator;

a SOCKS proxy separator; and

a concatenator.

62. The network of claim 61 wherein said host address comprises an Internet protocol (IP) address with a network port number.

63. The network of claim 59 wherein said outbound host ID comprises:

an Internet protocol (IP) address;

a domain name;

a network port number;

a hypertext transfer protocol (HTTP) proxy separator;

a SOCKS proxy separator; and

a concatenator.

64. The network of claim 59 further comprising:

means for determining if said destination computer is directly accessible; and

an address assignor assigning a host address of said destination computer as said inbound host ID if it is determined that said destination computer is directly accessible.

65. The network of claim 64 wherein said host address comprises an Internet protocol (IP) address with a network port number.

66. The network of claim 64 wherein said host address comprises a domain name plus a network port number.

67. The network of claim 64 further comprising:

means for determining if said destination computer compnses two or more Internet protocol (IP) addresses; and

wherein said host address comprises said IP addresses separated by an address separator if it is determined that said destination computer is directly accessible and said destination computer comprises two or more IP addresses.

68. The network of claim 67 wherein said host address comprises a domain name plus a network port number.

69. The network of claim 64 wherein said host address comprises, in sequential order, an Internet protocol (IP) address with a network port number, an address separator, and a further IP address with a further network port number.

70. The network of claim 64 further comprising:

means for determining if said destination computer comprises a private Internet protocol (IP) address and a public IP address; and

an address assignor assigning said public IP address as said host address if it is determined that said destination computer is directly accessible.

71. The network of claim 64 further comprising:

means for determining if said destination computer comprises a private Internet protocol (IP) address in a private network and a public IP address; and

an address assignor assigning said private IP address as said host address wherein said destination computer is located within said private network.

72. The network of claim 59 further comprising:

means for determining if said inbound configuration includes a packet filtering firewall server; and

an address assignor assigning a host address of said destination computer as said inbound host ID if it is determined that said inbound configuration includes a packet filtering firewall server.

73. The network of claim 72 wherein said host address comprises a domain name plus a network port number.

74. The network of claim 59 further comprising:

means for determining if said inbound configuration includes a port forwarding firewall server; and

an address assignor assigning a port address of a firewall port connected to said destination computer as said inbound host ID if it is determined that said inbound configuration includes a port forwarding firewall server.

75. The network of claim 74 wherein said port address comprises an Internet protocol (IP) address with a network port number.

76. The network of claim 74 wherein said port address comprises a domain name plus a network port number.

77. The network of claim 59 further comprising:

means for determining if said inbound configuration includes a proxy server; and

an address assignor assigning a host address of said destination computer with a port address of a proxy port connected to said destination computer as said inbound host ID if it is determined that said inbound configuration includes a proxy server.

78. The network of claim 77 wherein said host address and said port address are separated by an address separator.

79. The network of claim 78 wherein said address separator further comprises a hypertext transfer protocol (HTTP) proxy separator and a SOCKS proxy separator.

80. The network of claim 77 wherein said host address comprises, in sequential order, an Internet protocol (IP) address with a network port number, an address separator, and a further IP address with a further network port number.

81. The network of claim 59 wherein said data are routed to an external network through said Internet if it is determined that said data are routed outbound.

82. The network of claim 59 further comprising:

if it is determined that said data are routed outbound,

means for determining if said Internet is directly accessible; and

an outbound router directly routing said data to said Internet if it is determined that said Internet is directly accessible.

83. The network of claim 59 further comprising:

if it is determined that said data are routed outbound,

means for determining if said outbound configuration includes a proxy server; and

an address assignor assigning a proxy address with a port address of a proxy port connected to said Internet as said outbound host ID if it is determined that said outbound configuration includes a proxy server.

84. The network of claim 83 wherein said outbound host ID comprises an Internet protocol (IP) address with a network port number.

85. The network of claim 59 wherein authentication data are embedded in said inbound host ID and said outbound host ID.

86. The network of claim 59 further comprising:

if it is determined that said data are routed inbound,

means for determining if said inbound configuration includes a dynamic host configuration protocol (DHCP);

means for determining if an IP address in said inbound host ID has dynamically changed if it is determined that said inbound configuration includes a DHCP; and

an address assignor substituting said IP address in said inbound host ID with said dynamically changed IP address.

87. The network of claim 59 wherein each of said inbound host ID and said outbound host ID further comprises an address separator.