# US 7,613,195 B2 · Method and system for managing computer networks > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 7,613,195 B2 - Document ID: US7613195B2 - Status: Granted - Kind: B2 - Application number: 10/694,651 - Filed: 2003-10-27 - Published: 2005-04-28 - Granted: 2009-11-03 - Earliest claimed: 2003-10-27 - Assignees: Telefonaktiebolaget L M Ericsson (publ) - Inventors: Samuel P. Hopkins - Web page: https://patentgrep.com/patent/US7613195B2 ## CPC - H04L 41/0293: {for accessing web services by means of a binding identification of the management service or element} - H04L 63/0272: {Virtual private networks} - H04L 63/029: {Firewall traversal, e.g. tunnelling or, creating pinholes} - H04L 61/25: of the same type - H04L 2101/663: Transport layer addresses, e.g. aspects of transmission control protocol [TCP] or user datagram protocol [UDP] ports - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A telecommunication system includes a first network having a first node and a second node which can communicate with each other. The system includes a third node separate and apart from the first network. The system includes a communication portion in communication with the first network and the third node through which the third node is only able to communicate with the first node, but not with the second node through the first node. A telecommunication system using the Internet includes a first network having a first node having a first port, a second node having a second port and a primary server in communication with each other. The system includes a second network having a third node and a fourth node and a client server in communication with each other. The third node has a connection with the port of the first node via the client server and through the Internet and the primary server using gateway methodology so the second node cannot be accessed by the third node through the first node. The present invention pertains to a method for telecommunications. ## Claims ### Claim 1 A telecommunication system comprising: a first network having a primary server and a first node with a first TCP/IP port and a second node, and a second network having a client server and a third node with a second TCP/IP port which can communicate with the first TCP/IP port, the first TCP/IP port and the second TCP/IP port having been predefined by an administrator, wherein the first TCP/IP port and the second TCP/IP port remain constant and cannot be changed unless both the client server and the primary server are physically changed; a communication portion in communication with the first network and the third node and through which the third node is only able to communicate with the first TCP/IP port of the first node via TCP/IP port extension using gateway methodology, such that the second node cannot be accessed by the third node; and wherein the system is configured such that the third node cannot utilize any port between the first node and the third node except for the first and second TCP/IP ports, the third node able to communicate with the second node only if the third node is allowed to by the first node which prevents an intruder who compromises the second network from gaining access to the first network except for the first TCP/IP port. ### Claim 2 (depends on 1) A system as claimed in claim 1 wherein the communication portion includes the Internet. ### Claim 3 (depends on 2) A system as claimed in claim 2 wherein the third node forms a connection with the first node through an Internet of the communication portion. ### Claim 4 (depends on 3) A system as claimed in claim 3 wherein the second network has the third node and a fourth node which can communicate with each other but only with the first node or the second node through individual connections through the first port of the first node or the second port of the second node, respectively. ### Claim 5 (depends on 4) A system as claimed in claim 4 wherein the first network monitors and manages the second network. ### Claim 6 (depends on 1) A system as claimed in claim 1, and configured for using the Internet, comprising: the first network having the primary server in communication with the first node and the second node; and the second network having a fourth node and the client server in communication with each other and the third node, the third node having a connection with the port of the first node via the client server and through the Internet and the primary server using gateway methodology so the second node cannot be accessed by the third node through the first node. ### Claim 7 (depends on 6) A system as claimed in claim 6 wherein the client server encrypts data from the third node on the connection and the primary server decrypts data for the first node. ### Claim 8 (depends on 7) A system as claimed in claim 7 wherein the first network monitors and manages the second network. ### Claim 9 A method for telecommunications comprising the steps of: communicating between a first node of a first network and a third node of a second network, the first node having a first TCP/IP port and the third node having a second TCP/IP port, the first TCP/IP port and the second TCP/IP port having been predefined by an administrator, wherein the first TCP/IP port and the second TCP/IP port will remain constant and cannot be changed unless both a client server of the second network and a primary server of the first network are physically changed; and communicating between the first network and the third node of the second network, separate and apart from the first network, through a communication portion through which the third node is only able to communicate with the first TCP/IP port of the first node via TCP/IP port extension using gateway methodology, such that a second node of the first network cannot be accessed by the third node through the first node; wherein the third node cannot utilize any port between the first node and the third node except for the first and second TCP/IP ports, the third node able to communicate with the second node only if the third node is allowed to by the first node which prevents an intruder who compromises the second network from gaining access to the first network except for the first TCP/IP port. ### Claim 10 (depends on 9) A method as claimed in claim 9 wherein the third node communicating step includes the step of communicating between the third node and only with a first port of the first node through the communication portion. ### Claim 11 (depends on 10) A method as claimed in claim 10 wherein the third node communicating step includes the step of communicating between the third node and the first node through an Internet of the communication portion. ### Claim 12 (depends on 11) A method as claimed in claim 11 including the steps of communicating between the third node of the second network and a fourth node of the second network; and communicating between the first network and the third and fourth nodes of the second network only through individual connections through the first port of the first node or the second port of the second node, respectively. ### Claim 13 (depends on 12) A method as claimed in claim 12 including the step of monitoring and managing the second network by the first network.