METHOD AND SYSTEM FOR PROVIDING SECURE ACCESS TO PRIVATE NETWORKS WITH CLIENT REDIRECTION

• US 20100057845A1
• Filed: 10/20/2009
• Published: 03/04/2010
• Est. Priority Date: 11/02/2001
• Status: Active Grant

• Current Assignee: Pulse Secure, LLC (Ivanti Software, Inc.)
• Original Assignee: Juniper Networks Incorporated
• Inventors: RAMACHANDRAN, Sriram, TOCK, Theron, THOMAS, Christopher
• Granted Patent: US 7,958,245 B2
• Time in Patent Office: Days
• US Class Current: 709/203
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/561 Adding application-functional data or data for application control, e.g. adding metadata
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Improved approaches for providing secure access to resources maintained on private networks are disclosed. The secure access can be provided through a public network using client software of client-server software and/or with file system software. Multiple remote users are able to gain restricted and controlled access to at least portions of a private network through a common access point, such as an intermediate server of the remote network.

Claims

1. A method of network communication, comprising:

receiving a network connection request on a computer on a local network, the network connection request initiated by a client application of a client-server application, the client application on the computer, the network connection request including a destination on a remote network, a server application of the client-server application on the remote network;

redirecting the network connection request within a Windows socket layer on the computer, the network connection request redirected away from a transport service provider of the computer, the network connection request redirected to an intermediate server in the remote network; and

sending data of the client application from the computer towards the intermediate server, wherein the data of the client application is sent from the intermediate server towards the server application.

2-39. -39. (canceled)