US5915087A — Transparent security proxy for unreliable message…

Claim 1

Independent Claim 102 words

A network communication manager comprising: a port manager that: receives a client message intended for a selected server; assigns such message to a port based on an address in the message; sends the message to the intended server; and routes a reply message from the server to the client while identifying the reply message as originating from the server; and a security monitor, operatively coupled to the port manager that monitors messages from the clients for conformance to predefined conditions and prevents the further sending of non conforming messages wherein the port manager is interposed between the security monitor and the server.

Claim 2

Dependent Claim 102 words

A network communication manager comprising: a port manager that: receives a client message intended for a selected server; assigns such message to a port based on an address in the message; sends the message to the intended server; and routes a reply message from the server to the client while identifying the reply message as originating from the server; and a security monitor, operatively coupled to the port manager that monitors messages from the clients for conformance to predefined conditions and prevents the further sending of non conforming messages wherein the port manager is interposed between the security monitor and the server.

Claim 3

Dependent Claim 24 words

The network communication manager of claim 1 wherein the port manager further comprises a relay that relays messages from the client to the server.

Claim 4

Dependent Claim 51 words

The network communication manager of claim 1 and further comprising: a timer coupled to the port manager that provides a time stamp; and a link table which is modified by the port manager for tracking ports that messages used, and storing time stamps representative of the times that messages are received.

Claim 5

Dependent Claim 29 words

The network communication manager of claim 3 wherein the port manager maintains a virtual connection between the client and the server based on the time stamp and tracked ports.

Claim 6

Dependent Claim 27 words

The network communication manager of claim I wherein the security monitor maintains an access control list used to identify authorized clients from which message receipt is acceptable.

Claim 7

Dependent Claim 20 words

The network communication manager of claim 5 wherein messages are deleted if they do not originate from an authorized client.

Claim 8

Dependent Claim 34 words

The network communication manager of claim 1 wherein the port manager comprises a proxy running on a firewall having a network protocol stack, wherein the network protocol stack includes an Internet Protocol (IP) layer.

Claim 9

Dependent Claim 16 words

The network communication manager of claim 1 wherein the proxy comprises a monolithic multithreaded computer program.

Claim 10

Dependent Claim 23 words

The network communication manager of claim 8 wherein the port manager binds the port, specific to message transfer between the client and server.

Claim 11

Dependent Claim 131 words

A network communication manager for a firewall which intercepts messages addressed to one or more servers coupled to the firewall, the network communication manager comprising: a port manager that receives messages from a requesting entity addressed to a server entity; a security monitor, operatively coupled to the port manager that monitors messages received from the requesting entity for conformance to supported protocol standards and adherence to a defined security policy; and a relay, operatively coupled to the security monitor, that relays messages from the requesting entity to the server entity using an address of the firewall, responsive to the security monitor and to addresses in the messages, Relays messages from the server entity addressed to the firewall to the requesting entity inserting the address of the server entity in such messages.

Claim 12

Dependent Claim 131 words

A network communication manager for a firewall which intercepts messages addressed to one or more servers coupled to the firewall, the network communication manager comprising: a port manager that receives messages from a requesting entity addressed to a server entity; a security monitor, operatively coupled to the port manager that monitors messages received from the requesting entity for conformance to supported protocol standards and adherence to a defined security policy; and a relay, operatively coupled to the security monitor, that relays messages from the requesting entity to the server entity using an address of the firewall, responsive to the security monitor and to addresses in the messages, Relays messages from the server entity addressed to the firewall to the requesting entity inserting the address of the server entity in such messages.

Claim 13

Dependent Claim 51 words

The network communication manager of claim 10 and further comprising: a timer coupled to the port manager that provides a time stamp; and a link table which is modified by the port manager for tracking ports that messages used, and storing time stamps representative of the times that messages are received.

Claim 14

Dependent Claim 29 words

The network communication manager of claim 11 wherein the port manager maintains a virtual connection between the client and the server based on the time stamp and tracked ports.

Claim 15

Dependent Claim 44 words

The network communication manager of claim 10 wherein the security monitor maintains an access control list used to identify authorized clients from which message receipt is acceptable and wherein the security monitor accesses the access control list using the server address in the message.

Claim 16

Dependent Claim 24 words

The network communication manager of claim 13 wherein messages are deleted by the security monitor if they do not originate from an authorized client.

Claim 17

Dependent Claim 34 words

The network communication manager of claim 10 wherein the port manager comprises a proxy running on a firewall having a network protocol stack, wherein the network protocol stack includes an Internet Protocol (IP) layer.

Claim 18

Dependent Claim 16 words

The network communication manager of claim 10 wherein the proxy comprises a monolithic multithreaded computer program.

Claim 19

Dependent Claim 28 words

The network communication manager of claim 16 wherein the port manager binds the port, and binds a secondary socket specific to message transfer between the client and server.

Claim 20

Independent Claim 143 words

A method of ensuring secure message transfer between a requesting application on one host and a serving application on another host coupled by a network using an unreliable protocol by use of a proxy on a firewall between the hosts, comprising the steps of: receiving a message from the requesting application intended for the serving application; monitoring the message from the requesting application for conformance to a selected communication protocol; relaying the message from the requesting application to the serving application based on a server address in the message and responsive to the conformance of the message to the selected communication protocol while making the message appear as if it originated from the firewall; and relaying a reply message from the serving application to the requesting application having the address of the serving entity encapsulated in the message as an address of origin.

Claim 21

Independent Claim 143 words

A method of ensuring secure message transfer between a requesting application on one host and a serving application on another host coupled by a network using an unreliable protocol by use of a proxy on a firewall between the hosts, comprising the steps of: receiving a message from the requesting application intended for the serving application; monitoring the message from the requesting application for conformance to a selected communication protocol; relaying the message from the requesting application to the serving application based on a server address in the message and responsive to the conformance of the message to the selected communication protocol while making the message appear as if it originated from the firewall; and relaying a reply message from the serving application to the requesting application having the address of the serving entity encapsulated in the message as an address of origin.

Claim 22

Dependent Claim 34 words

The method of claim 18 and further comprising the steps of: checking an address of the requesting entity against a list of authorized addresses; and deleting the message if the address is not authorized.

Claim 23

Dependent Claim 40 words

The method of claim 19 and further comprising the steps of binding a port on which the message from the requesting application was received; and binding a secondary port specific to message transfer between the client application and server application.

Claim 24

Dependent Claim 148 words

A storage medium having a computer program stored thereon for causing a suitably programmed system to ensure secure message transfer using a connectionless communication protocol between a requesting application entity and a serving application entity, by performing the following steps when such program is executed on the system: receiving a message from the requesting application intended for the serving application; monitoring the message from the requesting application for conformance to a selected communication protocol; relaying the message from the requesting application to the serving application based on a server address imbedded in the message and responsive to the conformance of the message to the selected communication protocol while making the message appear as if it originated from the system; and relaying a reply message from the serving application to the requesting application having the address of the serving entity imbedded in the message as an address of origin.

Claim 25

Dependent Claim 148 words

A storage medium having a computer program stored thereon for causing a suitably programmed system to ensure secure message transfer using a connectionless communication protocol between a requesting application entity and a serving application entity, by performing the following steps when such program is executed on the system: receiving a message from the requesting application intended for the serving application; monitoring the message from the requesting application for conformance to a selected communication protocol; relaying the message from the requesting application to the serving application based on a server address imbedded in the message and responsive to the conformance of the message to the selected communication protocol while making the message appear as if it originated from the system; and relaying a reply message from the serving application to the requesting application having the address of the serving entity imbedded in the message as an address of origin.

Claim 26

Dependent Claim 60 words

The storage medium of claim 21 wherein the computer program comprises programming for further causing the system to perform the following additional steps when such program is executed on the system: binding a port on which the message from the requesting application was received; and binding a secondary port specific to message transfer between the client application and server application.

Claim 27

Dependent Claim 56 words

The storage medium of claim 21 wherein the computer program comprises programming for further causing the system to perform the following additional steps when such program is executed on the system: checking an address of the requesting entity against a list of authorized addresses; and modifying the response to the requesting entity based on the check.

Claim 28

Dependent Claim 184 words

A network communication controller, comprising: a processor; a memory coupled to the processor; a communications device operatively coupled to the processor and to the memory wherein the communications device provides multiple ports that receive messages; and a firewall module operatively coupled to the processor that implements with the processor a communications protocol that controls connectionless message transfer between a requestor and a server via the communications device ports, wherein the firewall module further comprises: a port manager that receives messages from a requestor addressed to a server; a security monitor, operatively coupled to the port manager that monitors messages received from the requestor for conformance to supported protocol standards and adherence to a defined security policy; and a relay, operatively coupled to the security monitor, that relays messages from the requestor to the server based on a server address incorporated in each message and responsive to the security monitor while using an address of the communication controller and relays messages from the server which are addressed to the communication controller to the requesting entity imbedding the address of the server entity in such messages.

Claim 29

Dependent Claim 184 words

A network communication controller, comprising: a processor; a memory coupled to the processor; a communications device operatively coupled to the processor and to the memory wherein the communications device provides multiple ports that receive messages; and a firewall module operatively coupled to the processor that implements with the processor a communications protocol that controls connectionless message transfer between a requestor and a server via the communications device ports, wherein the firewall module further comprises: a port manager that receives messages from a requestor addressed to a server; a security monitor, operatively coupled to the port manager that monitors messages received from the requestor for conformance to supported protocol standards and adherence to a defined security policy; and a relay, operatively coupled to the security monitor, that relays messages from the requestor to the server based on a server address incorporated in each message and responsive to the security monitor while using an address of the communication controller and relays messages from the server which are addressed to the communication controller to the requesting entity imbedding the address of the server entity in such messages.

Claim 30

Dependent Claim 38 words

The network communication controller of claim 24 wherein the communication protocol is a dual stack communication protocol which places communication between the processor and the server and the processor and the requestor in first and second burbs respectively.

Annuity Stage	Window Opens	Payment Deadline	Surcharge Period Until	Estimated Fee	Status
3.5 Years (Year 4)	2002-06-21	2002-12-21	2003-06-22	$2000.00	Window Closed / Lapsed
7.5 Years (Year 8)	2006-06-21	2006-12-21	2007-06-22	$3760.00	Window Closed / Lapsed
11.5 Years (Year 12)	2010-06-21	2010-12-21	2011-06-22	$7700.00	Window Closed / Lapsed

Transparent security proxy for unreliable message exchange protocols

Abstract

Inventors

Bibliographic Details

Claims Analysis

References Cited (Backward Citations)

USPTO Annuity & Maintenance Windows

Assigned Categories & Tags

Assign Category Tag