System, apparatus, and method for accessing mobile servers

• US 7,523,491 B2
• Filed: 01/03/2005
• Issued: 04/21/2009
• Est. Priority Date: 01/03/2005
• Status: Expired due to Fees

• Current Assignee: WSOU Investments, LLC (WSOU Holdings, LLC)
• Original Assignee: Nokia Corporation
• Inventors: Wikman, Johan, Dosa Racz, Ferenc, Jalava, Teemu
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Schmidt, Kari L
• Application Number:
  US11/028,460
• Publication Number:
  US 20080010676A1
• Time in Patent Office: 1,569 Days
• Field of Search: 726/11, 726/12, 707/100, 713152-154, 709/217, 709/223, 709/239
• US Class Current: 726/11
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes

Abstract

A mobile terminal operating within a firewall protected mobile domain provides mobile server functionality to requesting entities outside of the protected domain. Links to content contained within, or proximately coupled to, the mobile server are located via registry entries. Internet Protocol (IP) address queries associated with the firewall protected mobile server result in the return of the IP address of a socket gateway. The socket gateway acts as a trusted interface to both the mobile server'"'"'s domain as well as the requesting entities'"'"' domain. The socket gateway intercedes as a relay to setup, maintain, and tear down the communication session between the mobile server and the requesting entity.

Claims

1. A system comprising:

a network entity operating within a first mobile network and adapted to target a data request to a second mobile network, wherein the data request comprises a hypertext transport protocol request;

a first firewall coupled to the second mobile network and adapted to screen the data request received from the network entity;

a mobile server operating within the second mobile network and adapted to provide a response to the data request; and

a socket gateway coupled between the network entity and the first firewall and adapted to;

receive the data request on behalf of the mobile server;

convert the data request to a mobile services request that is allowed to pass through the first firewall;

send the mobile services data request to the mobile server via the first firewall;

receive the response from the mobile server based on hypertext transport protocol exchanges initiated by the mobile server with the socket gateway; and

relay the response to the network entity.

2. The system according to claim 1, further comprising a Domain Name Server (DNS) adapted to provide an address of the socket gateway in response to requests for an address of the mobile server.

3. The system according to claim 1, further comprising a second firewall coupled to the first mobile network.

4. The system according to claim 3, wherein the socket gateway is adapted to operate as a trusted entity between the first and second firewalls.

5. The system according to claim 1, wherein the converting the data request includes converting the data request to one of Session Initiation Protocol (SIP), Wireless Application Protocol (WAP), or Short Messaging Service (SMS).

6. An apparatus comprising:

a transceiver interface capable of being wirelessly coupled to a firewall protected network; and

a processor coupled to the transceiver interface and configured to;

receive a format converted content request from a socket gateway operating outside of the firewall protected network, wherein the format converted content request is based on a hypertext transport protocol request received at the socket gateway and converted by the socket gateway to a mobile services protocol that is allowed to pass through a firewall of the firewall protected network; and

send a content response based on the format converted content request to the socket gateway based on a hypertext transport protocol content exchange initiated by the apparatus with the socket gateway, wherein the hypertext protocol exchange causes the socket gateway to relay the content response to an originator of hypertext transport protocol request.

7. The apparatus according to claim 6, wherein the mobile services protocol includes a Session Initiation Protocol (SIP).

8. The apparatus according to claim 6, wherein the memory is further capable of storing a socket gateway interface.

9. The apparatus according to claim 8, wherein the socket gateway interface is adapted to communicate with the socket gateway to conduct the content exchange.

21. The apparatus of claim 6, wherein the hypertext transport protocol exchanges initiated by the mobile server with the socket gateway comprise:

an address request sent from the mobile server to the socket gateway to obtain an storage address of the socket gateway for caching the content response;

an address response sent from the socket gateway to the mobile server comprising the storage address; and

a posting of the content response from the mobile server to the socket gateway based on the storage address.

10. A computer-readable medium comprising:

instructions which are executable by a mobile terminal for facilitating data transfer to network elements operating outside of a firewall protected mobile network by performing steps comprising;

receiving a mobile services request from a trusted entity operating outside of the firewall protected mobile network, the mobile services request being converted from a hypertext transport protocol request by the trusted entity to allow the hypertext transport protocol request to pass through a firewall;

establishing a connection with the trusted entity in response to the mobile services request using hypertext transport protocol exchanges initiated by the mobile terminal; and

transferring data to the network elements, wherein the data intended for the network elements is addressed to the trusted entity and relayed to the network elements via the trusted entity.

11. A method, comprising:

receiving a request for addresses corresponding a mobile server operating in a firewall protected mobile domain;

converting the requested addresses to an address of a trusted entity operating outside of the firewall protected mobile domain;

transmitting a request for data to the trusted entity using the converted addresses;

converting the request for data into a mobile services request that is allowed to pass through a firewall of the firewall protected mobile domain;

send the mobile services request to the mobile server;

receive a response to the request for data based on hypertext transport protocol exchanges initiated by the mobile server in response to the mobile services request; and

relay the response to an initiator of the request for data.

12. The method according to claim 11, wherein requesting addresses comprises contacting a Domain Name Server (DNS).

13. The method according to claim 11, the requests for data are received via a HyperText Transfer Protocol (HTTP).

14. The method according to claim 13, wherein converting the requests for data further comprises translating the HTTP requests into one of Session Initiation Protocol (SIP), Wireless Application Protocol (WAP), or Short Messaging Service (SMS) requests.

15. The method according to claim 11, wherein the response is formatted in a HyperText Transfer Protocol (HTTP).

16. The method according to claim 11, wherein the response is formatted in a Real Time Streaming Protocol (RTSP).

17. The method according to claim 16, wherein the response is derived from within the mobile server.

18. The method according to claim 16, wherein the response is derived from a proximity connection to the mobile server.

19. A computer-readable medium comprising:

instructions which are executable by a socket gateway for facilitating data transfer between network elements of a first firewall protected domain and a mobile server of a second firewall protected domain by performing steps comprising;

receiving hypertext transport protocol data requests from the network elements;

converting the data requests to a mobile services protocol type that is allowed to pass through a firewall of the second firewall protected domain;

transmitting the converted data requests to the mobile server; and

receiving data from the mobile server in response to the converted data requests based on hypertext transport protocol exchanges initiated by the mobile server with the socket gateway; and

relaying the received data to the network elements.

20. An apparatus comprising:

means for receiving hypertext transport protocol data requests from network elements in a first network;

means for converting the data requests to a mobile services protocol type that is allowed to pass through a firewall of a second network;

means for transmitting the converted data requests to a mobile server operating within the second network;

means for receiving data from the mobile server in response to the converted data requests based on hypertext transport protocol exchanges initiated by the mobile server through the firewall; and

means for relaying the received data to the network elements.

22. A method comprising:

receiving a hypertext transport protocol data request from a network element of a first network;

converting the data request to a mobile services request that is allowed to pass through a firewall of a second network;

transmitting the converted data requests to a mobile server operating within the second network;

receiving data from the mobile server in response to the converted data requests based on hypertext transport protocol exchanges initiated by the mobile server through the firewall; and

relaying the received data to the network elements.

23. The method of claim 22 wherein the hypertext transport protocol exchanges initiated by the mobile server through the firewall comprise:

an address request received from the mobile server to obtain an storage address of the socket gateway for caching the received data;

an address response sent to the mobile server comprising the storage address; and

a posting of the received data from the mobile server based on the storage address and resulting in the caching of the received data.