로그인시 본인확인과정이 필요할 수 있습니다.
다음과 같은 기능을 한번의 로그인으로 사용 할 수 있습니다.
NTIS 바로가기
다음과 같은 기능을 한번의 로그인으로 사용 할 수 있습니다.
DataON 바로가기
다음과 같은 기능을 한번의 로그인으로 사용 할 수 있습니다.
Edison 바로가기
다음과 같은 기능을 한번의 로그인으로 사용 할 수 있습니다.
Kafe 바로가기
| 국가/구분 | United States(US) Patent 등록 |
|---|---|
| 국제특허분류(IPC7판) |
|
| 출원번호 | US-0161093 (2005-07-22) |
| 등록번호 | US-8291119 (2012-10-16) |
| 발명자 / 주소 |
|
| 출원인 / 주소 |
|
| 대리인 / 주소 |
|
| 인용정보 | 피인용 횟수 : 11 인용 특허 : 445 |
A method for securing remote access to private networks includes a receiver intercepting from a data link layer a packet in a first plurality of packets destined for a first system on a private network. A filter intercepts from the data link layer a packet in a second plurality of packets transmitte
A method for securing remote access to private networks includes a receiver intercepting from a data link layer a packet in a first plurality of packets destined for a first system on a private network. A filter intercepts from the data link layer a packet in a second plurality of packets transmitted from a second system on the private network, destined for an system on a second network. A transmitter in communication with the receiver and the filter performing a network address translation on at least one intercepted packet and transmitting the at least one intercepted packet to a destination.
1. A method of routing packets, the method comprising: (a) intercepting, at a data link layer by a filter executing in a kernel space of a client operating in a first network, an outbound network packet transmitted from an application of the client to a server, the server operating in a second netwo
1. A method of routing packets, the method comprising: (a) intercepting, at a data link layer by a filter executing in a kernel space of a client operating in a first network, an outbound network packet transmitted from an application of the client to a server, the server operating in a second network, the filter terminating a first transport layer connection with the application;(b) transmitting , by the filter, the outbound network packet to a port monitored by a client application at an application layer executing in a user space of the client, the client application terminating a second transport layer connection with a gateway and communicating with the gateway via a secure application layer tunnel over the second transport layer connection;(c) receiving, by the gateway, the outbound network packet via the secure application layer tunnel over the second transport layer connection from the client application;(d) forwarding, by the gateway via a third transport layer connection with the server, the outbound network packet to the server; and(e) intercepting at a data link layer by a capture driver executing in the gateway, a second network packet transmitted from the server to the client. 2. The method of claim 1, wherein step (c) further comprises receiving, by a gateway application executing in an application space of the gateway, the outbound network packet via the secure application layer tunnel over the transport layer connection. 3. The method of claim 1, wherein step (c) further comprises performing, by a gateway application executing in an application space of the gateway, network address translation (NAT) on the outbound network packet. 4. The method of claim 3, wherein step (c) further comprises establishing, by the gateway application, a private address of the destination in the second network as the destination address of the outbound network packet. 5. The method of claim 3, wherein step (c) further comprises establishing, by the gateway application, a private address of the client in the second network as the source address of the outbound network packet. 6. The method of claim 1, wherein step (d) further comprises forwarding the outbound network packet over a second secure tunnel over a second transport layer connection to the server. 7. The method of claim 1, wherein step (b) further comprises transmitting , by the filter, the outbound network packet to a port responsive to a filter table. 8. The method of claim 7, further comprising identifying, by the gateway, the public address of the client in the first network based on a private address of the client in the second network. 9. The method of claim 7, further comprising forwarding, by the gateway, the second network packet via the secure application layer tunnel to the client application. 10. The method of claim 1, wherein the client application and the gateway establish the second transport layer connection, and the gateway and server establish the third transport layer connection, the client and the server communicating packets via the first, second and third transport layer connections. 11. The method of claim 1, further comprising applying, by a frame monitor of the client, a policy to the outbound network packet. 12. The method of claim 1, further comprising applying, by a frame monitor of the client, an access control list to the outbound network packet. 13. The method of claim 1, further comprising associating, by an addressing element of the client, a private IP address with the public address of the server. 14. A system of routing packets, the system comprising a filter executing in a kernel space of a client device operating in a first network, the filter intercepting at a data link layer an outbound network packet transmitted from an application of the client device to a server operating in a second network, and transmitting the outbound network packet to a port monitored by a client application at an application layer executing in a user space of the client device, the filter terminating a first transport layer connection with the application; anda gateway comprising; a processor, receiving the outbound network packet from the client application via a secure application layer tunnel over a second transport layer connection terminated by the client application, and forwarding the outbound network packet to the server via a third transport layer connection with the server, anda capture driver intercepting at a data link layer a second network packet transmitted from the server to the client device. 15. The system of claim 14, wherein a gateway application executing in an application space of the gateway further receives the outbound network packet via the secure application layer tunnel over the transport layer connection. 16. The system of claim 15, wherein the gateway application further performs a network address translation (NAT) on the outbound network packet. 17. The system of claim 15, wherein the gateway application further establishes a private address of the server in the second network as the destination address of the outbound network packet. 18. The system of claim 15, wherein the gateway application further establishes a private address of the client device in the second network as the source address of the outbound network packet. 19. The system of claim 14, wherein the gateway further forwards the outbound network packet over a second secure tunnel over a second transport layer connection to the server. 20. The system of claim 14, wherein the filter transmits the outbound network packet to the port responsive to a filter table. 21. The system of claim 20, wherein the gateway application further identifies the public address of the client device in the first network based on a private address of the client device in the second network. 22. The system of claim 21, wherein the gateway further forwards the second network packet via the secure application layer tunnel to the client application. 23. The system of claim 14, wherein the client application and the gateway establish the second transport layer connection, and the gateway and server establish the third transport layer connection, the client device and the server communicating packets via the first, second and third transport layer connections.
해당 특허가 속한 카테고리에서 활용도가 높은 상위 5개 콘텐츠를 보여줍니다.
더보기 버튼을 클릭하시면 더 많은 관련자료를 살펴볼 수 있습니다.
Copyright KISTI. All Rights Reserved.
※ AI-Helper는 부적절한 답변을 할 수 있습니다.