Secure connection for a remote device through a virtual relay device

Patent metadata

Field	Value
Publication number	US-2016344547-A9
Application number	US-201213664502-A
Country	US
Kind code	A9
Filing date	Oct 31, 2012
Priority date	Oct 4, 2010
Publication date	Nov 24, 2016
Grant date	—

Abstract

Virtual machines in a network may be isolated by encrypting transmissions between the virtual machines with keys possessed only by an intended recipient. Within a network, the virtual machines may be logically organized into a number of community-of-interest (COI) groups. Each COI may use an encryption key to secure communications within the COI, such that only other virtual machines in the COI may decrypt the message. Remote devices may gain access to virtual machines in a network through a virtual device relay. The virtual device relay receives data from the remote device, such as a tablet or cellular phone, and forwards the data to one of the virtual machines, when the virtual device relay shares a COI with the destination virtual machine.

First claim

What is claimed is:

1 . A system, comprising:
a router coupled to a shared network; a remote device in communication with the router; and a virtual device relay in communication with the router and the shared network.

2 . The system of claim 1 , further comprising a server, in which the server hosts, in a virtualized environment, the router and the virtual device relay.

3 . The system of claim 1 , further comprising an appliance in communication with the virtual device relay.

4 . The system of claim 3 , further comprising a broker coupled with the remote device, in which the broker authenticates the remote device for communicating with the virtual device relay through the router.

5 . The system of claim 4 , in which the virtual device relay is a member of a first community-of-interest and the appliance is a member of the first community-of-interest.

6 . The system of claim 5 , further comprising a second virtual device relay, in which the second virtual device relay is a member of a second community-of-interest.

7 . The system of claim 1 , in which the virtual device relay is configured to receive data from the remote device and transmit the data to the shared network.

8 . An apparatus, comprising
a server configured to execute virtualized appliances, in which the virtualized appliances comprise:
a virtual device relay; and
a router in communication with the virtual device relay.

9 . The apparatus of claim 8 , in which the router is configured to relay data received from a remote device to the virtual device relay.

10 . The apparatus of claim 9 , in which the router is configured to relay data to the virtual device relay over a clear-text network.

11 . The apparatus of claim 9 , in which the server is configured to execute the virtual device relay in a first Linux host.

12 . The apparatus of claim 11 , in which the server is further configured to execute a service in a second Linux host, in which the virtual device relay relays data received from the remote device to the service, in which the service is a web site.

13 . The apparatus of claim 12 , in which the virtual device relay relays data to the service over a shared network.

14 . The apparatus of claim 13 , in which the first Linux host and the second Linux host are members of a common community-of-interest.

15 . The apparatus of claim 11 , in which the server is further configured to execute a second virtual device relay in a second Linux host.

16 . A method, comprising:
receiving an incoming connection from a remote device; starting a virtual machine host on a shared network, the virtual machine host executing a virtual device relay; receiving data from the remote device; and relaying the data from the virtual device relay to a device on the shared network.

17 . The method of claim 16 , in which the step of receiving the incoming connection comprises receiving authorization information.

18 . The method of claim 17 , further comprising assigning a community-of-interest to the virtual device relay based, in part, on the authorization information.

19 . The method of claim 18 , in which the step of relaying the data to the device comprises relaying the data to a virtual host, in which the virtual host hosts a web site.

20 . The method of claim 16 , in which the step of receiving the incoming connection comprises receiving the incoming connection through a router.

Assignees

• Unisys Corp

Inventors

• Farina Ralph
• Hinaman Ted
• Johnson Robert A
• Rajcan Steven
• Trocki James
• Vallevand Mark

Classifications

• H04L9/0861 Primary

  Generation of secret information including derivation or calculation of cryptographic keys or passwords · CPC title

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title

• H04L63/0272 Primary

  Virtual private networks · CPC title