IP Library Granted Patent US 8,244,875
Granted Patent B2
US 8,244,875 · App. 11/369,131 · Granted Aug 14, 2012

Secure network computing

Assignee: ANXeBusiness Corporation
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,244,875
App. No.
11/369,131
Granted
Aug 14, 2012
Kind
B2
Abstract

In one embodiment, a network element comprises one or more input/output ports, one or more processors, and a memory module communicatively coupled to the processor. The memory module comprises logic instructions which, when executed by the processor, configure the processor to receive a service request from a client computing device, wherein the service request identifies one or more resources available via a computing network, establish a first communication link between the network element and the one or more resources available via a computing network identified in the service request, establish a first, secure communication link between the network element and the client computing device, connect a network interface module on the client computing device to the secure communication link, and manage communication activity between the client computing device and the one or more resources available via a computing network at the network element.

Claims (55)

1. A method comprising:

receiving, at a point of presence (POP) server, a service request from a client computing device operating a plurality of applications, wherein the service request identifies one or more resources available via a computing network;

establishing a first communication link between the POP server and the one or more resources available via a computing network identified in the service request;

establishing a second, secure communication link between the POP server and the client computing device, wherein the second, secure communication link comprises a secure communication tunnel, wherein the plurality of applications at the client computing device are not aware of the secure communication tunnel, and wherein establishing the second, secure communication link between the POP server and the client computing device comprises:

sending an ActiveX control from the POP server to the client computing device;

launching the ActiveX control in the client computing device;

launching, by the ActiveX control, a network interface module; and

connecting, by the ActiveX control, the secure communication tunnel to the network interface module; and

managing communication activity between the client computing device and the one or more resources available via the computing network at the POP server.

2. The method of claim 1 , wherein the first communication link between the POP server and the one or more resources comprises an unencrypted communication link.

3. The method of claim 1 , wherein the first communication link between the POP server and the one or more resources is secured using a first encryption protocol and the second, secure communication link is encrypted using a second encryption protocol.

4. The method of claim 1 , wherein the secure communication tunnel communicates via a predetermined communication port on the client computing device.

5. The method of claim 1 , wherein the secure communication tunnel communicates via a dynamically selected communication port on the client computing device.

6. The method of claim 1 , wherein establishing the second, secure communication link between the POP server and the client computing device comprises initiating a request to a URL rewriter server.

7. The method of claim 1 , wherein establishing the second, secure communication link between the POP server and the client computing device comprises invoking a virtual private network (VPN) driver installed on the client computing device.

8. The method of claim 1 , further comprising inserting advertising content into the second, secure communication link between the POP server and the client computing device.

9. The method of claim 1 , further comprising:

monitoring communication content on the second, secure communication link; and

inserting advertising that correlates with the communication content into the second, secure communication link between the POP server and the client computing device.

10. The method of claim 1 , wherein managing communication activity between the client computing device and the one or more resources available via the computing network at the POP server comprises maintaining a communication interface to manage communications between the first communication link and the second, secure communication link.

11. The method of claim 1 , further comprising:

initiating a second service request from the client computing device, wherein the second service request identifies one or more second resources available via the computing network;

establishing a third, communication link between the POP server and the one or more second resources available via the computing network identified in the second service request;

establishing a fourth, secure communication link between the POP server and the client computing device;

connecting the network interface module on the client computing device to the fourth, secure communication link; and

managing communication activity between the client computing device and the one or more second resources available via the computing network at the POP server.

12. The method of claim 1 , wherein establishing the second, secure communication link between the POP server and the client computing device comprises configuring a Domain Name Server (DNS) system of the client computing device to change an IP address of the POP server to point to a local host.

13. The method of claim 1 , wherein one of the plurality of applications is an instant messaging application.

14. A network element, comprising:

one or more input/output ports;

one or more processors;

a memory module communicatively coupled to the one or more processors and comprising logic instructions which, when executed by the one or more processors, configure the one or more processors to:

receive a service request from a client computing device operating a plurality of applications, wherein the service request identifies one or more resources available via a computing network;

establish a first communication link between the network element and the one or more resources available via the computing network identified in the service request;

establish a second, secure communication link between the network element and the client computing device, wherein the second, secure communication link comprises a secure communication tunnel, wherein the plurality of applications at the client computing device are not aware of the secure communication tunnel, and wherein establishing the second, secure communication link between the POP server and the client computing device comprises:

sending an ActiveX control from the network element to the client computing device; and

generating a message that causes the ActiveX control to be launched in the client computing device, wherein the ActiveX control launches a network interface module in the client computing device and connects the secure communication tunnel to the network interface module; and

manage communication activity between the client computing device and the one or more resources available via the computing network at the network element.

15. The network element of claim 14 , wherein the memory module further comprises logic instructions which, when executed, cause the one or more processors to maintain a communication interface to manage communications between the first communication link and the second, secure communication link.

16. The network element of claim 14 , wherein the memory module further comprises logic instructions which, when executed, cause the one or more processors to insert advertising content into the second, secure communication link between the network element and the client computing device.

17. The network element of claim 14 , wherein the memory module further comprises logic instructions which, when executed, cause the one or more processors to:

monitor communication content on the second, secure communication link; and

insert advertising that correlates with the communication content into the second, secure communication link between the network element and the client computing device.

18. The network element of claim 14 , wherein the memory module further comprises logic instructions which, when executed, cause the one or more processors to:

receive a second service request from the client computing device, wherein the second service request identifies one or more second resources available via the computing network;

establish a third communication link between the network element and the one or more second resources available via the computing network identified in the second service request;

establish a fourth, secure communication link between the network element and the client computing device;

connect the network interface module on the client computing device to the fourth, secure communication link; and

manage communication activity between the client computing device and the one or more second resources available via the computing network at the network element.

19. A method comprising:

receiving, at a point of presence (POP) server, a request from a client computing device operating a plurality of applications, wherein the request identifies at least one resource available via a computing network;

establishing a first communication link between the POP server and the at least one resource; and

establishing a second, secure communication link between the POP server and the client computing device, wherein the second, secure communication link comprises a secure communication tunnel, wherein the plurality of applications at the client computing device are not aware of the secure communication tunnel, and wherein establishing the second, secure communication link between the POP server and the client computing device comprises:

sending an ActiveX control from the POP server to the client computing device; and

launching an ActiveX control in the client computing device, the ActiveX control launching a network interface module and attaching the secure communication tunnel to the network interface module.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 13, 2009
From: POSITIVE NETWORKS, INC.
To: ANXEBUSINESS CORP.
Reel/Frame 022254/0889 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 7, 2008
From: DISPENSA, STEVE
To: POSITIVE NETWORKS
Reel/Frame 021357/0038 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 6, 2006
From: DISPENSA, STEVE
To: POSITIVE NETWORKS
Reel/Frame 017613/0380 →
Continuity (3)
Continuation In Part 10737200 · Dec 15, 2003
Provisional Application 60433059 · Dec 13, 2002
Related Publication 20060168149A1 · Jul 27, 2006