Service access using a service address

• US 8,874,693 B2
• Filed: 02/20/2009
• Issued: 10/28/2014
• Est. Priority Date: 02/20/2009
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Nice, Nir, Statia, Jeromy S., Karim, Samer J.
• Primary Examiner(s): ALGIBHAH, HAMZA N
• Application Number:
  US12/389,402
• Publication Number:
  US 20100218247A1
• Time in Patent Office: 2,076 Days
• Field of Search: 709/219
• US Class Current: 709/219
• CPC Class Codes: H04L 2101/659 Internet protocol version 6 [IPv6] addresses
• CPC Class Codes: H04L 61/5046 Resolving address allocation conflicts; Testing of addresses testing when self-assigning an address H04L61/5092
• CPC Class Codes: H04L 61/5084 Providing for device mobility network addressing or numbering for mobility support in wireless networks H04W8/26; mobile IP H04W80/04
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 69/167 Adaptation for transition between two IP versions, e.g. between IPv4 and IPv6 translation of Internet protocol [IP] addresses H04L61/2503
• CPC Class Codes: H04W 12/00 Security arrangements; Authentication; Protecting privacy or anonymity

Abstract

A method is disclosed that includes assigning a service address to a service of a private network. The service of the private network is accessible, via a gateway, by a client computer. The method also includes turning off duplicate address detection at the gateway. The gateway is associated with a public network address that is different from the service address.

Claims

1. A method, comprising:

assigning a service address to a service provided by a server of a private network that is accessible, via a gateway, to a client computer;

receiving communications from the client computer at the gateway over a public network using a public network address;

receiving communications from the server at the gateway over a private network using a private network address;

wherein each of the public network address, the service address, and the private network address are different from each other;

wherein the service provided by the server to the client computer is independent of a location of the client computer; and

turning off duplicate address detection for the service address at the gateway.

2. The method of claim 1, further comprising:

receiving a request from the client computer to access the service of the private network at the gateway, wherein the request is directed to the service address; and

routing the request, based on the service address provided by the request from the client computer, the service address including one of an IPv4 address or an IPv6 address, from the gateway to the private network.

3. The method of claim 2, wherein the service address includes an Internet Protocol version six (IPv6) address assigned to an external network interface card (NIC) of the gateway, and wherein the request from the client computer is directed to the IPv6 address assigned to the external NIC of the gateway.

4. The method of claim 1, wherein the private network includes a corporate network, and wherein the service includes one of an Internet Protocol Security (IPSec) tunnel mode service and a forward proxy service.

5. The method of claim 1, wherein the service address represents a phantom internet protocol (IP) interface on the gateway and wherein the phantom IP interface on the gateway enables the client computer to communicate with the server via the private network while refraining from using a second gateway.

6. The method of claim 5, wherein the service of the private network is accessible by the client computer via a second gateway, and wherein the method further comprises turning off duplicate address detection at the second gateway, wherein the second gateway has a second public network address that is different from the service address, the public address, and the private network address, wherein the service address represents a phantom internet protocol (IP) interface on the second gateway, and wherein the phantom IP interface on the second gateway enables the client computer to communicate with the server via the private network while refraining from using the gateway.

7. The method of claim 6, further comprising:

receiving a request to access the service of the private network at the second gateway, wherein the request is directed to the service address; and

routing the request, based on the service address provided by the request from the client computer, the service address including an IPv4 address or an IPv6 address, from the second gateway to the private network.

8. The method of claim 7, wherein the client computer accesses the service of the private network via the gateway from a first location and accesses the service of the private network via the second gateway when the client computer is located at a second location.

9. The method of claim 1, wherein the client computer communicates with the gateway using an Internet Protocol version six (IPv6) transition technology protocol.

10. An apparatus comprising:

a processor;

a memory storing instruction executable by the processor to perform operations at a gateway comprising;

assigning a service address to a service provided by a server of a private network that is accessible via the gateway by a client computer;

receiving communications from the client computer over a public network using a public network address;

receiving communications from the server over a private network using a private network address;

turning off duplicate address detection based on the service address at the gateway; and

wherein the public network address, the service address, and the private network address are distinct addresses.

11. The apparatus of claim 10, further comprising:

responding to a request received from the client computer to access the service, wherein the request is directed to the service address; and

routing the request based on the service address provided by the request from the client computer, the service address including an IPv4 address or an IPv6 address, from the gateway to the private network.

12. The apparatus of claim 10, wherein the service address represents a phantom Internet protocol (IP) interface on the gateway, and wherein the phantom IP interface on the gateway enables the client computer to communicate with the server via the private network while refraining from using a second gateway.

13. The apparatus of claim 10, wherein the client computer communicates with the gateway using an Internet Protocol version four (IPv4) protocol, and wherein the service address is assigned to a virtual network interface card (NIC) of the gateway.

14. The apparatus of claim 10, wherein the client computer communicates with the gateway using an Internet Protocol version four (IPv4) protocol, and wherein a virtual private network (VPN) connection is established between the client computer and the gateway.

15. A method, comprising:

accessing a service provided by a server at a first time via a first gateway, the first gateway associated with a first Internet Protocol (IP) address, and using a second IP address as a service address at the first gateway, wherein the first gateway communicates with the server using a third IP address via a private network, and wherein duplicate address detection is turned off at the first gateway;

accessing the service at a second time via a second gateway, the second gateway associated with a fourth IP address, wherein the second gateway uses the second IP address as the service address, wherein the second gateway communicates with the server using the third IP address via the private network, and wherein duplicate address detection is turned off at the second gateway; and

wherein the first IP address, the second IP address, the third IP address, and the fourth IP address are distinct IP addresses, wherein the service is accessible via a portable computing device, and wherein the service provided to the portable computing device is independent of a location of the portable computing device.

16. The method of claim 15, wherein the service is accessed via the portable computer using the service address without modifying service configuration information at the portable computer between the first time and the second time.

17. The method of claim 15, wherein the service address includes an Internet Protocol Security (IPSec) IP address, and wherein the portable computer is configured to access the service of a private network via the IPSec IP address.

18. The method of claim 15, wherein the service address includes an Internet Protocol version six (IPv6) address, and wherein the IPv6 address is assigned to a first external network interface card (NIC) of the first gateway and to a second external NIC of the second gateway.

19. The method of claim 15, further comprising:

accessing the service at a third time via a third gateway, the third gateway associated with a fifth IP address, wherein duplicate address detection is turned off at the third gateway; and

wherein the service is accessed at the third gateway and via the private network using the second IP address, wherein the second IP address is different from the fifth IP address.

20. The method of claim 19, wherein the service address represents a phantom internet protocol (IP) interface on the first gateway, wherein the phantom IP interface on the first gateway enables the portable computing device to communicate with the server via the private network while refraining from using either of the second gateway or the third gateway, wherein the service address represents a phantom internet protocol (IP) interface on the second gateway, wherein the phantom IP interface on the second gateway enables the portable computing device to communicate with the server via the private network while refraining from using either of the first gateway or the third gateway, wherein the service address represents a phantom internet protocol (IP) interface on the third gateway and wherein the phantom IP interface on the third gateway enables the portable computing device to communicate with the server via the private network while refraining from using either of the first gateway or the second gateway.