Method and system for federation of proxy-based and proxy-free communications systems

• US 9,838,351 B2
• Filed: 02/06/2012
• Issued: 12/05/2017
• Est. Priority Date: 02/04/2011
• Status: Expired due to Fees

• Current Assignee: Nextplane, Inc.
• Original Assignee: Nextplane, Inc.
• Inventors: Pujare, Sanjay, Bellan, Saravanan, Raina, Yogesh, Khatib-Shahidi, Farzin, Restelli, Silvia
• Primary Examiner(s): Srivastava, Vivek
• Assistant Examiner(s): BUKHARI, SIBTE H
• Application Number:
  US13/367,232
• Publication Number:
  US 20120203913A1
• Time in Patent Office: 2,129 Days
• Field of Search: 709227-229
• CPC Class Codes: H04L 51/066 Format adaptation, e.g. format conversion or compression
• CPC Class Codes: H04L 51/56 Unified messaging, e.g. interactions between e-mail, instant messaging or converged IP messaging [CPM]
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54

Abstract

A method and system for federation of proxy-based and proxy-free communications systems is disclosed. In one embodiment, a computer-executable method comprises broadcasting a network address of a federation computer with an identification of the federation computer as a server for domains operating on a proxy-less protocol. The method includes establishing communications with a server on the network according to a proxy-less communications protocol to receive data bound for a destination domain that operates according to a proxy-based communications protocol and to receive data bound for a destination domain that operates according to a proxy-less communications protocol. Further, the method calls for establishing communications with a proxy on the network according to a proxy-based protocol to receive data bound for a destination domain.

Claims

1. A computer-executable method, comprising:

enabling two-way communication between a plurality of domains operating on proxy-less communication protocols and proxy-based communication protocols;

receiving by a federation computer first data from an originating server on a first originating domain operating according to a first proxy-less communication protocol, using a first connector and the first proxy-less communications protocol, wherein the federation computer is operating as a server on behalf of a first destination domain that operates according to a first proxy-based communications protocol;

receiving second data by the federation computer from an originating proxy on a second originating domain operating according to a second proxy-based communication protocol, using a second connector and the second proxy-based communications protocol, wherein the federation computer is operating as a destination proxy on behalf of a second destination domain that operates according to a second proxy-less communications protocol;

transmitting the first data by the federation computer to the first destination domain using the second connector and the first proxy-based communications protocol; and

transmitting the second data by the federation computer to the second destination domain using the first connector and the second proxy-less communications protocol,

wherein during the transmission of the first data and the second data, the federation computer operates according to both proxy-based and proxy-less communication protocols, and

a message manager of the federation computer manages data flow between the first connector and the second connector through a memory device, wherein at least a portion of the first data and the second data are stored in the memory.

2. The computer-executable method of claim 1, further including

transmitting the first data to a third destination domain using the first proxy-less communications protocol.

3. The computer-executable method of claim 1, further including transmitting the second data to a fourth destination domain using the second proxy-based communications protocol.

4. The computer-executable method of claim 1, further including storing at least a portion of one or more of the first data and the second data.

5. The computer-executable method of claim 1, wherein receiving the first data and receiving the second data includes establishing transport layer security.

6. The computer-executable method of claim 5, wherein establishing transport layer security comprises:

determining a destination domain for a message from an originating domain;

retrieving a stored security certificate for the destination domain from a plurality of stored security certificates, each security certificate in the plurality of stored security certificates associated with a domain on a network and a private cryptographic key; and

presenting the stored security certificate to the originating domain.

7. The computer-executable method of claim 1, wherein

transmitting the first data and transmitting the second data includes establishing transport layer security.

8. The computer-executable method of claim 1, wherein

transmitting the first data and transmitting the second data includes selectively establishing transport layer security based on evaluating security certificates stored in a memory.

9. The computer-executable method of claim 1, wherein one or more of the first proxy-less communications protocol and the second proxy-less communications protocol is Extensible Messaging and Presence Protocol and one or more of the first proxy-based communications protocol and the second proxy-based communications protocol is Session Initiating Protocol.

10. The computer-executable method of claim 2, further comprising

receiving the first data from the originating server based on operating as a priority over the third destination domain, wherein the priority is established at the originating server.

11. The computer-executable method of claim 10, wherein the priority established at the originating server comprises a pointer to the federation computer.

12. The computer-executable method of claim 10, wherein the priority established at the originating server includes prioritization of hosts over network look-ups, and a host file entry that points to the federation computer.

13. A system, comprising:

an originating server on a first originating domain operating according to a first proxy-less communications protocol;

an originating proxy on a second originating domain operating according to a second proxy-based communications protocol; and

a federation computer that;

enables two-way communication between a plurality of domains operating on proxy-less communication protocols and proxy-based communication protocols,

receives first data from the originating server on the first originating domain operating according to the first proxy-less communications protocol, using a first connector and the first proxy-less communications protocol, wherein the federation computer is operating as a destination server on behalf of a first destination domain that operates according to a first proxy-based communications protocol;

receives second data from the originating proxy on the second originating domain operating according to the second proxy-based communications protocol, using a second connector and the second proxy-based communications protocol, wherein the federation computer is operating as a destination proxy on behalf of a second destination domain that operates according to a second proxy-less communications protocol;

transmits the first data to the first destination domain using the second connector and the first proxy-based communications protocol; and

transmits the second data to the second destination domain using the first connector and the second proxy-less communications protocol,

wherein during the transmission of the first data and the second data, the federation computer operates according to both proxy-based and proxy-less communication protocols, and

a message manager of the federation computer manages data flow between the first connector and the second connector through a memory device, wherein at least a portion of the first data and the second data are stored in the memory.

14. The system of claim 13, wherein the federation computer transmits the first data to a third destination domain using the first proxy-less communications protocol.

15. The system of claim 13, wherein the federation computer transmits the second data to a fourth destination domain using the second proxy-based communications protocol.

16. The system of claim 13, wherein the federation computer stores at least a portion of one or more of the first data and the second data.

17. The system of claim 13, wherein the federation computer receives the first data and receives the second data further comprises the federation computer establishes transport layer security.

18. The system of claim 17, wherein the federation computer establishes transport layer security further comprises the federation computer:

determines a destination domain for a message from an originating domain;

retrieves a stored security certificate for the destination domain from a plurality of stored security certificates, each security certificate in the plurality of stored security certificates associated with a domain on a network and a private cryptographic key; and

presents the stored security certificate to the originating domain.

19. The system of claim 13, wherein the federation computer transmits the first data and transmits the second data further comprises the federation computer establishes transport layer security.

20. The system of claim 13, wherein the federation computer transmits the first data and transmits the second data further comprises the federation computer selectively establishes transport layer security based on an evaluation of security certificates stored in a memory.

21. The system of claim 13, wherein one or more of the first proxy-less communications protocol and the second proxy-less communications protocol is Extensible Messaging and Presence Protocol and one or more of the first proxy-based communications protocol and the second proxy-based communications protocol is Session Initiating Protocol.

22. The system of claim 14, wherein the federation computer receives the first data from the originating server is further based on the federation computer operates as a priority over the third destination domain, wherein the priority is established at the originating server.

23. The system of claim 22, wherein the priority established at the originating server comprises a pointer to the federation computer.

24. The system of claim 22, wherein the priority established at the originating server includes prioritization of hosts over network look-ups, and a host file entry that points to the federation computer.