Server-initiated secure sessions
AssigneeJumpCloud, Inc.
InventorsRajat Bhargava, Christopher Marie, James Brown
Life of this patent
Estimating the term…
Abstract
Methods, systems, and devices for server-initiated secure sessions are described. A browser application may connect to a portal, where the portal may transmit a command to a server agent to initiate a secure session with an endpoint device. The server agent may be housed in a destination server, and may establish a secure connection with an intermediary server using a secure communication protocol. The secure connection may be made by directing the destination server to open an out-bound connection through a firewall of the destination server. A browser session may be redirected to the intermediary server from the browser application, and the intermediary server may route the browser session traffic to the secure connection.
Claims20
A method for secure network communications, comprising:
- establishing, based on an indication that a device has selected a destination device for a secure session associated with a first communication protocol, a connection, using a second communication protocol, with an intermediary device that is external to a firewall of the destination device, wherein an inbound port of the firewall of the destination device associated with the first communication protocol remains closed during establishment of the connection;
- and
- establishing, via the connection with the intermediary device and an outbound port of the firewall of the destination device associated with the first communication protocol, a communication path from the destination device to the device, wherein the inbound port of the firewall of the destination device remains closed during subsequent communications with the device that use the communication path.
A method for secure network communications at an intermediary device, comprising:
- establishing a first connection with a destination device using a first communication protocol associated with secure sessions and a second connection with a device using a second communication protocol, wherein establishing the first connection comprises receiving signaling from an outbound port of a firewall of the destination device associated with the first communication protocol while an inbound port of the firewall of the destination device associated with the first communication protocol remains closed;
- and
- routing communications between the device and the destination device based on establishing the first connection and the second connection, wherein the inbound port of the firewall of the destination device remains closed while the communications are routed between the device and the destination device.
An apparatus, comprising:
- one or more processors;
- and
- one or more memories storing instructions executable by the one or more processors, individually or collectively, to cause an agent installed at the apparatus to:
- establish, based on an indication that a device has selected a destination device for a secure session associated with a first communication protocol, a connection, using a second communication protocol, with an intermediary device that is external to a firewall of the destination device, wherein an inbound port of the firewall of the destination device associated with the first communication protocol remains closed during establishment of the connection;
- and
- establish, via the connection with the intermediary device and an outbound port of the firewall of the destination device associated with the first communication protocol, a communication path from the destination device to the device, wherein the inbound port of the firewall of the destination device remains closed during subsequent communications with the device that use the communication path.
Dependencies are inferred from the claim text.