Back to results
US 8,572,720 B1Granted
System, method, and device for communicating and storing and delivering data
OwnerWayne Odom, Karolyn Geeinventors
Life of this patent
Estimating the term…
Abstract
A system, method, and device optionally includes a server that is isolated from open networks which assigns secure random socket connections, e.g., communication ports that have randomly selected addresses that are hidden from accessing devices. Optionally, the secure random socket connections are dynamically assigned, i.e., the secure random socket connections are closed and opened with each command to access data secured by the server.
Claims20
A system comprising:
- a platform having a platform processor;
- a connection server in communication with said platform having a connection server processor configured to execute program instructions to conduct the steps of:
- receiving a connection request from said platform;
- authenticating said platform;
- opening a connection server port identified by a connection server port address;
- reconnecting to said authenticated platform via said connection server port at said connection server port address;
- dynamically configuring a first firewall interposed between said authenticated platform and said connection server, said first firewall configured to drop all connection requests directed to said connection server port address without replying to said connection requests directed to said connection server port address and drop all commands directed to said connection server port address from sources other than said authenticated platform without replying to said commands directed to said connection server port address from sources other than said authenticated platform;
- and
- receiving commands from said authenticated platform via said connection server port through said firewall;
- a data server comprising:
- a data server processor;
- a data server communication device controlled by said data server processor and configured for selective communication with said connection server via ports assigned by said data server processor;
- and
- a data server data storage readable by said data server processor, wherein said data server data storage is adapted to store, in non-volatile storage, secured data and program instructions executable by said data server processor to conduct the steps of:
- generating and transmitting to said connection server a polling signal via a polling port;
- monitoring said polling port for a reply to said polling signal from said connection server, wherein said reply is generated by said connection server as a result of at least one of said commands from said authenticated platform;
- only in response to receiving a reply to said polling signal, opening a secure random socket connection for use by said data server communication device, said secure random socket connection having a secure random socket connection address randomly selected by said data server processor and hidden from said connection server at least until after said secure random socket connection has been opened by said data server processor;
- establishing a connection to said connection server via said data server communication device using said secure random socket connection opened by said data server processor;
- permitting access to said secured data stored on said data server data storage by said connection server via said secure random socket connection, wherein said connection server is configured to pass said secured data to said platform in response to at least one of said commands;
- and
- closing said secure random socket connection after access by said connection server to said secured data has occurred.
18 more elements
A method for permitting or restricting access to secured data stored on system comprising a platform having a platform processor, a connection server in communication with said platform having a connection server processor, and a data server having a data server processor, a data server communication device controlled by said data server processor and configured for selective communication with a connection server via ports assigned by said data server processor, and a data server data storage readable by said data server processor, wherein said data server data storage is adapted to store, in non-volatile storage, secured data and program instructions executable by said data server processor to conduct a method comprising:
- receiving a connection request at said connection server from said platform;
- authenticating said platform by said connection server;
- opening a connection server port identified by a connection server port address by said connection server;
- reconnecting said connection server to said authenticated platform via said connection server port at said connection server port address;
- dynamically configuring a first firewall interposed between said authenticated platform and said connection server, said first firewall configured to drop all connection requests directed to said connection server port address without replying to said connection requests directed to said connection server port address and drop all commands directed to said connection server port address from sources other than said authenticated platform without replying to said commands directed to said connection server port address from sources other than said authenticated platform;
- receiving commands at said connection server from said authenticated platform via said connection server port through said firewall;
- generating a polling signal by said data server;
- transmitting said polling signal from said data server to said connection server via a polling port;
- monitoring by said data server of said polling port for a reply to said polling signal from said connection server;
- only in response to receiving a reply to said polling signal by said data server, opening a secure random socket connection by said data server for use by said data server communication device, said secure random socket connection having a secure random socket connection address randomly selected by said data server processor and hidden from said connection server at least until after said secure random socket connection has been opened by said data server processor;
- establishing a connection by said data server to said connection server via said data server communication device using said secure random socket connection opened by said data server processor;
- permitting said connection server to access said secured data stored on said data server data storage via said secure random socket connection;
- and
- closing said secure random socket connection by said data server after access by said connection server to said secured data has occurred.
11 more elements
A system comprising:
- a platform having a platform processor;
- a connection server in communication with said platform having a connection server processor configured to execute program instructions to conduct the steps of:
- receiving a connection request from said platform;
- authenticating said platform;
- opening a connection server port identified by a connection server port address;
- reconnecting to said authenticated platform via said connection server port at said connection server port address;
- and
- communicating between said connection server and said authenticated platform via said connection server port;
- a data server comprising:
- a data server processor;
- a data server communication device controlled by said data server processor and configured for selective communication with said connection server via ports assigned by said data server processor;
- and
- a data server data storage readable by said data server processor, wherein said data server data storage is adapted to store, in non-volatile storage, program instructions executable by said data server processor to conduct the steps of:
- generating and transmitting to said connection server a polling signal via a polling port;
- monitoring said polling port for a reply to said polling signal from said connection server, wherein said reply is generated by said connection server as a result of said communication with said authenticated platform;
- only in response to receiving a reply to said polling signal, opening a secure random socket connection for use by said data server communication device, said secure random socket connection having a secure random socket connection address randomly selected by said data server processor and hidden from said connection server at least until after said secure random socket connection has been opened by said data server processor;
- establishing a connection to said connection server via said data server communication device using said secure random socket connection opened by said data server processor;
- communicating between said data server and said connection server via said secure random socket connection;
- and
- closing said secure random socket connection after communication with said connection server has occurred.
17 more elements
Dependencies are inferred from the claim text.