US5778174A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and system for providing secured access to a server connected to a private computer network
Assignee: Qwest Communications International Inc
•
Filing: 1996-12-10
•
Granted: 1998-07-07
•
Expires: 2016-12-10
Abstract
Abstract A method and system for providing secured access to a server connected to a private computer network protected by a router acting as a firewall is provided. The method includes establishing a bypass communication route around the firewall router, exchanging information between a client and the server via the bypass communication route, and closing the bypass communication route. The system includes an external machine, an external communication channel, an internal machine, an internal communication channel, and a dedicated private communication channel. Each of these components in combination form a bypass communication route around the firewall router.
Inventors
- 👤 Michael Eugene Cain
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-30 12:25
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0209; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31
Claims Analysis
Total Claims: 14
Claim 1
Independent Claim
124 words
A system for providing secured access to a server connected to a private computer network protected by a router acting as a firewall, the system comprising: an external machine located outside the firewall router, the external machine operated by an outside software program and barricaded such that only one network-aware application is run on the external machine; an external communication channel established between the external machine and a client via a global public computer network; an internal machine located inside the firewall router, the internal machine operated by an inside software program; an internal communication channel established between the internal machine and a server via the private computer network; and a dedicated private communication channel connected between the external machine and the internal machine.
Claim 2
Independent Claim
124 words
A system for providing secured access to a server connected to a private computer network protected by a router acting as a firewall, the system comprising: an external machine located outside the firewall router, the external machine operated by an outside software program and barricaded such that only one network-aware application is run on the external machine; an external communication channel established between the external machine and a client via a global public computer network; an internal machine located inside the firewall router, the internal machine operated by an inside software program; an internal communication channel established between the internal machine and a server via the private computer network; and a dedicated private communication channel connected between the external machine and the internal machine.
Claim 3
Dependent Claim
16 words
The system of claim 1 wherein the global public computer network is a local-area network (LAN).
Claim 4
Dependent Claim
16 words
The system of claim 1 wherein the global public computer network is a wide-area network (WAN).
Claim 5
Dependent Claim
14 words
The system of claim 1 wherein the global public computer network is the Internet.
Claim 6
Dependent Claim
14 words
The system of claim 1 wherein the external machine does not perform IP forwarding.
Claim 7
Dependent Claim
17 words
The system of claim 1 wherein the dedicated private communication channel is controlled by an application-specific protocol.
Claim 8
Independent Claim
191 words
A method for providing secured access from a client connected to a public computer network to a server connected to a private computer network protected by a router acting as a firewall coupled between the public computer network and the private computer network, the method comprising: providing an external machine located outside the firewall router and connected to the public computer network, the external machine operated by an outside software program and barricaded such that only one network-aware application is run on the external machine; providing an internal machine located inside the firewall router and operated by an inside software program; connecting the external machine to the internal machine via a dedicated private communication channel; establishing an external communication channel between the external machine and the client via the public computer network; establishing a second communication channel between the external machine and the internal machine via the dedicated private communication channel in response to the external communication channel; establishing an internal communication channel between the internal machine and the server via the private computer network in response to the second communication channel so as to provide secured access to the server.
Claim 9
Independent Claim
191 words
A method for providing secured access from a client connected to a public computer network to a server connected to a private computer network protected by a router acting as a firewall coupled between the public computer network and the private computer network, the method comprising: providing an external machine located outside the firewall router and connected to the public computer network, the external machine operated by an outside software program and barricaded such that only one network-aware application is run on the external machine; providing an internal machine located inside the firewall router and operated by an inside software program; connecting the external machine to the internal machine via a dedicated private communication channel; establishing an external communication channel between the external machine and the client via the public computer network; establishing a second communication channel between the external machine and the internal machine via the dedicated private communication channel in response to the external communication channel; establishing an internal communication channel between the internal machine and the server via the private computer network in response to the second communication channel so as to provide secured access to the server.
Claim 10
Dependent Claim
19 words
The method as recited in claim 7 wherein establishing the external communication channel includes transmitting information concerning the client.
Claim 11
Dependent Claim
19 words
The method as recited in claim 8 wherein transmitting the information includes transmitting an IP address of the client.
Claim 12
Dependent Claim
23 words
The method as recited in claim 7 wherein establishing the internal communication channel includes verifying the client has permission to access the server.
Claim 13
Dependent Claim
21 words
The method as recited in claim 10 wherein verifying the client has permission includes requiring entry of a valid password identification.
Claim 14
Dependent Claim
30 words
The method as recited in claim 10 wherein verifying the client has permission includes comparing a computer IP address of the client to a predetermined list of pre-approved IP addresses.
References Cited (Backward Citations)
US5481720A
Cited
US5560008A
Cited
US5586260A
Cited
US5455953A
Cited
US5623601A
Cited
US5550984A
Cited
US5623600A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-07-06 | 2002-01-05 | 2002-07-07 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-07-06 | 2006-01-05 | 2006-07-07 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-07-06 | 2010-01-05 | 2010-07-07 | $7700.00 | Window Closed / Lapsed |