Access and control system for network-enabled devices

• US 7,788,404 B2
• Filed: 08/16/2006
• Issued: 08/31/2010
• Est. Priority Date: 12/02/1999
• Status: Expired due to Fees

• Current Assignee: Western Digital Technologies Incorporated (Western Digital Corporation)
• Original Assignee: Western Digital Technologies Incorporated (Western Digital Corporation)
• Inventors: Rizal, Dharmarus, Hesselink, Lambertus, Bjornson, Eric S.
• Primary Examiner(s): WINDER, PATRICE L
• Application Number:
  US11/505,795
• Publication Number:
  US 20060277314A1
• Time in Patent Office: 1,476 Days
• Field of Search: 709/227, 709/228, 709/232, 709/241, 713/300
• US Class Current: 709/241
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0218 Distributed architectures, e.g. distributed firewalls
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1008 based on parameters of servers, e.g. available memory or workload monitoring of computer activity G06F11/30
• CPC Class Codes: H04L 67/1023 based on a hash applied to IP addresses or costs
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/563 Data redirection of data network streams

Abstract

A publicly addressable control infrastructure includes a plurality of connection servers and a load balancing server. The load balancing server assigns connection servers to particular communication sessions based on a number of variables. A computer at a private address exchanges secure communications with another computer at a private address via a connection server. A sending buffer at the computer is adaptively polled for data for communication to the other computer.

Claims

1. A publicly addressable distributed control infrastructure comprising:

a plurality of connection servers, each of the plurality of connection servers configured to route communications between multiple computers within respective multiple private networks; and

a load balancing server operable to;

determine a user type of a first computer that requests communication with a second computer via the publicly addressable distributed control infrastructure;

determine a session type of a first session associated with the communication between the first computer and the second computer;

compare the user type and the session type with server type information stored in at least one database communicatively coupled to the load balancing server;

select first and second connection servers of the plurality of connection servers based at least in part on comparison of the user type and the session type with the server type information;

determine a first utilization ratio of the first connection server and a second utilization ratio of the second connection server;

calculate an average expected power for the first session; and

assign one of the first connection server or the second connection server to the first session based at least in part on the first utilization ratio, the second utilization ratio, and the average expected power.

2. The publicly addressable distributed control infrastructure of claim 1, wherein the load balancing server is further operable to:

determine if the first connection server and the second connection server are active; and

determine if the first connection server and the second connection server are each capable of handling connections associated with the first session;

wherein the load balancing server determines the first utilization ratio of the first connection server and the second utilization ratio of the second connection server if the first connection sever and the second connection server are both active and capable of handling the connections associated with the first session.

3. The publicly addressable distributed control infrastructure of claim 1, wherein the assigned connection server is configured to route the communication between the first computer and the second computer.