Apparatus and accompanying methods for providing, through a centralized server site, a secure, cost-effective, web-enabled, integrated virtual office environment remotely accessible through a network-connected web browser

• US 20030191799A1
• Filed: 03/14/2001
• Published: 10/09/2003
• Est. Priority Date: 03/14/2000
• Status: Active Grant

• Current Assignee: AEP Networks, Inc. (AEP Networks Ltd.)
• Original Assignee: Netilla Networks, Inc. (AEP Networks Ltd.)
• Inventors: Best, Reginald P., Araujo, Kenneth S., Heitmueler, Devin J., Douglas, Christopher P., Zhang, Siuling C.
• Granted Patent: US 7,111,060 B2
• Time in Patent Office: Days
• US Class Current: 709/203
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

Apparatus and accompanying methods for use therein for implementing an integrated, virtual office user environment, through an office server(s), through which a remotely stationed user can access typical office network-based applications, including e-mail, file sharing and hosted thin-client programs, through a remotely located network, e.g., WAN, connected web browser. Specifically, a front end, namely a service enablement platform (SEP), to one or more office servers on a LAN is connected to both the WAN and LAN and acts both as a bridge between the user and his(her) office applications and as a protocol translator to enable bi-directional, web-based, real-time communication to occur between the browser and each such application. The SEP translates user input originating from the browser into application-specific protocols and applies a result to a corresponding office application server.

Claims

1. Apparatus for providing a web-accessible virtual processing environment to a network-connected office server for a remotely connected user computer through which a user stationed at the computer can execute any of a plurality of server-based applications resident at the office server, comprising:

a platform, capable of being situated in network communication between the user computer and the office server, having;

a processor;

a memory, connected to the processor and for storing computer executable instructions therein;

first and second network interfaces, operable in conjunction with the processor, for interfacing the platform, through the first network interface, to a wide area network (WAN) connection through which the remote user computer obtains connectivity to the platform, and, through the second network interface, to a local area network (LAN) having a server computer electrically communicative thereover, respectively, with the server computer forming the office server; and

wherein, in response to the executable instructions, the processor, for each one of the server-based applications;

provides, through a corresponding client application module implemented on the platform for each of the server-based applications, bi-directional protocol conversion of messages between the remote user computer and the office server, such that user interaction data, intended for a specific one of the server-based applications and provided by a browser executing on the remote user computer in a first protocol, is converted into a second protocol associated with said one server-based application and then applied to the server-based application at the office server, and output data, provided by said specific one server-based application, is converted from the second protocol to the first protocol for being transmitted to the user computer and graphically rendered thereat, through the browser, to the user.

2. The apparatus in claim 1 wherein the processor, in response to execution of the stored instructions:

for messages emanating from the user computer and appearing on the WAN connection;

receives, from the browser, a first message containing the user interaction data associated with a specific one server-based application and in the first protocol;

converts the user interaction data in the first protocol to the second protocol associated with the specific one server-based application to yield a second message; and

applies the second message, as input, to the server computer for processing by the specific one server-based application; and

for messages emanating from the server computer and appearing on the LAN;

receives, from the server computer and over the LAN connection, a third message containing output data generated by the specific one server-based application and in the second protocol;

converts the output data message in the second protocol to the first protocol to yield a fourth message; and

applies the fourth message to the WAN connection for transmission to the browser in order to render the output data thereat.

3. The apparatus in claim 2 wherein the server computer comprises a corresponding server for each of the server-based applications and is implemented either coincident with the platform or as at least one physical computer separate from the platform and connected, via the LAN, to it.

4. The apparatus in claim 3 further comprising, in the platform, a separate corresponding software-implemented application module for each of the specific server-based applications for providing protocol translation of the user interaction data and output data between the first and second protocols;

the application module comprises;

a user interaction component communicative, through the WAN connection, with the browser, for accepting the user interaction data from the browser in the first protocol and for providing said output data to the browser in the first protocol;

a state machine, communicative through an application processing interface with the user interaction component, for interpreting each command issued by the user interaction component so as to provide the user interaction data to the specific one server-based application executing on the server computer, and communicative through a client protocol component, for sending user interaction data to the server-based application and for receiving said output information from the specific one server-based application; and

a client protocol component, operative in conjunction with the state machine, for converting the user interaction data received from the state machine into the second protocol and applying resultant messages in the second protocol to the specific one server-based application, and for receiving said output data in the second protocol from the specific one server-based application and applying said output data to the state machine.

5. The apparatus in claim 4 wherein the server-based applications comprise thin-client application hosting, e-mail and shared file access;

and the first protocol comprises HTTP, secure HTTP, or a protocol with AIP-like functionality and the second protocol comprises RDP (remote desktop protocol), IMAP (Internet mail access protocol) or SMB (server message block).

6. The apparatus in claim 5 wherein the user interaction data comprises a designation of a uniform resource locator (URL), uniform resource identifier (URI), form input, keystrokes or mouse clicks that returns associated information desired by the user, and output data comprises graphical display data.

7. The apparatus in claim 6 wherein said output data comprises bitmap graphic output display data generated by the specific one server-based application.

8. The apparatus in claim 7 wherein the WAN connection comprises either a private network connection or an Internet connection.

9. The apparatus in claim 8 wherein the second network interface comprises an Ethernet interface, and the first network interface comprises a broadband network interface.

10. The apparatus in claim 9 wherein the broadband network interface comprises a digital subscriber line (DSL) interface, a cable modem, an integrated services digital network (ISDN) interface, a T1 interface or a fractional T1 interface.

11. A method for use, in apparatus, which provides for providing a web-accessible virtual processing environment to a network-connected office server for a remotely connected user computer through which a user stationed at the computer can execute any of a plurality of server-based applications resident at the office server, the apparatus comprising a platform, capable of being situated in network communication between the user computer and the office server, having:

a processor, a memory, connected to the processor and for storing computer executable instructions therein;

first and second network interfaces, operable in conjunction with the processor, for interfacing the platform, through the first network interface, to a wide area network (WAN) connection through which the remote user computer obtains connectivity to the platform, and, through the second network interface, to a local area network (LAN) having a server computer electrically communicative thereover, respectively, with the server computer forming the office server;

wherein, the method comprises the steps, performed by the processor, for each one of the server-based applications;

providing, through a corresponding client application module implemented on the platform for each of the server-based applications, bi-directional protocol conversion of messages between the remote user computer and the office server, wherein the providing step comprises the steps of;

converting user interaction data, intended for a specific one of the server-based applications and provided by a browser executing on the remote user computer from a first protocol into a second protocol associated with said one server-based application so as to yield converted user interaction data;

applying the converted user interaction data to the server-based application at the office server;

converting output data, provided by said specific one server-based application, from the second protocol to the first protocol so as to yield converted output data; and

transmitting the converted output data to the user computer to be graphically rendered thereat, through the browser, to the user.

12. The method in claim 11 further comprising the steps of:

for messages emanating from the user computer and appearing on the WAN connection;

receiving, from the browser, a first message containing the user interaction data associated with a specific one server-based application and in the first protocol;

converting the user interaction data in the first protocol to the second protocol associated with the specific one server-based application to yield a second message; and

applying the second message, as input, to the server computer for processing by the specific one server-based application; and

for messages emanating from the server computer and appearing on the LAN;

receiving, from the server computer and over the LAN connection, a third message containing output data generated by the specific one server-based application and in the second protocol;

converting the output data message in the second protocol to the first protocol to yield a fourth message; and

applying the fourth message to the WAN connection for transmission to the browser in order to render the output data thereat.

13. The method in claim 12 further comprising the SEP of implementing a corresponding server for each of the server-based applications either coincident with the platform or as at least one physical computer separate from the platform and connected, via the LAN, to it.

14. The method in claim 13 further comprising the step of providing protocol translation of the user interaction data and output data between the first and second protocols through a separate software-implemented application module for each of the specific server-based applications;

wherein the application module comprises;

a user interaction component communicative, through the WAN connection, with the browser, for accepting the user interaction data from the browser in the first protocol and for providing said output data to the browser in the first protocol;

a state machine, communicative through an application processing interface with the user interaction component, for interpreting each command issued by the user interaction component so as to provide the user interaction data to the specific one server-based application executing on the server computer, and communicative through a client protocol component, for sending user interaction data to the server-based application and for receiving said output information from the specific one server-based application; and

a client protocol component, operative in conjunction with the state machine, for converting the user interaction data received from the state machine into the second protocol and applying resultant messages in the second protocol to the specific one server-based application, and for receiving said output data in the second protocol from the specific one server-based application and applying said output data to the state machine.

15. The method in claim 14 wherein the server-based applications comprise thin-client application hosting, e-mail and shared file access;

and the first protocol comprises HTTP, secure HTTP, or a protocol with AIP-like functionality and the second protocol comprises RDP (remote desktop protocol), IMAP (Internet mail access protocol) or SMB (server message block).

16. The method in claim 15 wherein the user interaction data comprises a designation of a uniform resource locator (URL), uniform resource identifier (URI), form input data, user keystrokes or user mouse clicks that returns associated information desired by the user, and the output data comprises graphical display data.

17. The method in claim 16 wherein said output data comprises bitmap graphic output display data generated by the specific one server-based application.

18. The method in claim 17 wherein the WAN connection comprises either a private network connection or an Internet connection.

19. The method in claim 18 wherein the second network interface comprises an Ethernet interface, and the first network interface comprises a broadband network interface.

20. The method in claim 19 wherein the broadband network interface comprises a digital subscriber line (DSL) interface, a cable modem, an integrated services digital network (ISDN) interface, a T1 interface or a fractional T1 interface.