Method and system for dynamic application layer gateways

• US 8,280,945 B2
• Filed: 11/19/2009
• Issued: 10/02/2012
• Est. Priority Date: 10/13/1999
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Putzolu, David M.
• Primary Examiner(s): BURGESS, BARBARA N
• Application Number:
  US12/622,250
• Publication Number:
  US 20100128733A1
• Time in Patent Office: 1,048 Days
• Field of Search: 709/202, 709/203, 709/217, 709/238, 709/239, 713/152, 713/154
• US Class Current: 709/202
• CPC Class Codes: G06F 9/4868 with creation or replication
• CPC Class Codes: H04L 41/048 mobile agents
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching

Abstract

A method and system are disclosed for providing functionality on a network. A mobile agent moves from a first node to a target node and, at the target node, performs as an application layer gateway.

Claims

1. A method comprising:

moving at least one of a plurality of agents from a first device of a network to a target device of the network, the at least one of the agents for providing specific application layer gateway functionality on the target device, said moving initiated upon detection of a condition requiring the application layer gateway functionality at the target device, wherein the at least one agent is a software object instantiated via an object-oriented programming language, and the at least one agent includes a permissions list, wherein the at least one agent is only permitted access to resources on a device where the at least one agent is currently located based on information in the permissions list;

identifying allowable resources for the at least one of the agents on the target device from the permissions list; and

the at least one of the agents utilizing the allowable resources on the target device to function as the specific application layer gateway functionality on the target device,

wherein the application layer gateway functionality is selected from the group consisting of manipulating, modifying, filtering, sourcing and sinking data between the first device and the target device.

2. The method of claim 1 wherein the at least one of the agents acts as a web cache.

3. The method of claims 1 wherein the at least one of the agents acts as a media transcoder.

4. The method of claims 1 wherein the at least one of the agents acts as a firewall.

5. The method of claim 1 wherein to act as the specific application layer gateway, the at least one of the agents:

accepts traffic sent to the target device addressed to a client device;

performs at least one of filtering the traffic and modifying the traffic; and

sends the traffic to the client device.

6. The method of claim 1 wherein the at least one of the agents, before performing the specific application layer gateway functionality at the target device, installs a software module at the target device to aid in performing the specific application layer gateway functionality.

7. The method of claim 1 wherein the at least one of the agents uninstalls itself.

8. A non-transitory machine-accessible medium having stored thereon instructions that, when executed by a machine, cause the machine to migrate agents among devices on a network by:

at least one of the agents moving from a first device to a target device, the at least one of the agents for providing specific application layer gateway functionality on the target device, said moving initiated upon detection of a condition requiring the application layer gateway functionality at the target device, wherein the at least one agent is a software object instantiated via an object-oriented programming language, and the at least one agent includes a permissions list, wherein the at least one agent is only permitted access to resources on a device where the at least one agent is currently located based on information in the permissions list;

identifying allowable resources for the at least one of the agents on the target device from the permissions list; and

the at least one of the agents utilizing the allowable resources on the target device to function as the specific application layer gateway functionality on the target device,

wherein the application layer gateway functionality is selected from the group consisting of manipulating, modifying, filtering, sourcing and sinking data between the first device and the target device.

9. The non-transitory machine-accessible medium of claim 8 wherein the at least one of the agents acts as a web cache.

10. The non-transitory machine-accessible medium of claim 8 wherein the at least one of the agents acts as a media transcoder.

11. The non-transitory machine-accessible medium of claim 8 wherein the at least one of the agents acts as a firewall.

12. The non-transitory machine-accessible medium of claim 8 wherein to act as the specific application layer gateway, the at least one of the agents:

accepts traffic sent to the target device addressed to a client device;

performs at least one of filtering the traffic and modifying the traffic; and

sends the traffic to the client device.

13. The non-transitory machine-accessible medium of claim 8 wherein the at least one of the agents, before performing the specific application layer gateway functionality at the target device, installs a software module at the target device to aid in performing the specific application layer gateway functionality.

14. The non-transitory machine-accessible medium of claim 8 wherein the at least one of the agents uninstalls itself.

15. A network comprising:

a plurality of devices; and

a plurality of links connecting the devices;

wherein each of the plurality of devices comprises

a processor; and

a memory comprising instructions that, when executed on the processor, cause migration of agents among the plurality of devices of the network by;

moving at least one of a plurality of agents from a first device of the plurality of devices to a target device of the plurality of devices, the at least one of the agents for providing specific application layer gateway functionality on the target device, said moving initiated upon detection of a condition requiring the application layer gateway functionality at the target device, wherein the at least one agent is a software object instantiated via an object-oriented programming language, and the at least one agent includes a permissions list, wherein the at least one agent is only permitted access to resources on a device where the at least one agent is currently located based on information in the permissions list;

identifying allowable resources for the at least one of the agents on the target device from the permissions list; and

the at least one of the agents utilizing the allowable resources on the target device to function as the specific application layer gateway functionality on the target device,

wherein the application layer gateway functionality is selected from the group consisting of manipulating, modifying, filtering, sourcing and sinking data between the first device and the target device.

16. The network of claim 15 wherein the at least one of the agents acts as a web cache.

17. The network of claim 15 wherein the at least one of the agents acts as a media transcoder.

18. The network of claim 15 wherein the at least one of the agents acts as a firewall.

19. The network of claim 15 wherein to act as the specific application layer gateway, the at least one of the agents:

accepts traffic sent to the target device addressed to a client device;

performs at least one of filtering the traffic and modifying the traffic; and

sends the traffic to the client device.

20. The network of claim 15 wherein the at least one of the agents, before performing the specific application layer gateway functionality at the target device, installs a software module at the target device to aid in performing the specific application layer gateway functionality.

21. The network of claim 15 wherein the at least one of the agents uninstalls itself.