# US 2021/0344645 A1 · Multi-channel based just-in-time firewall control > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0344645 A1 - Document ID: US20210344645A1 - Status: Published application - Kind: A1 - Application number: 16/863,206 - Filed: 2020-04-30 - Published: 2021-11-04 - Earliest claimed: 2020-04-30 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: Pramod Vadayadiyil Raveendran; Seema Nagar; Sougata Mukherjea; Kuntal Dey - Web page: https://patentgrep.com/patent/US20210344645A1 ## CPC - H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL} - H04L 63/0263: {Rule management} - H04L 63/0281: {Proxies} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 2463/121: Timestamp - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method for controlling the transfer of data through a firewall. The method includes one or more computer processors establishing a first communication channel between a first server and a second server. The method further includes transmitting, via the first communication channel, information related to a pending transmission of data from the first server to the second server. The method further includes receiving from the second server, via the first communication channel, a set of security information associated with accessing the second server via a second communication channel. The method further includes establishing the second communication channel between the first server and the second server based on the set of security information received from the second server. The method further includes transmitting the data from the first server to the second server utilizing the established second communication channel. ## Claims ### Claim 1 A method comprising: establishing, by one or more computer processors, a first communication channel between a first server and a second server; transmitting, by one or more computer processors, via the first communication channel, information related to a pending transmission of data from the first server to the second server; responsive to transmitting the information related to the pending transmission of the data from the first server to the second server, receiving, by one or more computer processors, from the second server via the first communication channel, a set of security information associated with accessing the second server via a second communication channel; establishing, by one or more computer processors, the second communication channel between the first server and the second server based on the set of security information received from the second server; and transmitting, by one or more computer processors, the data from the first server to the second server utilizing the established second communication channel. ### Claim 2 (depends on 1) The method of claim 1, wherein the first communication channel is a hyperlocal ad hoc network within a computing center. ### Claim 3 (depends on 1) The method of claim 1, wherein the information related to the pending transmission of the data from the first server includes an estimated size of data to communicate to the second server, an Internet protocol (IP) address and corresponding port ID that transmits the data from the first server via the second communication channel, and a timestamp. ### Claim 4 (depends on 1) The method of claim 1, wherein the set of security information received from the second server includes an IP address and corresponding port ID of a firewall port corresponding to the second server, an identifier token, a timestamp corresponding to a time when the firewall port of the second server opens for communications via the second communication channel, and a maximum time duration that the firewall port is kept open. ### Claim 5 (depends on 1) The method of claim 1, wherein transmitting the data from the first server to the second server utilizing the second communication channel and the established network connection occurs at or after a timestamp dictated within the received set of security information. ### Claim 6 (depends on 4) The method of claim 4, wherein the received set of security information further includes a dictate to utilize an encryption algorithm and a corresponding encryption key to encrypt packets of the data transmitted from the first server to the second server. ### Claim 7 (depends on 1) The method of claim 1, further comprising: determining, by one or more computer processors, based on the received set of security information, to encrypt packets of the data transmitted to the second server via the second communication channel; and encrypting, by one or more computer processors, in real-time, the plurality of packets of the data to transmit based on an encryption key included within the received set of security information and a dictated encryption algorithm identified within the received set of security information. ### Claim 8 A computer program product comprising: one or more computer readable storage media and program instructions stored on the one or more computer readable storage media, the program instructions readable/executable by one or more computer processors: program instructions to establish a first communication channel between a first server and a second server; program instructions to transmit, via the first communication channel, information related to a pending transmission of data from the first server to the second server; responsive to transmitting the information related to the pending transmission of the data from the first server to the second server, program instructions to receive from the second server via the first communication channel, a set of security information associated with accessing the second server via a second communication channel; program instructions to establish, the second communication channel between the first server and the second server based on the set of security information received from the second server; and program instructions to transmit the data from the first server to the second server utilizing the established second communication channel. ### Claim 9 (depends on 8) The computer program product of claim 8, wherein the first communication channel is a hyperlocal ad hoc network within a computing center. ### Claim 10 (depends on 8) The computer program product of claim 8, wherein the information related to the pending transmission of the data from the first server includes an estimated size of data to communicate to the second server, an Internet protocol (IP) address and corresponding port ID that transmits the data from the first server via the second communication channel, and a timestamp. ### Claim 11 (depends on 8) The computer program product of claim 8, wherein the set of security information received from the second server includes an IP address and corresponding port ID of a firewall port corresponding to the second server that receives the data from the first server via the second communication channel, an identifier token, a timestamp corresponding to a time when the firewall port of the second server opens for communications via the second communication channel, and a maximum time duration that the firewall port is kept open. ### Claim 12 (depends on 8) The computer program product of claim 8, wherein transmitting the data from the first server to the second server utilizing the second communication channel and the established network connection occurs at or after a timestamp dictated within the received set of security information. ### Claim 13 (depends on 11) The computer program product of claim 11, wherein the received set of security information further includes a dictate to utilize an encryption algorithm and a corresponding encryption key to encrypt packets of the data transmitted from the first server to the second server. ### Claim 14 (depends on 8) The computer program product of claim 8, further comprising: program instructions to determine based on the received set of security information, to encrypt packets of the data transmitted to the second server via the second communication channel; and program instructions to encrypt, in real-time, the plurality of packets of the data to transmit based on an encryption key included within the received set of security information and a dictated encryption algorithm identified within the received set of security information. ### Claim 15 A computer system comprising: one or more computer processors; one or more computer readable storage media; and program instructions stored on the computer readable storage media for execution by at least one of the one or more computer processors, the program instructions comprising: program instructions to program instructions to establish a first communication channel between a first server and a second server; program instructions to transmit, via the first communication channel, information related to a pending transmission of data from the first server to the second server; responsive to transmitting the information related to the pending transmission of the data from the first server to the second server, program instructions to receive from the second server via the first communication channel, a set of security information associated with accessing the second server via a second communication channel; program instructions to establish, the second communication channel between the first server and the second server based on the set of security information received from the second server; and program instructions to transmit the data from the first server to the second server utilizing the established second communication channel. ### Claim 16 (depends on 15) The computer system of claim 15, wherein the first communication channel is a hyperlocal ad hoc network within a computing center. ### Claim 17 (depends on 15) The computer system of claim 15, wherein the information related to the pending transmission of the data from the first server includes an estimated size of data to communicate to the second server, an Internet protocol (IP) address and corresponding port ID that transmits the data from the first server via the second communication channel, and a timestamp. ### Claim 18 (depends on 15) The computer system of claim 15, wherein the set of security information received from the second server includes an IP address and corresponding port ID of a firewall port corresponding to the second server that receives the data from the first server via the second communication channel, an identifier token, a timestamp corresponding to a time when the firewall port of the second server opens for communications via the second communication channel, and a maximum time duration that the firewall port is kept open. ### Claim 19 (depends on 15) The computer system of claim 15, wherein transmitting the data from the first server to the second server utilizing the second communication channel and the established network connection occurs at or after a timestamp dictated within the received set of security information, and wherein the received set of security information further includes a dictate to utilize an encryption algorithm and a corresponding encryption key to encrypt packets of the data transmitted from the first server to the second server. ### Claim 20 (depends on 15) The computer system of claim 15, further comprising: program instructions to determine based on the received set of security information, to encrypt packets of the data transmitted to the second server via the second communication channel; and program instructions to encrypt, in real-time, the plurality of packets of the data to transmit based on an encryption key included within the received set of security information and a dictated encryption algorithm identified within the received set of security information.