APPARATUS AND ACCOMPANYING METHODS FOR PROVIDING, THROUGH A CENTRALIZED SERVER SITE, AN INTEGRATED VIRTUAL OFFICE ENVIRONMENT, REMOTELY ACCESSIBLE VIA A NETWORK-CONNECTED WEB BROWSER, WITH REMOTE NETWORK MONITORING AND MANAGEMENT CAPABILITIES

• US 6,920,502 B2
• Filed: 07/17/2001
• Issued: 07/19/2005
• Est. Priority Date: 04/13/2000
• Status: Expired due to Fees

• Current Assignee: AEP Networks, Inc. (AEP Networks Ltd.)
• Original Assignee: Netilla Networks, Inc. (AEP Networks Ltd.)
• Inventors: Heitmueler, Devin J., Douglas, Christopher P., Isayev, Gamid, Best, Reginald P., Araujo, Kenneth S., Zhang, Siuling C.
• Primary Examiner(s): Follansbee, John
• Assistant Examiner(s): Refai, Ramsey
• Application Number:
  US09/907,094
• Publication Number:
  US 20020032725A1
• Time in Patent Office: 1,463 Days
• Field of Search: 709227-228, 709221-222, 709/219, 709/225, 709/229, 713/201
• US Class Current: 709/229
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/0253 using browsers or web-pages for accessing management information
• CPC Class Codes: H04L 41/0266 using meta-data, objects or commands for formatting management information, e.g. using eXtensible markup language [XML]
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Apparatus and accompanying methods for use therein for implementing an integrated, virtual office user environment, through an office server(s), through which a remotely stationed user can access typical office network-based applications, including e-mail, file sharing and hosted thin-client programs, through a remotely located network, e.g., WAN, connected web browser. Specifically, a front end, namely a service enablement platform (SEP), to one or more office servers on a LAN is connected to both the WAN and LAN and acts both as a bridge between the user and his(her) office applications and as a protocol translator to enable bi-directional, web-based, real-time communication to occur between the browser and each such application. During initial operation, the SEP, operating under a default profile, establishes, over an analog connection to the WAN, a management session with the site to obtain customer WAN access information, then tears down the analog connection and establishes a broadband WAN connection through which the SEP re-establishes its prior session and obtains a client certificate and its customized profile. The SEP then re-initializes itself to that particular profile.

Claims

1. Apparatus which interacts with and is communicatively connected to a device for remotely configuring itself to the device through a wide area network connection between the apparatus and an administrative web site, the apparatus comprising:

a processor;

a memory, connected to the processor, for storing computer executable instructions therein;

wherein, in response to the executable instructions, the processor;

detects whether only a default profile for the device is then stored within the memory;

if only the default profile is so stored, establishes a first secured network connection, through the WAN, to the administrative web site using specific predefined login parameters stored within the apparatus and valid for the administrative web site but unrelated to a customer of the apparatus, wherein the apparatus identifies itself, through a unique identifier associated therewith, to the administrative web site so as to invoke a management session, over the WAN, with the administrative web site;

once the management session has been established, obtains customer-specific login parameters associated with an account for accessing the WAN by the customer who is to use the apparatus in conjunction with the device;

after receiving the customer-specific login parameters, tears down the first secured connection and establishes a second secured network connection, through the WAN but over a network modality different from the first secured network connection, to the administrative web site and then, using the customer-specific login parameters, re-establishes the management session with the administrative web site;

once the management session has been re-established, downloads a profile, from the administrative web site, that characterizes the device; and

in response to the profile, configures constituent components of the apparatus so as to conform operation of the apparatus to corresponding characteristics of the device as defined in the profile such that the apparatus can properly interact with the device.

2. The apparatus in claim 1 wherein the first and second secured network connections comprise dial-up WAN and broadband WAN connections, respectively.

3. The apparatus in claim 2 wherein the dial-up WAN connection is an analog connection.

4. The apparatus in claim 3 wherein the identifier is a hardware media access control (MAC) parameter associated with and stored within the apparatus.

5. The apparatus in claim 4 wherein the processor, in response to the stored instructions, once the management session has been re-established, also downloads predefined cryptographic parameters from the administrative web site for storage into the memory and for use in authenticating and securing subsequent WAN communication to and from the apparatus.

6. The apparatus in claim 5 wherein the cryptographic parameters comprise a predefined cryptographic certificate and a predefined public/private key pair for the apparatus.

7. The apparatus in claim 6 wherein the broadband WAN connection comprises a digital subscriber line (DSL), cable modem, integrated services digital network (ISDN), T1 or fractional T1 connection.

8. The apparatus in claim 1, wherein the device comprises a processing environment encompassed by a local area network (LAN), wherein the apparatus interconnects the LAN to the WAN and to the administrative web site, wherein the administrative web site remotely administers the LAN, via the WAN connection, through the device, the apparatus further comprises first and second network interfaces, operable in conjunction with the processor, for interfacing the apparatus, through the first network interface, to the WAN and, through the second network interface, to the LAN.

9. The apparatus in claim 8 wherein the processor, in response to execution of the stored instructions, provides a web-accessible virtual processing environment to an office server residing on the LAN for a remotely connected user computer, connected through the WAN to the apparatus, through which a user stationed at the user computer can execute any of a plurality of server-based applications resident at the office server, wherein the processor specifically implements bi-directional protocol conversion of messages between the remote user computer and the office server, such that user interaction data, intended for a specific one of the server-based applications and provided by a browser executing on the remote user computer in a first protocol, is converted into a second protocol associated with said one server-based application and then applied to the server-based application at the office server, and output data, provided by said specific one server-based application, is converted from the second protocol to the first protocol for being transmitted to the user computer and graphically rendered thereat, through the browser, to the user.

10. The apparatus in claim 9 wherein the first and second secured network connections comprise a dial-up WAN connection and a broadband WAN connection, respectively.

11. The apparatus in claim 10 wherein the dial-up WAN connection is an analog connection.

12. The apparatus in claim 11 wherein the identifier is a media access control (MAC) parameter associated with and stored within the apparatus.

13. The apparatus in claim 12 wherein the processor, in response to the stored instructions, once the management session has been re-established, also downloads predefined cryptographic parameters from the administrative web site for storage into the memory and for use in authenticating and securing subsequent WAN communication to and from the apparatus.

14. The apparatus in claim 13 wherein the cryptographic parameters comprise a predefined cryptographic certificate and a predefined public/private key pair for the apparatus.

15. The apparatus in claim 14 wherein the broadband WAN connection comprises a digital subscriber line (DSL), cable modem, integrated services digital network (ISDN), T1 or fractional T1 connection.

16. A method for use in apparatus which interacts with and is communicatively connected to a device for remotely configuring itself to the device through a wide area network connection between the apparatus and an administrative web site, the apparatus having a processor and a memory, connected to the processor, for storing computer executable instructions therein, wherein the method comprises the steps, performed by the processor in response to execution of the stored instructions, of:

detecting whether only a default profile for the device is then stored within the memory;

if only the default profile is so stored, establishing a first secured network connection, through the WAN, to the administrative web site using specific predefined login parameters stored within the apparatus and valid for the administrative web site but unrelated to a customer of the apparatus, wherein the apparatus identifies itself, through a unique identifier associated therewith, to the administrative web site so as to invoke a management session, over the WAN, with the administrative web site;

once the management session has been established, obtaining customer-specific login parameters associated with an account for accessing the WAN by the customer who is to use the apparatus in conjunction with the device;

after receiving the customer-specific login parameters, tearing down the first secured connection and establishing a second secured network connection, through the WAN but over a network modality different from the first secured network connection, to the administrative web site and then, using the customer-specific login parameters, re-establishing the management session with the administrative web site;

once the management session has been re-established, downloading a profile, from the administrative web site, that characterizes the device; and

in response to the profile, configuring constituent components of the apparatus so as to conform operation of the apparatus to corresponding characteristics of the device as defined in the profile such that the apparatus can properly interact with the device.

17. The method of claim 16 wherein the first and second secured network connections comprise dial-up WAN and broadband WAN connections, respectively.

18. The method of claim 17 wherein the dial-up WAN connection is an analog connection.

19. The method of claim 18 wherein the identifier is a hardware media access control (MAC) parameter associated with and stored within the apparatus.

20. The method of claim 19 further comprising the step, once the management session has been re-established, of downloading predefined cryptographic parameters from the administrative web site for storage into the memory and for use in authenticating and securing subsequent WAN communication to and from the apparatus.

21. The method of claim 20 wherein the cryptographic parameters comprise a predefined cryptographic certificate and a predefined public/private key pair for the apparatus.

22. The method of claim 21 wherein the broadband WAN connection comprises a digital subscriber line (DSL), cable modem, integrated services digital network (ISDN), T1 or fractional T1 connection.

23. The method of claim 16, wherein the device comprises a processing environment encompassed by a local area network (LAN), wherein the apparatus interconnects the LAN to the WAN and to the administrative web site, wherein the administrative web site remotely administers the LAN, via the WAN connection, through the device, the apparatus further comprises first and second network interfaces, operable in conjunction with the processor, for interfacing the apparatus, through the first network interface, to the WAN and, through the second network interface, to the LAN.

24. The method of claim 23 further comprising the step of providing a web-accessible virtual processing environment to an office server residing on the LAN for a remotely connected user computer, connected through the WAN to the apparatus, through which a user stationed at the user computer can execute any of a plurality of server-based applications resident at the office server, wherein the processor specifically implements bi-directional protocol conversion of messages between the remote user computer and the office server, such that user interaction data, intended for a specific one of the server-based applications and provided by a browser executing on the remote user computer in a first protocol, is converted into a second protocol associated with said one server-based application and then applied to the server-based application at the office server, and output data, provided by said specific one server-based application, is converted from the second protocol to the first protocol for being transmitted to the user computer and graphically rendered thereat, through the browser, to the user.

25. The method of claim 24 wherein the first and second secured network connections comprise a dial-up WAN connection and a broadband WAN connection, respectively.

26. The method of claim 25 wherein the dial-up WAN connection is an analog connection.

27. The method of claim 26 wherein the identifier is a media access control (MAC) parameter associated with and stored within the apparatus.

28. The method of claim 27 further comprising the step, once the management session has been re-established, of downloading predefined cryptographic parameters from the administrative web site for storage into the memory and for use in authenticating and securing subsequent WAN communication to and from the apparatus.

29. The method of claim 28 wherein the cryptographic parameters comprise a predefined cryptographic certificate and a predefined public/private key pair for the apparatus.

30. The method of claim 29 wherein the broadband WAN connection comprises a digital subscriber line (DSL), cable modem, integrated services digital network (ISDN), T1 or fractional T1 connection.