Remote computer management using network communications protocol that enables communication through a firewall and/or gateway

• US 8,645,520 B2
• Filed: 04/04/2012
• Issued: 02/04/2014
• Est. Priority Date: 06/30/2004
• Status: Active Grant

• Current Assignee: Datto LLC
• Original Assignee: Kaseya International Limited (Kaseya Limited)
• Inventors: Sutherland, Mark J., Wong, Paul Y.
• Primary Examiner(s): Etienne, Ario
• Assistant Examiner(s): SHIU, HO T
• Application Number:
  US13/439,644
• Publication Number:
  US 20120198044A1
• Time in Patent Office: 671 Days
• Field of Search: None
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

The invention facilitates remote management of a computer via a network. Remote computer management in which communication between a managed computer and a remote computer management server is initiated by the managed computer is implemented so that the communication is formatted in accordance with a network communications protocol that can be used to format communication that is allowed to pass through a firewall and/or gateway that mediates communication with the managed computer.

Claims

1. A method, comprising:

initiating, from a managed computer, communication between the managed computer and a remote computer management server;

formatting the communication to allow pass through to at least one of a firewall and a gateway that mediates communication with the managed computer by performing a succession of formatting changes to the communication in accordance with each of a plurality of different network communications protocols until one protocol version of the initial communication is allowed to pass through the at least one firewall or gateway of the managed computer, wherein the succession of formatting changes are initiated by an agent application installed on the managed computer and operated by the remote computer management server;

performing, by the agent application, a management command receive from the remote computer management server, the management command comprising instructions regarding at least one network communications protocol that is used to communicate with at least one device in communication with the managed computer;

utilizing the network communications protocol allowed to pass to format subsequent communication between the managed computer and the remote computer management server during an ensuing communication session; and

receiving a response from the remote computer management server, wherein the response indicates if at least one operation is performed on at least one of the managed computer itself and the device in communication with the managed computer.

2. The method of claim 1, wherein the network communications protocol allowed to pass is an HTTP protocol.

3. The method of claim 1, wherein the network communications protocol allowed to pass is an HTTPS protocol.

4. The method of claim 1, wherein the network communications protocol allowed to pass is an FTP protocol.

5. The method of claim 1, wherein the network communications protocol allowed to pass is a TCP/IP protocol.

6. The method of claim 1, wherein the communication is conducted over the Internet.

7. The method of claim 1, further comprising executing on a recurring basis an initiating communication operation from the managed computer.

8. The method of claim 1, further comprising executing at a regular interval the initiating communication from the managed computer.

9. The method of claim 8, wherein the regular interval is one minute or less than one minute.

10. The method of claim 1, further comprising determining, prior to initiating communication between the managed computer and the remote computer management server, whether a connection is open to enable communication from the managed computer, and if no connection is available then communication between the managed computer and the remote computer management server is not initiated.

11. The method of claim 1, further comprising routing all communication between the managed computer and the remote computer management server through a single network communications port that is allowed by the at least one of the firewall and the gateway of the managed computer for other network communication.

12. The method of claim 1, further comprising authenticating the managed computer to the remote computer management server.

13. The method of claim 1, further comprising encrypting communication between the managed computer and the remote computer management server.

14. The method of claim 1, wherein the encrypting communication between the managed computer and the remote computer management server further comprises generating a new encryption key each time that the managed computer initiates communication with the remote computer management server.

15. The method of claim 1, wherein encrypting communication between the managed computer and the remote computer management server further comprises successively comparing different combinations of a specified number of the most recent encryption keys stored by the managed computer and a specified number of the most recent encryption keys stored by the remote computer management server.

16. A method, comprising:

initiating, from a managed computer, communication between the managed computer and a remote computer management server;

querying, if the remote computer management server has a management action to be performed on the managed computer, wherein the communication is formatted in accordance with a network communications protocol that can be used to format communication that is allowed to pass through at least one of a firewall and a gateway that mediates communication with the managed computer;

performing a succession of formatting changes to the communication in accordance with each of a plurality of different network communications protocols until one protocol version of the initial communication is allowed to pass through the at least one of the firewall and the gateway of the managed computer, wherein the succession of formatting changes are initiated by an agent application installed on the managed computer and operated by the remote computer management server;

performing, by the agent application, a management command received from the remote computer management server, the management command comprising instructions regarding at least one network communications protocol that is used to communicate with at least one device in communication with the managed computer;

utilizing the network communications protocol allowed to pass to format subsequent communication between the managed computer and the remote computer management server during an ensuing communication session; and

receiving a response from the remote computer management server, wherein the response indicates if at least one operation is performed on at least one of the managed computer itself and the at least one device in communication with the managed computer.

17. A system, comprising:

a remote computer management server; and

a managed computer that initiates communication with the remote computer management server, wherein the communication is formatted in accordance with a network communications protocol that can be used to format communication that is allowed to pass through at least one of a firewall and a gateway that mediates communication with the managed computer, performs a succession of format changes to the communication in accordance with each of a plurality of different network communications protocols until one protocol version of the initial communication is allowed to pass through the at least one firewall or gateway of the managed computer, wherein the succession of format changes are initiated by an agent application installed on the managed computer and operated by the remote computer management server, and wherein the agent application performs a management command receive from the remote computer management server, the management command comprising instructions regarding at least one network communications protocol that is used to communicate with at least one device in communication with the managed computer, the network communications protocol allowed to pass being further used to format subsequent communication between the managed computer and the remote computer management server during an ensuing communication session, wherein the remote computer management server sends a response that indicates if at least one operation is performed on at least one of the managed computer itself and the at least one device in communication with the managed computer.