System and method for processing callback requests included in web-based procedure calls through a firewall

• US 7,526,797 B2
• Filed: 07/24/2002
• Issued: 04/28/2009
• Est. Priority Date: 07/24/2002
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: St. Pierre, Robert P.
• Primary Examiner(s): Revak; Christopher A
• Assistant Examiner(s): Moorthy; Aravind K
• Application Number:
  US10/202,708
• Publication Number:
  US 20040019804A1
• Time in Patent Office: 2,470 Days
• Field of Search: 726/4, 726/11
• US Class Current: 726/5
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

A method of processing callback requests included in web procedure calls through a firewall is discussed. A requesting device contacts a receiving device and requests the performance of a procedure. The procedure call includes a callback request that includes a destination address and port on the requesting device, as well as the address of a broker device. The receiving device parses the procedure call and identifies the requested service and the callback request and then terminates the connection with the requesting device. The receiving device executes the procedure and then requests a new connection to the broker device once the results of the requested service are obtained. The broker verifies the identity of the device and establishes a connection with the receiving device. The receiving device then transmits the results of the requested procedure to the broker which then forwards the results to the requesting device.

Claims

1. In a network having a plurality of interfaced electronic devices, said interfaced electronic devices including a requesting device and a receiving device, said requesting device accessing said receiving device from behind a firewall, a method, comprising the steps of:

receiving over a connection at said receiving device a request from said requesting device, said request including a callback request, said callback request including a return destination on the requesting device and the address of a broker, said broker being an electronic device authorized to contact the requesting device, and a password, said password being required to establish said connection with said broker;

dissolving said connection between said requesting device and receiving device;

performing an operation specified in said request;

establishing a new connection between said receiving device and said broker, said new connection utilizing the address of said broker included with said callback request;

transmitting said password to said broker as part of a connection request prior to establishing said new connection; and

transmitting a message containing the results of said operation over said new connection to the broker, said message including the return destination on said requesting device.

2. The method of claim 1, comprising the further step of:

transmitting a pre-determined password to said broker as part of a connection request prior to establishing said new connection.

3. The method of claim 1, comprising the further step of:

receiving in said callback request a uniform resource locator (URL) address for a handler on said requesting device, said handler designated to receive the results of said operation.

4. The method of claim 3, comprising the further step of:

including the address of said handler in the message containing the results of said operation.

5. The method of claim 1 comprising the further steps:

using the Hypertext Transfer Protocol (HTTP) to make said request; and

including at least one of a PUT request, POST request, and GET request in said request.

6. The method of claim 1 wherein said results are transmitted in a protocol different from the protocol used in the request.

7. In a network having a plurality of interfaced electronic devices, said interfaced electronic devices including a requesting device and a receiving device, said requesting device separated from said network by a firewall, a method, comprising the steps of:

sending a message from said requesting device to a broker, said broker being an electronic device authorized to contact said requesting device, said message identifying the address of said receiving device as a future transmitter of data to said broker, wherein said message from the requesting device to said broker includes the designation of a password for inclusion by said receiving device in future messages to said broker;

sending a request from said requesting device over a connection to said receiving device, said request including a callback request, said callback request including a return destination on said requesting device and the address of said broker; and

receiving the results of an operation specified in said request, said results transmitted from said broker, said broker transmitting said results received from said receiving device to said return destination on said requesting device.

8. The method of claim 7, comprising the further step of:

including a time parameter in said message from the requesting device to said broker, said time parameter limiting the validity of said password to a specified time period.

9. The method of claim 7 wherein said request is an HTTP request.

10. The method of claim 7 wherein said results are received in a protocol different from the protocol used to send the request.

11. The method of claim 7, comprising the further steps of:

creating a separate handler on said requesting device to receive the results of said operation, said handler having a unique uniform resource locator (URL) address;

including said UPI address in said callback request; and

receiving the results of said operation at said handler.

12. In a network having a plurality of interfaced electronic devices, said interfaced electronic devices including a requesting device and a receiving device, said requesting device separated from said network by a firewall, a method, comprising the steps of:

providing a broker, said broker being an electronic device authorized to contact said requesting device;

receiving a registration message with said broker from said requesting device, said registration message identifying the address of said receiving device as a future transmitter of data to said broker, wherein said registration message is accompanied by a password and time parameter to be used by the receiving device in future communications with said broker, said time parameter indicating the period of time for which said password remains valid;

establishing a connection between said broker device and said receiving device in response to a connection request from said receiving device; and

receiving a message with said broker over said connection, said message containing the results of an operation specified in a request transmitted from said requesting device to said receiving device, said message including a return destination on said requesting device.

13. The method of claim 12, comprising the further step of:

transmitting from said broker the message received from said receiving device to said destination port address.

14. The method of claim 12, comprising the further steps of:

receiving a password with said connection request;

comparing the time said password is received by said broker to said time parameter; and

establishing a connection between said receiving device and said broker based on said password being received within the time period specified by said time parameter.

15. The method of claim 12, comprising the further steps of:

receiving a password with said connection request;

comparing the time said password is received by said broker to said time parameter; and

refusing said connection request between said receiving device and said broker based on the expiration of said time parameter.

16. In a network having a plurality of interfaced electronic devices, said interfaced electronic devices including a requesting device and a receiving device, said requesting device accessing said receiving device through a firewall, a medium, said medium holding computer-executable steps for a method, said method comprising the steps of:

receiving over a connection at said receiving device a request from said requesting device, said request including a callback request, said callback request including a password a return destination on the requesting device and the address of a broker, said broker being an electronic device authorized to contact said requesting device;

dissolving said connection between said requesting device and receiving device;

performing an operation specified in said request;

establishing a new connection between said receiving device and said broker, said new connection utilizing the address of said broker included with said callback request;

including said password in a connection request sent to said broker to establish said new connection; and

transmitting a message containing the results of said operation over said new connection to the broker for subsequent forwarding to said requesting device, said message including the return destination on said requesting device.