Google Secure Data Connector

I am looking at the Google Secure Data Connector, which can be used to retrieve the data stored in the intranet. Before starting, you are required to install the Secure Data Connector (SDC) inside your firewall.
(1). The Secure Data Connector send a https to tunnel server through port 443
(2). It will have https certificate authentication and then registration. Then the secure channel is established.
(3). A sshd process running with intetd mode (-i option) is spawned by the SDC. In this mode, the sshd expects a connection already established on the standard input. So the tunnel socket is bound to the sshd stdout/stdin. Refer to reverse ssh shell
(4) Also there is a local socks proxy is listened on default 1080 port.
(5) I am not sure what is running in the tunnel server side to forward port. There are well know technology to tunnel ssh through ssl.