초록 ▼

Methods, signals, devices, and systems are provided for secure access to a network from an external client. Requests for access to confidential data may be redirected from a target server to a border server, after which a secure sockets layer connection between the border server and the external cli

Methods, signals, devices, and systems are provided for secure access to a network from an external client. Requests for access to confidential data may be redirected from a target server to a border server, after which a secure sockets layer connection between the border server and the external client carries user authentication information. After the user is authenticated to the network, requests may be redirected back to the original target server. Web pages sent from the target server to the external client are scanned for non-secure URLs such as those containing "http://" and modified to make them secure. The target server and the border server utilize various combinations of secure and non-secure caches. Although tunneling may be used, the extensive configuration management burdens imposed by virtual private networks are not required.

대표청구항 ▼

[ What is claimed and desired to be secured by patent is:] [1.] A distributed computing system allowing secure external access to a secure network, the system comprising:a target server within the secure network;a border server within the secure network, the border server connectable to the target s

[ What is claimed and desired to be secured by patent is:] [1.] A distributed computing system allowing secure external access to a secure network, the system comprising:a target server within the secure network;a border server within the secure network, the border server connectable to the target server by a first communications link;a client outside the secure network, the client connectable to the border server by a second communications link, the client and the border server configured to support secure sockets layer communication over the second communications link;a user authentication system located at least partially within the secure network, the secure network configured to allow direct access to the target server by a user only after the user is authenticated by the user authentication system; anda uniform resource locator transformer which modifies non-secure uniform resource locators in data being sent from the target server to the client by replacing them with corresponding secure uniform resource locators to promote continued use of secure sockets layer communication.