Privacy network system

Abstract

Disclosed is a system for deploying a secure server that provides one or more network services. Generally stated, a secure server is deployed in a secure environment behind a privacy barrier. The secure server is configured to interact with a service host on a public network outside the privacy barrier. The service host facilitates routing information from the public network through the privacy barrier to the secure server.

What is claimed is: 
     
         1 . A method for providing a network service, comprising:
 receiving a notice that a secure server is requesting to be provisioned;   creating a profile for the secure server;   associating a public Internet protocol (IP) address with the secure server;   storing the public IP address in the profile;   ascertaining a domain name with which to associate the secure server;   associating the secure server with the domain name such that traffic on a public network resolves to the domain name;   establishing a trust relationship in the profile between the secure server and a service host sufficient to provide a secure network tunnel between the secure server and the service host;   notifying the secure server of information describing the trust relationship;   receiving a request to establish the secure network tunnel, the request being based on the information describing the trust relationship;   establishing the secure network tunnel with the secure server;   associating the IP address with the secure network tunnel;   wherein network traffic directed at the domain name resolves to the public IP address and is routed to the secure server over the secure network tunnel; and   further wherein the secure network tunnel enables network traffic to flow to the secure server without being requested by the secure server.   
     
     
         2 . The method recited in  claim 1 , wherein the secure network tunnel comprises a Virtual Private Network tunnel. 
     
     
         3 . The method recited in  claim 1 , wherein the service host comprises a Virtual Private Network server. 
     
     
         4 . The method recited in  claim 1 , wherein the secure server implements an email service, and wherein the service host is further configured to create an MX record that associates the domain name with the secure server. 
     
     
         5 . The method recited in  claim 1 , wherein associating the IP address with the secure network tunnel comprises creating a DNS “A” record that associates the public IP address with the domain name. 
     
     
         6 . The method recited in  claim 1 , wherein the secure server implements a file synchronization service. 
     
     
         7 . A system for providing a network service, comprising:
 means for receiving a notice that a secure server is requesting to be provisioned;   means for creating a profile for the secure server;   means for associating a public Internet protocol (IP) address with the secure server;   means for storing the public IP address in the profile;   means for ascertaining a domain name with which to associate the secure server;   means for associating the secure server with the domain name such that traffic on a public network resolves to the domain name;   means for establishing a trust relationship in the profile between the secure server and a service host sufficient to provide a secure network tunnel between the secure server and the service host;   means for notifying the secure server of information describing the trust relationship;   means for receiving a request to establish the secure network tunnel, the request being based on the information describing the trust relationship;   means for establishing the secure network tunnel with the secure server;   means for associating the IP address with the secure network tunnel;   wherein network traffic directed at the domain name resolves to the public IP address and is routed to the secure server over the secure network tunnel; and   further wherein the secure network tunnel enables network traffic to flow to the secure server without being requested by the secure server.   
     
     
         8 . The system recited in  claim 7 , wherein the secure network tunnel comprises a Virtual Private Network tunnel. 
     
     
         9 . The system recited in  claim 7 , wherein the service host comprises a Virtual Private Network server. 
     
     
         10 . The system recited in  claim 7 , wherein the secure server implements an email service, and wherein the service host is further configured to create an MX record that associates the domain name with the secure server. 
     
     
         11 . The system recited in  claim 7 , wherein the means for associating the IP address with the secure network tunnel comprises means for creating a DNS “A” record that associates the public IP address with the domain name. 
     
     
         12 . The system recited in  claim 7 , wherein the secure server implements a file synchronization service.