Private cloud routing server connection mechanism for use in a private communication architecture

• US 10,601,810 B2
• Filed: 06/16/2015
• Issued: 03/24/2020
• Est. Priority Date: 09/09/2011
• Status: Active Grant

• Current Assignee: Kingston Digital, Inc. (Kingston Technology Corporation)
• Original Assignee: Kingston Digital, Inc. (Kingston Technology Corporation)
• Inventors: Chen, Ben Wei
• Primary Examiner(s): Simitoski, Michael
• Application Number:
  US14/741,145
• Publication Number:
  US 20150288678A1
• Time in Patent Office: 1,743 Days
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A method is disclosed for providing a secure session based message connection mechanism between a private cloud routing server (PCRS) and at least one smart device client in a PCRS network. The method includes initializing and provisioning of the PCRS. The method also includes creating a PCRS Client and viewing the PCRS Client. In addition, the method includes editing a peer-to-peer password and status of the PCRS. The method also includes changing the peer-to-peer password by the at least one smart device client. The method also includes resetting the peer-to-peer password and status by an administrator from a PCRS LAN. Finally, the method includes connecting to the PCRS by the at least one smart device client.

Claims

1. A method to communicate in a public cloud network, comprising:

setting up a private cloud routing server (PCRS) and a smart device client in a client server relationship,

wherein the PCRS includes a routing server message box utility to access a first message box located on a public cloud network,

wherein the PCRS registers public and private IP addresses of the smart device client,

wherein the smart device client includes a client message box utility to access a second message box located on the public cloud network, and

wherein the PCRS sends a session based acknowledgement with public and private IP addresses of the PCRS to the second message box;

passing, by the routing server message box utility of the PCRS, a session based message between the first message box and the second message box in a security process,

wherein the security process to pass the session based message between the first message box and the second message box of the PCRS and the smart device client, respectively, includes;

initializing and provisioning of the PCRS,

creation of a PCRS Client,

viewing the PCRS Client,

editing a peer-to-peer password and status of the PCRS, and

changing a PCRS peer-to-peer password by the smart device client and connecting to the PCRS by the smart device client,

wherein the smart device client connects to the PCRS by at least one connection of;

the smart device client determines a target is in a locally accessible Local Area Network (LAN) and decides to connect to the PCRS directly,

the smart device client determines the target is not in the locally accessible LAN and decides to connect through a WAN to the public cloud network, and wherein the WAN locates a router and the LAN, and connects to the PCRS, and

the smart device client determines the target is not in the locally accessible LAN and decides to pass through the LAN and the router, and connects to the public cloud network in the WAN,

wherein a secure session based message is authenticated by the PCRS and the smart device client,

wherein the smart device client and the PCRS communicates with each other after the session based message is authenticated, and

wherein a private network service is then securely accessible by the smart device client through the public cloud network based upon the authenticated session based message; and

setting up at least another smart device client in a client server relationship with the PCRS,

wherein the smart device client and the at least another smart device client communicates with the PCRS after the session based message is authenticated, and

wherein the smart device client and the at least another smart device client privately and securely communicates with each other through the public cloud network.

2. The method of claim 1, wherein the PCRS comprises:

a computing device;

a connection to a network;

a program, when executed by the computing device, causes the PCRS to;

create and manage an authorized client list to accommodate a plurality of smart device clients;

send a session based invitation to the second message box;

retrieve a session based access request of the smart device client from the first message box; and

send a session based acknowledgement to the second message box.

3. The method of claim 2, wherein the program, when executed by the computing device, causes the PCRS to:

send a communication request to the smart device client;

punch a hole in a router to stay open pending a smart device client response;

wait for the router to bind a network connection between the smart device client and the PCRS;

route incoming request from the smart device client to the PCRS;

establish a secure peer-to-peer communication with the smart device client;

enable access of the private network service from the smart device client; and

enable private and secure communication between the smart device client and the at least another smart device client.

4. The method of claim 2, wherein the smart device client comprises:

a computing device;

a connection through a router to a network;

wherein the router has a program, when executed by the computing device, causes the smart device client to;

retrieve a session based invitation from the smart device client message box;

send a session based access request to the PCRS message box;

retrieve a session based acknowledgement from the smart device client message box;

send a communication request to the PCRS;

punch a hole in the router to stay open pending the PCRS response;

wait for the router to bind a network connection between the PCRS and the smart device client;

route incoming request from the PCRS to the smart device client;

establish a secure peer-to-peer communication with the PCRS;

access the private network service through the PCRS; and

communicate with at least another smart device client through the PCRS.

5. The method of claim 4, wherein the program, when executed by the computing device, causes the smart device client to:

access the PCRS from anywhere at anytime;

access the PCRS behind a firewall with fixed or dynamic IP addresses,

wherein the smart device client;

requires no outside or public cloud based routing server in a wide area network (WAN),

requires no additional router setup in a local area network (LAN), and

establishes a secure peer-to-peer communication channel with the PCRS;

access private network service through the PCRS; and

communicate with at least another smart device client through the PCRS.

6. The method of claim 4, wherein the program, when executed by the computing device, causes the smart device client to:

access the PCRS from anywhere at anytime;

access the PCRS behind a firewall with fixed or dynamic IP addresses, wherein the smart device client;

requires no outside or public cloud based routing server in a wide area network (WAN),

requires no additional router setup in the a local area network (LAN, and

establishes a secure peer-to-peer communication channel with the PCRS;

mapping local physical I/O to virtual PCRS I/O;

accessing private network service through the PCRS; and

communicating with at least another smart device client through the PCRS.

7. The method of claim 2, wherein the smart device client comprises:

a computing device;

a connection to a network, wired or wireless;

a program, when executed by the computing device, causes the smart device client to;

retrieve a session based invitation from the smart device client message box;

send a session based reply to the PCRS message box;

retrieve a session based acknowledgement from the smart device client message box;

send an access request to the PCRS;

wait for the PCRS response;

bind a network connection between the PCRS and the smart device client;

route incoming request from the PCRS to the smart device client;

establish a secure peer-to-peer communication with the PCRS;

access the private network service through the PCRS; and

communicate with the at least another smart device client through the PCRS.

8. The method of claim 7, wherein the program, when executed by the computing device, causes the smart device client to:

access the PCRS from anywhere at anytime; and

access the PCRS behind the firewall with fixed or dynamic IP addresses, wherein the smart device client;

requires no outside or public cloud based routing server in the a wide area network (WAN);

requires no additional router setup in a local area network (LAN);

establishes a secure peer-to-peer communication with the PCRS;

access private network service through the PCRS; and

communicate with the at least another smart device client through the PCRS.

9. The method of claim 7, wherein the program, when executed by the computing device, causes the smart device client to:

access the PCRS from anywhere at anytime;

access the PCRS behind the firewall with fixed or dynamic IP addresses, wherein the smart device client;

requires no outside or public cloud based routing server in a wide area network (WAN),

requires no additional router setup in a local area network (LAN), and

establishes a secure peer-to-peer communication with the PCRS,

map local physical I/O to virtual server I/O;

access private network service through the PCRS; and

communicates with the at least another smart device client through the PCRS.

10. A method for providing a secure session based message connection mechanism between a private cloud routing server (PCRS) and a smart device client in a PCRS network, comprising:

setting up the PCRS and the smart device client in a client server relationship,

wherein the PCRS includes a routing server message box utility to access a first message box located on a public cloud network,

wherein the PCRs registers public and private IP addresses of the smart device client,

wherein the smart device client includes a client message box utility to access a second message box located on the public cloud network, and

wherein the PCRS sends a session based acknowledgement with public and private IP addresses of the PCRS to the second message box;

passing, by the routing server message box utility of the PCRS, a session based message between the first message box and the second message box in a security process,

wherein the security process to pass the session based message between the first message box and the second message box of the PCRS and the smart device client, respectively, includes;

initializing and provisioning of the PCRS;

creating a PCRS Client;

viewing the PCRS Client;

editing a peer-to-peer password and status of the PCRS;

changing the peer-to-peer password by the smart device client;

resetting the peer-to-peer password and status by an administrator from a PCRS LAN; and

connecting to the PCRS by the smart device client,

wherein the smart device client connects to the PCRS by at least one connection of;

determining, by the smart device client, a target is in a locally accessible Local Area Network (LAN) and deciding to connect to the PCRS directly,

determining, by the smart device client, the target is not in the locally accessible LAN and deciding to connect through a WAN to the public cloud network, and wherein the WAN locating a router and the LAN, and connecting to the PCRS, and

determining, by the smart device client, the target is not in the locally accessible LAN and decides to pass through the LAN and the router, and connects to the public cloud network in the WAN.

11. A method for a communication flow of a connection mechanism between a private cloud routing server (PCRS) and a PCRS Client Device through a Cloud Network, comprising:

requesting by a client device application to connect to a PCRS Utility through a Client Message Box, wherein a server portion of the PCRS Utility receives a registration through a routing server message box;

requesting by the PCRS Client Device to the server portion of the PCRS Utility through the Client Message Box a connection to a client portion of the PCRS Utility;

receiving by the server portion of the PCRS Utility the request through a Routing Server Message Box;

notifying the client portion of the PCRS Utility by the server portion of the PCRS utility of an intention of the server portion to connect;

replying by the client portion of the PCRS Utility with a registration to the server portion of the PCRS Utility;

responding by the server portion of the PCRS Utility to the client device application through the Routing Server Message Box;

punching holes through a firewall of the client portion of the PCRS Utility;

punching holes through a firewall of the PCRS Client Device;

registering by the PCRS Utility the public and private IP addresses of the PCRS Client Device;

sending by the PCRS Utility a session based acknowledgement with the public and private IP addresses of the PCRS to the Client Message Box;

and

starting peer-to-peer communication between the PCRS Client Device and the client portion of the PCRS Utility,

wherein information exchange between the PCRS Utility and the PCRS Client Device is through the Routing Server Message Box and the Client Message Box,

wherein the PCRS Client Device connects to the client portion of the PCRS Utility by at least one connection of;

the PCRS Client Device determines the client portion of the PCRS Utility is in a locally accessible Local Area Network (LAN) and decides to connect to the PCRS Utility directly,

the PCRS Client Device determines the client portion of the PCRS Utility is not in the locally accessible LAN and decides to connect through a WAN to the cloud network, and wherein the WAN locates a router and the LAN, and connects to the PCRS Utility, and

the PCRS Client Device determines the client portion of the PCRS Utility is not in the locally accessible LAN and decides to pass through the LAN and the router, and connects to the cloud network in the WAN.

12. The method of claim 11,

wherein either of the Routing Server Message Box or the Client Message Box, are hosted inside an email server, text message server, web server, or a server that is configured to host secure message for information exchange between the PCRS, and the PCRS Client Device;

wherein the Routing Server Message Box or the Client Message Box, is accessible and under the secure and private control of either the PCRS or the PCRS Client Device; and

wherein if the Routing Server Message Box or the Client Message Box is down, the downed Routing Server Message Box or the Client Message Box is replaced or redeployed immediately without interrupting the communication between the PCRS and the PCRS Client Device in the Cloud Network.

13. A non-transitory computer-readable medium storing executable instructions that, in response to execution, cause a computer to perform operations comprising:

setting up a private cloud routing server (PCRS) and a smart device client in a client server relationship,

wherein the PCRS includes a routing server message box utility to access a first message box located on a public cloud network,

wherein the PCRS registers public and private IP addresses of the smart device client, and

wherein the smart device client includes a client message box utility to access a second message box located on the public cloud network, and

wherein the PCRS sends a session based acknowledgement with public and private IP addresses of the PCRS to the second message box;

passing, by the routing server message box utility of the PCRS, a session based message between the first message box and the second message box in a security process,

wherein the security process to pass the session based message between the first message box and the second message box of the PCRS and the smart device client, respectively, includes;

initializing and provisioning of the PCRS,

creation of a PCRS Client,

viewing the PCRS Client,

editing a peer-to-peer password and status of the PCRS, and

changing a PCRS peer-to-peer password by the smart device client and connecting to the PCRS by the smart device client,

wherein the smart device client connects to the PCRS by at least one connection of;

the smart device client determines a target is in a locally accessible Local Area Network (LAN) and decides to connect to the PCRS directly,

the smart device client determines the target is not in the locally accessible LAN and decides to connect through a WAN to the public cloud network, and wherein the WAN locates a router and the LAN, and connects to the PCRS, and

the smart device client determines the target is not in the locally accessible LAN and decides to pass through the LAN and the router, and connects to the public cloud network in the WAN,

wherein a secure session based message is authenticated by the PCRS and the smart device client,

wherein the smart device client and the PCRS communicates with each other after the session based message is authenticated, and

wherein a private network service is then securely accessible by the smart device client through the public cloud network based upon the authenticated session based message; and

setting up at least another smart device client in a client server relationship with the PCRS,

wherein the smart device client and the at least another smart device client communicates with the PCRS after the session based message is authenticated, and

wherein the smart device client and the at least another smart device client privately and securely communicates with each other through the public cloud network.

14. A non-transitory computer-readable medium storing executable instructions that, in response to execution, cause a computer to perform operations comprising:

requesting by a client device application to connect to a PCRS Utility through a Client Message Box, wherein a server portion of the PCRS Utility receives a registration through a routing server message box;

requesting by the PCRS Client Device to the server portion of the PCRS Utility through the Client Message Box a connection to a client portion of the PCRS Utility;

receiving by the server portion of the PCRS Utility the request through a Routing Server Message Box;

notifying the client portion of the PCRS Utility by the server portion of the PCRS utility of an intention of the server portion to connect;

replying by the client portion of the PCRS Utility with a registration to the server portion of the PCRS Utility;

responding by the server portion of the PCRS Utility to the client device application through the Routing Server Message Box;

punching holes through a firewall of the client portion of the PCRS Utility;

punching holes through a firewall of the PCRS Client Device;

registering by the PCRS Utility the public and private IP addresses of the PCRS Client Device;

sending by the PCRS Utility a session based acknowledgement with the public and private IP addresses of the PCRS to the Client Message Box;

and

starting peer-to-peer communication between the PCRS Client Device and the client portion of the PCRS Utility,

wherein information exchange between the PCRS Utility and the PCRS Client Device is through the Routing Server Message Box and the Client Message Box,

wherein the PCRS Client Device connects to the client portion of the PCRS Utility by at least one connection of;

the PCRS Client Device determines the client portion of the PCRS Utility is in a locally accessible Local Area Network (LAN) and decides to connect to the PCRS Utility directly,

the PCRS Client Device determines the client portion of the PCRS Utility is not in the locally accessible LAN and decides to connect through a WAN to the cloud network, and wherein the WAN locates a router and the LAN, and connects to the PCRS Utility, and

the PCRS Client Device determines the client portion of the PCRS Utility is not in the locally accessible LAN and decides to pass through the LAN and the router, and connects to the cloud network in the WAN.