Loading patent…
AssigneeWorldCom, Inc.
InventorsCarol Y. Devine, Gerald A. Shifrin, Richard W. Shoulberg
Estimating the term…
A double firewalled system is disclosed for protecting remote enterprise servers that provide communication services to telecommunication network customers from unauthorized third parties. A first router directs all connection requests to one or more secure web servers, which may utilize a load balancer to efficiently distribute the session connection load among a high number of authorized client users. On the network side of the web servers, a second router directs all connection requests to a dispatcher server, which routes application server calls to a proxy server for the application requested. A plurality of data security protocols are also employed. The protocols provide for an identification of the user, and an authentication of the user to ensure the user is who he/she claims to be and a determination of entitlements that the user may avail themselves of within the enterprise system. Session security is described, particularly as to the differences between a remote user's copper wire connection to a legacy system and a user's remote connection to the enterprise system over a “stateless” public Internet, where each session is a single transmission, rather than an interval of time between logon and logoff, as is customary in legacy systems.
A system for securing an enterprise communications network, comprising:
A method for securing an enterprise communications network, comprising:
Dependencies are inferred from the claim text.
Drawings are temporarily unavailable. Open the PDF at USPTO
From the US filing history. Foreign family members aren’t listed.
Backward citations are indexed for grants only.
Network architectures or network communication protocols for network security: for separating internal from external traffic, e.g. firewalls
The processing taking place on a specific hardware platform or in a specific software environment: in a distributed system consisting of a…
Error or fault reporting or storing: readable error formats, e.g. cross-platform generic formats, human understandable formats
Error or fault reporting or storing: content or structure details of the error report, e.g. specific table structure, specific error fields
Term end not estimated
1. Field of the Invention
The present invention relates in general to securing access to a computer and computer data, and more particularly to a security methodology for securing access to an enterprise network or extranet having access from the public Internet.
2. Background Art
Preferred embodiments of the present invention will now be described, by way of example only, with reference to the accompanying drawings in which:
FIG. 1 is a diagrammatic overview of the architectural framework of an enterprise Internet network system;
FIG. 2 is an illustrative example of a backplane architecture schematic as invoked from a home page of the present system;
The present invention is directed to a series of security protocols and procedures used to protect an integrated system that enables a remote user to interact with one or more enterprise applications provided by servers over the public Internet, or an enterprise Extranet. The present invention utilizes the Web paradigm and an integrated graphical user interface to allow easy and convenient access from the user's perspective, wherein the security provisions are transparent to the user, other than the entry of a customary user id and a strong password.
The discussion of the present invention will include an overview of the system in which the various security protocols function and detailed discussions of Communications Security, User Identification and Authentication, Session Security, Enterprise Security and Application security.
Communications security relates to the authenticity of the enterprise web server and the security of the transmitted data through an implementation of the Secure Sockets Layer (SSL) version of HTTPS.