Connectivity in the presence of barriers

• US 7,441,270 B1
• Filed: 07/06/2000
• Issued: 10/21/2008
• Est. Priority Date: 07/06/2000
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Saint-Hilaire, Ylian, Richardson, John W., Edwards, James W.
• Primary Examiner(s): COLIN, CARL G
• Application Number:
  US09/612,324
• Time in Patent Office: 3,029 Days
• Field of Search: 713/201, 713/150, 713/200, 713/152, 709/225, 709/227, 709/245, 709/206, 709/223, 726/11, 726/12, 726/13, 726/15
• US Class Current: 726/15
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes

Abstract

A communication system includes a first endpoint located behind a first connectivity barrier, such as a firewall or a consumer gateway, and a second endpoint. A service is arranged to respond to a request from the first endpoint to establish communications with the second endpoint by assigning a server to handle a session between the first endpoint and the service. A session initiated by the second endpoint is established with the service if the second endpoint is located behind a second connectivity barrier. If the second endpoint is not located behind a connectivity barrier, a transport level communications connection can be established with the second endpoint. In some cases, the service can instruct the first endpoint to establish a direct session with the second endpoint.

Claims

1. A method of establishing communications comprising:

establishing a virtual connection between a source computer system assigned a source virtual host name and located behind a first connectivity barrier and a destination computer system assigned a destination virtual host name and located behind a second connectivity barrier, wherein establishing the virtual connection comprises;

establishing, by the source computer system, a first persistent, bi-directional barrier traversal session between the source computer system and a forwarder/relay service, wherein establishing the first session includes representing data of a first application in a format associated with a proxy network protocol configured to communicate data corresponding to another application so that the data of the first application is communicated through the first connectivity barrier using the proxy network protocol; and

establishing, by the destination computer system, a second persistent, bi-directional barrier traversal session between the destination computer system and the forwarder/relay service, the forwarder/relay service maintaining the second session if the first session is temporarily lost and re-establishing the virtual connection when then first session is re-established.

2. The method of claim 1 wherein at least one of the connectivity barriers comprises a firewall.

3. The method of claim 1 wherein at least one of the connectivity barriers comprises a consumer gateway.

4. The method of claim 1 wherein the virtual host names comprise part of a hierarchical naming system.

5. The method of claim 1 including providing a directory search application to allow a user to select the virtual host names.

6. The method of claim 1 wherein the source computer system can roam between networks.

7. The method of claim 1 including dynamically assigning at least one server associated with the forwarder/relay service to handle the sessions.

8. The method of claim 1, wherein the proxy network protocol includes at least one of:

Hypertext Transfer Protocol (HTTP), File Transfer Protocol (FTP), and SOCKS4/5.

9. The method of claim 1, wherein establishing the second session comprises:

determining a communication mode for communicating between the destination computer system and the forwarder/relay service; and

communicating data between the destination computer system and the forwarder/relay service according to the determined communication mode.

10. A method of establishing communications between source and destination computer systems comprising:

establishing a persistent, bi-directional barrier traversal session, by the source computer system, between the source computer system located behind a first connectivity barrier and a forwarder/relay service, wherein establishing the session includes representing data of a first application in a format associated with a proxy network protocol configured to communicate data corresponding to another application so that the data of the first application is communicated through the first connectivity barrier using the proxy network protocol;

establishing, by the destination computer system, a persistent, bi-directional barrier traversal transport level communications connection between the forwarder/relay service and the destination computer system, the destination computer system located behind a second connectivity barrier; and

maintaining the session between the forwarder/relay service and the destination computer system if the session between the source computer system and the service is lost.

11. The method of claim 10 wherein the first and second barriers comprise firewalls.

12. The method of claim 10 wherein the first and second barriers comprise consumer gateways.

13. The method of claim 10 including assigning a server associated with the forwarder/relay service to handle the session.

14. The method of claim 13 wherein the server is dynamically assigned.

15. The method of claim 10 in which the session is established based on a virtual host name associated with the source computer system.

16. The method of claim 15 wherein the virtual host name comprises part of hierarchical naming system.

17. The method of claim 15 including providing a directory search application to allow a user to select the virtual host name.

18. The method of claim 15 wherein the source computer system can roam between networks.

19. The method of claim 10, wherein the proxy network protocol includes at least one of:

Hypertext Transfer Protocol (HTTP), File Transfer Protocol (FTP), and SOCKS4/5.

20. The method of claim 10, wherein establishing the transport level communication session between the forward/relay service and the destination computer system comprises:

determining a communication mode for communicating between the destination computer system and the forwarder/relay service; and

communicating data between the destination computer system and the forwarder/relay service according to the determined communication mode.

21. An article comprising a computer-readable medium including computer-executable instructions for causing a computer system, in response to a request from a first computer system located behind a first connectivity barrier to establish connectivity to a second computer system, to:

assign a server to handle a first persistent, bi-directional barrier traversal session, initiated by the first computer system, between the first computer system and a forwarder/relay service, wherein the first computer system is configured to represent data of a first application in a format associated with a proxy network protocol configured to communicate data corresponding to another application so that the data of the first application is communicated through the first connectivity barrier using the proxy network protocol;

establish a persistent, bi-directional barrier traversal session initiated by the second computer system if the second computer system is located behind a second connectivity barrier; and

maintain the session between the forwarder/relay service and the destination computer system if the session between the source computer system and the forwarder/relay service is lost.

22. The article of claim 21 including instructions for causing the computer system to establish a transport level communications connection to the second computer system if the second computer system is not located behind a connectivity barrier.

23. The article of claim 21 including instructions for causing the computer system to instruct the first computer system to establish a direct session with the second computer system if the second computer system is not located behind a connectivity barrier.

24. The article of claim 21 including instructions for causing the computer system to establish the forwarder/relay session between the first computer system and the service based on a virtual host name associated with the first computer system.

25. The article of claim 24 wherein the virtual host name comprises part of hierarchical naming system.

26. The article of claim 21, wherein the proxy network protocol includes at least one of:

Hypertext Transfer Protocol (HTTP), File Transfer Protocol (FTP), and SOCKS4/5.

27. The article of claim 21, wherein the computer-executable instructions for causing a computer system to establish a session initiated by the second computer system comprises instructions for causing the computer system to:

determine a communication mode for communicating between the destination computer system and the forwarder/relay service; and

communicate data between the destination computer system and the forwarder/relay service according to the determined communication mode.