Patent US6134591A successfully refreshed from Google Patents.
US6134591A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Network security and integration method and system
Assignee: SECURITECH LLC
•
Filing: 1997-06-18
•
Granted: 2000-10-17
•
Expires: 2017-06-18
Abstract
Abstract A method of the present invention includes a network security system that has a single point of access control to a source computer system. The network security system provides various mechanisms for securing access to a source computer systems that includes generating single-use encryption keys, generating random port assignments for communication between devices, an asynchronous message protocol used in the security system and utilizing various levels of transaction tables to help secure and manage security parameters of the system. More particularly, the present invention provides a method for securing access to a plurality of computers connected via a network. An indication is received that a first user of a first computer program module desires to communicate with a destination computer system. When this indication is received, a message is directed to a security computer system. The security computer system determines whether the first user is authorized to access the destination computer program module of the destination computer system. If the security computer system determines that the first user is authorized to access the destination computer system, the security computer system sets up a communication protocol between the first computer program module and the second computer program module.
Inventors
- 👤 Alfred E. Nickles
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 06:03
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L63/0442; H04L63/06; H04L63/067; H04L9/00; H04L9/40
Claims Analysis
Total Claims: 23
Claim 1
Independent Claim
115 words
A method for providing a first computer with secure access to a destination computer, comprising the steps of: receiving a first message from the first computer at a gateway requesting a function to be executed by the destination computer; directing the first message from the gateway to a security server; determining whether the requested function is permitted; if the requested function is permitted, transmitting a second message from the security server to the destination computer authorizing execution of the function; initiating execution of the function at the destination computer; and while the function executes, asynchronously transmitting a third message from the destination computer to the security server confirming initiation of the execution of the function.
Claim 2
Independent Claim
115 words
A method for providing a first computer with secure access to a destination computer, comprising the steps of: receiving a first message from the first computer at a gateway requesting a function to be executed by the destination computer; directing the first message from the gateway to a security server; determining whether the requested function is permitted; if the requested function is permitted, transmitting a second message from the security server to the destination computer authorizing execution of the function; initiating execution of the function at the destination computer; and while the function executes, asynchronously transmitting a third message from the destination computer to the security server confirming initiation of the execution of the function.
Claim 3
Dependent Claim
25 words
The method of claim 1 further comprising the step of: transmitting a fourth message from the security server to the gateway while the function executes.
Claim 4
Dependent Claim
116 words
The method of claim 2 further comprising the steps of: randomly selecting a communications port from a plurality of unused communications ports available at the gateway; including a value representing the selected communications port in the second message transmitted from the security server to the destination computer; including the value representing the selected communications port in the fourth message transmitted from the security server to the gateway; preparing the gateway to receive communications from the destination computer on the selected communications port; and after the function has finished executing, transmitting a fifth message from the destination computer to the selected communications port of the gateway, the fifth message including a response associated with the executed function.
Claim 5
Dependent Claim
57 words
The method of claim 2 further comprising the steps of: allotting a predetermined function execution time; including a value representing the predetermined function execution time in the second message transmitted from the security server to the destination computer; and terminating execution of the function if the time to execute the function exceeds the predetermined function execution time.
Claim 6
Dependent Claim
27 words
The method of claim 4 further comprising the step of logging the termination of the execution of the function in a log maintained at the security server.
Claim 7
Dependent Claim
31 words
The method of claim 4 further comprising the step of including the value representing the predetermined function execution time in the fourth message transmitted from the security server to the gateway.
Claim 8
Dependent Claim
88 words
The method of claim 2 further comprising the steps of: dynamically creating a single-use encryption key; transmitting the single-use encryption key in the second message transmitted from the security server to the destination computer; transmitting the single-use encryption key in the fourth message transmitted from the security server to the gateway; encrypting a fifth message with the single-use encryption key at the destination computer, the fifth message including a response associated with the executed function; and decrypting the fifth message at the gateway using the single-use encryption key.
Claim 9
Dependent Claim
120 words
The method of claim 1, wherein the step of determining whether the requested function is permitted comprises one or more of the steps selected from the group including: accessing a first table to determine whether the user has input identification information contained in the first table; accessing a second table to determine whether the user is authorized access to an indicated program module of the destination computer; accessing a third table to determine whether the user has access privileges for the requested function; accessing a fourth table to obtain a physical address associated with the destination computer; and determining whether the requested function has been requested during a time when the destination computer is available for performing the requested function.
Claim 10
Dependent Claim
71 words
The method of claim 1, wherein the first message is encrypted and contains a digital signature to authenticate the first message was received from an authorized first computer, further comprising the steps of: decrypting the first message; receiving the digital signature in the first message; and authenticating the first message by calculating a digital signature associated with the first message and comparing the calculated digital signature to the received digital signature.
Claim 11
Dependent Claim
20 words
The method of claim 1, wherein the step of executing the function comprises executing an object or completing a transaction.
Claim 12
Dependent Claim
10 words
An apparatus configured to perform the method of claim 1.
Claim 13
Dependent Claim
21 words
A computer storage medium, or a group of computer storage media, comprising computer-executable instructions for performing the method of claim 1.
Claim 14
Independent Claim
162 words
A method for providing a first computer with secure access to a destination computer, comprising the steps of: receiving a first message from the first computer at a gateway requesting a function to be executed by the destination computer; directing the first message from the gateway to a security server; determining whether the requested function is permitted; if the requested function is permitted, transmitting a second message from the security server to the destination computer authorizing execution of the function; initiating execution of the function at the destination computer; allotting a predetermined function execution time; including a value representing the predetermined function execution time in the second message transmitted from the security server to the destination computer; terminating execution of the function if the time to execute the function exceeds the predetermined function with execution of time while the function executes, asynchronously transmitting a third message from the destination computer to the security server confirming initiation of the execution of the function.
Claim 15
Independent Claim
162 words
A method for providing a first computer with secure access to a destination computer, comprising the steps of: receiving a first message from the first computer at a gateway requesting a function to be executed by the destination computer; directing the first message from the gateway to a security server; determining whether the requested function is permitted; if the requested function is permitted, transmitting a second message from the security server to the destination computer authorizing execution of the function; initiating execution of the function at the destination computer; allotting a predetermined function execution time; including a value representing the predetermined function execution time in the second message transmitted from the security server to the destination computer; terminating execution of the function if the time to execute the function exceeds the predetermined function with execution of time while the function executes, asynchronously transmitting a third message from the destination computer to the security server confirming initiation of the execution of the function.
Claim 16
Dependent Claim
137 words
The method of claim 13 further comprising the steps of: while the function executes, asynchronously transmitting a fourth message from the security server to the gateway; dynamically creating a single-use encryption key; transmitting the single-use encryption key in the second message transmitted from the security server to the destination computer; transmitting the single-use encryption key in the fourth message transmitted from the security server to the gateway; encrypting a fifth message with the single-use encryption key at the destination computer, the fifth message including a response associated with the executed function; after the function has finished executing, transmitting the fifth message from the destination computer to the selected communications port of the gateway, the fifth message including a response associated with the executed function; and decrypting the fifth message at the gateway using the single-use encryption key.
Claim 17
Dependent Claim
120 words
The method of claim 14, wherein the step of determining whether the requested function is permitted comprises one or more of the steps selected from the group including: accessing a first table to determine whether the user has input identification information contained in the first table; accessing a second table to determine whether the user is authorized access to an indicated program module of the destination computer; accessing a third table to determine whether the user has access privileges for the requested function; accessing a fourth table to obtain a physical address associated with the destination computer; and determining whether the requested function has been requested during a time when the destination computer is available for performing the requested function.
Claim 18
Dependent Claim
10 words
An apparatus configured to perform the method of claim 14.
Claim 19
Dependent Claim
21 words
A computer storage medium, or a group of computer storage media, comprising computer-executable instructions for performing the method of claim 14.
Claim 20
Independent Claim
223 words
A method for providing a first computer with secure access to a destination computer, comprising the steps of: receiving a first message from the first computer at a gateway requesting a function to be executed by the destination computer; directing the first message from the gateway to a security server; determining whether the requested function is permitted; if the requested function is permitted: dynamically creating a single-use encryption key, transmitting a second message from the security server to the destination computer authorizing execution of the function, and including the single-use encryption key in the second message; initiating execution of the function at the destination computer; while the function executes: asynchronously transmitting a third message from the destination computer to the security server confirming initiation of the execution of the function, asynchronously transmitting a fourth message from the security server to the gateway, and including the single-use encryption key in the fourth message; and after the function has finished executing: encrypting a fifth message with the single-use encryption key at the destination computer, the fifth message including a response associated with the executed function, transmitting the fifth message from the destination computer to the selected communications port of the gateway, the fifth message including a response associated with the executed function, and decrypting the fifth message at the gateway using the single-use encryption key.
Claim 21
Independent Claim
223 words
A method for providing a first computer with secure access to a destination computer, comprising the steps of: receiving a first message from the first computer at a gateway requesting a function to be executed by the destination computer; directing the first message from the gateway to a security server; determining whether the requested function is permitted; if the requested function is permitted: dynamically creating a single-use encryption key, transmitting a second message from the security server to the destination computer authorizing execution of the function, and including the single-use encryption key in the second message; initiating execution of the function at the destination computer; while the function executes: asynchronously transmitting a third message from the destination computer to the security server confirming initiation of the execution of the function, asynchronously transmitting a fourth message from the security server to the gateway, and including the single-use encryption key in the fourth message; and after the function has finished executing: encrypting a fifth message with the single-use encryption key at the destination computer, the fifth message including a response associated with the executed function, transmitting the fifth message from the destination computer to the selected communications port of the gateway, the fifth message including a response associated with the executed function, and decrypting the fifth message at the gateway using the single-use encryption key.
Claim 22
Dependent Claim
10 words
An apparatus configured to perform the method of claim 18.
Claim 23
Dependent Claim
21 words
A computer storage medium, or a group of computer storage media, comprising computer-executable instructions for performing the method of claim 18.
References Cited (Backward Citations)
US4672572A
Cited
US5649185A
Cited
US5812819A
Cited
US5721779A
Cited
US5870473A
Cited
US5867647A
Cited
US5838916A
Cited
US5850442A
Cited
US6026379A
Cited
US5727145A
Cited
US5828833A
Cited
US5805801A
Cited
US5978918A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-10-17 | 2004-04-17 | 2004-10-17 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-10-17 | 2008-04-17 | 2008-10-17 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-10-17 | 2012-04-17 | 2012-10-17 | $7700.00 | Window Closed / Lapsed |