Method and apparatus for extending remote network visibility of the push functionality

• US 9,350,701 B2
• Filed: 03/28/2008
• Issued: 05/24/2016
• Est. Priority Date: 03/29/2007
• Status: Active Grant

• Current Assignee: BeyondTrust Corp.
• Original Assignee: Bomgar Corporation (BeyondTrust Corp.)
• Inventors: Cromer, Nathan, Cross, Jeremy Raymond, Durham, David William, McNeill, Nathan Joel, Ngo, Huey-Jiun, Sleevi, Ryan D.
• Primary Examiner(s): SHOLEMAN, ABU S
• Application Number:
  US12/058,165
• Publication Number:
  US 20080244705A1
• Time in Patent Office: 2,979 Days
• Field of Search: 726/3, 717/173, 717/169, 713/151, 713/152, 709/203, 709/206, 709/228
• US Class Current: 1/1
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

An approach is provided for extending remote network visibility for push functionality. An application is transmitted, via a push agent, from a first network to a device of a second network, wherein the device is configured to execute the application. The device is remotely controlled using the application.

Claims

1. A method comprising:

receiving a request, at a network appliance configured to execute a push server, to communicate with a push agent;

initiating in response to the request, transmission of an application, via the push agent, from a first network to a device of a second network, wherein the device is configured to execute the application caused, at least in part, by the push agent, and the network appliance is further configured to provide remote access and control of the device by another device on another network, and wherein the push agent is installed within the second network as a virtual machine;

establishing a connection, via the push agent, from the first network to the device;

logging activities of the device over the connection;

routing the activities to the another device; and

remotely controlling, via the network appliance, the device using the application.

2. A method according to claim 1, wherein the device is either an unattended system or an attended system.

3. A method according to claim 1, wherein the push agent is installed using the push server.

4. A method according to claim 1, wherein the push agent is installed within the second network as a standalone device or a virtual machine.

19. A method according to claim 1, wherein the remote access and control is provided on behalf of a representative system, the representative system being configured to request network topology information of the second network via the push agent.

21. A method according to claim 1, wherein the push agent is configured to relay the application, to another push agent on a third device on a third network.

22. A method according to claim 1, wherein the representative system is configured to communicate with the push agent to authenticate the representative system and to establish a communication session with the remote system based on a certificate-based authentication.

23. A method according to claim 1, wherein the first network and second network are separated by at least one firewall.

5. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

cause, at least in part, to execute a push server, and to receive a request to communicate with a push agent,

initiate transmission of an application, via a push agent, from a first network to a device of a second network, wherein the device is configured to execute the application caused, at least in part, by the push agent, and wherein the push agent is installed within the second network as a virtual machine, and the device is further configured to be remotely accessed and controlled via the apparatus using the application by another device on another network

establish a connection, via the push agent, from the first network to the device;

log activities of the device over the connection; and

route the activities to the another device.

6. An apparatus according to claim 5, wherein the device is either an unattended system or an attended system.

7. An apparatus according to claim 5, wherein the push agent is installed using the push server.

8. An apparatus according to claim 5, wherein the push agent is installed within the second network as a standalone device or a virtual machine.

20. An apparatus according to claim 5, wherein the remote access and control is provided on behalf of a representative system, the representative system being configured to request network topology information of the second network via the push agent.

9. A method comprising:

receiving a request, at a network appliance configured to execute a push server, from a representative system to connect to a push agent that is configured to log activities of a remote system and cause, at least in part, an execution of at least one application on the remote system, wherein the push agent is installed as a virtual machine, and wherein the network appliance is further configured to provide remote access and control of one or more devices of the remote system for the representative system through the at least one application;

granting the request, wherein the representative system is configured to communicate with the push agent to authenticate the representative system and to establish a communication session with the remote system for providing the remote access and control of the one or more device; and

receiving the logged activities from the push agent.

10. A method according to claim 9, wherein the push agent is further configured to provide a web-based interface to facilitate establishment of the communication session between the representative system and the customer system.

11. A method according to claim 9, further comprising:

providing a chat interface for capturing instant messages between the representative system and the remote system.

12. A method according to claim 9, further comprising:

controlling access to the remote system according to a representative profile.

13. A method according to claim 9, wherein the representative system executes another application and the remote system executes the at least one application to establish the communication session, the at least one_application being provided by the push agent.

14. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

a first communication interface configured to receive a request from a representative system to connect to a push agent that is configured to log activities of a remote system and cause, at least in part, an execution of at least one application on the remote system, wherein the push agent is installed as a virtual machine;

cause, at least in part, to grant the request, wherein the representative system is configured to communicate with the push agent to authenticate the representative system and to establish a communication session with the remote system, via the apparatus being further configured to provide remote access and control of one or more devices of the remote system for the representative system through the at least one application; and

a second communication interface configured to receive the logged activities from the push agent.

15. An apparatus according to claim 14, wherein the push agent is further configured to provide a web-based interface to facilitate establishment of the communication session between the representative system and the customer system.

16. An apparatus according to claim 14, wherein the apparatus is further configured to provide a chat interface for capturing instant messages between the representative system and the remote system.

17. An apparatus according to claim 14, wherein the apparatus is further configured to control access to the remote system according to a representative profile.

18. An apparatus according to claim 14, wherein the representative system executes another application and the remote system executes the at least one application to establish the communication session, the at least one application being provided by the push agent.