Microkernel gateway server

• US 9,282,079 B2
• Filed: 12/23/2009
• Issued: 03/08/2016
• Est. Priority Date: 12/30/2008
• Status: Active Grant

• Current Assignee: EADS Secure Networks
• Original Assignee: EADS Secure Networks
• Inventors: Meier, Guillaume, Chaland, Marc, Clermont, Nicolas, Hauguet, Francis
• Primary Examiner(s): Survillo, Oleg
• Application Number:
  US13/141,816
• Publication Number:
  US 20110296026A1
• Time in Patent Office: 2,267 Days
• Field of Search: 709221-230, 709/213, 705 25- 30
• US Class Current: 1/1
• CPC Class Codes: G06F 11/2043 where the redundant components share a common memory address space
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 9/544 Buffers; Shared memory; Pipes
• CPC Class Codes: H04L 12/4625 Single bridge functionality, e.g. connection of two networks over a single bridge
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 69/12 Protocol engines
• CPC Class Codes: H04L 69/32 Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level
• CPC Class Codes: H04L 69/321 Interlayer communication protocols or service data unit [SDU] definitions; Interfaces between layers

Abstract

A gateway server includes a first subsystem including a media level, a communication level and a control level; a microkernel; an IPC controller configured to manage communication between the server resources allocated to the first subsystem a second subsystem including a second media level, a second communication level and a second control level such that the microkernel and the IPC controller also manage communication between the server resources allocated to the second subsystem; and a memory with shared reading and writing, established under the control of the microkernel and the IPC controller, between the control level of the first subsystem and the control level of the second subsystem.

Claims

1. A method for controlling a gateway server comprising a first subsystem including a media level, a communication level and a control level, a microkernel, an IPC controller configured to manage communication between the server resources allocated to the first subsystem, a second subsystem including a second media level, a second communication level and a second control level such that the microkernel and the IPC controller also manage communication between the server resources allocated to said second subsystem, the method comprising transmitting requests between the control level of the first subsystem and the control level of the second subsystem, the requests transmitted using a memory with shared reading and writing, established under the control of the microkernel and the IPC controller, wherein data to be received by said first subsystem are transferred to said second subsystem only via the control level of said first subsystem.

2. A gateway server comprising:

a first subsystem including a media level, a communication level and a control level;

a microkernel;

an IPC controller configured to manage communication between the server resources allocated to the first subsystem;

a second subsystem including a second media level, a second communication level and a second control level such that the microkernel and the IPC controller also manage communication between the server resources allocated to said second subsystem; and

a memory with shared reading and writing, established under the control of the microkernel and the IPC controller, between the control level of the first subsystem and the control level of the second subsystem,

wherein data to be received by said first subsystem are transferred to said second subsystem only via the control level of said first subsystem.

3. The server according to claim 2, wherein each subsystem includes a non-transitory computer readable memory encoded with code instructions for encoding the information, received in a request in accordance with a network communications protocol, into a binary structure in accordance with a communications protocol for communication between the control levels of the first subsystem and of the second subsystem.

4. The server according to claim 3, wherein each subsystem includes a non-transitory computer readable memory encoded with code instructions for encoding the information into a binary structure after processing of said information in the communication level and then in the control level of said subsystem.

5. The server according to claim 3, comprising a non-transitory computer readable memory encoded with code instructions for identifying, as a function of the nature of the request, data which are characteristic of the request and have to be encoded in the binary structure.

6. The server according to claim 3, comprising a non-transitory computer readable memory encoded with code instructions for associating the received request with a request predefined in a limited list of authorised requests.

7. The server according to claim 2, wherein the microkernel comprises a non-transitory computer readable memory encoded with code instructions for associating each application implemented by a subsystem with the control of a server resource.

8. The server according to claim 2, comprising a non-transitory computer readable memory encoded with code instructions for limiting communication in such a way that neither the media level nor the communication level of a subsystem can communicate directly with the media level or the communication level of the other subsystem without the intermediary of the control levels of the subsystems.

9. The server according to claim 2, comprising a non-transitory computer readable memory encoded with code instructions for analysing the syntax and validity of the protocols filtered by each layer used in the server.

10. The server according to claim 2, wherein data to be received by said second subsystem are transferred to said first subsystem only via the control level of said second subsystem.

11. The server according to claim 2, wherein said data to be received by said first subsystem are successively received by the media level, then by the communication level and then by the control level of the first subsystem.

12. A gateway server comprising:

a first subsystem including a media level, a communication level and a control level;

a microkernel;

an IPC controller configured to manage communication between the server resources allocated to the first subsystem;

a second subsystem including a second media level, a second communication level and a second control level such that the microkernel and the IPC controller also manage communication between the server resources allocated to said second subsystem; and

a memory with shared reading and writing, established under the control of the microkernel and the IPC controller,

wherein said first and second subsystems are isolated from each other so that communications between the first and second subsystems are performed only between the control levels of the first and second subsystems via said memory.

13. The server according to claim 12, wherein data to be received by said first subsystem are successively received by the media level, then by the communication level and then by the control level of the first subsystem.

14. A non-transitory computer program product including program code instructions recorded on a memory which can be read by a computer to implement a method for controlling a gateway server when said program runs on a computer, wherein the gateway server comprises a first subsystem including a media level, a communication level and a control level, a microkernel, an IPC controller configured to manage communication between the server resources allocated to the first subsystem, a second subsystem including a second media level, a second communication level and a second control level such that the microkernel and the IPC controller also manage communication between the server resources allocated to said second subsystem, the method comprising transmitting requests between the control level of the first subsystem and the control level of the second subsystem, the requests transmitted using a memory with shared reading and writing, established under the control of the microkernel and the IPC controller, wherein data to be received by said first subsystem are transferred to said second subsystem only via the control level of said first subsystem.