Abstract: A method of tunneling through a network separation device such as a firewall or a Network Address Translator comprising establishing via a custom socket factory coupled with a host device, a connection with a cloud server by tunneling through a network separation device; maintaining, via the custom socket factory, the connection with the cloud server through the network separation device; receiving, via the connection between the custom socket factory and the cloud server, connection information; and directly connecting, via the custom socket factory, to a client device using the connection information received from the cloud server.

Abstract: A method of tunneling through a network separation device such as a firewall or a Network Address Translator comprising establishing via a custom socket factory coupled with a host device, a connection with a cloud server by tunneling through a network separation device; maintaining, via the custom socket factory, the connection with the cloud server through the network separation device; receiving, via the connection between the custom socket factory and the cloud server, connection information; and directly connecting, via the custom socket factory, to a client device using the connection information received from the cloud server.

Abstract: A system and method for tunneling through a network separation device such as a firewall or a Network Address Translator including a first server receiving an access request from a client device to communicate with a host device, where the host device is behind the network separation device. The first server sending a message to a second server in response to receiving the access request, the message including host data for the host device. The second server is configured to send a notification to the host device, and the notification includes instructions for the host device to initialize a pass-through channel with the first server. The first server receiving a pass-through initialization request from the host device and establishing the pass-through channel for communication between the client device and the host device in response to receiving the pass-through initialization request.

Abstract: A method of tunneling through a network separation device such as a firewall or a Network Address Translator comprising establishing via a custom socket factory coupled with a host device, a connection with a cloud server by tunneling through a network separation device; maintaining, via the custom socket factory, the connection with the cloud server through the network separation device; receiving, via the connection between the custom socket factory and the cloud server, connection information; and directly connecting, via the custom socket factory, to a client device using the connection information received from the cloud server.

Abstract: A system and method for providing database replay are disclosed. In one embodiment, the system detects a trigger; obtains updated data from a read-only table; stores the updated data in a modifiable table; retrieves a modification history including a comprehensive and persistent record of the changes made to one or more earlier versions of the modifiable table; and applies the modifications indicated in the modification history to the updated data stored in the modifiable table.

Abstract: A system, method and computer readable medium for secure file transfer is disclosed. In one embodiment, the system encrypts a file; sends, via a secure channel, a packet to a group having one or more members, the group authorized to access the encrypted file, the packet associated with the encrypted file and including access information for the encrypted file; receives a first request for the encrypted file from a first requestor; and sends the encrypted file to the first requestor via an unsecured channel that performs caching, wherein the first requestor is able to access the encrypted file using the packet when the first requestor is a member of the group authorized to access the encrypted file and received the packet via the secure channel and unable to access the encrypted file when the first requestor is not a member of the group authorized to access the encrypted file.

Abstract: A system and method for tunneling through a network separation device such as a firewall or a Network Address Translator including a first server receiving an access request from a client device to communicate with a host device, where the host device is behind the network separation device. The first server sending a message to a second server in response to receiving the access request, the message including host data for the host device. The second server is configured to send a notification to the host device, and the notification includes instructions for the host device to initialize a pass-through channel with the first server. The first server receiving a pass-through initialization request from the host device and establishing the pass-through channel for communication between the client device and the host device in response to receiving the pass-through initialization request.

Abstract: A system and method for tunneling through a network separation device such as a firewall or a Network Address Translator including a first server receiving an access request from a client device to communicate with a host device, where the host device is behind the network separation device. The first server sending a message to a second server in response to receiving the access request, the message including host data for the host device. The second server is configured to send a notification to the host device, and the notification includes instructions for the host device to initialize a pass-through channel with the first server. The first server receiving a pass-through initialization request from the host device and establishing the pass-through channel for communication between the client device and the host device in response to receiving the pass-through initialization request.

Abstract: A system, method and computer readable medium for secure file transfer is disclosed. In one embodiment, the system encrypts a file; sends, via a secure channel, a packet to a group having one or more members, the group authorized to access the encrypted file, the packet associated with the encrypted file and including access information for the encrypted file; receives a first request for the encrypted file from a first requestor; and sends the encrypted file to the first requestor via an unsecured channel that performs caching, wherein the first requestor is able to access the encrypted file using the packet when the first requestor is a member of the group authorized to access the encrypted file and received the packet via the secure channel and unable to access the encrypted file when the first requestor is not a member of the group authorized to access the encrypted file.

Abstract: A computer operating system (OS) is altered to boot so as to run from a normally unsupported system device (NUSD). The OS kernel is loaded from a natively supported boot device, such as a floppy disk or CD-ROM, and initialized. Device drivers for a NUSD are then loaded from the boot device and initialized. A bootswap device driver is also loaded and initialized. The bootswap device driver is operative to alter an OS data structure such that the NUSD is recognized as a system device. Upon completion of the boot sequence, the OS runs from the NUSD as a system drive. A method of preparing the boot media and configuring the NUSD is presented.

Abstract: A read-write hard disk drive is emulated using a hard disk drive image file on a protected medium such as a CD-ROM, a written disk sector database, and file system filters. A file system filter intercepts file I/O requests from the operating system. Initial read requests are serviced from the hard disk drive image file. Write operations are directed to a database, such as in RAM. Subsequent read requests for previously written data are serviced from the database. Another file system filter monitors attempts to alter the file access attributes, and prevents pre-existing read-only files on the emulated drive from being written or deleted. The maximum size of the written disk sector database is the sum of sectors on the hard disk drive image file allocated to read-write files and free space. The emulated read-write hard disk drive allows for the execution of programs requiring a read-write native media.

Abstract: A modern computer operating system is altered to boot and run from a protected medium such as a CD-ROM. Files and configuration information are copied from a fully configured and operational OS to a hard drive image file. File system filters and device drivers are added that implement an emulated read-write hard disk drive by servicing initial read requests from the image file, and write requests and read requests to previously written data, from a written disk sector database. The OS is altered to load the filters and drivers during boot, and to subsequently run from the emulated read-write hard disk drive. The hard drive image file is then placed on a bootable protected medium.

Abstract: An emergency boot directory, containing a back-up copy of a primary operating system, is maintained in a protected, hidden subdirectory hierarchy during normal computer operations. A bootable media, which may be a removable media, contains bootstrap code operative to load and run the back-up operating system, if the primary operating system fails to boot and run. A file system filter driver hides and protects the emergency boot directory by intercepting file or data access and directory entry enumeration requests. The filter fails access requests directed to the emergency boot directory, and edits the results of enumeration requests to remove references to the emergency boot directory. The protected, hidden emergency boot directory can be located and maintained within an existing main storage area and does not depend on hidden attributes of secondary storage areas such as separate disk partitions or file systems.

Abstract: An emergency boot directory, containing a back-up copy of a primary operating system, is maintained in a protected, hidden subdirectory hierarchy during normal computer operations. A bootable media, which may be a removable media, contains bootstrap code operative to load and run the back-up operating system, if the primary operating system fails to boot and run. A file system filter driver hides and protects the emergency boot directory by intercepting file or data access and directory entry enumeration requests. The filter fails access requests directed to the emergency boot directory, and edits the results of enumeration requests to remove references to the emergency boot directory. The protected, hidden emergency boot directory can be located and maintained within an existing main storage area and does not depend on hidden attributes of secondary storage areas such as separate disk partitions or file systems.

Abstract: A computer operating system (OS) is altered to boot so as to run from a normally unsupported system device (NUSD). The OS kernel is loaded from a natively supported boot device, such as a floppy disk or CD-ROM, and initialized. Device drivers for a NUSD are then loaded from the boot device and initialized. A bootswap device driver is also loaded and initialized. The bootswap device driver is operative to alter an OS data structure such that the NUSD is recognized as a system device. Upon completion of the boot sequence, the OS runs from the NUSD as a system drive. A method of preparing the boot media and configuring the NUSD is presented.

Abstract: A modern computer operating system is altered to boot and run from a protected medium such as a CD-ROM. Files and configuration information are copied from a fully configured and operational OS to a hard drive image file. File system filters and device drivers are added that implement an emulated read-write hard disk drive by servicing initial read requests from the image file, and write requests and read requests to previously written data, from a written disk sector database. The OS is altered to load the filters and drivers during boot, and to subsequently run from the emulated read-write hard disk drive. The hard drive image file is then placed on a bootable protected medium.

Abstract: A read-write hard disk drive is emulated using a hard disk drive image file on a protected medium such as a CD-ROM, a written disk sector database, and file system filters. A file system filter intercepts file I/O requests from the operating system. Initial read requests are serviced from the hard disk drive image file. Write operations are directed to a database, such as in RAM. Subsequent read requests for previously written data are serviced from the database. Another file system filter monitors attempts to alter the file access attributes, and prevents pre-existing read-only files on the emulated drive from being written or deleted. The maximum size of the written disk sector database is the sum of sectors on the hard disk drive image file allocated to read-write files and free space. The emulated read-write hard disk drive allows for the execution of programs requiring a read-write native media.