Method and system for dynamic application layer gateways

Patent metadata

Field	Value
Publication number	US-9871763-B2
Application number	US-201514681499-A
Country	US
Kind code	B2
Filing date	Apr 8, 2015
Priority date	Oct 13, 1999
Publication date	Jan 16, 2018
Grant date	Jan 16, 2018

Abstract

A method and system are disclosed for providing functionality on a network. A mobile agent moves from a first node to a target node and, at the target node, performs as an application layer gateway.

First claim

What is claimed is:

1. At least one non-transitory machine-accessible medium storing instructions that when executed by at least one machine results in performance of operations comprising:
executing, at least in part, at least one mobile agent in at least one execution environment of at least one network node, the at least one mobile agent being capable of being of at least one class and at least one subclass, the at least one subclass being of the at least one class, the at least one class and the at least one subclass being to provide the at least one mobile agent with node resource usage permission capabilities, the at least one mobile agent being capable of accessing resources of the at least one network node in accordance with the node resource usage permission capabilities, the at least one mobile agent being capable of moving, at least in part, from the at least one network node to at least one other network node for execution, at least in part, in at least one other execution environment of the at least one other network node, the at least one mobile agent being capable of accessing other resources of the at least one other network node in accordance with the node resource usage permission capabilities;
wherein:
the at least one mobile agent comprises at least one agent application layer gateway;
the at least one mobile agent is to perform at least two of the following subparagraphs:
receive, at least in part, network traffic addressed to a client;
filter and/or modify the network traffic; and
forward, at least in part, filtered and/or modified network traffic to the client.

2. The at least one machine-accessible medium of claim 1 , wherein:
the at least one mobile agent provides functionality that to be distributed, at least in part, at multiple network nodes.

3. The at least one machine-accessible medium of claim 1 , wherein:
the at least one execution environment and the at least one other execution environment comprise proactive environments.

4. The at least one machine-accessible medium of claim 1 , wherein:
the at least one class is to provide, at least in part, certain functionality of the at least one mobile agent; and
the at least one subclass is to provide, at least in part, additional functionality of the at least one mobile agent, the additional functionality being in addition to the certain functionality.

5. The at least one machine-accessible medium of claim 1 , wherein:
the at least one class is to provide, at least in part, certain node resource access restrictions of the at least one mobile agent; and
the at least one subclass is to provide, at least in part, additional node resource access restrictions of the at least one mobile agent, the additional node resource access restrictions being in addition to the certain node resource access restrictions.

6. The at least one machine-accessible medium of claim 1 , wherein:
the at least one mobile agent is to provide, at least in part, web cache functionality.

7. The at least one machine-accessible medium of claim 1 , wherein:
the at least one mobile agent is to provide, at least in part, media transcoding functionality.

8. The at least machine-accessible medium of claim 1 , wherein:
the at least one mobile agent is to provide, at least in part, firewall functionality.

9. The at least one machine-accessible medium of claim 1 , wherein:
the at least one mobile agent is to access, at least in part, the resources of the at least one network node via at least one service of the at least one network node.

10. A method comprising:
executing, at least in part, at least one mobile agent in at least one execution environment of at least one network node, the at least one mobile agent being capable of being of at least one class and at least one subclass, the at least one subclass being of the at least one class, the at least one class and the at least one subclass being to provide the at least one mobile agent with node resource usage permission capabilities, the at least one mobile agent being capable of accessing resources of the at least one network node in accordance with the node resource usage permission capabilities, the at least one mobile agent being capable of moving, at least in part, from the at least one network node to at least one other network node for execution, at least in part, in at least one other execution environment of the at least one other network node, the at least one mobile agent being capable of accessing other resources of the at least one other network node in accordance with the node resource usage permission capabilities;
wherein:
the at least one mobile agent comprises at least one agent application layer gateway;
the at least one mobile agent is to perform at least two of the following subparagraphs:
receive, at least in part, network traffic addressed to a client;
filter and/or modify the network traffic; and
forward, at least in part, filtered and/or modified network traffic to the client.

11. The method of claim 10 , wherein:
the at least one mobile agent provides functionality that to be distributed, at least in part, at multiple network nodes.

12. The method of claim 10 , wherein:
the at least one execution environment and the at least one other execution environment comprise proactive environments.

13. The method of claim 10 , wherein:
the at least one class is to provide, at least in part, certain functionality of the at least one mobile agent; and
the at least one subclass is to provide, at least in part, additional functionality of the at least one mobile agent, the additional functionality being in addition to the certain functionality.

14. The method of claim 10 , wherein:
the at least one class is to provide, at least in part, certain node resource access restrictions of the at least one mobile agent; and
the at least one subclass is to provide, at least in part, additional node resource access restrictions of the at least one mobile agent, the additional node resource access restrictions being in addition to the certain node resource access restrictions.

15. The method of claim 10 , wherein:
the at least one mobile agent is to provide, at least in part, web cache functionality.

16. The method of claim 10 , wherein:
the at least one mobile agent is to provide, at least in part, media transcoding functionality.

17. The method of claim 10 , wherein:
the at least one mobile agent is to provide, at least in part, firewall functionality.

18. The method of claim 10 , wherein:
the at least one mobile agent is to access, at least in part, the resources of the at least one network node via at least one service of the at least one network node.

19. At least one network node that is usable with at least one other network node in at least one network, the at least one network node comprising:
a central processing unit;
the central processing unit being capable of execution of instructions stored at the at least one network node, the execution of the instructions resulting in performance of operations comprising:
executing, at least in part, at least one mobile agent in at least one execution environment of the at least one network node, the at least one mobile agent being capable of being of at least one class and at least one subclass, the at least one subclass being of the at least one class, the at least one class and the at least one subclass being to provide the at least one mobile agent with node resource usage permission capabilities, the at least one mobile agent being c

Assignees

• Intel Corp

Inventors

• Putzolu David

Classifications

• H04L67/2823

  Electricity · mapped topic

• H04L67/2842

  Electricity · mapped topic

• H04L63/0227

  Filtering policies (mail message filtering H04L51/212) · CPC title

• G06F9/4868 Primary

  with creation or replication · CPC title

• H04L67/34

  involving the movement of software or configuration parameters  (network booting or remote initial program loading [RIPL] G06F9/4416) · CPC title