Method for controlling client access

• US 7,415,521 B2
• Filed: 03/31/2004
• Issued: 08/19/2008
• Est. Priority Date: 03/31/2004
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Fruchtman, Barry
• Primary Examiner(s): Eng; David Y
• Application Number:
  US10/815,318
• Publication Number:
  US 20050246446A1
• Time in Patent Office: 1,602 Days
• Field of Search: 709/227, 709/223, 709/238
• US Class Current: 709/227
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL

Abstract

Provided are a method, system, and article of manufacture, wherein in certain embodiments a request is received to initiate a session. A determination is made whether the session should be initiated with addressing information provided by a client. The session is initiated with trusted addressing information corresponding to the client, in response to determining that the session should not be initiated with the addressing information provided by the client.

Claims

1. A method, comprising:

receiving a request, from a client, to initiate a session, wherein the client provides an addressing information for initiating the session;

determining whether the session should be initiated with the addressing information provided by the client; and

initiating the session with trusted addressing information corresponding to the client, in response to determining that the session should not be initiated with the addressing information provided by the client, wherein the trusted addressing information is stored in a data structure, and wherein the data structure includes for a plurality of clients whether each client of the plurality of clients is allowed to initiate sessions with client provided addressing information.

2. The method of claim 1, wherein receiving the request, determining whether the session should be initiated, and initiating the session are performed by a storage manager implemented in a server from which the client is separated by a firewall.

3. The method of claim 2, wherein the firewall prevents the client from initiating the session with the sewer.

4. The method of claim 1, wherein the request indicates to a server that the client is ready to perform a task, and that the sewer should initiate the session with the client.

5. The method of claim 1, further comprising:

receiving the trusted addressing information corresponding to the client from a trusted administrative client, prior to receiving the request to initiate the session.

6. The method of claim 1, further comprising:

initiating the session with the addressing information provided by the client, in response to determining that the session should be initiated with the addressing information provided by the client.

7. The method of claim 1, wherein the trusted addressing information includes the Internet Protocol Address of the client.

8. The method of claim 1, wherein a firewall prevents the client from initiating the session with a server, and wherein the server is required to allow access to the client across the firewall.