US 7,480,936 B2Granted

Generic application architecture suitable for firewall traversal

AssigneeXerox Corporation

InventorsBruce C. Lyon, Xin Xu, Shuyuan Chen

Life of this patent

Estimating the term…

Loading patent…

Abstract

Communication systems and methods transfer information between a client device and a vendor device through a firewall between the client device and the vendor device by using a communications protocol that will normally allows pass through the firewall and/or by e embedding the information in a file format that will normally pass through the firewall. The information can be transmitted using the hypertext transfer protocol, and/or is embedded in an HTTP document or in an e-mail message. If the client device is on a secure side of the firewall and the vendor device needs to initiate communication with the client device, the vendor device can send an e-mail message to the client device asking the client device to initiate the communication session. Because the client device has initiated the communication, the firewall should allow the response to the client device's request to pass through from the vendor device to the client device.

A method for transferring information between a first image output device and a second device over at least one distributed network where the first image output device is on a secure side of a first firewall and the second device is on an unsecure side of the first firewall, the method comprising:

identifying and authorizing the second device to access the first image output device via a security circuit;
contacting the second device by the first image output device on a predefined, regularly scheduled basis;
sending an email message by the second device to the first image output device in response to being contacted by the first image output device;
transmitting information via a secure connection from the first image output device to the second device using a communication technique through the first firewall without violating a security policy of the first firewall, wherein the transmitting information is initiated by the email sent from the second device to the first image output device, the transmitted information including at least one of toner condition, photoreceptor status, and hardware status;
retrieving information via the secure connection by the first image output device from the second device by downloading a file through the first firewall without violating a security policy of the first firewall,
wherein the file contains information for the first image output device;
diagnosing the first image output device by the second device based on the information transmitted occurring on a predefined regularly scheduled basis, wherein the retrieving information occurs only when the first image output device has authorization;
and
accessing the first image output device on the secure side of the first firewall by the second device upon system failure of the first image output device via a connectivity circuit to perform at least one of repair, diagnosis or updating of the first image output device,
wherein the second device cannot contact the first image output device without first being contacted by the first image output device, but is able to access the first image output device in response to being contacted by the first image output device, and
wherein the first image output device is a network connected printer.

8 more elements

Abstract

Claims11