Point to multi-point connections

• US 8,831,011 B1
• Filed: 04/13/2007
• Issued: 09/09/2014
• Est. Priority Date: 04/13/2006
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Xceedium Incorporated. (Broadcom, Inc.)
• Inventors: Van, David
• Primary Examiner(s): Phillips, Hassan
• Assistant Examiner(s): FOUD, HICHAM B
• Application Number:
  US11/786,969
• Time in Patent Office: 2,706 Days
• Field of Search: None
• US Class Current: 370/401
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70

Abstract

Communicating with a plurality of networks is disclosed. One or more credentials is provided to a first gatekeeper of a first network. One or more credentials is provided to a second gatekeeper of a second network. A session is maintained with the first gatekeeper. A second session is simultaneously maintained with the second gatekeeper.

Claims

1. A method of communicating with a plurality of networks comprising:

providing one or more credentials to a first gatekeeper of a first network;

receiving, at a client and from the first gatekeeper, a first set of instructions that indicate how a first set of authorized resources can be accessed, wherein the authorized resources included in the first set of authorized resources comprise resources to which access has been granted based at least in part on the one or more credentials provided to the first gatekeeper;

following, at the client, at least a portion of the first set of instructions received from the first gatekeeper, wherein following the at least portion of the set of instructions causes at least one of;

a binding of a client localhost port to at least one authorized resource included in the first set of authorized resources; and

a forwarding of a particular client port designated in the instructions received at the client to the at least one authorized resource included in the first set of authorized resources;

providing one or more credentials to a second gatekeeper of a second network;

receiving, at the client and from the second gatekeeper, a second set of instructions that indicate how a second set of authorized resources can be accessed;

following the instructions received from the second gatekeeper;

maintaining a session with the first gatekeeper; and

simultaneously maintaining a session with the second gatekeeper.

2. The method of claim 1 wherein the first network and second network are disjoint.

3. The method of claim 1 further comprising communicating with a node associated with the first gatekeeper while maintaining a session with the second gatekeeper.

4. The method of claim 1 further comprising communicating with a node associated with the second gatekeeper while maintaining a session with the first gatekeeper.

5. The method of claim 1 further comprising communicating with a first node associated with the first gatekeeper and a second node associated with the second gatekeeper at approximately the same time.

6. The method of claim 1 further comprising receiving an abstracted view of the first and second networks.

7. The method of claim 1 further comprising port forwarding a localhost port to the first gatekeeper.

8. The method of claim 1 further comprising port forwarding a port on the first gatekeeper to a resource on the first network.

9. The method of claim 1 further comprising making a cross platform communication.

10. The method of claim 1 further comprising making a cross protocol communication.

11. The method of claim 1 further comprising communicating with a first node associated with the first gatekeeper during the session with the first gatekeeper.

12. A system for communicating with a plurality of networks, including:

a processor; and

a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to;

provide one or more credentials to a first gatekeeper of a first network;

receive, at a client and from the first gatekeeper, a first set of instructions that indicate how a first set of authorized resources can be accessed, wherein the authorized resources included in the first set of authorized resources comprise resources to which access has been granted based at least in part on the one or more credentials provided to the first gatekeeper;

follow, at the client, at least a portion of the first set of instructions received from the first gatekeeper, wherein following the at least portion of the set of instructions causes at least one of;

a binding of a client localhost port to at least one authorized resource included in the first set of authorized resources; and

a forwarding of a particular client port designated in the instructions received at the client to the at least one authorized resource included in the first set of authorized resources;

provide one or more credentials to a second gatekeeper of a second network;

receive, at the client and from the second gatekeeper, a second set of instructions that indicate how a second set of authorized resources can be accessed;

follow the instructions received from the second gatekeeper;

maintain a session with the first gatekeeper; and

simultaneously maintain a session with the second gatekeeper.

13. The system of claim 12 wherein the first network and second network are disjoint.

14. The system of claim 12 wherein the memory is further configured to provide the processor with instructions for communicating with a node associated with the first gatekeeper while maintaining a session with the second gatekeeper.

15. The system of claim 12 wherein the memory is further configured to provide the processor with instructions for communicating with a node associated with the second gatekeeper while maintaining a session with the first gatekeeper.

16. The system of claim 12 wherein the memory is further configured to provide the processor with instructions for communicating with a first node associated with the first gatekeeper and a second node associated with the second gatekeeper at approximately the same time.

17. The system of claim 12 wherein the memory is further configured to provide the processor with instructions for receiving an abstracted view of the first and second networks.

18. A computer program product for communicating with a plurality of networks, the computer program product being embodied in a computer readable storage medium non-transitory and comprising computer instructions for:

providing one or more credentials to a first gatekeeper of a first network;

receiving, at a client and from the first gatekeeper, a first set of instructions that indicate how a first set of authorized resources can be accessed, wherein the authorized resources included in the first set of authorized resources comprise resources to which access has been granted based at least in part on the one or more credentials provided to the first gatekeeper;

following, at the client, at least a portion of the first set of instructions received from the first gatekeeper, wherein following the at least portion of the set of instructions causes at least one of;

a binding of a client localhost port to at least one authorized resource included in the first set of authorized resources; and

a forwarding of a particular client port designated in the instructions received at the client to the at least one authorized resource included in the first set of authorized resources;

providing one or more credentials to a second gatekeeper of a second network;

receiving, at the client and from the second gatekeeper, a second set of instructions that indicate how a second set of authorized resources can be accessed;

following the instructions received from the second gatekeeper;

maintaining a session with the first gatekeeper; and

simultaneously maintaining a session with the second gatekeeper.