Reverse access method for securing front-end applications and others
AssigneeNetNut Ltd.
InventorAmir Mizhar
Life of this patent
Estimating the term…
Abstract
A System that provides a secured connection between servers on the LAN and clients on the WAN comprises the LAN (which includes LAN Server and LAN Controller) and the DMZ (which includes DMZ Server and DMZ Stack Pool Service). Wherein the Client Request reaches the DMZ Server it stores it in the DMZ Stack Pool Service and the LAN Controller establishes outbound TCP based connection to the DMZ Stack Pool Service that passes the Client Connection Information to the LAN Server via the LAN Controller. Then the LAN Server then generates a connection between the Service and DMZ Server.
Claims24
A system for reverse access, said system comprising:
- a De-Militarized Zone (DMZ) Stack Pool Service located in a De-Militarized Zone, the DMZ Stack Pool Service being arranged to store requests received from a client, wherein said requests are stored at the TCP/IP level;
- a local area network (LAN) Controller configured to check for existence in said DMZ Stack Pool Service of said requests, wherein said checking is performed at the TCP/IP level and said LAN Controller is located in a LAN;
- and
- a DMZ server configured to receive said requests from a LAN server of said LAN, and to route said requests to said client, wherein receiving and routing by said DMZ server occurs at the TCP/IP level;
- wherein said DMZ Stack Pool Service, said LAN Controller, and said DMZ server do not change the data of said requests and the system requires no administrative management after initial installation and configuration.
A method for reverse access, said method comprising:
- storing requests received from a client, wherein said requests are stored in a De-Militarized zone (DMZ) Stack Pool Service at the TCP/IP level, wherein said DMZ Stack Pool Service is located in a De-Militarized Zone;
- checking at the TCP/IP level, said DMZ Stack Pool Service for existence of said requests, wherein said checking is performed by a local area network (LAN) Controller located in a LAN;
- and
- receiving said requests from a LAN server of said LAN and routing said requests to said client;
- wherein said storing and routing occurs at the TCP/IP level and said storing and routing does not change data of said requests;
- and
- wherein said method requires no administrative management of the LAN server after initial installation and configuration.
A system for reverse access, the system comprising:
- a De-Militarized Zone (DMZ) Stack Pool Service executing on a device in a DMZ, the DMZ Stack Pool Service being configured to store a request received from a client, wherein the request is stored at a TCP/IP level using a TCP/IP protocol;
- a network Controller located in a network, the network Controller being configured to check for existence of the request in the DMZ Stack Pool Service, wherein the checking is performed at the TCP/IP level;
- and
- a DMZ server configured to provide data responsive to the request to the client, wherein the providing by the DMZ server occurs at the TCP/IP level using the TCP/IP protocol;
- wherein the DMZ server does not change the data of the request and the
- system requires no administrative management after initial installation and configuration to perform the storing, checking, and providing.
A method for reverse access, the method comprising:
- storing a request received from a client in a De-Militarized Zone (DMZ) Stack Pool Service, in a DMZ, at a TCP/IP level using a TCP/IP protocol;
- checking, at the TCP/IP level, the DMZ Stack Pool Service for existence of the request, wherein the checking is performed by a network Controller located in a network;
- establishing an outbound connection from a network server of the network and routing data responsive to the request to the client;
- and
- wherein the storing and routing occurs at the TCP/IP level using the TCP/IP protocol and a DMZ server does not change data of the request;
- and
- wherein the method requires no administrative management of a server of the network after initial installation and configuration to perform the storing, checking, and providing.
Dependencies are inferred from the claim text.