US 11,916,897 B2
Isolating networks and credentials using on-demand port forwarding
Chang Chuen Kawaguchi, Redmond, WA (US); and Lee Jonathan Riefberg, Bellevue, WA (US)
Assigned to Microsoft Technology Licensing, LLC, Redmond, WA (US)
Filed by Microsoft Technology Licensing, LLC, Redmond, WA (US)
Filed on Jan. 25, 2022, as Appl. No. 17/583,644.
Application 17/583,644 is a continuation of application No. 15/788,138, filed on Oct. 19, 2017, granted, now 11,265,310.
Prior Publication US 2022/0217129 A1, Jul. 7, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); H04L 67/01 (2022.01); H04L 47/10 (2022.01)
CPC H04L 63/083 (2013.01) [H04L 47/10 (2013.01); H04L 63/02 (2013.01); H04L 63/08 (2013.01); H04L 63/102 (2013.01); H04L 63/107 (2013.01); H04L 63/205 (2013.01); H04L 67/01 (2022.05)] 20 Claims
OG exemplary drawing
 
1. A cloud computing system comprising:
at least one processor; and
memory storing instructions executable by the at least one processor, wherein the instructions, when executed, cause the cloud computing system to:
receive, by a server component of the cloud computing system, an indication of an access request associated with a client computing system, wherein the access request requests access to a resource server;
determine that the client computing system is authorized to access the resource server;
select, by the server component based on the determination, a selected client-facing port from a plurality of client-facing ports on the server component;
generate an access rule configured to permit access by the client computing system to the selected client-facing port for an exposure duration defined by the access rule;
send, to the client computing system, port information that identifies the selected client-facing port;
receive, from the client computing system, first information on the selected client-facing port on the server component;
based on the access rule, forward the first information from the server component to the resource server through a resource server port of the resource server;
receive second information from the resource server through the resource server port; and
forward the second information to the client computing system on the selected client-facing port.