Firewall traversal driven by proximity
Disclosed is a system and method enabling a mobile device to establish a communication channel with a device residing in the corporate network and in close physical proximity, without the requirement for a direct high speed network connection between the mobile and corporate devices. The system and method allow the mobile device tot maintain its existing network connection, with no special user/network credential access. The system and method enable an improved security control over the traffic that is transferred between the devices as these are filtered and controlled through a Firewall Traversal pairing server and not directly between devices.
1. A method for traversing a firewall, said method comprising:
sending a pairing request from a mobile device to a pairing and tunneling authorization service;
sending a user authorization request from said pairing and tunneling authorization service to a corporate device;
receiving a response to said user authorization from said corporate device at said pairing and tunneling authorization service;
completing the pairing request;
detecting when said mobile device is in proximity to said corporate device; and
sending a proximity update and pairing authorization from said corporate device to said pairing and tunneling authorization service.
2. The method of claim 1 , wherein said pairing and tunneling authorization service comprises at least two firewall traversal servers.
3. The method of claim 1 , wherein said pairing and tunneling authorization service resides on a corporate perimeter network.
4. The method of claim 1 , wherein said user authorization is for a guest user.
5. The method of claim 1 , further comprising triggering the creation of a tunneling route between the mobile device and the corporate device.
6. The method of claim 5 , wherein said tunneling route comprises tunnel addresses and ports and are provided to the mobile device and the corporate device by the pairing and tunneling authorization service.
7. The method of claim 1 , further comprising, when the pairing request is completed, allowing, via the pairing and tunneling authorization service, predefined IP protocol communication between the mobile device and the corporate device.
8. The method of claim 1 , further comprising enabling dynamic security settings in the firewall.
9. A system for traversing a firewall, said system comprising:
a mobile device;
a corporate device; and
a pairing and tunneling authorization service;
wherein said mobile device is enabled to send a pairing request to said pairing and tunneling authorization service, said pairing and tunneling authorization service is enabled to request and receive authorization for said mobile device from said corporate device and complete the pairing request between said mobile device and said corporate device; and
wherein said corporate device is enabled to sense when said mobile device is in proximity to said corporate device and to send a proximity update and pairing authorization to said pairing and tunneling authorization service.
10. The system of claim 9 , wherein said pairing and tunneling authorization service comprises at least two firewall traversal servers.
11. The system of claim 9 , wherein said firewall traversal server chain resides on a corporate perimeter network.
12. The system of claim 9 , wherein said user authorization is for a guest user.
13. The system of claim 9 , wherein the firewall traversal server chain is further enabled to trigger the creation of a tunneling route between the mobile device and the corporate device.
14. The method of claim 13 , wherein said tunneling route comprises tunnel addresses and ports and are provided to the mobile device and the corporate device by the firewall traversal server chain.
15. The method of claim 9 , wherein said firewall traversal server chain is further enabled, when the pairing request is completed, to allow predefined IP protocol communication between the mobile device and the corporate device.
16. The method of claim 9 , wherein said firewall traversal server chain is further enabled to provide dynamic security settings in the firewall.