Back to results
US 8,275,878 B2Granted
Router analysis system
AssigneeVerizon Patent and Licensing Inc.
InventorLee N. Goodman
Life of this patent
Estimating the term…
Abstract
A device may receive a first message that indicates whether an application layer gateway is hosted on the router, send a second message to test whether a firewall on the router incorrectly blocks the second message from reaching a client, send a set of messages to detect a pinhole in the firewall, and generate a report that provides results of receiving the first message, sending the second message, and sending the set of messages.
Claims20
A method comprising:
- receiving, at a server device, over a network path between a client device and the server device, a first message, from the client device, that indicates whether an application layer gateway is hosted on a router, on the network path, between the client device and the server device;
- sending a second message, from the server device to the client device, to test whether a firewall on the router incorrectly blocks the second message from reaching the client device;
- receiving a reply from the client device in response to the second message when the firewall on the router allows the second message from the server device to be received at the client device, the reply indicating whether the router incorrectly blocks the second message;
- sending a set of messages from the server device to the client device to detect a pinhole in the firewall;
- receiving a pinhole detection message, from the client device in response to the set of messages, to indicate a detection of the pinhole in the firewall when the client device detects the pinhole in the firewall;
- and
- generating a report that provides results of receiving the first message that indicates whether an application layer gateway is hosted on the router, receiving the reply that indicates whether the router incorrectly blocks the second message, and receiving the pinhole detection message that indicates the detection of the pinhole.
4 more elements
A non-transitory computer-readable storage device comprising computer-executable instructions, the computer executable instructions including:
- instructions for sending a first message from an applet on a client device to a server device, over a network path from the client device to the server device, to test if an application layer gateway exists between the applet and the server device, on the network path;
- instructions for receiving by the applet an authentication challenge, from the server device, for testing whether a firewall, between the client device and the server device and on the network path, allows the authentication challenge from the server device to be received at the applet;
- instructions for sending a second message from the applet to the server device over the network path in response to receiving the authentication challenge from the server device when the firewall, between the client device and the server device and on the network path, allows the authentication challenge from the server device to be received at the applet;
- instructions for receiving by the applet a plurality of a particular type of messages, for detecting a pinhole, through the firewall from the server device;
- and
- instructions for sending a pinhole detection message from the applet to the server device to indicate a detection of the pinhole when the applet stops receiving the particular type of messages from the server device.
3 more elements
A system comprising:
- a router including an application layer gateway and a firewall;
- a client device configured to:
- send a first message to a server device over a network path from the client device to the server device through the application layer gateway to test whether the application layer gateway operates correctly, wherein the router is between the server device and the client device, on the network path,
- send an authentication reply to the server device in response to an authentication challenge from the server device over the network path when the firewall allows the authentication challenge to be received at the client device, and
- send a pinhole detection message to the server device to indicate a detection of a pinhole in the firewall in response to receiving a plurality of messages from the server device;
- and
- the server device configured to:
- receive the first message from the client device over the network path,
- determine whether the application layer gateway correctly modified addresses that are embedded in a payload of the first message in response to receiving the first message,
- send the authentication challenge to the client device through the firewall to test if the firewall incorrectly prevents the authentication challenge from being delivered to the client device,
- receive the authentication reply that indicates whether the firewall incorrectly prevented the authentication challenge from being delivered to the client device,
- send the plurality of messages to the client device through the firewall to detect the pinhole, and
- receive the pinhole detection message that indicates the detection of the pinhole in the firewall.
10 more elements
Dependencies are inferred from the claim text.