Method and system for communication between two devices by editing machine specific information at a proxy server

• US 7,694,018 B2
• Filed: 11/19/2002
• Issued: 04/06/2010
• Est. Priority Date: 11/19/2002
• Status: Expired due to Fees

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Wuebker, Carl L.
• Primary Examiner(s): Winder; Patrice
• Assistant Examiner(s): CHOUDHURY, AZIZUL Q
• Application Number:
  US10/300,112
• Publication Number:
  US 20040098484A1
• Time in Patent Office: 2,695 Days
• Field of Search: 709/203, 709/227, 709/229
• US Class Current: 709/245
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls

Abstract

A method for communicating between two devices through a proxy server, and a system for implementing the same. The method discloses a proxy server that is capable of receiving traffic at a proxy server from a first device and a second device. The second device services the first device. The method and proxy server allow for communication between the first and second devices by editing machine specific information in the traffic at the application layer so that traffic sent to the first and second devices appears to be from the proxy server. The traffic complies with a protocol operating at the application layer. Thereafter, the traffic that is edited is forwarded to the first and second devices appropriately.

Claims

1. A method for communicating comprising:

receiving traffic at a proxy server from a first device and a second device that services said first device, wherein said proxy server acts as a communications relay between said first device and said second device, and wherein said traffic comprises first machine specific information specific to said first device and second machine specific information specific to said second device that if left unedited prevents said proxy server from facilitating communication between said first device and said second device, wherein said first machine specific information comprises an address of said first device;

editing said first machine specific information including said address at the ISO/OSI application layer so that traffic from said first device sent to said second device appears to originate from said proxy server, said traffic complying with a protocol operating at said application layer;

wherein said editing comprises;

locating machine specific information including said address referencing said first device in traffic received from said first device;

creating said traffic that is edited, said creating comprising;

copying said traffic received from said first device; and

substituting said machine specific information including said address referencing said first device with machine specific information referencing said proxy server in said traffic received from said first device;

locating machine specific information referencing said second device in traffic received from said second device; and

creating said traffic that is edited, said creating comprising;

copying said traffic received from said second device; and

substituting said machine specific information referencing said second device with machine specific information referencing said proxy server in said traffic received from said second device;

forwarding said traffic that is edited from said first device to said second device to enable communication between said first device and said second device; and

forwarding said traffic that is edited from said second device to said first device to enable communication between said second device and said first device.

2. The method as described in claim 1, further comprising:

before said receiving, configuring said first device to communicate with said proxy server instead of said second device, said proxy server able to communicate with said first and second devices.

3. The method as described in claim 1, wherein said receiving further comprises:

establishing a first communication channel between said first device and said proxy server in response to a request from said first device for the purposes of transferring said traffic between said first device and said second device;

establishing a second communication channel between said proxy server and said second device; and

receiving said traffic at said proxy server from said first and second devices over said first and second communication channels.

4. The method as described in claim 1, wherein said first and second communication channels are established following a Transmission Control Protocol/Internet Protocol (TCP/IP) standard.

5. The method as described in claim 1, wherein said proxy server and a plurality of clients including said first device are located within a secure network protected by a firewall, and said second device is located outside said secure network, said second device servicing said plurality of clients via said protocol operating at said application layer.

6. The method as described in claim 5, further comprising:

receiving a reply from a source port associated with said second device at said proxy server to open a first port 6000 in response to one of a plurality of requests from said plurality of clients;

forwarding said reply to a first client that sent a most recent request to said proxy server to open a second port 6000 for communication;

switching communication from said second device source port to said first port 6000 to an assigned port at said proxy server; and

forwarding further communication from said second device source port to said assigned proxy server port to said second port 6000 on said first client.

7. The method as described in claim 1, wherein said first machine specific information further comprises a machine name.

8. The method as described in claim 1, wherein said address complies with an Internet Protocol (IP).

9. A method for communicating comprising:

receiving traffic at a proxy server from a plurality of clients and from a second server servicing said plurality of clients, said plurality of clients and said proxy server located within a secure network protected by a firewall, said second server located outside said secure network, said proxy server acts as a communications relay between said plurality of clients and said second server, and wherein said traffic comprises machine specific information associated respectively with each of said clients and said second server that if left unedited prevents said proxy server from facilitating communication between said plurality of clients and said second server, wherein first machine specific information specific to a first client of sail plurality of clients comprises a source address for said first client;

editing said first machine specific information including said source address at the ISO/OSI application layer so that traffic from said first client sent to said second server appears to originate from said proxy server, said traffic complying with a protocol operating at said application layer wherein said editing further comprises;

locating machine specific information referencing said source in said message;

creating said traffic that is edited, said creating comprising;

copying said message; and

substituting said machine specific information referencing said source with machine specific information referencing said proxy server in said message;

forwarding said traffic that is edited to said second server to enable communication between said first client and said second server;

editing second machine specific information including said source address at the ISO/OSI application layer so that traffic from said second server to said first client appears to originate from said proxy server, said traffic complying with a protocol operating at said application layer wherein said editing further comprises;

locating machine specific information referencing said source in said message;

creating said traffic that is edited, said creating comprising;

copying said message; and

substituting said second machine specific information

referencing said second server with machine specific information

referencing said proxy server in said message; and

forwarding said traffic that is edited to said first client to enable communication between said second server and said first client.

10. The method as described in claim 9, wherein said receiving further comprises:

continually listening for said traffic;

receiving a message of said traffic; and

identifying a source of said message, said source comprising one of said plurality of clients and said second server.

11. The method as described in claim 9, further comprising:

receiving a reply from a source port from said second server at said proxy server to open a first port 6000 in response to one of a plurality of requests from said plurality of clients;

forwarding said reply to a client that sent a most recent request to said proxy server to open a second port 6000 at said client that sent a most recent request to said proxy server;

switching communication from said second server source port to said first port 6000 to an assigned port at said proxy server; and

forwarding further communication from said second server source port to said assigned proxy server port to said second port 6000.

12. The method as described in claim 9, further comprising:

at said proxy server, understanding that traffic from said first client following said protocol is directed towards said second server.

13. The method as described in claim 9, wherein said machine specific information further comprises a domain name.

14. The method as described in claim 9, wherein said plurality of clients are unable to communicate directly with said second server through said application layer protocol.

15. A proxy server comprising:

a processor; and

a computer readable memory coupled to said processor and containing program instructions that, when executed, implement a method for communicating comprising;

receiving traffic at a proxy server from a first device and a second device that services said first device, wherein said proxy server acts as a communication relay between said first device and said second device, and wherein said traffic comprises first machine specific information specific to said first device and second machine specific information specific to said second device that if left unedited prevents said proxy server from facilitating communication between said first device and said second device, wherein said first machine specific information comprises an address of said first device;

editing said first machine specific information including said address at the ISO/OSI application layer so that traffic from said first device sent to said second device appears to originate from said proxy server, said traffic complying with a protocol operating at said application layer wherein said editing in comprises locating machine specific information including said address referencing said first device in traffic received from said first device and creating said traffic that is edited, said creating comprising;

copying said traffic received from said first device; and

substituting said machine specific information including said address referencing said first device with machine specific information referencing said proxy server in said traffic received from said first device

wherein said editing further comprises locating machine specific information referencing said second device in traffic received from said second device and creating said traffic that is edited, said creating comprising;

copying said traffic received from said second device; and

substituting said machine specific information referencing said second device with machine specific information referencing said proxy server in said traffic received from said second device; and

forwarding said traffic that is edited from one of said first and said second device to the other one of said first device and said second device to enable communication between said first and said second device.

16. The proxy server as described in claim 15, wherein said method further comprises:

before said receiving, configuring said first device to communicate with said proxy server instead of said second device, said proxy server able to communicate with said first and second devices.

17. The proxy server as described in claim 15, wherein said receiving in said method further comprises:

establishing a first communication channel between said first device and said proxy server in response to a request from said first device for the purposes of transferring said traffic between said first device and said second device;

establishing a second communication channel between said proxy server and said second device; and

receiving said traffic at said proxy server from said first and second devices over said first and second communication channels.

18. The proxy server as described in claim 15, wherein said first and second communication channels are established following a Transmission Control Protocol/Internet Protocol (TCP/IP) standard.

19. The proxy server as described in claim 15, wherein said proxy server and a plurality of clients including said first device are located within a secure network protected by a firewall, and said second device is located outside said secure network, said second device servicing said plurality of clients via said protocol operating at said application layer.

20. The proxy server as described in claim 19, wherein said method further comprises:

receiving a reply from a source port associated with said second device at said proxy server to open a first port 6000 in response to one of a plurality of requests from said plurality of clients;

forwarding said reply to a first client that sent a most recent request to said proxy server to open a second port 6000 for communication;

switching communication from said second device source port to said first port 6000 to an assigned port at said proxy server; and

forwarding further communication from said second device source port to said assigned proxy server port to said second port 6000 on said first client.

21. The proxy server as described in claim 15, wherein said first machine specific information further comprises a machine name.

22. The proxy server as described in claim 15, wherein said address complies with an Internet Protocol (IP).