Accessing enterprise communication systems from external networks

• US 9,560,142 B2
• Filed: 03/31/2015
• Issued: 01/31/2017
• Est. Priority Date: 07/31/2014
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Inventors: Sama, Venkatababji, Sundarraj, Akkamapet Palaniappan, Balabine, Igor V.
• Primary Examiner(s): Shaw, Peter
• Application Number:
  US14/673,960
• Publication Number:
  US 20160036921A1
• Time in Patent Office: 672 Days
• Field of Search: 726/4
• US Class Current: 1/1
• CPC Class Codes: H04L 49/15 Interconnection of switching modules
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70

Abstract

A computer system implements a plurality of modules, including a tenant administration proxy that receives session credentials from a tenant application in the private communication system and authenticates the tenant application in response to the session credentials, a connector service that receives a bridge setup request from the tenant application and establishes a bridge connection with the tenant application in response to the bridge setup request; and a configuration manager that stores service information regarding a cloud-based service that is accessible through the computer system. The tenant administration proxy retrieves the service information from the configuration manager and provides the service information to the tenant application in response to a request from the tenant application, and wherein the connector service facilitates communication between the cloud-based service and an enterprise service in the private communication system over the bridge connection.

Claims

1. A computer system, comprising:

a processor; and

a memory coupled to the processor, the memory comprising computer readable program code embodied therein that, when executed by the processor, causes the processor to implement a plurality of modules, comprising;

a tenant administration proxy that receives session credentials from a tenant application in the private communication system and authenticates the tenant application in response to the session credentials;

a connector service that receives a bridge setup request from the tenant application and establishes a bridge connection with the tenant application in response to the bridge setup request; and

a configuration manager that stores service information regarding a cloud-based service that is accessible through the computer system;

wherein the tenant administration proxy retrieves the service information from the configuration manager and provides the service information to the tenant application in response to a request from the tenant application; and

wherein the connector service facilitates communication between the cloud-based service and an enterprise service in the private communication system over the bridge connection; and

wherein the bridge connection comprises an inbound pipe and an outbound pipe established using separate session credentials.

2. The computer system of claim 1, wherein the connector service comprises a virtual service connector that provides a virtual entry point for cloud-based clients that enable the cloud-based clients to request services from the enterprise service over the bridge connection.

3. The computer system of claim 2, wherein the connector service comprises an egress traffic manager that receives protocol data units from a plurality of cloud-based clients through the virtual service connector, bundles the protocol data units, and transmits the bundled protocol data units to the tenant application over the bridge connection.

4. The computer system of claim 2, wherein the connector service comprises an ingress traffic manager that receives bundled protocol data units over the bridge connection, unbundles the protocol data units, and forwards the protocol data units to respective ones of the cloud based clients.

5. The computer system of claim 1, wherein the connector service comprises an authorization service that processes authentication requests from the tenant administration proxy.

6. The computer system of claim 1, wherein the bridge connection carries data traffic using a secure -ITTP protocol.

7. The computer system of claim 1, wherein the bridge connection carries data for sessions with multiple enterprise services.

8. The computer system of claim 1, wherein the bridge connection carries data for sessions with multiple cloud-based services.