Method and apparatus for communicating data between computer devices

• US 8,666,940 B2
• Filed: 03/23/2005
• Issued: 03/04/2014
• Est. Priority Date: 03/31/2004
• Status: Active Grant

• Current Assignee: British Telecommunications PLC (BT Group PLC)
• Original Assignee: British Telecommunications PLC (BT Group PLC)
• Inventors: Roxburgh, David, Beddus, Simon A, Farley, Patrick B, Hosking, Michael R
• Primary Examiner(s): VU, BAI DUC
• Application Number:
  US10/594,124
• Publication Number:
  US 20070143481A1
• Time in Patent Office: 3,268 Days
• Field of Search: None
• US Class Current: 707/621
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

A client server system uses a client subsystem, a server subsystem and an interconnecting data network. The client subsystem client application initiates a secure connection over the network with the server subsystem which includes a server application cooperating with the client application to complete a secure connection with the client application and which transmits output data over such a connection in response to requests for service by the client application. The server subsystem additionally generates a notification, in response to detecting an event in the absence of a secure connection between the server and the client, and transmits the notification to the notification server which forwards the notification over the interconnecting network to the client application.

Claims

1. A system comprising:

programmed computer devices which execute program code to provide a first sub-system and a gateway for offering services provided by the first sub-system to one or more application hosting sub-systems via the gateway and a data communications network between said gateway and said one or more application hosting sub-systems;

the gateway and each application hosting sub-system being arranged to permit each application hosting sub-system to initiate a secure and authenticated connection from each application hosting sub-system to the gateway via a non-secure data network connection, and

the gateway being logically connected to the first sub-system to enable the services provided by the first sub-system to be provided to each application hosting sub-system via a secured and authenticated connection,

the gateway including notification means for initiating an unauthenticated and unencrypted connection to one or more of the application hosting sub-systems and transmitting over this or each such connection a notification for notifying said one or more of the application hosting sub-systems that it should initiate a secure authenticated connection with the gateway when the notification means is requested so to do by any one of the services offered by the first sub-system.

2. The system according to claim 1 in which the notification takes the form of a non-executable data file.

3. The system according to claim 2 in which the notification takes the form of a simple text file containing an extensible Markup Language, XML, document.

4. The system according to claim 1 wherein the notification means is operable to run separate threads for controlling the forwarding of separate notifications to said one or more application hosting sub-systems.

5. The system according to claim 1, wherein the notification means includes means for permitting each service provided by the first sub-system to specify the number of times which a notification is to be retried in the event of failure to deliver the notification and means for retrying to deliver the notification up to the specified number of times in the event of failure to deliver the notification over the non-secure network.

6. The system according to claim 1 wherein a single notification server receives notifications from plural services and forwards these to plural application hosting sub-systems.

7. A method of offering services provided by a first sub-system to one or more application hosting sub-systems via a gateway which includes a notification means for notifying one or more of the application hosting sub-systems that it should initiate a secure authorized connection with the gateway, the gateway and each application hosting sub-system being arranged to permit each application hosting sub-system to initiate a secure and authenticated connection from each application hosting sub-system to the gateway via a non-secure data network connection, and the gateway being logically connected to the first sub-system to enable the services provided by the first sub-system to be provided to each application hosting sub-system via a secured and authenticated connection, the method comprising:

sending a request from a service wishing to set up a secure and authenticated connection to an application hosting sub-system that the notification means send a notification to a respective application hosting sub-system to notify it that it should initiate a secure authenticated connection with the gateway;

initiating from the notification means to the application hosting sub-system an unauthenticated and unencrypted connection and transmitting over this connection the notification for notifying said application hosting sub-system that it should initiate a secure authenticated connection with the gateway;

causing the application hosting sub-system to set up a secure and authenticated connection with the gateway in response to receipt of the notification; and

communicating with the initiating service via said connection.

8. Computer readable storage media containing a program or suite of computer programs for controlling one or more computer processors to carry out the steps of claim 7 during execution of the computer program or suite of programs.