Method and apparatus for extending remote network visibility of the push functionality

• US 9,577,982 B2
• Filed: 10/11/2012
• Issued: 02/21/2017
• Est. Priority Date: 03/29/2007
• Status: Active Grant

• Current Assignee: BeyondTrust Corp.
• Original Assignee: Bomgar Corporation (BeyondTrust Corp.)
• Inventors: McNeil, Nathan Joel, Cromer, Nathan, Cross, Jeremy Raymond, Durham, David William, Ngo, Huey-Jiun, Sleevi, Ryan D.
• Primary Examiner(s): Sholeman, Abu
• Application Number:
  US13/649,774
• Publication Number:
  US 20130036206A1
• Time in Patent Office: 1,594 Days
• Field of Search: 726/3, 726/1, 709/219, 709/203, 709/205, 709/206, 717/176
• US Class Current: 1/1
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

An approach is provided for extending remote network visibility for push functionality. An application is transmitted, via a push agent, from a first network to a device of a second network, wherein the device is configured to execute the application. The device is remotely controlled using the application.

Claims

1. A method comprising:

receiving a request to communicate with a push agent, the request being received at a network appliance that is configured to execute a push server;

initiating transmission of an application from the network appliance, by the push agent in response to the request, the application being transmitted from a first network to a device of a second network, the network appliance provides remote access and control of the device to another device on another network,

wherein the remote access and control is provided on behalf of a representative system, the representative system being configured to request network topology information of the second network by the push agent; and

executing the application at the device to establish a connection between the device and the network appliance for use in remotely controlling the device via the network appliance.

2. A method according to claim 1, further comprising:

establishing a segment of the connection from the network appliance to the device by the push agent, the network appliance being within the first network;

logging activities of the device at the network appliance over the connection; and

routing the activities to the another device.

3. A method according to claim 1, wherein the device is either an unattended system or an attended system.

4. A method according to claim 1, wherein the push agent is installed using the push server.

5. A method according to claim 1, wherein the push agent is installed within the second network as a standalone device or a virtual machine.

6. A method according to claim 1, wherein, prior to transmission of the application, the device of the second network has no previously installed application for establishing the connection between the device and the network appliance.

16. A method according to claim 1, wherein the another device on another network is for remote support of the device of the second network.

7. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

cause, at least in part, to execute a push server, and to receive a request to communicate with a push agent, and

initiate transmission of an application from the network appliance, by the push agent, from a first network to a device of a second network, wherein the device is configured to execute the application at the device; and

the network appliance provides remote access and control of the device to another device on another network, via the apparatus is granted responsive to execution of the application,

wherein the remote access and control is provided on behalf of a representative system, the representative system being configured to request network topology information of the second network by the push agent.

8. An apparatus according to claim 7, wherein the apparatus is further configured to establish a segment of the connection, by the push agent, from the first network to the device, to log activities of the device over the connection, and to route the activities to the another device.

9. An apparatus according to claim 7, wherein the device is either an unattended system or an attended system.

10. An apparatus according to claim 7, wherein the push agent is installed using the push server.

11. An apparatus according to claim 7, wherein the push agent is installed within the second network as a standalone device or a virtual machine.

12. A method comprising:

receiving a request at a network appliance that is configured to execute a push server;

initiating transmission of an application from the network appliance in response to the request, the application being transmitted from a first network to a device of a second network, the network appliance provides remote access and control of the device to another device on another network,

wherein the remote access and control is provided on behalf of a representative system, the representative system being configured to request network topology information of the second network; and

executing the application at the device to establish a connection between the device and the network appliance for use in remotely controlling the device via the network appliance.

13. A method according to claim 12, further comprising:

logging activities of the device at the network appliance over the connection and

routing the activities to the another device.

14. A method according to claim 12, wherein the device is either an unattended system or an attended system.

15. A method according to claim 12, wherein, prior to transmission of the application, the device of the second network has no previously installed application for establishing the connection between the device and the network appliance.