Method and system for providing secure remote access and control

• US 9,225,767 B2
• Filed: 08/13/2013
• Issued: 12/29/2015
• Est. Priority Date: 06/19/2006
• Status: Active Grant

• Current Assignee: BeyondTrust Corp.
• Original Assignee: Bomgar Corporation (BeyondTrust Corp.)
• Inventors: Bomgaars, Joel, McNeill, Nathan, Durham, David, Cross, Jeremy, Sleevi, Ryan, Ngo, Huey Jiun
• Primary Examiner(s): Truong, Lan-Dai T
• Application Number:
  US13/965,496
• Publication Number:
  US 20130332548A1
• Time in Patent Office: 868 Days
• Field of Search: 709/205, 709/206, 709/217, 709/208, 709/202
• US Class Current: 1/1
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 41/50 Network service management, e.g. ensuring proper service fulfilment according to agreements
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/025 for remote control or remote monitoring of applications

Abstract

A network appliance is configured to communicate with a representative system and a customer system. The network appliance permits control and access to the customer system by the representative system or to the representative system by the customer system for providing remote support service. The network appliance manages, logs, and routes screen updates of the customer system to the representative system. In addition, the network appliance logs and provides reports for all actions taken during the support service.

Claims

1. A method comprising:

communicating, by a network appliance that is a standalone hardware device or devices that include a processor, with a representative system;

communicating, by the network appliance, with a customer system configured to execute a customer application for enabling a remote support service; and

permitting, via the network appliance, control and access to the customer system by the representative system or to the representative system by the customer system for providing the remote support service, wherein the representative system executes a representative application, the customer application and the representative application being provided by the network appliance, and

wherein the network appliance is configured to centrally manage, log, and route all screen updates and activities, via the customer application, of the customer system to the representative system, the network appliance being managed by the customer system or the representative system, wherein the customer application is automatically removed from the customer system after each support session.

2. A method according to claim 1, wherein the network appliance is further configured to provide a web-based interface to facilitate establishment of a support session between the representative system and the customer system.

3. A method according to claim 1, wherein the network appliance is further configured to provide a chat interface for capturing instant messages between the representative system and the customer system, and to provide an audio interface for providing voice communication between the representative system and the customer system.

4. A method according to claim 1, wherein the network appliance is further configured to control access to the customer system according to a representative profile.

5. A method according to claim 1, wherein the representative application provides a graphical user interface (GUI) that includes a section for displaying a queue of users that requested the support service.

6. A method according to claim 1, wherein the customer application provides a graphical user interface (GUI) that includes,

a first section for providing a chat session,

a second section for initiating a file transfer relating to the support service;

and

a third section for viewing a screen of the representative system.

7. A method according to claim 1, wherein the network appliance is further configured to provide a web-based interface to generate a report of the logged activities.

8. A method according to claim 1, further comprising:

configuring login information by a user of the customer system;

authenticating the representative system using the login information, wherein the login information is utilized by a user of the representative system to login in the network appliance; and

upon authenticating the representative system, establishing a secure connection, via the network appliance, between the representative system and the customer system for routing the screen updates and the activities.

9. A method according to claim 1, wherein the network appliance is located at a premise of a user associated the customer system.

10. An apparatus comprising:

at least one processor; and

at least one memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

initiate establishment of communication with a representative system, via a representative application, which is downloaded from the apparatus to the representative system, and a customer system, via a customer application, which is downloaded from the apparatus to the customer system, for permitting control of the customer system to the representative system for providing remote support service, wherein the customer system is configured to execute the customer application for enabling the remote support service, and

the apparatus is configured to centrally manage, log all screen updates and activities and to initiate forwarding of screen updates and activities, via the customer application, of the customer system to the representative system, wherein the apparatus is a standalone hardware and is managed by the customer system or the representative system, wherein the customer application is automatically removed from the customer system after each support session.

11. An apparatus according to claim 10, wherein the apparatus is further caused to:

present a web-based interface configured to initiate establishment of a support session between the representative system and the customer system.

12. An apparatus according to claim 10, wherein the apparatus is further caused to:

capture instant messages between the representative system and the customer system.

13. An apparatus according to claim 10, wherein the apparatus is further caused to:

control access to the customer system according to a representative profile.

14. An apparatus according to claim 10, wherein the representative application provides a graphical user interface (GUI) that includes a section for displaying a queue of users that requested the remote support service.

15. An apparatus according to claim 10, wherein the customer application provides a graphical user interface (GUI) that includes,

a first section for providing a chat session,

a second section for initiating a file transfer relating to the remote support service;

and a third

section for viewing a screen of the representative system.

16. An apparatus according to claim 10, wherein the apparatus is further caused to:

log the activities and to generate a report of the logged activities.

17. An apparatus according to claim 10, wherein the apparatus is configured to host multiple support sessions concurrently.

18. An apparatus according to claim 17, wherein if a representative associated with the representative system decides at any point during the sessions that another logged-in representative could better handle one or more of the sessions, then the representative can share the one or more sessions with the other representative.

19. An apparatus according to claim 18, wherein the other representative is selected from a list of representatives.

20. A method comprising:

downloading, into a memory, an application from a network appliance that is a standalone hardware device or devices to a representative system;

downloading, into another memory, another application from the network appliance, wherein the network appliance is configured to facilitate establishment of a remote technical support session by the representative system with a customer system;

wherein the network appliance is configured to centrally manage all screen updates and activities, via the customer application, of the customer system to the representative system, wherein the network appliance is managed by the customer system or the representative system; and

initiating automatic self-removal of the customer application from the customer system upon termination of the technical support session.

21. A method according to claim 20, wherein the network appliance is further configured to provide a web-based interface to facilitate establishment of the support session between the representative system and the customer system.

22. A method according to claim 20, wherein the network appliance is further configured to provide a chat interface for capturing instant messages to the customer system, and to provide an audio interface for providing voice communication between the representative system and the customer system.

23. A method according to claim 20, wherein the network appliance is further configured to control access to the customer system according to a representative profile.

24. A method according to claim 20, wherein the downloaded another application provides a graphical user interface (GUI) that includes a section for displaying a queue of customers that requested the technical support service.

25. A method comprising:

downloading, into a memory, an application from a network appliance that is a standalone hardware device at a customer system,

downloading, into another memory, another application from the network appliance to a representative system, wherein the network appliance is configured to facilitate establishment of a remote technical support session with the representative system, and the network appliance is further configured to centrally manage, log all screen updates and activities and to initiate forwarding of the screen updates and activities, via the customer application, of the customer system to the representative system, wherein the network appliance is managed by the customer system or the representative system; and

initiating automatic self-removal of the application from the customer application from the customer system upon termination of the remote technical support session.

26. A method according to claim 25, wherein the network appliance is further configured to provide a web-based interface to facilitate establishment of the support session between the representative system and the customer system.

27. A method according to claim 25, wherein the network appliance is further configured to provide a chat interface for capturing instant messages to the representative system, and to provide an audio interface for providing voice communication between the representative system and the customer system.

28. A method according to claim 25, wherein the network appliance is further configured to control access to the customer system according to a representative profile.

29. A method according to claim 25, wherein the application provides a graphical user interface (GUI) that includes,

a first section for providing a chat session,

a second section for initiating a file transfer relating to the remote technical support service;

and a

third section for viewing a screen of the representative system.