Method and apparatus for providing secure remote access to enterprise networks

• US 8,286,002 B2
• Filed: 12/02/2005
• Issued: 10/09/2012
• Est. Priority Date: 12/02/2005
• Status: Active Grant

• Current Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Original Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Inventors: Kamat, Sanjay D., Koppol, Pramod V. N., Kumar, Vijay Pochampalli, Stiliadis, Dimitrios
• Primary Examiner(s): Powers, William
• Assistant Examiner(s): SHAIFER HARRIMAN, DANT B
• Application Number:
  US11/293,843
• Publication Number:
  US 20070130457A1
• Time in Patent Office: 2,503 Days
• Field of Search: 713189-194, 713/153, 713/154, 726/26
• US Class Current: 713/192
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 76/10 Connection setup

Abstract

The invention includes a method and apparatus for providing secure remote access to enterprise networks. An apparatus includes a network interface module adapted for maintaining a secure network connection with a network device independent of a power state of a host computer associated with the apparatus a storage module for storing information associated with the secure connection, and a processor coupled to the network interface and the memory where the processor is adapted for automatically initiating the secure connection without user interaction.

Claims

1. A secure client device configured to provide a secure client capability for a host computer having a host processor and a host memory, the secure client device comprising:

a network interface module configured to maintain a secure connection between the secure client device and a network device independent of a power state of the host computer;

a client memory configured to store information associated with the secure connection, wherein the information associated with the secure connection comprises information received over the secure connection; and

a client processor configured to automatically initiate establishment of the secure connection and, in response to a determination that the host computer is in an inactive state, store the information received over the secure connection in the client memory.

2. The secure client device of claim 1, wherein the client processor is configured to automatically initiate establishment of the secure connection in response to a trigger condition.

3. The secure client device of claim 2, wherein the trigger condition comprises detecting an available network.

4. The secure client device of claim 2, wherein the trigger condition comprises detecting a request from the network device.

5. The secure client device of claim 1, wherein the client memory comprises at least one non-volatile memory component.

6. The secure client device of claim 1, wherein the information associated with the secure connection comprises information assigned for transmission over the secure connection.

7. The secure client device of claim 1, further comprising:

a host interface module coupled to the client processor, wherein the host interface module is configured to support communications between the secure client device and the host computer.

8. The secure client device of claim 7, wherein the client processor is configured to:

in response to detecting a transition of the host computer from the inactive state to an active state, retrieve the information received over the secure connection from the client memory and propagate the information received over the secure connection toward the host computer via the host interface module.

9. The secure client device of claim 1, wherein the information received over the secure connection comprises information pushed by at least one network element in communication with the network device.

10. The secure client device of claim 1, wherein the information associated with the secure connection comprises information assigned for transmission over the secure connection, wherein the client processor is configured to:

in response to a determination that the secure connection is unavailable, store the information assigned for transmission over the secure connection, wherein the information assigned for transmission over the secure connection is stored in the client memory.

11. The secure client device of claim 10, wherein the client processor is configured to:

in response to a determination that an access network is available;

initiate reestablishment of the secure connection between the secure client device and the network device;

retrieve the information assigned for transmission over the secure connection from the client memory; and

propagate the information assigned for transmission over the secure connection toward the network device using the secure connection.

12. A method for a secure client device to provide a secure client capability for a host computer having a host processor and a host memory, the method comprising:

receiving information from the host computer at the secure client device, wherein the secure client device comprises a client processor and a client memory;

transmitting the information from the host computer from the secure client device toward a network device using a secure connection between the secure client device and the network device, wherein establishment of the secure connection is initiated automatically by the client processor of the secure client device, wherein the secure connection is maintained by the secure client device independent of a power state of the host computer;

receiving, at the secure client device via the secure connection, information intended for the host computer; and

storing the information intended for the host computer in the client memory of the secure client device in response to a determination that the host computer is in an inactive state.

13. The method of claim 12, further comprising:

storing the information from the host computer in the client memory of the secure client device in response to a first condition.

14. The method of claim 13, further comprising:

extracting the information from the host computer from the client memory of the secure client device in response to a second condition.

15. The method of claim 14, wherein the first condition comprises a network being unavailable and the second condition comprises the network being available.

16. The method of claim 14, wherein the first condition comprises a determination to delay transmission of the information from the host computer and the second condition comprises a threshold being satisfied.

17. A method for a secure client device to provide a secure client capability for a host computer having a host processor and a host memory, the method comprising:

receiving information at the secure client device, wherein the information is received over a secure connection between the secure client device and a network device, wherein the secure client device comprises a client processor and a client memory, wherein establishment of the secure connection is initiated automatically by the client processor of the secure client device, wherein the secure connection is maintained by the secure client device independent of a power state of the host computer;

storing the information in the client memory of the secure client device in response to a determination that the host computer is in an inactive state; and

transferring the information from the secure client device toward the host computer.

18. The method of claim 17, further comprising:

in response to detecting a transition of the power state of the host computer from the inactive state to an active state, extracting the information from the client memory of the secure client device and transferring the information from the secure client device toward the host computer.