SECURE COMMUNICATIONS WITH INTERNET-ENABLED DEVICES

摘要

A network device allows inbound connections from external addresses to a computer on a local network while forbidding output connections from the computer to that external address unless preceded by an inbound connection therefrom. In some embodiments, the computer is allowed to accept inbound connections from external addresses but is not permitted to initiate outbound connections to other computers in the local network unless preceded by an inbound connection. In some embodiments, a request from an external address is processed by the network device by transmitting network information for the computer to the external address and temporarily changes network rules to allow connections from the external address. In some embodiments, if the computer attempts a disallowed connection, the connection attempt is routed through a proxy server by providing network data for the proxy server to the computer.

主权项

1. A system comprising:
a first computer and a second computer coupled to an external network; wherein the first computer is programmed to—
receive a request forwarded from the second computer to provide one or more third network identifiers needed to establish a data exchange between the second computer and a third computer, the third computer being in the external network, the second computer having no record of the one or more third network identifiers;evaluate whether the second computer is authorized to initiate direct inbound connections to the third computer;if the second computer is authorized to initiate direct inbound connections to the third computer, provide to the second computer the one or more third network identifiers;if the second computer is not authorized to initiate direct inbound connections to the third computer, provide to the second computer, one or more fourth network identifiers corresponding to a fourth computer that is programmed to forward traffic between the second and third computers without transmitting the one or more third network identifiers to the second computer.