-
公开(公告)号:US07114083B2
公开(公告)日:2006-09-26
申请号:US10409375
申请日:2003-04-08
CPC分类号: H04L63/02 , G06F11/0709 , G06F11/0757 , G06F11/0769 , G06F11/0775 , G06F11/0781 , G06F11/0784 , G06F11/202 , G06F11/32 , G06F11/324 , G06F11/327 , G06F11/328 , G06F11/3495 , G06F17/30893 , G06F21/00 , G06F21/41 , G06F21/552 , G06F2201/81 , G06F2201/86 , G06F2201/875 , G06F2221/2137 , G06F2221/2149 , G06Q10/10 , G06Q10/107 , G06Q20/102 , G06Q20/382 , G06Q30/02 , G06Q30/06 , G06Q30/0601 , G06Q30/0609 , G06Q30/0635 , G06Q99/00 , H04L12/14 , H04L12/1428 , H04L29/06027 , H04L41/0213 , H04L41/0233 , H04L41/024 , H04L41/0253 , H04L41/06 , H04L41/0681 , H04L41/08 , H04L41/0803 , H04L41/0879 , H04L41/142 , H04L41/18 , H04L41/22 , H04L41/28 , H04L41/5009 , H04L41/5022 , H04L41/5029 , H04L41/5032 , H04L41/5035 , H04L41/5061 , H04L41/5064 , H04L41/5067 , H04L41/5074 , H04L41/5083 , H04L41/5096 , H04L43/00 , H04L43/024 , H04L43/045 , H04L43/06 , H04L43/062 , H04L43/065 , H04L43/067 , H04L43/0805 , H04L43/0811 , H04L43/0817 , H04L43/0829 , H04L43/0847 , H04L43/0852 , H04L43/0876 , H04L43/0888 , H04L43/0894 , H04L43/10 , H04L43/106 , H04L43/16 , H04L51/00 , H04L63/0209 , H04L63/0218 , H04L63/0236 , H04L63/0272 , H04L63/0281 , H04L63/0428 , H04L63/0442 , H04L63/0464 , H04L63/08 , H04L63/0807 , H04L63/0815 , H04L63/0823 , H04L63/083 , H04L63/162 , H04L63/166 , H04L63/168 , H04L63/18 , H04L65/4007 , H04L65/80 , H04M3/5175 , H04M3/5191 , H04M15/00 , H04M15/41 , H04M15/43 , H04M15/44 , H04M15/49 , H04M15/51 , H04M15/58 , H04M15/705 , H04M15/721 , H04M15/745 , H04M15/80 , H04M15/8044 , H04M15/83 , H04M15/8351 , H04M15/84 , H04M2215/0104 , H04M2215/0108 , H04M2215/0152 , H04M2215/0164 , H04M2215/0168 , H04M2215/0176 , H04M2215/018 , H04M2215/0188 , H04M2215/42 , H04M2215/46 , H04M2215/54 , H04M2215/7009 , H04M2215/7045 , H04M2215/745 , H04M2215/81 , H04M2215/8108 , H04M2215/8129 , H04M2215/82 , Y10S379/90 , Y10S707/99931 , Y10S707/99937 , Y10S707/99938 , Y10S707/99939 , Y10S707/99944 , Y10S715/969
摘要: A double firewalled system is disclosed for protecting remote enterprise servers that provide communication services to telecommunication network customers from unauthorized third parties. A first router directs all connection requests to one or more secure web servers, which may utilize a load balancer to efficiently distribute the session connection load among a high number of authorized client users. On the network side of the web servers, a second router directs all connection requests to a dispatcher server, which routes application server calls to a proxy server for the application requested. A plurality of data security protocols are also employed. The protocols provide for an identification of the user, and an authentication of the user to ensure the user is who he/she claims to be and a determination of entitlements that the user may avail themselves of within the enterprise system. Session security is described, particularly as to the differences between a remote user's copper wire connection to a legacy system and a user's remote connection to the enterprise system over a “stateless” public Internet, where each session is a single transmission, rather than an interval of time between logon and logoff, as is customary in legacy systems.