US 11,838,323 B2
Server-initiated secure sessions
Rajat Bhargava, Boulder, CO (US); Christopher Marie, Boulder, CO (US); and James Brown, Broomfield, CO (US)
Assigned to JumpCloud, Inc., Louisville, CO (US)
Filed by JumpCloud, Inc., Boulder, CO (US)
Filed on May 12, 2021, as Appl. No. 17/318,899.
Application 17/318,899 is a continuation of application No. 16/155,720, filed on Oct. 9, 2018.
Claims priority of provisional application 62/569,959, filed on Oct. 9, 2017.
Prior Publication US 2021/0266347 A1, Aug. 26, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 29/06 (2006.01); H04L 9/40 (2022.01); H04L 67/142 (2022.01); H04L 67/01 (2022.01); H04L 67/02 (2022.01)
CPC H04L 63/18 (2013.01) [H04L 63/02 (2013.01); H04L 63/029 (2013.01); H04L 63/0272 (2013.01); H04L 63/0464 (2013.01); H04L 67/01 (2022.05); H04L 67/142 (2013.01); H04L 63/045 (2013.01); H04L 63/16 (2013.01); H04L 63/166 (2013.01); H04L 63/168 (2013.01); H04L 67/02 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method for secure network communications at an agent installed on a destination server, comprising:
receiving, from a first server that is external to a firewall of the destination server, an indication that an endpoint device that is external to a firewall of the destination server has selected the destination server for a secure session associated with a second communication protocol;
initiating, using a first communication protocol, an establishment of a connection with an intermediary server that is different than the first server and external to the firewall of the destination server based at least in part on receiving the indication from the first server, wherein an inbound port of the firewall associated with establishing connections using the second communication protocol is closed when the establishment of the connection is initiated; and
directing, based at least in part on initiating the establishment of the connection, the destination server to open an outbound port of the firewall associated with communicating using the second communication protocol for the secure session, wherein a communication path from the destination server to the endpoint device is established via the intermediary server, the communication path at least using the second communication protocol, and wherein the inbound port of the firewall associated with establishing connections using the second communication protocol remains closed during communications with the endpoint device using the communication path.