Loading patent…
AssigneeCitrix Systems, Inc.
InventorsAndrew Gerard Borzycki, Nicholas Alexander Bissett, Donovan Ross Hackett, Michael John Wookey, Richard Jason Croft, Jeffrey Dale Muir
Estimating the term…
The present solution reduces the attack surface of a server by selectively opening a server port for listening when a client has been authenticated/authorized via another machine or process, and directed to connect to the server in question. When not selectively listening on a port, the server does not listen or open ports for connections or otherwise minimizes the number of open ports. By selectively listening for connections, the server reduces the opportunity for hackers to attack the server process, and improves the security of the server. The ability to selectively listen on a port at specific times may be combined with additional meta information—like ticketing and prior authentication information to help further secure the server. The meta information may identify and ensure that only the correct remote endpoint is allowed to connect via the port. Instead of first listening for connections and then authenticate and authorize the received connection as with typical servers, the present solution first authenticates/authorizes a connection via another machine or process, then listens for an expected and authorized connection.
A method for improving security by selectively listening on a port for a connection request in response to a signal identifying an expected authorized connection request, the method comprising the steps of:
A system for improving security by selectively listening on a port for a connection request in response to a signal identifying an expected authorized connection request, the system comprising:
A method for improving security by selectively listening on a port for a connection request in response to a signal identifying an expected authorized connection request, the method comprising:
Dependencies are inferred from the claim text.