Virtual host for protocol transforming traffic traversing between an IP-compliant source and non-IP compliant destination

• US 7,424,737 B2
• Filed: 05/06/2004
• Issued: 09/09/2008
• Est. Priority Date: 10/17/1996
• Status: Expired due to Fees

• Current Assignee: GraphOn Corporation
• Original Assignee: GraphOn Corporation
• Inventors: Wesinger, Jr., Ralph E., Coley, Christopher D.
• Primary Examiner(s): Moazzami, Nasser
• Assistant Examiner(s): TRUVAN, LEYNNA THANH
• Application Number:
  US10/841,246
• Publication Number:
  US 20050021595A1
• Time in Patent Office: 1,587 Days
• Field of Search: 709/1, 709/100, 709104-105, 709/203, 709220-221, 709/223, 709225-228, 709/230, 709/232, 709/247, 709/311, 713/100, 713152-153, 726/3, 726 11- 15, 711/202, 711/205, 711/206, 711/207
• US Class Current: 726/11
• CPC Class Codes: B65B 11/004 in blanks, e.g. sheets precut and creased for folding
• CPC Class Codes: G06F 16/958 Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: H04L 2101/677 Multiple interfaces, e.g. multihomed nodes
• CPC Class Codes: H04L 61/25 of the same type
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2521 Translation architectures other than single NAT servers
• CPC Class Codes: H04L 61/256 NAT traversal
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/4552 Lookup mechanisms between a plurality of directories; Synchronisation of directories, e.g. metadirectories
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/164 Adaptation or special uses of UDP protocol
• CPC Class Codes: H04L 9/40 : Network security protocols

Abstract

A virtual host for protocol transforming traffic traversing between an IP-compliant source and non-IP compliant destination is disclosed. The virtual host includes a communications channel configured to channel process traffic, transforming IP-compliant traffic into a non-IP protocol appropriate for the destination.

Claims

1. A firewall device for protocol transforming traffic traversing between an IP-compliant source and a non-IP compliant destination comprising:

a firewall device having a first edge connection corresponding to a first network connection and a second edge connection corresponding to a second network connection;

at least one of said first or second edge connections further comprising at least one set of virtual hosts for providing network connectivity between the IP-compliant source and the non-IP compliant destination, each of said virtual hosts of said set corresponding to a distinct home through which a connection may be made between said IP compliant source and said non-IP compliant destination;

each of said virtual hosts further comprising a communications channel configured to;

receive IP-compliant traffic from said source being destined for said non-IP compliant destination; and

channel process said traffic in said communications channel to perform a protocol translation of said traffic, thereby transforming said IP-compliant traffic into a non-IP protocol appropriate for said destination.

2. The firewall device of claim 1, wherein said non-IP protocol comprises a protocol used for satellite transmissions.

3. The firewall device of claim 1, wherein said protocol translation is performed by a firewall.

4. The firewall device of claim 1, wherein said virtual host is further configured to perform encryption of said traffic.

5. The firewall device of claim 1, wherein said virtual host is further configured to perform decryption of said traffic.

6. The firewall device of claim 1, wherein said virtual host is further configured to perform compression of said traffic.

7. The firewall device of claim 6, wherein said compression is performed using the MPEG algorithm.

8. The firewall device of claim 6, wherein said compression is performed using the JPEG algorithm.

9. The firewall device of claim 6, wherein said compression is performed using an LZ-based algorithm.

10. The firewall device of claim 1, wherein said virtual host is further configured to perform decompression of said traffic.

11. The firewall device of claim 6, wherein said decompression is performed using the MPEG algorithm.

12. The firewall device of claim 6, wherein said decompression is performed using the JPEG algorithm.

13. The firewall device of claim 6, wherein said decompression is performed using an LZ-based algorithm.

14. A firewall device for protocol transforming traffic traversing between an IP-compliant source and a non-IP compliant destination comprising:

firewall device means having a first edge connection means corresponding to a first network connection and a second edge connection means corresponding to a second network connection;

at least one of said first or second edge connections means further comprising virtual host means for providing network connectivity between the IP compliant source and the non-IP compliant destination;

said virtual host means including means for providing a plurality of distinct homes through which a connection may be made between said IP compliant source and said non-IP compliant destination;

said virtual host means further comprising means for receiving IP-compliant traffic from said source being destined for said non-IP compliant destination; and

means for transforming said IP-compliant traffic into a non-IP protocol appropriate for said destination.

15. The firewall device of claim 14, wherein said non-IP protocol comprises a protocol used for satellite transmissions.

16. The firewall device of claim 14, wherein said protocol translation is performed by a firewall.

17. The firewall device of claim 14, further including means for performing encryption of said traffic.

18. The firewall device of claim 14, further including means for performing decryption of said traffic.

19. The firewall device of claim 14, further including means for performing compression of said traffic.

20. The firewall device of claim 19, wherein said compression is performed using the MPEG algorithm.

21. The firewall device of claim 19, wherein said compression is performed using the JPEG algorithm.

22. The firewall device of claim 19, wherein said compression is performed using an LZ-based algorithm.

23. The firewall device of claim 14, further including means for performing decompression of said traffic.

24. The firewall device of claim 23, wherein said decompression is performed using the MPEG algorithm.

25. The firewall device of claim 23, wherein said decompression is performed using the JPEG algorithm.

26. The firewall device of claim 23, wherein said decompression is performed using an LZ-based algorithm.