US 10,110,606 B2Granted

Reverse access method for securing front-end applications and others

AssigneeSafe-T Data A.R Ltd.

InventorAmir Mizhar

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system and method for providing a secured connection between servers on a local area network (LAN) and clients on a wide area network (WAN) via a de-militarized zone (DMZ). The system includes a Service, a LAN Server, a LAN Controller, a DMZ Server and a DMZ Stack Pool Service. The method includes establishing an outbound TCP-based connection to the DMZ Stack Pool Service based on a request; passing Client Connection Information to the LAN Server; generating a first connection to the Service and a second connection to the DMZ Server, wherein the LAN server creates a Connection Binder between the Service and the outbound connections; creating a Connection Binder that binds the incoming Request and the outbound connection to complete the route of the Request; streaming the Request through the DMZ Server and the LAN Server; and streaming the request data from the Service to the Client.

Claims3

Dependent claims

A method for providing a secured connection between servers on a local area network (LAN) and clients on a wide area network (WAN) via a de-militarized zone (DMZ), wherein the LAN includes a Service, a LAN Server, and a LAN Controller and the DMZ includes a DMZ Server and a DMZ Stack Pool Service, the method comprising:

storing a client request reaching the DMZ Server in the DMZ Stack Pool Service;
establishing, by the LAN Controller, an outbound TCP based connection to the DMZ Stack Pool Service;
passing Client Connection Information by the DMZ Stack Pool Service to the LAN Server via the LAN Controller;
generating, by the LAN Server, two TCP/IP connections, a first TCP/IP connection being to the Service and a second TCP/IP being an outbound connection to the DMZ Server, and wherein the LAN server creates a Connection Binder in the LAN Server between the Service and the outbound connections;
creating, by the DMZ Server, a Connection Binder in the DMZ Server that binds the incoming Client Request and the outbound connection arriving from the LAN Server to complete the route of the Client Request;
streaming the Client Request through the DMZ Server and the LAN Server;
and
streaming the client request data from the Service to the Client.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/896,819Filed 14 Feb 2018 · continuation
Priority: IL 21818519 Feb 2012
Published: US 2018/0176225 A121 Jun 2018
Granted: 23 Oct 2018
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources
G06F 21/60
Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity: protecting data
H04L 63/0209
For separating internal from external traffic, e.g. firewalls: architectural arrangements, e.g. perimeter networks or demilitarized zones
H04L 63/029
For separating internal from external traffic, e.g. firewalls: firewall traversal, e.g. tunnelling or, creating pinholes

Family

PCT/IL2013/000017Parent of this continuation · filed 13 Feb 2013
US 2018/0176225 A1Pre-grant publication · published 21 Jun 2018
Application14/379,305Parent of this continuation
US 9,935,958 B2Parent of this continuation
US 2015/0020161 A1Published application
US 10,110,606 B2This patent

From the US filing history. Foreign family members aren’t listed.