Network apparatus for secure remote access and control

• US 9,621,559 B2
• Filed: 05/15/2007
• Issued: 04/11/2017
• Est. Priority Date: 06/19/2006
• Status: Active Grant

• Current Assignee: BeyondTrust Corp.
• Original Assignee: Bomgar Corporation (BeyondTrust Corp.)
• Inventors: Bomgaars, Joel, Cross, Jeremy Raymond, Durham, David William, McNeill, Nathan Joel, Ngo, Huey-Jiun, Sleevi, Ryan D.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Tran, Tongoc
• Application Number:
  US11/748,871
• Publication Number:
  US 20070300291A1
• Time in Patent Office: 3,619 Days
• Field of Search: 726 2, 726 3, 726 27, 726 11, 726 12, 726 15, 709203, 709218
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network

Abstract

A network appliance is designed and configured to communicate over a data network and to provide secure on-demand remote access and control of a computing system in the context of remote support.

Claims

1. A method comprising:

authenticating a first system by a network appliance;

downloading an application for establishing encrypted communication sessions based on the authentication of the first system;

logging onto the network appliance by a user of the first system via the application;

establishing the encrypted communication sessions, respectively, with the first system and a second system via the network appliance, wherein the network appliance is configured to provide remote access and control, by the first system, of the second system over the encrypted communication sessions; and

facilitating the remote access and control between the first system and the second over the encrypted communication sessions established by the network appliance, the facilitating step including,

detecting selection of a support session associated with the second system, and

activating, by the network appliance, the selected support session,

wherein the network appliance restricts control and access to the second system according to a profile corresponding to the user of the first system.

2. A method according to claim 1, wherein the network appliance is housed in a single encasement including a rack-mountable housing.

3. A method according to claim 1, wherein the remote access and control is provided by the network appliance on an on-demand basis.

4. A method according to claim 1, wherein the encrypted communication session with the second system is initiated outbound towards the network appliance.

5. A method according to claim 1, wherein the network appliance is collocated with either the first system or the second system, the network appliance being configurable by the first system.

8. A method according to claim 1, further comprising:

establishing an encrypted communication session with a third system, wherein the network appliance queues a service request by the second system and another service request by the third system for handling by the first system.

9. A method according to claim 1, wherein the network appliance is a virtual appliance.

21. A method according to claim 1, wherein the first system instructs the second system to reboot, the second system automatically reconnects to the first system via the network appliance upon rebooting.

23. A method according to claim 1, wherein the second system is presented with a prompt to receive a survey relating to the support session.

24. A method according to claim 1, wherein the selected support session is viewable by a plurality of representative systems including the first system.

25. A method according to claim 1, wherein the network appliance provides remote access and control through at least one firewall.

6. A method comprising:

authenticating a first system by a network appliance;

downloading an application for establishing encrypted communication sessions based on the authentication of the first system;

logging onto the network appliance by a user of the first system via the application;

establishing encrypted communication sessions, respectively, with the first system and a second system via the network appliance, wherein the network appliance is configured to provide remote access and control, by the first system, of the second system over the encrypted communication sessions;

facilitating the remote access and control between the first system and the second over the encrypted communication sessions established by the network appliance, the facilitating step including,

detecting selection of a support session associated with the second system, and

activating, by the network appliance, the selected support session,

wherein the first system is associated with a representative and the second system is associated with a customer, and the support session permits the representative to provide remote support functions to the customer.

7. A method according to claim 6, further comprising:

transmitting, by the network appliance, a first software to the first system and a second software to the second system for establishment of the support session, wherein the second software automatically uninstalls upon termination of the support session.

10. An apparatus configured as a network appliance, comprising:

a plurality of communication interfaces configured to establish encrypted communication sessions, respectively, with a first system and a second system via the network appliance;

a processor coupled to the communication interfaces; and

a memory configured to store instructions for execution by the processor for facilitating remote access and control between the first system and the second over the encrypted communication sessions established by the network appliance,

wherein the processor is configured to detect selection of a support session associated with the second system, and to activate the selected support session and authenticate a second system and a user of the second system,

wherein the memory is further configured to store a profile corresponding to the user of the second system, the profile providing restrictions on control and access to the user of the second system, and wherein the memory is configured to store the application, the application provides at least one of the first system and the second system access to the network appliance.

11. An apparatus according to claim 10, further comprising:

a rack-mountable housing containing the processor, the communication interfaces and the memory.

12. An apparatus according to claim 10, wherein the remote access and control is provided on an as needed basis.

13. An apparatus according to claim 10, wherein the encrypted communication session with the second system is initiated outbound towards the apparatus.

14. An apparatus according to claim 10, wherein the apparatus is collocated with either the first system or the second system, the memory being further configured to store configuration information for the apparatus as specified by the first system.

17. An apparatus according to claim 10, wherein an encrypted communication session is established with a third system, and the memory is further configured to queue a service request by the second system and another service request by the third system for handling by the first system.

18. An apparatus according to claim 10, wherein the network appliance is a virtual appliance.

22. An apparatus according to claim 10, wherein the first system instructs the second system to reboot, the second system automatically reconnects to the first system via the network appliance upon rebooting.

15. An apparatus configured at a network appliance, comprising:

a plurality of communication interfaces configured to establish encrypted communication sessions, respectively, with a first system and a second system via the network appliance;

a processor coupled to the communication interfaces; and

a memory configured to store instructions for execution by the processor for facilitating remote access and control between the first system and the second over the encrypted communication sessions established by the network appliance,

wherein the processor is configured to detect selection of a support session associated with the second system, and to activate the selected support session and authenticate a second system and a user of the second system,

wherein the first system is associated with a representative and the second system is associated with a customer, and the support session permits the representative to provide remote support functions to the customer.

16. An apparatus according to claim 15, wherein the communication interfaces are further configured to, respectively, transmit a first software to the first system and a second software to the second system for establishment of the support session, the second software automatically uninstalling upon termination of the support session.

19. A system comprising:

a network appliance configured to securely communicate via encrypted communication sessions with a plurality of representative systems and a plurality of customer systems over a data network,

wherein the network appliance is further configured to provide remote access and control, by one of the representative systems, of the customer systems over the data network,

wherein the network appliance is further configured to detect selection of a support session associated with the one of the representative systems, the network appliance being further configured to activate the selected support session,

wherein the network appliance restricts control and access to the customer system according to a profile corresponding to a representative of the one of the representative systems,

wherein the network appliance authenticates the representative system,

wherein the network appliance uploads an application for establishing the support session based on the authentication of the representative system.

20. A system according to claim 19, wherein the encrypted communication is initiated outbound by one of the customer systems to the network appliance.