Method, system and software for maintaining network access and security

A method for providing network security between a trusted network and an untrusted network, comprising:

• establishing at least one communication session between the trusted network and a demilitarized (DMZ) network, the at least one communication session operating on a protocol P operable to facilitate communication transactions between the DMZ network and the trusted network, wherein a perimeter client is provided within the trusted network and a perimeter server is operated within a demilitarized zone network;
• receiving a request to initiate a communication connection between a trusted network component and the untrusted network component through the at least one communication session between the trusted network and the DMZ network;
• converting the request for communication connection initiation to a protocol P format;
• communicating the request to initiate a communication connection to the perimeter server associated with the DMZ network, the perimeter server operable to connect the trusted network component and the untrusted network component via the at least one communication session and to receive communication from the untrusted network component, wrap the untrusted network component communications in protocol P and communicate the untrusted network component communication via protocol P to the trusted network;
• receiving a request to make a trusted network component available for communication with the untrusted network;
• converting the request to make the trusted network component available to protocol P;
• communicating the request to make the trusted network component available to the perimeter server using protocol P and the established communication session, the perimeter server operable to present one or more passive sockets for communication to the untrusted network, await communication on the one or more passive sockets from one or more untrusted network components, upon receipt of a communication from an untrusted network component convert the untrusted network component communication to protocol P and communicate the untrusted network component communication to the trusted network using protocol P via the perimeter server and the perimeter client;
• unwrapping untrusted network component communications from protocol P;
• and
• directing the untrusted network component communication to its trusted network destination, the trusted network destination operable to perform necessary cryptograhic operations on the untrusted network component communication.

A system for maintaining secure communications between a trusted network and an untrusted network, comprising:

• memory;
• at least one processor operably coupled to the memory;
• at least one communications interface operably associated with the memory and the processor;
• a perimeter client operable within the trusted network;
• a perimeter server operable within a demilitarized zone network;
• wherein at least one communication session is established between the trusted network and a demilitarized (DMZ) network, the at least one communication session operating on a protocol P operable to facilitate communication transactions between the DMZ network and the trusted network, wherein a perimeter client is provided within the trusted network and a perimeter server is operated within a demilitarized zone network;
• a request is received to initiate a communication connection between a trusted network component and the untrusted network component through the at least one communication session between the trusted network and the DMZ network;
• the request for communication connection initiation is converted to a protocol P format;
• the request to initiate a communication connection is communicated to the perimeter server associated with the DMZ network, wherein the perimeter server is operable to connect the trusted network component and the untrusted network component via the at least one communication session and to receive communication from the untrusted network component, wrap the untrusted network component communications in protocol P and communicate the untrusted network component communication via protocol P to the trusted network;
• a request to make a trusted network component available for communication with the untrusted network is received;
• the request to make the trusted network component available is converted to protocol P;
• the request to make the trusted network component available is communicated to the perimeter server using protocol P and the established communication session, the perimeter server operable to present one or more passive sockets for communication to the untrusted network, await communication on the one or more passive sockets from one or more untrusted network components, upon receipt of a communication from an untrusted network component convert the untrusted network component communication to protocol P and communicate the untrusted network component communication to the trusted network using protocol P via the perimeter server and the perimeter client;
• the untrusted network component communications is unwrapped from protocol P;
• and
• the untrusted network component communication is directed to its trusted network destination, the trusted network destination operable to perform necessary cryptographic operations on the untrusted network component communication.