Secure communication port redirector
View Patent ↗A method and system that allows a host system application to securely communicate with a legacy device is provided. A redirector software module receives data that is destined for a host system serial COM port. Data is secured and re-directed to a legacy device via a network port instead of the serial COM port. Conversely, data destined for the host system is provided to a device server via a server COM port by the legacy serial device. The data can be encrypted and sent to the host system via the network. The redirector software module decrypts the encrypted data and presents it to the consumer application as if the data had arrived via the local COM port.
1. A method for transmitting data over a network that is operationally coupled to a legacy device and a local host system, comprising:
transmitting application data from an application on the host system destined for a first serial port on the host system;
waiting for a data packet send event corresponding to the application data;
intercepting the application data on the host system;
signaling, by a redirector, the data packet send event indicating the application data is available for transmission;
upon detecting the data packet send event signal corresponding to the data packet send event, transmitting the application data over a network interface toward the legacy device via a Socket Application Programming Interface (SAPI);
receiving device data originating from the legacy device via the SAPI;
upon determining the device data from the legacy device is encrypted, decrypting the data; and
transmitting the decrypted data to the application in the host system.
2. The method of claim 1 , wherein the received device data is based on TCP format.
3. The method of claim 1 , wherein the received device data is based on UDP format.
4. A system for transmitting data over a network that is operationally coupled to a legacy device and a local host system, comprising:
a processor capable of executing the steps of;
generating a data transmission for a first communication port, the data transmission including application data from at least on application on the local host system;
intercepting the application data and upon determining the application data is to be encrypted, encrypting the application data;
redirecting the application data from the first communication port to a network port;
securing the application data via a secure protocol with a device other than the legacy device;
transmitting the application data toward the legacy device via the secure protocol;
causing an I/O manager mapped to the application to wait for a signal that a data packet is available, the data packet including device data originating from the legacy device;
performing a back channel write with the device data as the signal to the I/O manger mapped to the application when said data packet is available; and
sending the device data to the application via the I/O manager mapped to the application.
5. The method of claim 1 , wherein the step of waiting for the data packet send event includes opening a process thread on the host system to wait for the data packet send event.
6. The method of claim 1 , wherein the step of decrypting the device data includes decrypting the device data according to a secure protocol.
7. The method of claim 6 , wherein the secure protocol utilizes at least one of the following: an advanced encryption standard, a secured socket layer, and a secure shell.
8. The system of claim 4 , wherein the secure protocol utilizes at least one of the following: an advanced encryption standard, a secured socket layer, and a secure shell.
9. The system of claim 4 , wherein the processor is further capable of causing the I/O manager to wait by launching a delayed procedure call.
10. The system of claim 9 , wherein the processor is further capable waking the delayed procedure call after a defined amount of time.
11. The system of claim 4 , further comprising a device server configured to couple with the legacy device and support the secure protocol.
12. The system of claim 11 , wherein the device other than the legacy device is the device server.