IP Library Granted Patent US 7,418,486
Granted Patent B2
US 7,418,486 · App. 10/456,068 · Granted Aug 26, 2008

Automatic discovery and configuration of external network devices

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 7,418,486
App. No.
10/456,068
Granted
Aug 26, 2008
Kind
B2
Abstract

An improved system and method for discovering and configuring secure network topologies responds to existing networking environments and encompasses the dynamic detection and configuration of an appropriate hardware or software solution. In an embodiment of the invention, a broadcast mechanism is used to provide hardware device discovery while application programming interfaces provide discovery of software firewalls. In a further embodiment, a polling technique is used to ensure that the configuration of a gateway device does not change, endangering the protected network.

Claims (40)

1. A method of securing a local computer network with respect to a wide area computer network, the method comprising:

employing a connection wizard to dynamically select between configuring a software or hardware firewall solution to secure the local computer network;

automatically configuring the selected solution in a seamless manner;

dynamically detecting whether a usable hardware gateway device is installed between the local computer network and the wide area computer network;

prompting a user to indicate if the installed usable hardware should be employed;

if it is determined that a usable hardware gateway device should be employed, communicating with the hardware gateway device over the local network to retrieve description information regarding the device, presenting configuration options based on the retrieved information to a user via the connection wizard, receiving a user selection to configure the device, and automatically configuring the device in accordance with the user selection;

if it is determined that a useable hardware gateway device should not be employed, dynamically detecting whether a usable software firewall is installed between the local computer network and the wide area computer network, and if a usable software firewall is installed, gathering description information regarding the firewall, presenting configuration options based on the gathered information to the user via the connection wizard, receiving a user selection to configure the firewall, and automatically configuring the firewall in accordance with the user selection;

periodically assessing a configuration of one or more known devices to detect a change in configuration that endangers the security of the local computer network; and

reconfiguring the one or more known devices to a user selected configuration if the change is detected.

2. The method according to claim 1 , wherein detecting whether a usable hardware gateway device is installed between the local computer network and the wide area computer network further comprises:

automatically transmitting a multicast discovery transmission via the local network; and

receiving a response to the multicast discovery transmission from the gateway device, wherein the response comprises a URL (uniform resource locator) for use in contacting the gateway device over the local network.

3. The method according to claim 2 , wherein communicating with the hardware gateway device over the local network to retrieve description information regarding the device further comprises:

automatically transmitting a device description request via the local network to the gateway device; and in response to the device description request transmission, receiving from the gateway device a listing of services supported by the gateway device.

4. The method according to claim 1 , wherein the listing of services supported by the gateway device further comprises a listing of sub-devices supported by the gateway device.

5. The method according to claim 2 , wherein detecting whether a usable hardware gateway device is installed between the local computer network and the wide area computer network further comprises receiving a user indication of usability of a hardware gateway device.

6. The method according to claim 3 , wherein the listing of services supported by the gateway device further comprises a respective locator associated with each service, whereby the respective URL associated with a service is usable to configure that service.

7. The method according to claim 2 , wherein automatically transmitting a multicast discovery transmission via the local network comprises;

waiting for a predetermined period to expire; and

upon expiration of the predetermined period, transmitting the multicast discovery transmission via the local network.

8. The method according to claim 3 , wherein the listing of services supported by the gateway device comprises a listing corresponding to the Dynamic Host Configuration Protocol.

9. The method according to claim 1 , wherein detecting whether a usable software firewall is installed between the local computer network and the wide area computer network further comprises receiving a user indication of usability of a software firewall.

10. The method according to claim 1 , wherein gathering description information regarding the firewall further comprises calling an API and receiving the description information in response to calling the API.

11. The method according to claim 1 , wherein automatically configuring the firewall in accordance with the user selection further comprises calling an API, wherein the call to the API comprises configuration information.

12. A computer-readable medium having stored thereon computer-readable instructions for performing the method according to claim 1 .

13. A computer-readable medium having stored thereon computer-readable instructions for performing the method according to claim 6 .

14. A computer-readable medium having stored thereon computer-readable instructions for performing the method according to claim 7 .

15. The method according to claim 1 , wherein receiving a response to the multicast discovery transmission comprises receiving a plurality of responses from a plurality of devices including the gateway device.

16. The method according to claim 15 , wherein automatically transmitting a device description request via the local network to the gateway device further comprises:

presenting a listing of the plurality of devices to a user of the host computer; and

receiving from the user of the host computer a selection of the gateway device.

17. A computer executable system for automatically discovering and configuring network security facilities comprising the following computer executable components stored on one or more computer readable media:

a first component to multicast a search message via one or more network adapters of a host computer;

a second component that responds to the search message hence indicating presence of a hardware gateway device;

the first component automatically discovers software firewall capabilities within a gateway server if no useable hardware gateway devices are detected to secure a network;

a third component that dynamically selects between the software firewall capabilities or the hardware gateway device by employing a connection wizard, the third component automatically configures the selected solution in a seamless manner; and

a fourth component that periodically assesses a configuration of one or more known devices to detect a change in configuration that endangers the security of the local computer network, the fourth component reconfigures the one or more known devices to a user selected configuration if the change is detected.

18. The system of claim 17 , the second component responds by transmitting a URL (uniform resource locator) that is employed in obtaining device description information.

19. The system of claim 18 , wherein upon selection by a user, the first component locates a configuration service supported by the selected hardware gateway device as well as a URL associated with the configuration service from a list transmitted by the gateway device so that the hardware gateway device can be automatically configured.

20. The system of claim 17 , the first component presents a list of the software firewall capabilities discovered on the server for selection to a user wherein upon user selection, the first component configures the selected software firewall by employing known APIs (application programming interfaces).

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 9, 2014
From: MICROSOFT CORPORATION
To: MICROSOFT TECHNOLOGY LICENSING, LLC
Reel/Frame 034541/0477 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 6, 2003
From: BRUBACHER, DOUGLAS KEITH; GOK, HUSEYIN GOKMEN
To: MICROSOFT CORPORATION
Reel/Frame 014159/0414 →