GLOBAL STATE SYNCHRONIZATION FOR SECURELY MANAGED ASYMMETRIC NETWORK COMMUNICATION

摘要

The present invention provides a system and method is disclosed for the development and maintenance of a globally distributed state session table wherein a plurality of client connections from one network are stored in a plurality of computer systems to track the aforementioned connection to one or more secondary networks. Client connection requests may originate anywhere on the Internet and server responses to such client requests may be sent asymmetrically from any other point on the Internet. The client-server connection is secured utilizing an intermediary device that acts as a transparent relay, generating a secret cookie hash for the client, such that only the data packets containing such hash are forwarded by the globally distributed system to the server.

主权项

1. A method for global state synchronization in a communications session over a network utilizing transmission control protocol (TCP), the method implemented on a processor and comprising the steps of:
receiving a first SYN packet from source address A1 to destination address A2, wherein source address A1 refers to a client and destination address A2 refers to a server providing resources desired by the client; sending a first SYN/ACK packet to the client; receiving a first ACK packet from the client; storing the first ACK packet; sending a second SYN packet to the server, wherein a source address of the second SYN packet is source address A1; receiving a second SYN/ACK packet from the server; sharing state session information with a remote network apparatus; and sending the stored first ACK packet to the server.