Method and apparatus for providing secure remote access to enterprise networks

Abstract

The invention includes a method and apparatus for providing secure remote access to enterprise networks. An apparatus includes a network interface module adapted for maintaining a secure network connection with a network device independent of a power state of a host computer associated with the apparatus a storage module for storing information associated with the secure connection, and a processor coupled to the network interface and the memory where the processor is adapted for automatically initiating the secure connection without user interaction.

1 . A secure client device configured to provide a secure client capability for a host computer having a host processor and a host memory, the secure client device comprising:
 a network interface module configured to maintain a secure connection between the secure client device and a network device independent of a power state of the host computer;   a client memory configured to store information associated with the secure connection; and   a client processor configured to automatically initiate establishment of the secure connection.   
     
     
         2 . The secure client device of  claim 1 , wherein the client processor is configured to automatically initiate establishment of the secure connection in response to a trigger condition. 
     
     
         3 . The secure client device of  claim 2 , wherein the trigger condition comprises at least one of detecting an available network or detecting a request from the network device. 
     
     
         4 . The secure client device of  claim 1 , further comprising:
 a host interface module coupled to the client processor, wherein the host interface module is configured to support communications between the secure client device and the host computer.   
     
     
         5 . The secure client device of  claim 1 , wherein the information associated with the secure connection comprises at least one of information received over the secure connection or information assigned for transmission over the secure connection. 
     
     
         6 . The secure client device of  claim 1 , wherein the information associated with the secure connection comprises information received over the secure connection, wherein the information received over the secure connection comprises information pushed by at least one network element in communication with the network device. 
     
     
         7 . The secure client device of  claim 1 , wherein the information associated with the secure connection comprises information assigned for transmission over the secure connection, wherein the client processor is configured to:
 store the information assigned for transmission over the secure connection in the client memory in response to a first condition; and   retrieve the information assigned for transmission over the secure connection from the client memory in response to a second condition.   
     
     
         8 . The secure client device of  claim 7 , wherein the first condition comprises a network being unavailable and the second condition comprises a network being available. 
     
     
         9 . The secure client device of  claim 8 , wherein the client processor is configured to:
 in response to the second condition:
 initiate reestablishment of the secure connection between the secure client device and the network device; and 
 propagate the information assigned for transmission over the secure connection toward the network device using the secure connection. 
   
     
     
         10 . The secure client device of  claim 7 , wherein:
 the first condition comprises a determination to delay transmission of the information assigned for transmission over the secure connection; and   the second condition comprises a threshold being satisfied.   
     
     
         11 . A method for a secure client device to provide a secure client capability for a host computer having a host processor and a host memory, the method comprising:
 receiving information from the host computer at the secure client device, wherein the secure client device comprises a client processor and a client memory; and   transmitting the received information from the secure client device toward a network device using a secure connection between the secure client device and the network device, wherein establishment of the secure connection is initiated automatically by the client processor of the secure client device, wherein the secure connection is maintained by the secure client device independent of a power state of the host computer.   
     
     
         12 . The method of  claim 11 , wherein establishment of the secure connection is initiated automatically in response to a trigger condition. 
     
     
         13 . The method of  claim 12 , wherein the trigger condition comprises at least one of detecting an available network or detecting a request from the network device. 
     
     
         14 . The method of  claim 11 , further comprising:
 prior to transmitting the received information from the secure client device toward the network device:
 storing the received information in the client memory of the secure client device in response to a first condition; and 
 extracting the stored information from the client memory of the secure client device in response to a second condition. 
   
     
     
         15 . The method of  claim 14 , wherein the first condition comprises a network being unavailable and the second condition comprises a network being available. 
     
     
         16 . The method of  claim 14 , wherein the first condition comprises a determination to delay transmission of the received information and the second condition comprises a threshold being satisfied. 
     
     
         17 . A method for a secure client device to provide a secure client capability for a host computer having a host processor and a host memory, the method comprising:
 receiving information at the secure client device, wherein the information is received over a secure connection between the secure client device and a network device, wherein the secure client device comprises a client processor and a client memory, wherein establishment of the secure connection is initiated automatically by the client processor of the secure client device, wherein the secure connection is maintained by the secure client device independent of a power state of the host computer; and   transferring the information from the secure client device toward the host computer.   
     
     
         18 . The method of  claim 17 , wherein establishment of the secure connection is initiated automatically in response to a trigger condition. 
     
     
         19 . The method of  claim 18 , wherein the trigger condition comprises at least one of detecting an available network or detecting a request from the network device. 
     
     
         20 . The method of  claim 17 , wherein the information received over the secure connection comprises information pushed by at least one network element in communication with the network device. 
     
     
         21 . The method of  claim 17 , wherein the information is transmitted from the secure client device toward the host computer using a host interface module, wherein the host interface module is coupled to the client processor, wherein the host interface module is configured to support communications between the secure client device and the host computer. 
     
     
         22 . The method of  claim 17 , further comprising:
 receiving, at the secure client device from the host computer, information assigned for transmission via the secure connection; and   transmitting the information assigned for transmission via the secure connection from the secure client device toward the network device using the secure connection.