Patent ID: 8572720

Claim:
A system comprising: a platform having a platform processor; a connection server in communication with said platform having a connection server processor configured to execute program instructions to conduct the steps of: receiving a connection request from said platform; authenticating said platform; opening a connection server port identified by a connection server port address; reconnecting to said authenticated platform via said connection server port at said connection server port address; dynamically configuring a first firewall interposed between said authenticated platform and said connection server, said first firewall configured to drop all connection requests directed to said connection server port address without replying to said connection requests directed to said connection server port address and drop all commands directed to said connection server port address from sources other than said authenticated platform without replying to said commands directed to said connection server port address from sources other than said authenticated platform; and receiving commands from said authenticated platform via said connection server port through said firewall; a data server comprising: a data server processor; a data server communication device controlled by said data server processor and configured for selective communication with said connection server via ports assigned by said data server processor; and a data server data storage readable by said data server processor, wherein said data server data storage is adapted to store, in non-volatile storage, secured data and program instructions executable by said data server processor to conduct the steps of: generating and transmitting to said connection server a polling signal via a polling port; monitoring said polling port for a reply to said polling signal from said connection server, wherein said reply is generated by said connection server as a result of at least one of said commands from said authenticated platform; only in response to receiving a reply to said polling signal, opening a secure random socket connection for use by said data server communication device, said secure random socket connection having a secure random socket connection address randomly selected by said data server processor and hidden from said connection server at least until after said secure random socket connection has been opened by said data server processor; establishing a connection to said connection server via said data server communication device using said secure random socket connection opened by said data server processor; permitting access to said secured data stored on said data server data storage by said connection server via said secure random socket connection, wherein said connection server is configured to pass said secured data to said platform in response to at least one of said commands; and closing said secure random socket connection after access by said connection server to said secured data has occurred.