Abstract: In a hardware client for remote logon to a network, a two layer authentication protocol enables authorized users to log on while discouraging unauthorized users. The hardware client prevents logging on to the network if the hardware client is stolen. The hardware client itself is authenticated in the first authentication layer in order to establish a link to the network. Then a client computer authenticates in a second layer and further establishes a secure connection to the network. If the power of the hardware client goes off (as it would if or example it were unplugged for transport), then the authentication is not saved and therefore is lost. The hardware client must be reauthenticated before it can be used again.

Abstract: Techniques for translating between logical addresses and ports of a first network, and logical addresses and ports of a second network connected to the first network at an intermediate device include receiving a first packet at the intermediate device from a first device having a first address on the first network. A second packet is sent to a second device on the second network in response to receiving the first packet. The second packet includes, in a source address field, a particular address of the intermediate device on the second network. It is determined whether the first packet includes a resource registration message that registers a first resource on the first device with a protocol server for a particular protocol. The protocol server is available at the second device on the second network. If the first packet includes the resource registration message, then information in the resource registration message for uniquely requesting the first resource is determined.