Method and system for dynamic application layer gateways

• US 9,871,763 B2
• Filed: 04/08/2015
• Issued: 01/16/2018
• Est. Priority Date: 10/13/1999
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Putzolu, David
• Primary Examiner(s): Hoffman, Brandon
• Assistant Examiner(s): Salehi, Helai
• Application Number:
  US14/681,499
• Publication Number:
  US 20150358280A1
• Time in Patent Office: 1,014 Days
• CPC Class Codes: G06F 9/4868 with creation or replication
• CPC Class Codes: H04L 41/048 mobile agents
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching

Abstract

A method and system are disclosed for providing functionality on a network. A mobile agent moves from a first node to a target node and, at the target node, performs as an application layer gateway.

Claims

1. At least one non-transitory machine-accessible medium storing instructions that when executed by at least one machine results in performance of operations comprising:

executing, at least in part, at least one mobile agent in at least one execution environment of at least one network node, the at least one mobile agent being capable of being of at least one class and at least one subclass, the at least one subclass being of the at least one class, the at least one class and the at least one subclass being to provide the at least one mobile agent with node resource usage permission capabilities, the at least one mobile agent being capable of accessing resources of the at least one network node in accordance with the node resource usage permission capabilities, the at least one mobile agent being capable of moving, at least in part, from the at least one network node to at least one other network node for execution, at least in part, in at least one other execution environment of the at least one other network node, the at least one mobile agent being capable of accessing other resources of the at least one other network node in accordance with the node resource usage permission capabilities;

wherein;

the at least one mobile agent comprises at least one agent application layer gateway;

the at least one mobile agent is to perform at least two of the following subparagraphs;

receive, at least in part, network traffic addressed to a client;

filter and/or modify the network traffic; and

forward, at least in part, filtered and/or modified network traffic to the client.

2. The at least one machine-accessible medium of claim 1, wherein:

the at least one mobile agent provides functionality that to be distributed, at least in part, at multiple network nodes.

3. The at least one machine-accessible medium of claim 1, wherein:

the at least one execution environment and the at least one other execution environment comprise proactive environments.

4. The at least one machine-accessible medium of claim 1, wherein:

the at least one class is to provide, at least in part, certain functionality of the at least one mobile agent; and

the at least one subclass is to provide, at least in part, additional functionality of the at least one mobile agent, the additional functionality being in addition to the certain functionality.

5. The at least one machine-accessible medium of claim 1, wherein:

the at least one class is to provide, at least in part, certain node resource access restrictions of the at least one mobile agent; and

the at least one subclass is to provide, at least in part, additional node resource access restrictions of the at least one mobile agent, the additional node resource access restrictions being in addition to the certain node resource access restrictions.

6. The at least one machine-accessible medium of claim 1, wherein:

the at least one mobile agent is to provide, at least in part, web cache functionality.

7. The at least one machine-accessible medium of claim 1, wherein:

the at least one mobile agent is to provide, at least in part, media transcoding functionality.

8. The at least machine-accessible medium of claim 1, wherein:

the at least one mobile agent is to provide, at least in part, firewall functionality.

9. The at least one machine-accessible medium of claim 1, wherein:

the at least one mobile agent is to access, at least in part, the resources of the at least one network node via at least one service of the at least one network node.

10. A method comprising:

executing, at least in part, at least one mobile agent in at least one execution environment of at least one network node, the at least one mobile agent being capable of being of at least one class and at least one subclass, the at least one subclass being of the at least one class, the at least one class and the at least one subclass being to provide the at least one mobile agent with node resource usage permission capabilities, the at least one mobile agent being capable of accessing resources of the at least one network node in accordance with the node resource usage permission capabilities, the at least one mobile agent being capable of moving, at least in part, from the at least one network node to at least one other network node for execution, at least in part, in at least one other execution environment of the at least one other network node, the at least one mobile agent being capable of accessing other resources of the at least one other network node in accordance with the node resource usage permission capabilities;

wherein;

the at least one mobile agent comprises at least one agent application layer gateway;

the at least one mobile agent is to perform at least two of the following subparagraphs;

receive, at least in part, network traffic addressed to a client;

filter and/or modify the network traffic; and

forward, at least in part, filtered and/or modified network traffic to the client.

11. The method of claim 10, wherein:

the at least one mobile agent provides functionality that to be distributed, at least in part, at multiple network nodes.

12. The method of claim 10, wherein:

the at least one execution environment and the at least one other execution environment comprise proactive environments.

13. The method of claim 10, wherein:

the at least one class is to provide, at least in part, certain functionality of the at least one mobile agent; and

the at least one subclass is to provide, at least in part, additional functionality of the at least one mobile agent, the additional functionality being in addition to the certain functionality.

14. The method of claim 10, wherein:

the at least one class is to provide, at least in part, certain node resource access restrictions of the at least one mobile agent; and

the at least one subclass is to provide, at least in part, additional node resource access restrictions of the at least one mobile agent, the additional node resource access restrictions being in addition to the certain node resource access restrictions.

15. The method of claim 10, wherein:

the at least one mobile agent is to provide, at least in part, web cache functionality.

16. The method of claim 10, wherein:

the at least one mobile agent is to provide, at least in part, media transcoding functionality.

17. The method of claim 10, wherein:

the at least one mobile agent is to provide, at least in part, firewall functionality.

18. The method of claim 10, wherein:

the at least one mobile agent is to access, at least in part, the resources of the at least one network node via at least one service of the at least one network node.

19. At least one network node that is usable with at least one other network node in at least one network, the at least one network node comprising:

a central processing unit;

the central processing unit being capable of execution of instructions stored at the at least one network node, the execution of the instructions resulting in performance of operations comprising;

executing, at least in part, at least one mobile agent in at least one execution environment of the at least one network node, the at least one mobile agent being capable of being of at least one class and at least one subclass, the at least one subclass being of the at least one class, the at least one class and the at least one subclass being to provide the at least one mobile agent with node resource usage permission capabilities, the at least one mobile agent being capable of accessing resources of the at least one network node in accordance with the node resource usage permission capabilities, the at least one mobile agent being capable of moving, at least in part, from the at least one network node via the at least one network to the at least one other network node for execution, at least in part, in at least one other execution environment of the at least one other network node, the at least one mobile agent being capable of accessing other resources of the at least one other network node in accordance with the node resource usage permission capabilities;

wherein;

the at least one mobile agent comprises at least one agent application layer gateway;

the at least one mobile agent is to perform at least two of the following subparagraphs;

receive, at least in part, network traffic addressed to a client;

filter and/or modify the network traffic; and

forward, at least in part, filtered and/or modified network traffic to the client.

20. The at least one network node of claim 19, wherein:

the at least one mobile agent provides functionality that to be distributed, at least in part, at multiple network nodes.

21. The at least one network node of claim 19, wherein:

the at least one execution environment and the at least one other execution environment comprise proactive environments.

22. The at least one network node of claim 19, wherein:

the at least one class is to provide, at least in part, certain functionality of the at least one mobile agent; and

the at least one subclass is to provide, at least in part, additional functionality of the at least one mobile agent, the additional functionality being in addition to the certain functionality.

23. The at least one network node of claim 19, wherein:

the at least one class is to provide, at least in part, certain node resource access restrictions of the at least one mobile agent; and

the at least one subclass is to provide, at least in part, additional node resource access restrictions of the at least one mobile agent, the additional node resource access restrictions being in addition to the certain node resource access restrictions.

24. The at least one network node of claim 19, wherein:

the at least one mobile agent is to provide, at least in part, web cache functionality.

25. The at least one network node of claim 19, wherein:

the at least one mobile agent is to provide, at least in part, media transcoding functionality.

26. The at least one network node of claim 19, wherein:

the at least one mobile agent is to provide, at least in part, firewall functionality.

27. The at least one network node of claim 19, wherein:

the at least one mobile agent is to access, at least in part, the resources of the at least one network node via at least one service of the at least one network node.