Secure Network Connection
Implementations described and claimed herein provide a secure network connection for remote access, e.g., to building automation systems. A secure network connection may be established according to one implementation between a remote client and a system host for the building automation system. The system host provides its network address to a security host. When the remote client desires access to the system host, the remote client requests the network address from the security host. The security host authenticates the remote client as an authorized user. If the remote client is an authorized user, the security host provides the network address and a security key to the remote client. The remote client then uses the network address to request access to the system host. The system host authenticates the remote client by requesting the security host to verify the security key before granting the remote client access to the system host.
1 . A method comprising:
receiving at a security host a request from a remote client to access a system host, the request including security credentials;
providing a network address for the system host to the remote client if the security credentials for the remote client satisfy at least one condition for accessing the system host;
following an attempt by the remote client to directly access the system host, receiving at the security host a request from the system host to verify that the remote client is authorized to access the system; and,
transmitting from the security host to the system host a verification, whereby the system host grants the remote client direct access to the system host.
2 . The method of claim 1 , further comprising:
transmitting from the security host to the remote client a security key with the network address if the security credentials for the remote client satisfy the at least one condition for accessing the system host; and
following an attempt by the remote client to directly access the system host, the attempt including a transmission of the security key, evaluating the security key when it is received by the security host from the system host to verify that the remote client is authorized to access the system host.
3 . The method of claim 1 , further comprising requiring the remote client present the system host with a valid security key to verify that the remote client is authorized to access the system host.
4 . The method of claim 1 , further comprising requiring the remote client timely present the system host with a security key to verify that the remote client is authorized to access the system host.
5 . The method of claim 1 , further comprising receiving at the security host the network address from the system host.
6 . A computer program product encoding a computer program for executing on a computer system a computer process, the computer process comprising:
receiving at a security host a request from a remote client to access a system host, the request including security credentials;
providing a network address for the system host to the remote client if the security credentials for the remote client satisfy at least one condition for accessing the system host;
following an attempt by the remote client to directly access the system host, receiving at the security host a request from the system host to verify that the remote client is authorized to access the system; and,
transmitting from the security host to the system host a verification, whereby the system host grants the remote client direct access to the system host.
7 . The computer program product of claim 6 wherein the computer process further comprises:
transmitting from the security host to the remote client a security key with the network address if the security credentials for the remote client satisfy the at least one condition for accessing the system host; and
following an attempt by the remote client to directly access the system host, the attempt including a transmission of the security key, evaluating the security key when it is received by the security host from the system host to verify that the remote client is authorized to access the system host.
8 . The computer program product of claim 6 wherein the computer process further comprises requiring the remote client present the system host with a valid security key to verify that the remote client is authorized to access the system host.
9 . The computer program product of claim 6 wherein the computer process further comprises requiring the remote client timely present the system host with a security key to verify that the remote client is authorized to access the system host.
10 . The computer program product of claim 6 wherein the computer process further comprises at the security host-receiving the network address from the system host.
11 . A security host comprising:
an authorization module receiving a request from a remote client to access a system host, the authorization module providing the remote client with a network address of the system host if the remote client is authorized to access the system host;
a verification module receiving a request from the system host to verify that the remote client is authorized to access the system host before granting the remote client access to the system host.
12 . The security host of claim 11 further comprising a security key to be provided to the remote client if the remote client is authorized to access the system host.
13 . The security host of claim 11 further comprising a security key to be provided to the remote client for presentation to the system host to verify that the remote client is authorized to access the system host.
14 . The security host of claim 11 further comprising a security key to be provided to the remote client for timely presentation to the system host to verify that the remote client is authorized to access the system host.
15 . The security host of claim 11 further comprising an address database having the network address of the system host.
16 . The security host of claim 11 further comprising a configuration module for accessing a building automation system via the system host if the remote client is granted access to the system host.
17 . The security host of claim 16 wherein the configuration module is provided at the remote client.
18 . The security host of claim 16 wherein the configuration module is provided at a security host.
19 . The security host of claim 16 wherein the configuration module is provided for the remote client via a security host.
20 . The security host of claim 16 wherein the configuration module is provided by the security host for the remote client as a web application.