Patent ID: 7716331

Claim:
A method of gaining secure access from a host to Intranet resources provided by a content server in a data transmission system wherein the host is connected to the content server through a gateway, wherein said host and gateway are peer devices, wherein each of the peer devices generates a pseudo-random sequence to exchange IP data packets, each of the pseudo-random sequences being the same and comprising a plurality of sequence numbers, each of the plurality of sequence numbers having a value determined by a predetermined algorithm, the method comprising the steps of: generating and sending at predetermined transmission intervals from either the host or gateway, verification messages wherein each verification message contains a plurality of sequence numbers and a signature, which depend upon the data exchanged between the host and the gateway and comprise a cumulative hashing value of data exchanged between the host and gateway, preceding said each verification message, the host and gateway utilizing an algorithm which determines whether the host or gateway sends a verification message at each of the predetermined intervals; wherein the value of each of the plurality of sequence numbers is created using an original packet sequence number and a signature is used by the peer devices to recreate the original packet sequence number; wherein a timer R in the peer devices defines the reception intervals during which the verification message sent by a first peer device is received by the other peer device, the reception intervals for each of the peer devices corresponding to the predetermined transmission intervals for the other peer device with an additional delay equal to the transmission time; wherein the verification message sent at a predetermined transmission interval by the first peer device must be received by the other peer device within a first predetermined time slot after the reception interval corresponding to the predetermined transmission interval to be considered as being valid, and further comprising the step of sending an acknowledgement message back from the other peer device to the first peer device when the verification message is received within the first time slot; wherein the acknowledgment message must be received by the first peer device within a second predetermined time slot after the end of the first time slot to be considered as being valid, and further comprising the step of activating abort and log alert procedures in the first peer device.