text:
|Publication number
|Publication type
|Application number
|Publication date
|Mar 2, 2010
|Filing date
|Mar 5, 2004
|Priority date
|Dec 20, 2000
|Fee status
|Also published as
|Publication number
|Darren L. Wesemann
|Original Assignee
|Intellisync Corporation
|Export Citation
|BiBTeX, EndNote, RefMan
|Patent Citations (40), Non-Patent Citations (6), Referenced by (5), Classifications (12), Legal Events (4)
|External Links: USPTO, USPTO Assignment, Espacenet
This application is a continuation-in-part of U.S. application Ser. No. 09/767,465, filed Jan. 22, 2001, which claims the benefit of U.S. Provisional Application Ser. No. 60/257,481, filed Dec. 20, 2000; and also this application claims the benefit of U.S. Provisional Application Ser. No. 60/452,248, filed Mar. 5, 2003, which is incorporated herein by reference in its entirety.
1. The Field of the Invention
The present invention generally relates to virtual private networks. In particular, the present invention relates to systems and methods for enabling both the exchange of data and the execution of software applications remotely via a virtual private network.
2. The Related Technology
In today's business world, many businesses protect their data from unauthorized access by installing firewalls into their network infrastructure. Typically, a firewall is configured to prevent unidentified users from accessing network data from a remote location. Although firewalls are generally very beneficial for enabling a business to have more control over who accesses its network data, they also have the undesirable consequence of disconnecting mobile professionals from critical and urgent business information when they are away from the office or otherwise unable to gain local access to the network data.
To enable a mobile professional to access business information from a remote location, some businesses have installed virtual private networks (VPNs) between the business and designated remote locations, such as from a professional's home or satellite office. The function of a VPN is to open a secure connection between the business network and a designated remote location through the business firewall. Although beneficial for providing remote access to network data, a VPN requires the installation of expensive hardware and/or software at the business network and sometimes at the remote location.
In typical VPN arrangements, a user communicates with a business network from a remote location through a VPN tunnel. At each end of the VPN tunnel is a VPN node. At the business network, one of the VPN nodes straddles the business network's firewall. Network data is transmitted through the firewall at the VPN node and through the VPN tunnel to the user. According to the prior art, it is also possible for a remote business to communicate with the business network through a second VPN tunnel between the two VPN nodes.
VPN hardware and software employ encryption technology and other security features at the VPN nodes to ensure that data transmitted through a VPN tunnel is not intercepted and that the user or remote business is authorized to access the business network data. The benefits of a VPN, however, are limited to discrete, remote locations where the appropriate VPN software and/or hardware is installed. Accordingly, VPNs do not currently provide users with mobile remote access to network data stored behind business firewalls. In particular, a prior art VPN does not readily enable a user to access network data from a telephone while commuting in a moving vehicle, or from various other mobile devices, including pagers, personal digital assistants ("PDAs"), and laptop computers.
With regard to the aforesaid mobile devices, it is highly desirable in today's mobile society to provide enhanced connectivity between such devices and a remote location, such as a business network at the user's place of employment. Specifically, the ability for such mobile devices to remotely and securely exchange both data and applications with the business network greatly enhances both their utility and value, particularly for mobile professionals and others who spend a significant amount of time away from the office. As already described, typical VPN configurations do not readily enable such mobile remote connectivity.
Further complicating the secure transfer of data between a remote device and the business network is the fact that the remote device and business network may employ respectively differing communication protocols for transmitting data. For example, an e-mail application locally based in a business network may employ the Messaging Application Programming Interface ("MAPI") protocol for exchanging e-mail messages to network users. A remote device, such as a PDA, however, may use the differing Post Office Protocol ("POP") for retrieving, sending, and reading e-mail. Without resolution, the incongruity of the two protocols renders communication between the remote and local devices impossible.
In view of the foregoing, a need currently exists for providing a simple means by which secure communication can be transacted between a local host device and a remote device without the attendant problems discussed above. In addition, such a means should provide for the ability to exchange data and/or share applications between the host and remote device even in cases where differing protocols are respectively employed.
The present invention relates to systems and methods for establishing a secure connection between a computer network and a remote device. The present invention further extends to secure communication between local and remote devices that is enabled via a carrier network and a spontaneous virtual private network established between the devices. Additional embodiments of the present invention include secure exchange of data between local and remote devices via communication protocols. Embodiments of the invention include, but are not limited to, opening data tunnels that operate as virtual private networks between the corporate network and a carrier network and between the remote device and the carrier network, optionally using the communication protocols.
Accordingly, a first example embodiment of the invention is a method for transmitting data in a secure manner between a computing network and a remote device, each of the computing network and the remote device including a tunneling client. The method generally includes: establishing a first data tunnel leg between a tunneling client of the computing network and a tunneling server of a carrier network; establishing a second data tunnel leg between the tunneling server of the carrier network and a tunneling client of the remote device; and transmitting data between the remote device and the computing network via the first and second data tunnel legs and the carrier network using a first template associated with a first protocol, the first template being used by the tunneling client of the computing network, and a second template associated with the first protocol, the second template being used by the tunneling of the remote device.
A second example embodiment of the invention is performed in a carrier network capable of communicating with a corporate network and a remote device. This embodiment relates to a method for enabling the remote device to access network data of the computing network. The method generally includes: receiving a first connection signal from a computing network; in response to the first connection signal, establishing a first data tunnel leg between the carrier network and the computing network; receiving a second connection signal from a remote device; and in response to the second connection signal, establishing a second data tunnel leg between the carrier network and the remote device, the first data tunnel leg and the second data tunnel leg together operating as a virtual private network.
A third example embodiment of the invention is performed in a device, such as a mobile or cellular phone, PDA, pager, laptop computer, etc. This embodiment relates to a method for enabling a user operating the device to access network data of a remote computing network. The method generally includes: transmitting a connection signal from the tunneling client of the device to a tunneling server of the carrier network, wherein a first data tunnel leg has already been established between the tunneling server and the remote computing network; and upon the establishment of a second data tunnel leg between the computing network and the carrier network in response to the connection signal, transmitting a data request via the second data tunnel leg to the carrier network using a first template that is associated with a first protocol and is used by the tunneling client of the device. In this embodiment, the remote computing network receives the data request from the carrier network via the first data tunnel leg. In addition, the remote computing network processes the data request using a second template associated with the first protocol.
Yet another example embodiment of the invention is performed in a computing network, such as an enterprise or corporate network. This embodiment relates to a method for enabling a user operating a remote device to access network data of the computing network. This embodiment generally includes: transmitting a first connection signal from a tunneling client of the computing network to a carrier network; upon the establishment of a first data tunnel leg between the computing network and the carrier network, transmitting a keep alive signal from the computing network to the carrier network to maintain the first data tunnel leg; and receiving a data request from a remote device via the first data tunnel leg and a second data tunnel leg located between the carrier network and a remote device. In this embodiment, the data request is transmitted using a first template associated with a first protocol, the first template being used by the tunneling client of the computing network, and a second template associated with the first protocol, the second template being used by a tunneling client of the remote device.
These and other features of the present invention will become more fully apparent from the following description and appended claims, or may be learned by the practice of the invention as set forth hereinafter.
To further clarify the above and other advantages and features of the present invention, a more particular description of the invention will be rendered by reference to specific embodiments thereof which are illustrated in the appended drawings. It is appreciated that these drawings depict only typical embodiments of the invention and are therefore not to be considered limiting of its scope. The invention will be described and explained with additional specificity and detail through the use of the accompanying drawings in which:
Reference will now be made to figures wherein like structures will be provided with like reference designations. It is understood that the drawings are diagrammatic and schematic representations of presently preferred embodiments of the invention, and are not limiting of the present invention nor are they necessarily drawn to scale.
Embodiments of the present invention include or are incorporated in computer-readable media having computer-executable instructions or data structures stored thereon. Examples of computer-readable media include RAM, ROM, EEPROM, CD-ROM or other optical disk storage, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to carry or store desired program code means in the form of computer-executable instructions or data structures and which can be accessed by a general purpose or special purpose computer. When information is transferred or provided over a network, tunnel, channel or another communications connection (either hardwired, wireless, or a combination of hardwired or wireless) to a computer, the computer properly views the connection as a computer-readable medium. Thus, any such connection is properly termed a computer-readable medium. Combinations of the above should also be included within the scope of computer-readable media. Computer-executable instructions comprise, for example, instructions and data that cause a general purpose computer, special purpose computer, or special purpose processing device to perform a certain function or group of functions. The computer-executable instructions and associated data structures or modules represent an example of program code means for executing the steps of the invention disclosed herein.
The invention further extends to computer systems for enabling a remote user access to network data of a corporate network that is stored behind corporate network firewalls. This includes, but is not limited to, opening data tunnels that operate as virtual private networks between the corporate network and a data center, and transmitting network data through the data tunnels. Those skilled in the art will understand that the invention may be practiced in many environments with many types of computer and telephone systems, including portable computers, telephones, wireless telephones, PDA's, personal computers, multi-processor systems, network PCs, minicomputers, mainframe computers, and the like.
1. System Environment
Reference is first made to
As used herein, the term "corporate network" should be broadly construed to include any computing environment where tasks are performed by processing devices that are linked together. The corporate network 12 can include, for example, the computing environment or network of any enterprise, business, corporation, individual, or other entity. In the corporate network 12, computer-executable instructions and program modules for performing the features of the invention may be located in local and remote memory storage devices. The term "corporate" used in this context does not require the entity that operates the network to have any business or organizational structure.
The term "remote device" is understood to include a variety of electronic devices and apparatus that are remotely disposed with respect to the corporate network. Examples of a remote device include a mobile or cellular phone, PDA, pager, laptop computer, etc. The remote device can be capable of receiving, executing, and transmitting computer-executable instructions.
The terms "network data" and "business network data" should be construed to include any data that is stored in local and remote memory storage devices and is accessible to the corporate network 12. Network data 18 may include for example, email data or web page data. In one embodiment, network data 22 is protected behind a firewall infrastructure that includes the firewall 24. It should be appreciated, however, that network data 22 can include any data that is accessible to the corporate network 12, even if it is not protected behind the firewall infrastructure. Similarly, the term "application" should be broadly construed to include any set of computer executable instructions for performing one or more functions in connection with a computer or other electronic device.
The term "tunnel" should be interpreted to include any channel or other line of communication through which data can be securely transmitted. One skilled in the art will appreciate that there are numerous protocols and methods of encryption and authentication that can be employed to enable secure communication through a tunnel, such that the data transmitted through the tunnel is delivered only to an identified user who is authorized to access said data. It should further be appreciated that the terms "tunnel," "data tunnel," and "channel," are interchangeable, as used herein. The tunnel operates as a virtual private network by enabling secure remote access to network data through a business's firewall infrastructure.
According to the present invention, as shown in
In general, to establish the data tunnel leg 22A, the corporate network 12 transmits a connection signal 50A to the carrier network 14. In response, the carrier network 14 establishes the data tunnel leg 22A with the corporate network 12. Similarly, the remote device 16 transmits a connection signal 50B to the carrier network 14, which establishes the data tunnel leg 22B in response. In the illustrated embodiment, the carrier network 14, in establishing the respective data tunnel leg, can send a connection signal reply 53 to the corporate network 12, the remote device 16, or both. It is appreciated, however, that the connection signal reply 53 is not essential in establishing the data tunnel legs 22A or 22B. More details concerning the establishment of the data tunnel legs 22A and 22B are given below.
As used herein, the term "connection signal" should be broadly construed to include data comprising a uniform resource identifier ("URI"), which represents a request for the carrier network to provide access to a web page, hypertext markup language ("HTML") data, extensible markup language ("XML") data, or other data resources. The connection signals 50A and 50B made by the corporate network 12 and the remote device 16, respectively, can be performed independently of each other, or in concert, according to system design. Likewise, the carrier network 14 is preferably configured to respond to each connection signal 50A and 50B independently, though the response to both the corporate network 12 and the remote device 16 by the carrier network can, if desired, be coordinated to occur simultaneously.
In the case of the corporate network 12, the data tunnel leg 22A, once established, is maintained by a keep alive signal 51. In one embodiment, the keep alive signal 51 comprises a small amount of nominal data sent to the corporate network 12 from the carrier network 14 in order to continually maintain the presence of the data tunnel leg 22A. This data is incrementally sent in packets having a size such as 100 bytes. In one embodiment, the keep alive signal 51 can comprise a nominal request for data from the corporate network 12. In response, the corporate network 12 can reply via the data tunnel leg 22A to the carrier network 14 with the requested data, thereby maintaining the tunnel leg 22A open. In a similar manner, the keep alive signal 51 is also sent by the carrier network 14 to the device 16 in order to maintain the presence of the data tunnel leg 22B when that leg is active.
As mentioned above, the data tunnel leg 22A between the corporate network 12 and the carrier network 14 is established repeatedly or on an ongoing basis so that the tunnel leg 22A is continuously available in the event that the remote device 16 attempts to establish the virtual private network connection with corporate network 12 described herein. For instance, the keep alive signal 51 can be sent on a periodic basis with a frequency, such as every 20 seconds, that is high enough to minimize the latency experienced by the remote device 16 when the remote device attempts to establish communication with the virtual private network. The connection signal 50A and the keep alive signal 51 transmitted between the corporate network 12 and the carrier network 14 can be performed automatically and in the background in preparation for the remote device 16 to eventually make the attempt to establish the virtual private network connection. In contrast, the connection signal 50B sent by the remote device 16 to the carrier network 14 is generally performed in response to input from a user of the remote device indicating that the user wishes to establish the virtual private network connection. In the case where multiple corporate networks are included in the present system, the initial connection signal 50B, or data subsequently transmitted over the tunnel leg 22B can identify the target corporate network 12 with which the device is to communicate.
In the case of the corporate network 12, the connection signal 50A, the keep alive signal 51, and the connection signal reply 53 are transmitted through the firewall 24. One skilled in the art will appreciate that the firewall 24 can include hardware, software, or a combination of both. Essentially, a firewall is a security mechanism that prohibits access through designated ports of a network and ensures network data cannot be accessed from an unauthorized user from outside of the firewall. Though only one firewall 24 is shown, multiple firewalls can be employed to afford enhanced data protection, if needed. The connection signal 50A, the keep alive signal 51, and any connection signal reply 53 relating to the corporate network 12 can also pass through one or more proxy servers 82 that are employed in conjunction with the firewall 24 as a security feature.
As shown in
The corporate network 12 and the remote device 16 use an sVPN corporate client 52 and an sVPN device client 54, respectively, to transmit their respective connection signals 50A and 50B to the carrier network 14 and to receive the connection signal reply 53 in response. "Connection signal reply" should be construed to include any data transmitted by the carrier network 14 in response to receiving the connection signal 50A or 50B and which is transmitted in an ongoing manner so as to keep open the tunnel legs 22A and 22B between the carrier network 14 and the corporate network 12, and between the carrier network and the remote device 16, respectively. The sVPN corporate client 52 is an example of a "network client" that operates in the network with which the remote device communicates. Similarly, sVPN corporate client 52 and sVPN device client 54 are examples of "tunneling clients" that reside, respectively, on the network and the remote device and establish data tunnel legs that are connected to form a complete data tunnel as described herein.
As mentioned, data entering or exiting the corporate network 12 must pass through the firewall 24, which acts as a security feature to prevent unauthorized access to the network. In the present invention, penetration of the firewall 24 by the transmission and reception of the connection signals 50A, the keep alive signal 51, and the connection signal reply 53 is accomplished due to the fact that the data are packetized in a TCP/IP or another appropriate format typically associated with web traffic. Thus, transmission of the connection signal 50A, the keep alive signal 51, and the connection signal reply 53 is performed via ports already established through the firewall 24 that are reserved for web traffic, thereby eliminating the need for establishing additional ports through the firewall and simplifying data transmission.
The corporate client 52, the device client 54, and the sVPN server 60 incorporate software for implementing sVPN communication technology, which includes software for initiating or responding to the connection signals 50A and 50B and, as will be described below in further detail, software for transcoding data between protocols, as needed. In turn, this enables the corporate client 52 and the device client 54 to establish the secure data tunnel legs 22A and 22B, respectively, with the sVPN server 60, as referred to earlier. Because a traditional VPN interface between these components is avoided, the challenges corresponding to typical VPN installations are avoided as well. In particular, because the data tunnel legs 22A and 22B are established by sending outgoing connection signals that permit ports to be opened through the firewalls, the virtual private network is established without requiring VPN hardware at the corporate network 12 that is otherwise required in conventional VPN systems. Further details regarding the establishment and use of sVPN connections with components similar to those discussed above can be found in U.S. patent application Ser. No. 09/767,465, entitled "Spontaneous Virtual Private Network Between Portable Device and Enterprise Network," which was filed Jan. 22, 2001, and which is incorporated herein by reference in its entirety.
The sVPN component of the corporate network 12 in the present discussion is characterized as a corporate client that is located on a computer server or similar component within the corporate network. The present invention is not so limited, however. Indeed, in one embodiment, the sVPN component can be implemented as a desktop client located on a desktop computer within the corporate network 12. In such an implementation, the desktop client can reside as a WIN 32 application on the computer, for example. The example illustrated in
Reference is now made to
The corporate client 52 and device client 54 monitor their respective tunnel legs 22A and 22B to ensure that the tunnel 22 remains open when needed. If for any reason the tunnel leg 22A or 22B is undesirably closed, the respective client opens a new data tunnel leg with the sVPN server 60 of the carrier network 14 by transmitting a new connection signal to the carrier network 14. Once a new tunnel leg is established, the sVPN server 60 brokers the linkage of the tunnel leg between itself and the respective client with the previously established tunnel leg of the other client. Although several acts are described herein as being specifically performed by the corporate client 52 or the device client 54, it should be appreciated that inasmuch as the corporate network 12 includes the corporate client, and inasmuch as the remote device 16 includes the device client, any acts performed by the corporate client are also acts performed by the corporate network, and acts performed by the device client are also acts performed by the remote device. In an alternative embodiment, the sVPN server 60 specifically monitors the data tunnel leg 22A and merely notifies the corporate network 12 if the leg is closed or lost for some reason. The corporate network 12 can then take steps to reestablish the data tunnel leg 22A.
The data tunnel 22 between the corporate client 52 and the device client 54 in presently preferred embodiments uses transmission control protocol/internet protocol ("TCP/IP"), hypertext transfer protocol with secure sockets layer protocol ("HTTPS"), IP security protocol ("IPsec"), or other appropriate protocols for data transfer. Using these protocols, connection signals, network data, connection signal replies, and other access requests are encrypted in packets and transmitted through the data tunnel 22 using "port 443" (not shown) of the corporate network 12. Port 443 is typically open to enable users to access the Internet from the corporate network 12, within the firewall 24.
As described, the present invention uses preexisting open ports in the firewall infrastructure to enable secure, VPN-related communication from remote mobile locations. Accordingly, it should also be appreciated that the present invention is an improvement over the prior art because additional ports are not required to be opened in the firewall infrastructure, which would require the use of traditional VPN hardware and software that is expensive and time-consuming to install and to maintain. Furthermore, the present invention enables a proxy server to filter any data packets transmitted through the ports to ensure compliance with the defined protocols.
Reference is now made to
The templates 100, 102 are employed to assist the transfer of information, such as application data, commands, etc., between the corporate client 52 and the device client 54. Specifically, each template 100, 102 enables data transfer according to a specific communication protocol, as already mentioned. To that end, each template 100 and 102 further includes one or more inflection points 104 that correspond to commands or other data aspects that are unique to the respective protocol.
For instance, a template pair 100A/102A can be configured to correspond to a POP e-mail protocol used in transferring e-mail commands and/or data between the corporate network 12 and the remote device 16. As such, each template 100A and 102A will include a plurality of inflection points 104 that can contain the various commands and data specific to the POP protocol. This enables the templates 100A and 102A to be utilized in transmitting POP e-mail data between a POP-based e-mail application 106 disposed in the remote device 16, and a POP e-mail server 108 at the corporate network 12, both of which are shown in
In another example, a template pair 100/102 can be configured that corresponds to the Instant Messenger protocol, which includes four main tasks that can be executed by the instant messenger application: send a message, receive a message, retrieve a buddy list, and login. Accordingly, the template pair 100/102 corresponding to the instant messenger protocol contains at least four inflection points, each corresponding to one of the four tasks above that can be performed by the instant messenger application. Template pairs 100/102 can be readily modified or added so as to accommodate new protocols or inflection points that are introduced within the present system 10 as described herein.
The corresponding pair of templates 100 and 102 can be configured to correspond to any one of a variety of protocols; thus the examples illustrating both the type and number of templates as given herein are meant to be merely exemplary. Further, though
2. Remote Access to Network Data
Reference is now made to
In conjunction with these procedures, presently preferred embodiments also include device and user authentication and security procedures that ensure that the system is properly configured and that all users and system components are properly authorized. Specifically, a three-tiered regimen is utilized to accomplish the authentication and security tasks. The first tier comprises device authentication tasks for authenticating both the remote device 16 and the corporate network 12. When either the remote device 16 or the corporate network 12 attempts to establish a data tunnel leg with the sVPN server 60, its respective client transmits, along with or following the connection signal 50A or 50B, an identification code, such as a client identification ("CID"). The CID is an encrypted certificate that authenticates the corresponding client as one that is valid for transacting data with the present system 10. Upon receipt of the CID, the sVPN server 60 can authenticate that client, and hence its host (i.e., the corporate client 12 or the remote device 16) as a component of the system 10. As will be seen, the CID of each client 52 and 54 will be used in later tiers in connecting the data tunnel legs 22A and 22B into a single data tunnel 22.
As mentioned, the transmittal of the CID and related data from either of the device 52 and 54 to the sVPN server 60 is encrypted. In the present embodiment, this encryption is accomplished using x.509 certificates. The x.509 certificate can be used as a digital signature to ensure the various components to be used in transacting data within the system via the sVPN server 60 are valid devices. In one embodiment, the sVPN server 60 is pre-loaded with the required digital signature and certificate data during manufacture so as to enable the sVPN server to validate these digital signatures later during operation.
As a result of the first tier device authentication procedure above being completed, data tunnel legs 22A and 22B are established between each device 52 and 54 and the sVPN server 60. Before the complete data tunnel 22 is formed and data can be transacted between the corporate network 12 and the remote device 16, however, the other two tiers of the security and authentication tasking must also be completed. In the second tier, various security procedures are performed to enable secure data transfer. First, a session key is created for use by the corporate client 52 and the device client 54. In the present embodiment, this step is performed using an RSA algorithm, which creates a 2,048-bit session key. These steps are preferably performed by the device client 54 of the remote device 16 and transmitted via the sVPN server 60 to the corporate network 12, where the session key is received by the corporate client 52. In alternative embodiments other components, such as the corporate client 52, can create the session key.
After the session key is created, it is used to set up the encryption protocol that will be used during data transmission between the corporate network 12 and the remote device 16. In the present embodiment, RC-4 techniques are used to set up the data encryption based on the session key. Then, a message digest, such as MD-5, is used to ensure that the encryption is accurately performed and is not corrupted by extraneous events.
As a result of these various security devices and algorithms, secure encryption of data to be transmitted between the various components is ensured. At this point, the x.509 certificate created in the first tier is terminated, and the full data tunnel 22 from corporate network 12 to remote device 16 is established by the sVPN server 60, as shown in
Once the complete data tunnel 22 is established, the third tier of the security and authentication regimen can be executed, wherein the corporate network 12 authenticates the identity of the user of the remote device 16 to verify that the user has authority to access the corporate network before data is transacted. In one embodiment, the user's identity is authenticated when the user enters a personal identification number. In another embodiment, the user's identity is confirmed over the Internet using encryption technology, such as twin-key encryption, with corresponding public and private keys assigned to the user. Those skilled in the art will recognize there are various methods for authenticating the identity of a user, any of which may be used in accordance with the present invention. Other such methods for authenticating the identity of a user include, but are not limited to, tokens and smart cards. More details concerning user authentication are given further below.
It is appreciated that, despite the details given herein, other methods can be used to provide the security and authentication results obtained by the above three-tiered regimen. Additionally, any one of the three tiers can substituted with an alternative procedure that substantially accomplishes the same task. Finally, though all three tiers are preferably practiced in connection with the present invention, it is appreciated that less than three tiers—or, alternatively, more than three tiers—can be utilized in establishing the present system 10 for secure data exchange.
Once all three security and authentication tiers are satisfied, the user, by way of the device client 54 of the remote device 16, can transmit along the data tunnel 22 an access request to the corporate network 12 (via the sVPN server 60), which is received by the corporate client 52. The access request can include any request requiring access to network data 18 or applications 20. For example, the access request can include a request to receive access to email messages, web pages, document files, or other data of the corporate network 12. As illustrated in
It is noted here that once the data tunnel 22 is established and all authentication and security procedures have been met, the sVPN server 60 preferably does not interact with (i.e., caching, transcoding, decrypting, etc.) access requests, access replies, or any other data being transferred between the remote device 16 and the corporate network 12, but merely enables the data transfer to pass through it.
Like the connection signals 50, the keep alive signal 51, and the connection signal replies 53 discussed above, the access request transmitted by the device client 54 in the present embodiment comprises a protocol structure that enables it to be transmitted as web traffic. In particular, each packet comprising the access request includes an http header or similar protocol identifier that will cause the firewall 24 and the proxy 82 to recognize the packet as web traffic and allow its passage through the designated port of the corporate network 12, in this case, port 443. An underlying protocol, such as IPSec, also resides in the packet and contains the actual data pertaining to the access request. This arrangement of the data packets comprising the access request transmitted by the device client 54 thus allows them to pass through a port already open for such traffic, thereby avoiding the need to open yet another port through the firewall 24. Any packets comprising the response by the corporate client 52 to the access request of the device client 54 are also packaged in this manner such that they too pass freely through the firewall 24, as will be seen.
The above access request, originally produced by an application and sent by the device client 54 of the remote device 16, is transmitted via the data tunnel 22 using the corresponding template 102 of the device client 54. For example, the access request can pertain to a request for e-mail header information to be used by the e-mail application 106 of the remote device 16. As such, the access request is transmitted using the template 102A pertaining to such an e-mail header request. The inflection points 104 of the template 102A correspond to such an e-mail header request. Again, the access request can comprise any one of a variety of request types, and the templates 100 and 102 can be configured to pertain to one of these types. It is noted that, in this configuration, the e-mail application 106 of the device client 54 interprets the template 102 as representing the application or server that is actually located in the corporate network 14. As such, the template 102 acts as a "proxy" for that corporate application or server, in this case, the e-mail server 108.
As seen in
The corporate client 52 then matches the access request to the appropriate template 100 before forwarding it to the designated application in the corporate network 12. For instance, continuing the above example, the e-mail header access request sent from the device client 54 is received at the corporate client 52 and is matched to the appropriate template 100A. The data contained in the inflection points 104 of the template 100A are then extracted and sent to the e-mail server 108, where the access request is processed and the requested data is forwarded to corporate client 52 in response to the access request. As was the case with the device client 54, the e-mail server 108 interprets the template 100A as representing the e-mail application 106 that is actually remotely located in the remote device 16. Thus the template 100A acts as a proxy for the e-mail application 106.
The manner in which the access request is responded to can be defined and/or limited by the corporate network 12. By allowing the corporate network 12 to control what acts are performed in response to the access request, the corporate network is able to maintain control over access to network data and applications and can control how these network elements are manipulated within the network. Predefined acts can include, but are not limited to, retrieving email headers, retrieving email message bodies, retrieving web page data, deleting email, faxing email data or web page data to the user, and transmitting other network data between the corporate client 52 and device client 54.
Once received by the corporate client 52, the data is packetized as an access response to the access request according to an appropriate template 100. The templated access response is then forwarded via the data tunnel 22 for receipt by the device client 54 in a similar manner to that described above. In one embodiment, the access response can be incorporated into the continual connection signal string being continually sent by the corporate client 52 to maintain the data tunnel leg 22A open, as described earlier.
In one embodiment, the transmission of data contained in an access response is performed via the data tunnel 22. In another embodiment, a second data tunnel (not shown) is established for the transmission of the access response. It is to be remembered that these data tunnels cooperate with the corporate client 52, the device client 54, and the sVPN server 60 in a spontaneous VPN configuration in enabling the secure transmission of data between the corporate network 12 and the remote device 16. In the case where a second data tunnel is implemented for data transfer, the second data tunnel can be established through the same port used for the data tunnel 22 (e.g., Internet port 80, port 443) or through a separate port.
In one embodiment, a null template pair (not shown) can be designated in the templates 100 and 102. The null template pair can be configured to capture and transmit data between the corporate client 52 and the device client 54 that has been compared with the other templates 100 or 102 of the corporate or device client and does not match with any of those templates. Such unmatched data can then be captured by the null template on either the corporate client side or the device client side and transmitted over to the null template of the other client. The respective client 54 can then forward the data according to pre-defined procedures. In this configuration, the null templates enable the spontaneous VPN system to operate similar to a traditional VPN configuration, wherein data is not collected and assigned according to protocol templates 100 and 102.
It should be noted that more than one remote device can be utilized in connection with the corporate network 12 at any given time. Thus, the illustration of one remote device is merely exemplary. Similarly, multiple corporate clients disposed in one or more corporate networks can be utilized in accordance with the present teachings while still residing within the scope of this invention. Reference is now made to
3. Simplified User Authentication
Reference is now made to
Once authentication by this or other similar method is accomplished, the security credential information can be synchronized by the corporate client 52 with the authentication/password requirements of other designated applications, such as application servers 120 in the corporate network 12 that the user of the remote device 16 may choose to access. This synchronization causes the user authentication requirements of each designated application server 120 to be met. This in turn enables the user to access the various applications without again having to enter appropriate security credential information, such as a password, for each application contained on the application servers 120, thereby streamlining and simplifying use of the network for the user. This synchronized authorization can be distributed as narrowly or as broadly as designated by the corporate network 12 and security administrator.
The present invention enables secure data transfer between remotely disposed components using a simplified connectivity infrastructure. This in turn enables data synchronization and access between a corporate network and a remote device. In particular, the synchronization of corporate data with remotely disposed devices, as well as the utilization and enablement of native device applications in conjunction with a corporate network, are provided for. It should be understood that, though the principles herein have been directed at implementation within a spontaneous virtual private network environment, these principles can also be largely applied to other data transport embodiments having varying hardware/software implementations, such as typical VPN configurations.
The present invention may be embodied in other specific forms without departing from its spirit or essential characteristics. The described embodiments are to be considered in all respects only as illustrative and not restrictive. The scope of the invention is, therefore, indicated by the appended claims rather than by the foregoing description. All changes which come within the meaning and range of equivalency of the claims are to be embraced within their scope.
|Cited Patent
|Filing date
|Publication date
|Jan 31, 1989
|Aug 25, 1992
|International Business Machines Corporation
|System for interconnecting applications across different networks of data processing systems by mapping protocols across different network domains
|May 1, 1995
|Jan 14, 1997
|Digital Equipment Corporation
|Method and apparatus for end-to-end encryption of a data packet in a computer network
|Nov 18, 1998
|Feb 29, 2000
|International Business Machines Corporation
|System and method for cache management in mobile user file systems
|Aug 26, 1997
|May 9, 2000
|V-One Corporation
|Multi-access virtual private network
|Mar 16, 1999
|Jun 27, 2000
|Novell, Inc.
|Secure intranet access
|Aug 28, 1997
|Jul 18, 2000
|Kokusai Denshin Denwa, Co., Ltd.
|Method for constructing a VPN having an assured bandwidth
|Aug 1, 1997
|Jul 18, 2000
|Novell, Inc.
|Method and apparatus for providing a virtual private network
|Mar 28, 1997
|Aug 15, 2000
|International Business Machines Corporation
|Method and apparatus for lightweight secure communication tunneling over the internet
|Aug 22, 1997
|Oct 24, 2000
|Honeywell International Inc.
|System and methods for generating and distributing alarm and event notifications
|Jun 12, 1997
|Jan 9, 2001
|Vpnet Technologies, Inc.
|Apparatus for implementing virtual private networks
|Mar 4, 1998
|Jan 23, 2001
|Internet Dynamics, Inc.
|Secure delivery of information in a network
|Jun 12, 1997
|May 1, 2001
|Vpnet Technologies, Inc.
|Architecture for virtual private networks
|Oct 10, 1997
|May 8, 2001
|Novell, Inc.
|Method and system for combining computer network protocols
|Jun 7, 1999
|May 15, 2001
|Openwave Systems Inc.
|Method and system for securely interacting with managed data from multiple devices
|Dec 9, 1998
|Sep 18, 2001
|3Com Corporation
|Method and system for reflexive tunneling
|Oct 2, 1997
|Sep 18, 2001
|Micron Technology, Inc.
|Method for providing a fault tolerant network using distributed server processes to remap clustered network resources to other servers during server failure
|May 7, 1997
|Sep 25, 2001
|Cisco Technology, Inc.
|Call center system where users and representatives conduct simultaneous voice and joint browsing sessions
|Feb 22, 1999
|Dec 18, 2001
|Secure Computing Corporation
|Secure server utilizing separate protocol stacks
|Nov 10, 1998
|Jun 25, 2002
|Netscaler, Inc.
|Internet client-server multiplexer
|Aug 3, 1999
|Aug 6, 2002
|International Business Machines Corporation
|Technique for enabling messaging systems to use alternative message delivery mechanisms
|May 12, 1998
|Oct 29, 2002
|Kabushiki Kaisha Toshiba
|Router device, datagram transfer method and communication system realizing handoff control for mobile terminals
|Aug 26, 1999
|Mar 4, 2003
|Verizon Laboratories Inc.
|Unified messaging notification
|Jun 11, 1999
|Apr 8, 2003
|Netmotion Wireless, Inc.
|Method and apparatus for providing mobile and other intermittent connectivity in a computing environment
|Nov 10, 1999
|May 13, 2003
|Qualcomm, Inc.
|Data center for providing subscriber access to data maintained on an enterprise network
|Jul 9, 1999
|Jul 15, 2003
|Malibu Networks, Inc.
|IP-flow identification in a wireless point to multi-point transmission system
|Nov 10, 1999
|Aug 19, 2003
|Randy Salo
|Clients remote access to enterprise networks employing enterprise gateway servers in a centralized data center converting plurality of data requests for messaging and collaboration into a single request
|Apr 11, 2001
|Oct 7, 2003
|Openreach Inc.
|Methods and systems for enabling a tunnel between two computers on a network
|Nov 8, 2000
|Mar 9, 2004
|Aether Systems, Inc.
|System, method and computer program product for providing server discovery services during a startup sequence
|Dec 6, 2000
|Jul 20, 2004
|Covad Communications Group, Inc.
|Virtual L2TP/VPN tunnel network and spanning tree-based method for discovery of L2TP/VPN tunnels and other layer-2 services
|May 8, 1998
|Oct 5, 2004
|Lucent Technologies Inc.
|Mobile point-to-point protocol
|Nov 13, 2000
|Mar 29, 2005
|Cisco Technology, Inc.
|PPP domain name and L2TP tunnel selection configuration override
|Jul 6, 2001
|Oct 3, 2006
|Samsung Electronics Co., Ltd.
|Multi-layered packet processing device
|Mar 16, 2001
|Dec 25, 2007
|Protegrity Corporation
|Application-layer security method and system
|Oct 23, 1998
|Nov 8, 2001
|Stephen Uhler
|Method and apparatus for accessing devices on a network
|Dec 18, 2000
|Jan 24, 2002
|Mccullough David J.
|Method and apparatus for improving peer-to-peer bandwidth between remote networks by combining multiple connections which use arbitrary data paths
|Mar 22, 2001
|Feb 21, 2002
|Mark Tuomenoksa
|Method and system for managing and configuring virtual private networks
|Apr 30, 2001
|Oct 31, 2002
|Xerox Corporation
|External access to protected device on private network
|Apr 25, 2002
|Jul 29, 2004
|Serge Haumont
|Method for transmitting application packet data
|Mar 5, 2004
|Dec 16, 2004
|Intellisync Corporation
|Virtual private network between computing network and remote device
|Jan 11, 2006
|Jun 12, 2008
|Guy Almog
|Method and System For Optimizing Dns Queries
|Aqun et al. "Research on Tunneling Techniques in Virtual Private Networks", IEEE, Aug. 2000, pp. 691-697, especially pp. 692-696.
|Cobb, S., "Security Issues in Internet Commerce", IEEE, Jul. 1996, pp. 186-191.
|Japanese Office Action, corresponding to Japanese Patent Application No. 2006/501219; pp. 1-5.
|Okada et al., "Achieving High Scalability in VPN-Exchange, a Method of Constructing Star-type End-to-end VPN", Research Report, Feb. 15, 2002, NTT Information Sharing Platform Laboratories, pp. 115-120, vol. 2002, No. 12, Information Processing Society of Japan.
|Stalings "Cryptography and Network Security Principles and Practices" Prentice Hall 1999.
|U.S. Appl. No. 10/884,412, filed Jul. 2, 2004, Darren L. Wesemann, et al.
|Citing Patent
|Filing date
|Publication date
|May 18, 2007
|Mar 27, 2012
|General Electric Company
|Systems and methods for changing parameters of a controller
|Jan 23, 2013
|May 21, 2013
|Sideband Networks, Inc.
|Network security as a service using virtual secure channels
|Aug 12, 2015
|Oct 24, 2017
|National Information Assurance Corporation
|Systems for securely connecting to remote networks
|May 18, 2007
|Nov 20, 2008
|Richard Lee Lawson
|Systems and methods for changing parameters of a controller
|Mar 10, 2017
|Jun 29, 2017
|Level 3 Communications, Llc
|System and method for routing calls associated with private dialing plans
|U.S. Classification
|713/151, 726/15
|International Classification
|Cooperative Classification
|Jul 8, 2004
Owner name: INTELLISYNC CORPORATION, CALIFORNIA
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:WESEMANN, DARREN L.;REEL/FRAME:015555/0572
Effective date: 20040629
Owner name: INTELLISYNC CORPORATION,CALIFORNIA
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:WESEMANN, DARREN L.;REEL/FRAME:015555/0572
Effective date: 20040629
|Jul 12, 2011
|Certificate of correction
|Mar 14, 2013
|Fee payment
Year of fee payment: 4
|Aug 17, 2017
|Fee payment
Year of fee payment: 8


text:
Amphenol PCD is one of the world's leading suppliers of interconnect products for Military, CommercialAerospace, and Industrial applications. The company designs and manufactures a wide range of products, including system attachments, junction modules, relay sockets, terminal blocks, rectangular connectors, circular connectors, cable assemblies, and adapters. Each product is made and engineered with the highest quality standards in the industry. ECCO is the leading source for all your Amphenol PCD requirements.
Product offerings include:
- Backshells
- Cable Solutions
- Circular
- Field Bus
- Junction Modules
- Luminus Series
- Military Audio/Power
- Rectangular
- Relay Sockets
- System Attachments
- Terminal Blocks
- Waterproof Solutions

subset: commoncrawl


text:
About Us
Our Mission
Our mission is to provide a sound, affordable, Christian education based upon the Bible to enable our students to develop Christian character, to establish a sound academic foundation, and to promote the Biblical worldview. Our program is designed for families who believe in the Lord Jesus Christ and are dedicated to serving Him.
Statement Of Faith
The Mission Blvd. Baptist Church operates the Fayetteville Christian School. The school adheres to the church's statement of faith. Major points of the Mission Blvd. Baptist Church statement of faith can be found here…
Our Philosophy
A school's philosophy makes all the difference in how it operates. Its philosophy includes its foundational concepts of reality and the guiding principles logically springing from them. Please click here to read about our school philosophy…
A Brief History
Founded in 1978 with parents volunteering to work together to provide an affordable education for their children, FCS has students from all over northwest Arkansas. Click here to read more about our history.
Fayetteville Christian School Board Members
Statement Of Faith
Fayetteville Christian School is a ministry of the Mission Boulevard Baptist Church. The school adheres to the church's statement of faith. Its major points include:
- The Bible is supernaturally inspired. It is the final revelation of the will of God to man. We use the traditional King James Version as the textbook in our church and school.
- There is one living and true God, the infinite Spirit who is from everlasting to everlasting. He is omnipotent, omnipresent, and omniscient. His nature is righteous, just and loving. He is the creator and ruler of the universe, worthy of all honor, confidence, and love.
- In the unity of the Godhead there are three persons: the Father, the Son, and the Holy Spirit, all equally God, of the same nature, yet fulfilling different offices in the work of redemption. The Father represents God's authority. Jesus Christ, the virgin-born Son, is the revealer of God and sacrifice for sin. The Holy Spirit convinces men of God's truth and draws them to Christ as Savior.
- We accept the Genesis account of Creation, that God directly created man in His own image. We reject the notion that living creatures evolve into new kinds of organisms.
- God created man in innocence, yet man voluntarily disobeyed God and fell into his present sinful condition, and all mankind are now sinners by choice and under just condemnation.
- The devil is an actual person, created as an angel, who fell through pride and now is the enemy of God and Christ and humanity.
- The Gospel is God's means of saving man from sin. The Gospel is the good news of the death, burial, and resurrection of Christ to pay for the sins of mankind. It is the Gospel of Grace by which God saves all those who will come to Him repenting of their sins and trusting Him to keep His promise to save them.
- Salvation is the free gift of God. It is given by grace through faith without any works to all who receive Christ as their Lord and Savior. All believers have God's righteousness imputed to them. They are children of God by the new birth and have everlasting life. They are also citizens of the Kingdom of Heaven, and are eternally secure in Christ.
- All Christians are responsible to live a pure, holy life, not in order to be saved, but to please Christ and to have an effective witness for Him.
- After removing believers in the Rapture, God will judge the earth in the Tribulation; and Christ will return to rule the earth for a thousand years. After the Millennial Reign of Christ, the unsaved will be judged and believers will live forever with the Lord in a New Heaven and a New Earth.
- The Church is Christ's organization to carry the Gospel to the world and to make disciples. It is an educational institution. A church is a congregation of baptized believers covenanted together to fulfill the New Testament's instructions to the churches. The New Testament church has been doing His work from the time that the Lord Jesus Christ founded it during His earthly ministry until today, and it will continue until the end of the age.
Because FCS is an educational ministry of the Mission Boulevard Baptist Church, we do teach the Bible from the historic Baptist perspective. FCS has had the privilege to have students of many faiths in our program. While we respect the right of others to hold different beliefs, FCS teaches and upholds the historic Baptist viewpoint.
Our Philosophy
Our school's philosophy determines how it operates. Its philosophy includes its foundational concepts of reality and the guiding principles logically springing from them. A Christian education derives its foundational concepts and guiding principles from the Bible.
Fayetteville Christian School is based on the Biblical worldview with the traditional philosophy of education. God has revealed His truth in the Bible which is His standard for evaluating all ideas and actions. The Bible tells of two educational institutions: the family and the church. The Lord has given parents the responsibility to train up their children (Pr. 22:6; Eph. 6:4; Dt. 6:7-8), and He has given His church the responsibility to teach His instructions (Mt. 28:19-20; Eph. 4:11-15). Operating under the auspices of the Mission Boulevard Baptist Church, FCS combines the efforts of parents and the church to provide a Christian education. Our competent Christian faculty helps parents provide their children academic instruction consistent with Christ-centered teaching received both in the home and the local church.
Fayetteville Christian School's philosophy is based upon the Biblical view of God and humanity. We recognize that God is the loving, righteous, and just ruler of the universe and that mankind, although created in the image of God, has chosen to fall into sin. Through Jesus Christ's death on the cross and His resurrection from the grave, God has provided the way for all of us to be reconciled to Him. The most important issues in life are that a person be reconciled to God through faith in Christ and that a person lives to bring others to Christ. This responsibility to lead others to Christ requires one to develop in Christian character and to promote the Biblical worldview. It causes one to strive to be a leader, standing against the pressures to do wrong, and leading others in doing what is right.
We have the traditional philosophy of education based upon the truths, goals and guiding principles that have marked a sound education throughout the ages. Because every one of us is ultimately accountable to God, we need the knowledge and skills necessary to make decisions that please Him and that benefit our fellow human beings. Curriculum in each subject should progress from foundational concepts to mastery. Proven methods of instruction and training should be used.
Our school adheres to these guiding principles:
- Education should be God centered. Because the LORD is the Lord of all aspects of life, all subjects should be viewed from His perspective and all ideas evaluated according to his Word. His truth should be integrated throughout the curriculum.
- Education should focus on character development. Christ-like character is the most important quality for anyone to develop. Our choices, and thus our experiences, result from our character. Character training is accomplished by keeping clear standards and examples of good behavior before the students. It is also essential that the students be expected to conform to proper attitudes and behavior; therefore, effective supervision and discipline are an essential part of the process. Christian character results from a personal relationship with and respect for the Lord Jesus Christ coupled with such qualities as compassion, a servant heart, obedience, purity, and loyalty.
- Education should prepare a person for adult life. Whether preparing for further education or for going directly into the work world, everyone needs a spiritual orientation based upon the Bible; a mastery of reading, writing and math skills; a functional knowledge of history; a scientific understanding of the universe; and practical living skills. Academics, athletics, and extra-curricular activities help students develop not only knowledge but also responsibility, courtesy, discipline, confidence, initiative and other qualities they need in order to be successful adults.
- Education should be compassionately authoritarian. Because children are not born with the knowledge, skills, and character needed for adult life, they must be taught and trained. The teacher is responsible to impart knowledge and skills; therefore, the teacher must be a worthy example understanding the importance of his or her influence upon the children, and must have authority to control the class. To receive maximum benefit from the class, the student is responsible to respectfully submit to the teacher. The teacher must lovingly, firmly, and wisely guide the students throughout the education process.
Recognizing that it is humanly impossible to fulfill these guiding principles, we rely upon the wisdom and guidance of the Bible and the Spirit of God.
Fayetteville Christian School is a team composed of our parents, students, school personnel, and the church. The school works with parents to educate their children. Our teachers and staff give their time in response to a spiritual calling to offer a Christian education that is affordable to those who are committed to a Biblically centered education for their children. Our ultimate goals are that all our students know Christ as Lord and Savior, have Christian character, and promote the Biblical worldview by their lives of service and testimony.
A Brief History
In 1978, the parents of the Mission Boulevard Baptist Church became convinced of the need for their children to have a Christian education. Because most families could not afford the rates of most Christian schools, we determined to work together to provide a Christian school for our children. All teachers and staff were parents giving their time to make an affordable Christian education for their children and others in the community. In the fall of 1978, MBBC began the Mission Boulevard Baptist Church Child Development Ministry for K4, and K5. The following year we added 1st and 2nd grades.
In the summer of 1981, the church youth group and their parents requested that we have all twelve grades. Stepping out in faith that the Lord would provide teachers, we announced that we would go through high school. Qualified people volunteered to teach the classes, and we have offered K3 through 12th grades ever since.
Recognizing the need for our 7th through 12th grades to have the benefits of accreditation for transfers, athletics, scholarships, etc, we achieved accreditation through the Arkansas Nonpublic School Accreditation Association (ANSAA) for our secondary in 1994.
Because God continues to call people to give their time and lives as an offering to Himself, FCS continues to provide affordable, Christian education in Northwest Arkansas.


text:
Stephen Hunt: Sometimes you can feel like the poor relation as an Ireland international
Sometimes the pitfalls of playing for your country outweigh the benefits
There are plenty of hurdles a player must overcome in his career but one they often don't see coming is an international call-up. Why would you see it as an obstacle? It's a great achievement, a reward for you and your family, as well as everyone who has believed in you.
It's something to celebrate and savour. A time to reflect on what you have achieved.
That's how it should be seen, but when you get called up into an England squad, it doesn't always work out like that.
Perhaps it's different at Manchester United or Chelsea, but an England call-up for a player at Reading or Wolves becomes a big story, and with the big story comes big attention.
Often a player has been a bit of an unknown before that but at about the same time as he's getting his call-up for the England squad, scouts have been watching him, they've started to figure him out. Teams now know what he's going to do.
So they get tighter on him, they know his weaknesses, they exploit them and everything suddenly becomes tougher. At the same time people are expecting more from this England international. The crowds want something special, a touch of class, a bit of skill and there are more demands.
So a player might suddenly not look like the player he was, but he's still doing the same things except some of them have been figured out, and some of the others aren't as impressive as they once were now that he's an England player and people have such high hopes.
Soon they start saying that the minute he got the call-up, he got lazy. 'It turned his head,' they'll say, when the player is still doing the same things but those things are no longer enough. Now he starts thinking more about them. Maybe he needs to work harder, maybe the critics are right, maybe he has got complacent. So he stops doing the things he was doing before he got the call-up and starts doing something else instead. He tries to alter his game but that doesn't work either.
Read more: Dion Fanning: 'John Delaney was either the smartest guy in the room, or the king of the eejits. Or both'
Read more: Eamonn Sweeney: A repeat of '95 and you will never see the English here again
There is a level of expectation around an England player which doesn't exist for an Ireland player. I think nearly every Irish player called into an international squad sees it as a great achievement and keeps going. In part, this is because few people in England are that concerned with the Ireland squad and the player is able to get on with things.
They might be if Jack Grealish gets a call-up but even that would be bigger news in Ireland than it is England. For the most part, it doesn't become the burden it is for some at England.
There are also not the distractions. An England international can start to think about the commercial benefits that come with being an England international. They get contracts on the back of it and they can sometimes be rewarded too easily. They can get big money for personal appearances and nobody would begrudge them but it can feed into the idea that they've made it.
When Matt Jarvis got his call-up while we were at Wolves, everybody started talking about him. The big clubs were said to be interested in him and people really wanted to see what he'd do next. I was in competition for a place with him but he was the next great hope of English football or maybe of Midlands football. Either way, he was good news for the club. They had an England player who the public wanted to see. It made it difficult for me.
People see England internationals as something special and others might not see them the same way. Roy Keane was asked on Friday if the England players respected Irish players. He said they did but sometimes you can feel like the poor relation as an Ireland international. You have the same feelings of pride, you have worked as hard to get there, and people are dismissive. It's why today's game won't feel like a friendly.
Sunday Indo Sport
Promoted Links
Related Content
- Dion Fanning: 'John Delaney was either the smartest guy in the room, or the king of the eejits. Or both'
- Eamonn Sweeney: A repeat of '95 and you will never see the English here again
- Ministers turn on FAI boss John Delaney over €5m FAI shame
- Wayne Rooney: I never even considered playing for Ireland


text:
Going Solar Is Now Affordable
Our Experienced Solar Consultants Help You Design The Perfect Solution
From examining your current eletrical usage and costs to assisting with the correct financing plan, you will receive a custom designed solar energy plan which suits you and your family.
What Our Customers are Saying
Our Services
- Why Choose Us?
- About Solar Energy
- Financing Options
Ready To Go Solar?
- Fully licensed & insured installers
- Custom tailored solutions
- Free in home consultations
- Easy financing options
- 20 year warranty
- Transparent contracts
- Eco-friendly
- State and federal incentives
- Roof repair if damaged during installation
- Customer service is our top priority
About Solar Energy
Solar power is energy from the sun that is transformed into thermal or electrical energy.
Solar energy is the cleanest and most abundant renewable resource source available, and the United States has some of the richest solar resources worldwide. Modern innovation can harness this energy for a variety of usages, consisting of producing electricity, supplying light or a comfortable interior environment, and heating water for domestic, commercial, or industrial usage.
Solar Benefits
Solar power makes it possible for homeowner to utilize the sun to power everyday life: running your a/c, washing clothes, enjoying TELEVISION, cooking dinner. All while decreasing your carbon footprint, and without burning fossil fuels or putting a stress on the electrical grid. And while the environmental benefits of solar power are substantial, numerous residents discover that the benefit, distinct features, and expense savings of owning a solar power system are a lot more attractive.
Top 10 Advantages of Solar Energy
#1 Significantly decrease or even remove your electric expenses
Whether you're a house owner, organization, or nonprofit, electricity expenses can make up a large portion of your regular monthly costs. With a solar panel system, you'll generate complimentary power for your system's whole 25+ year lifecycle. Even if you do not produce One Hundred Percent of the energy you consume, solar will reduce your utility bills and you'll still save a lot of money.
#2 Make a fantastic return on your investment
Solar panels aren't an expense-- they are among the very best methods to invest, with returns rivaling those of more traditional investments like stocks and bonds. Thanks to considerable electrical energy bill cost savings, the typical American property owner settles their photovoltaic panel system in 7 to 8 years and sees an ROI of 20 percent or more.
#3 Safeguard against rising energy costs
One of the most clear cut benefits of solar panels is the ability to hedge utility prices. In the previous 10 years, domestic electrical power prices have actually gone up by an average of three percent yearly. By buying a solar energy system now, you can repair your electrical power rate and secure against unforeseeable boosts in electricity expenses. If you're a business or homeowner with changing cash flow, going solar likewise helps you better forecast and manage your costs.
#4 Boost your house value
Multiple studies have discovered that homes equipped with solar energy systems have higher residential or commercial property worths and offer more quickly than non-solar houses. Appraisers are significantly taking solar installations into factor to consider as they value houses at the time of a sale, and as homebuyers become more educated about solar, need for properties equipped with solar panel systems will continue to grow.
#5 Increase U.S. energy self-reliance
The sun is a near-infinite source of energy and a crucial part of accomplishing energy self-reliance in the United States. By increasing our capacity to create electrical energy from the sun, we can likewise insulate our nation from price fluctuations in global energy markets.
#6 Create jobs and assist your local economy
Inning accordance with The Solar Foundation, the solar industry added tasks at a rate almost 12 times faster than the total U.S. economy in 2015, representing 1.2 percent of all jobs in the country. This growth is anticipated to continue. Because solar-related tasks have the tendency to be greater paying and can not be contracted out, they are a significant contributor to the U.S. economy.
#7 Secure the environment
Solar is an excellent method to decrease your carbon footprint. Buildings are accountable for 38 percent of all carbon emissions in the U.S., and going solar can significantly reduce that number. A typical residential photovoltaic panel system will remove three to 4 lots of carbon emissions each year-- the equivalent of planting over 100 trees every year.
#8 Demonstrate your commitment to sustainability
Sustainability and corporate social obligation are crucial parts of a company's culture and worths. They also produce bottom line outcomes. Increasingly, customers and neighborhoods are acknowledging and rewarding organisations that decide to operate properly. Organisations are discovering that "green" credentials are a powerful chauffeur of consumer purchasing choices, producing goodwill and enhancing service outcomes.
#9 Start Saving from Day 1
Solar purchase power arrangements (PPAs) and solar leasing has actually made it possible for house owners to go solar for little or no loan down.
Lots of homeowners decide to fund their solar panels with among the "pay-as-you-go" financing choices. This suggests that a third-party company-- the solar company-- owns the solar system and looks after installation, upkeep, monitoring and repair works. You just pay the solar company for electricity-- less than you would've paid the utility company.
As of June 2013, 75% of all American houses have access to pay-as-you-go solar.
#10. Solar is a Secure Financial investment
The energy business are notorious for their changing and unreliable electrical power rates. There is plainly an upward trend.
With solar panels and basic math, we can determine how much electrical energy will be created, and most significantly, at exactly what rate, for at least the next Twenty Years (fixed energy expenses).
What are the various payment options?
We have many flexible purchasing agreements for customers who would like to install a new home solar system. There are three different payment options, making them a viable choice for customers of all budgets. The payment options include Lease, PPA, and Purchase.
The Lease
- Low, fixed payments each month
- System insurance for 20 years, including maintenance
- Flexible end-of-term options, including system upgrade, lease extension, and free panel removal
Power Purchase Agreement (PPA)
- We own the solar panel system
- $0 down for installation
- Customers only pay for the solar energy that they use
- Customer pays for the system upfront and owns the system
- System monitoring and maintenance for 20 years
- Receive 30% federal tax credit
- See a return on investment within 7-10 years
What happens when the contract for my lease is finished?
We provide our customers with a few different options for when their lease contract is up. Customers can upgrade their equipment to the newest solar technology available, extend the agreement, or have the panels removed at no cost.
What is the warranty?
The Lease and PPA include a 20-year warranty during the lifetime of the system. This warranty exceeds that of most other solar installers' warranties.
Frequently Asked Questions
Starting A Solar Panel Business?
Hello To All, I Want To Start My Own Solar Panel Business. Sales, Installing And Repairs. I Know How To Install The Panels I Just Need Some Advice As How To Go About Starting. Where Do I Start, How Much Do I Need, Any Required Licenses. Thank You For Your Time.
In most areas you will need to have a contractors license or pay someone who does to oversee the actual installs, also will you be doing Grid Tied systems or off-grid systems? You will need to have agreements with inverter manufacturers, and panel manufacturers.
You will probably require a Business License (depending on what State, county ..etc..) you live in. First stop would be City Hall or your county government office. I'd also ask my State representatives if they could supply any info as to any advantages given to "GREEN BUSINESSES"
Good Luck!
Questions About Charging Batteries Via Solar Panel...?
I Have An Electric Bicycle That I Travel To Work By, Pulling A Modified Child Carrying Trailer That Holds Two 12 Volt Deep Cycle Batteries In Series To Power The 24 Volt Bike Motor. I'M Thinking About Adding A 50 Watt Solar Panel (Or Larger Depending On The Room I Can Make Available) To Charge While I'M At Work And To Provide Some Extra Juice While On My More Distant Travels.
Can I Get A Solar Panel To Charge Them While They'Re Connected The Way They Are: In Series? Does Charging Work That Way?
I'Ve Read That In Order To Charge The 24 Volt Battery Setup (If The Answer To The Q Above Is Yes), The Output From My Solar Panel Would Need To Be A Little More Than 24 Volts. Is This True? If So, How Many Volts?
Since The Bike Is Supposed To Be Powered At 24 Volts And I Have An X-Volt (X ≫ 24V) Solar Panel Connected To It, Will This Cause Any Damage To The Controller Or Other Components While Running Them?
Will It Help Supply Power Even While The Motor Is Being Run?
The important part of the long answer is the charge controller - those batteries cost way too much to cook them out. And the controller maker will specify how much voltage your panels need to supply (more than 24 certainly) to provide a charge for several hours a day so you aren't wasting money on something that actually does very little.
I also hope you have a very secure location to store this rig at work because while a bike with a tow trailer is easy to disguise and awkward to move, as soon as you put a solar panel on it, it becomes a very obvious theft target and maybe a vandalism target. And since you want to charge at work, it has to be outside. And since for effective use the panel has to mostly face the sun but you don't want to drag it broadside through the air while riding, you will have to either work out a pivoting mount or angle the whole trailer to the general position of the sun when parked and have the panel flat on top. I personally would probably redesign so that at work the trailer pulled up along side the bike and was chained/locked to it to make a really awkward mass that had the panel bolted through the lid with blind bolts.
What Are Different Uses Of Solar Radiation?
What Are Different Uses Of Solar Radiation?
The energy from the sun can be utilized a number of different ways. The visible light is, of course, how we see during the day (although to a lesser extent up here in Seattle.) This is also what plants use for photosynthesis, where they use the sunlight to create chemical food energy for themselves. Plant life is the basis of all food chains, and so solar radiation is essential to life on earth. Solar radiation is also our planet's major source of warmth.
As far as what we as humans can engineer, there are a few things we do. One is the use of the sun's light* for heat. Since ancient times, humans have designed our buildings so that they are warmed by the sun, especially after the invention of glass which is used to retain that warmth efficiently. Some kinds of solar energy plants are also based on this idea. They use mirrors to concentrate the sunlight, using it to boil water for a turbine to create electrical energy.
Solar panels are another way of getting electrical energy out of solar radiation. These work off another principle, using the sunlight to create an electrical current directly.
*A lot of the light that transmits heat energy can't be seen by human eyes. This is called infrared light, which is just like the light we can see, except our eyes don't have the ability to interpret it.
Solar Energy?
If We Use Solar Energy As An Alternative What Would Be The Benifits For You And Your Community? Where Can I Get Good Data Showing The Differences Between Solar Energy And The What We Use Now (Burning Of Fuel)?
I dont know where you can get graphics about solar vs fuel but as benefits-- cleaner future although they claim solar panels are not recycleble... It depends on your location. For community the biggest adv can be net-metering. We are one of the biggest private community in Italy who sells solar produced energy to others:) We also invested into solar street lights and security lights as community- the rest was up to individual homes.
See an example on YouTube video about Green Homes in Sacramento: http://www.solarenergy-solarpower.com/solar-energy-for-homes.html
Its a big investment, use Solar Estimator to get an idea. Get prices from different companies. Most important take your time to search best deals- you can save lots of money. Compare prices and efficency, [(warranty is usually 20-25y), (company backround...)]
Do it right & claim then tax incentives/grants.
Good luck!
Run A Air Conditioner Off Solar Panel?
Can Someone Tell Me If I Can Run A Air Conditioner Off Solar Panel?
I Have A Et-P654210 210Wp Solar Panel. What Do I Need To Make It Work? I Am Told I Will Need A Enphase Energy Microinverter M210. Is That True?
I Am Looking To Run A 5000 To 8000Btu Air Conditioner To A Max Of 10000Btu Air Conditioner. I Need To Cool A 10X30 Space.
One Time I Read, I Need Total Watts Of Panel To Match Total Watts Of Air Conditioner. Then I Read, That I Do Not And Can Run More Watts Then What The Panel Is Depending On The Inverter And Batteries.
Can Someone Tell Me What And How To Make This Work Please? More Panes Or Inverter And Batteries?
You can expect such an air conditioner to use something like 500 - 800 watts of power.
The ET-P654210 210Wp solar panel produces at most 210 watts so you will need at least three of them. Since solar cells make DC (Direct Current) electricity, and air conditioners use Alternating Current (AC) electricity, you do need an inverter. The M210 is a 220 volt inverter, and I suspect you are looking at a window air conditioner that will probably use 110 volt power. And the M210 only puts out a maximum of 240 watts so you need one for each of the 3 or more solar panels you will have to use.
So the first thing to do is shop for air conditioners, getting the most energy efficient model you can find, paying close attention to the voltage and wattage ratings in the owner's manual or on the UL label on the back. Say it is a 500 watt, 110V unit. You will need three solar panels and three 110 volt model inverters.
Also note that the 210 watt rating of the solar panels if when the panel is facing DIRECTLY at the Sun. If you just lay them on the roof, then even if the roof is sloped at a good angle (30 degrees) and facing south, it will only produce the maximum power around noon. 4 hours before noon, unless to go up there and tip them up to face the morning Sun they will probably produce only about half that amount of power. So right there you either need a motorized mount to automatically follow the Sun or twice as many panels. However, if you are going to connect the solar panel(s) into the house power, so that it(they) merely supplement the power company power, then you can use any amount of panels, and the power company will supply whatever extra power you need. That requires a licensed electrician to do.
Or if you want to just power the air conditioner directly from the solar panels without any interconnection to the house power, then you need to know a lot more about electricity that you appear to know.


text:
6.4 lb. Titanium Carpet Wand
The XI – Titanium Wand from Diamond Products is the next-generation solution for the professional cleaner. Its innovative design helps to increase extraction of dirt and moisture from carpeted surfaces making each job faster and more efficient. Our all-American design & assembly along with 100% product testing ensure superior performance that is supported by unparalleled customer service and an industry-leading factory warranty.
- Construction: Titanium vacuum tube and Roto-molded head
- Vacuum Tube: 1.5″ diameter
- Pressure Rating: up to 500 psi
- Flow Rate: 1 gpm (gallons per minute)
- Spray Jets: Dual jets- T-Tips from Unijet
- Head: Roto-molded head with innovative "tear-drop" design, 13″ width
- Weight: Only 6.4 lbs.
- Glide Receiver: Built-in for airtight seal of custom glide
- Glide: Durable Delrin® glide
- Solution Line: Quick disconnect
- Lightweight, only 6.4 lbs.
- Rugged, high density polyethylene crosslink wand head with unique, tear-drop design for optimum water and soil recovery
- Durable, 1-1/2" titanium vacuum tube
- In-line filter to eliminate clogging of spray tips
- Built-in check valve eliminates excess dripping
- Custom fit, durable Delrin® glide reduces drag & friction for smooth operation on any carpeted surface
- Custom glide receiver for air tight fit of the Delrin® glide.
- Unique design incorporates spray tips into the wand head to provide streak-free, focused high temperature spray
- Reduced maintenance using T-T tips from Unijet spray nozzle system
- 1 year warranty
Additional Information
Contact A Sales Consultant
For more information, fill out the form below and a local sales representative will promptly contact you.


text:
While researching some products on Dafiti's website I found several beautiful shoes, apparently comfortable and with really good price. I liked this selection so much that I set up a post just to talk about this findings and share with you.
Comfort has been one of my priorities when choosing a shoe, so I gave priority to models with heavier heels. I still have a few shoes like that and I definitely want them to be more in my closet.
But I did not let go of the desire to have incredible and different shoes, so I fell in love with these ones. And this selection could not be more perfect for me, has rosy shoe in satin and with pearls, has vichy with bows and chic scarpin with straps.
vichy heels/ heart shapped bag / hat
This sandal with bows and vichy print is one of my favorites. So be ready to see it on many looks du jour this summer. Besides beautiful, it is really super comfortable, best choice!
And although the post is dedicated to the shoes, I could not avoid to show this heart bag from Santa Lolla. I showed you in the stories and I know you enjoyed it too. I think the red is out of stocj, but the black and beige are still available.
baby pink shoes / sunglasses / jewelry
Outro favorito é esse scarpin rosinha com pérolas, mal chegou por aqui e já foi direto para os meus pés. Super delicado e também confortável. Perfeito para aqueles meus looks rosinhas, né?
I have also wore the scarpin tricolor that appears in the first photo and definitely won points for comfort and looks incredible in the look. I'll show you more later this week. I've tried it all and the pink satin shoe and the vichy print shoe have comfortable heels. As soon as I actually wear it for a day I'll tell you more here, after all the focus is beauty with comfort right?
What about my choices? Any favorite?


text:
Ship-Iceberg Collision Database: Background, Operation, Contributions & Preliminary Analysis
|Search for: Caines, J.
|Technical Report
|Series title
|Student Report
|Iceberg; Collision; Database
|The Ship-Iceberg Collision Database is a collection of nearly six hundred and sixty ship and iceberg collisions in Northern waters. As the fourth consecutive engineering work term student to contribute to this project under the supervision of Brian Hill, Senior Technical Officer and Ice Tank Supervisor, NRC-IOT, this report outlines the contributions made to the project during the past work term, the methods of research utilized, and a preliminary analysis of the findings. It is intended that this project and report provide a means of forecasting the probability of collision with an iceberg in Northern waters, in an effort to engender safer ocean travel and stimulate further research and development regarding factors that affect the Safety of Life at Sea (SOLAS). Numerous research methods and sources were utilized in contributing to this project, primarily contemporary shipping registries, newspapers and gazettes. Trends and correlations discovered amongst incident parameters are examined using linear regression modeling, and prevalent findings are further discussed within the report. The preliminary analysis develops noted relationships between known incidents and collision parameters such as climatic conditions, vessel speed, and sea ice extent and iceberg sightings on the Grand Banks of Newfoundland. Historical fluctuations in sea ice extent, iceberg sightings and corresponding collisions are represented, providing insight into bygone disastrous eras. Though collisions now occur at a rate of approximately one to two incidents per year, the threat posed by ice has not diminished. Modern iceberg detection technologies such as radar, and the introduction of ice and iceberg monitoring agencies such as the International Ice Patrol, have been integral to the decrease of ship and iceberg collisions realized during the past century. Preventative measures must be furthered, and it is recommended that this project be maintained and marketed as a valuable online resource of ship and iceberg collision documentation and a basis for probabilistic risk analyses.
|Publication date
|National Research Council Canada. Institute for Ocean Technology
|St. John's, NL
|NRC Institute for Ocean Technology; National Research Council Canada
|Peer reviewed
|NRC number
|NPARC number
|Export citation
|Export as RIS
|Report a correction
|Report a correction
|Record identifier
|Record created
|Record modified
|Bookmark and share
- Date modified:


text:
NC Recycling Infrastructure. 2012 Eastern Carolina Environmental Conference Miller's Landing, Cherry Point MCAS Matt Todd , Industrial Development Specialist NC Department of Environment & Natural Resources Recycling Business Assistance Center.
Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.
2012 Eastern Carolina Environmental Conference
Miller's Landing, Cherry Point MCAS
Matt Todd, Industrial Development Specialist
NC Department of Environment & Natural Resources
Recycling Business Assistance Center
The North CarolinaRecycling Business Assistance Center
"RecyclingIndustryEconomic Developers"
Primary Processing
Secondary Processing
End Users
Commodity price tracking
Business development
Growth areas for 2012 and beyond
Pitt County
Catawba County
Buncombe County
Orange County
Swain County
Dare County
Watauga County
Macon County
Guilford County
Pamlico County
North Wilkesboro
Kings Mountain
Greensboro Charlotte
Fayetteville Durham
High Point Jacksonville
Raleigh (partial) Winston-Salem (pilot)
Waste Management Inc., Winston Salem
Waste Management Inc., Raleigh
Re-Community Recycling, Greensboro
Foothills Sanitation & Recycling, N. Wilkesboro
Sonoco Recycling, Raleigh
GDS, Conover
High Point MRF
Tidewater Fibre, Chesapeake, VA
Curbside Management, Asheville
American Recycling of WNC , Candler
ECVC, Greenville
Sonoco Recycling, Greenville, SC
Re-Community Recycling, Charlotte
Uwharrie Environmental, Mt Gilead
Sonoco Recycling, Jacksonville
Pratt Industries, Fayetteville
Davidson County MRF
Wagram Paper Stock, Wagram
Material Recovery Facilities in North Carolina
Person Industries, Roxboro
Benfield Sanitation, Mooresville
Kemp Recyclers, Goldsboro
Sonoco Recycling, Charlotte
North Davidson Garbage Service, Welcome
Red signifies Single Stream Facility
Orange County C&D Landfill, Chapel Hill
Abby Green, Winston Salem
Shotwell Landfill and Transfer Stations , Raleigh/Apex/Wendell
A-1 Sandrock/ARC, Greensboro
Davidson County C&D Landfill, Lexington
Coble Sandrock C&D Landfill, Liberty
Soundside Recycling, Jarvisburg
WCA of High Point
WCA Material Reclamation, Raleigh
Burke County C&D Landfill, Morganton
Handle Safe Systems, Asheville
Haywood MWP Facility, Clyde
Pitt County Transfer Station, Greenville
North Meck. C&D Landfill, Huntersville
Green Recycling Solutions, Maysville - proposed
Russo Dumpster Service, Charlotte
The Linda Construction Co, Charlotte
Hawk Sanitation & Recycling, Charlotte
Hwy 55 C&D Landfill & Recycling, Apex
Gold Hill Rd C&D Landfill, Asheboro
Hwy 49 C&D Landfill & Recycling, Harrisburg
AAA Hauling, Fayetteville
iCan/River City Transfer Station, Fayetteville
Type III* Compost Facilities in North Carolina
Brooks Contractor, Goldston
Nature's GREEN-RELEAF by Novozymes, Franklinton
Gallins Family Farm, Winston-Salem
Earth Farms, Stanley
Waste Stream Innovations, Mills River
McGill Environmental, Harrells
McGill Environmental, New Hill
*Type III compost facilities can accept food waste
Commodities move from a MRF to be prepped for sale to an end-user
Occurs largely w/ plastic and glass
Most fiber & aluminum go directly from primary processor to end-user
= user of recycled paper, glass, plastic, steel, aluminum
NC Recycling Markets Directory
A continuously updated, fully searchable on-line directory.
Business Development
Grants - Facilitated over $10 million in private sector infrastructure investment for 96 recycling companies in 2010-2012 with $2.25 million in recycling business development grants.
2010 grants - $750,000 to 29 companies, ~$3.6 million matching
2011 grants - $700,000 to 30 companies, ~$3.3 million matching
2012 grants - $800,000 to 37 companies, ~$3.5 million matching
Business Development - Other major investment 2010/11
Abbey Green C&D Processing, Winston-Salem
Clear Path Recycling, Fayetteville
Envision Plastics, Reidsville
Sonoco Recycling, Charlotte
Greenway Recycling, Concord
Focus areas
Construction & Demolition Recycling
Collectors Network
Electronics Recycling Infrastructure
Food Waste Collection
Jobs Study
Matt Todd


text:
Happy holidays from Sheryl Checkman Design and Life is Balance®!
If you enjoyed this post, make sure you subscribe to my RSS feed!
This entry was posted on Tuesday, December 27th, 2016 at 10:50 am and is filed under Design, Life is Balance. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.


text:
Nautilus Names Acting CFO
Toronto-based underwater mineral exploration company, Nautilus Minerals, has appointed Gavin Vandervegt as acting chief financial officer and corporate secretary of the company, effective September 2, 2016.
For the 5 years prior to this appointment, Vandervegt held the position of group financial controller of the company.
Before joining Nautilus, Vandervegt was the finance director of Katanga Mining, a copper company listed on the Toronto Stock Exchange, with assets located in the Democratic Republic of Congo.
Vandervegt has more than 15 years of commercial experience, predominantly within the resources sector, including financial reporting, management reporting, project management, corporate governance, commercial negotiations and business analysis. He has worked in both site based and corporate roles in Australia, the United Kingdom, Switzerland and Africa.


text:
Asian Chicks
Clicking any picture leads to VIDEO Gallery!
February 13th, 2008 by admin | Posted in
Ange has only been in the US a few months from China but that didn't stop Mr. Chew from tracking her down and asking her to come visit us. Ange was a little older than most of the Far East babes that come to the studio but she was so sexy with her curvy body and long black hair. She said she loved American cock and after
I sucked in her pretty milky white tits
of hers, Ange showed me how much by giving me an
Asian tongue massage
all over my shaft and balls. I grabbed Ange by the ankles and just started ramming her tight pussy hard with my stiff dick. She was a true freak as she sucked my cock some more before I turned her over on all fours and
stuck her shaved snatch doggie style.
Ange was really flexible and I had her knees back by her ears pounding away when I started to explode. She got on her knees and swallowed my sticky load. You have to keep up those foreign relations.
Download all the Asian Pornstars from Mr Chews!
Click To Join Fucked Up Facials for only $2.95
Fucked Up Facials
Fucked Up Handjobs