Network-based Machine-to-Machine (M2M) private networking system

• US 10,455,387 B2
• Filed: 05/12/2016
• Issued: 10/22/2019
• Est. Priority Date: 05/13/2015
• Status: Active Grant

• Current Assignee: CyberReef Solutions Inc.
• Original Assignee: CyberReef Solutions Inc.
• Inventors: Nicholson, Hilton, Brown, III, Jamie Richmond, Pace, William, Staton, Linwood, Landman, Christopher, Reeves, Bryce
• Primary Examiner(s): Zhao, Don G
• Application Number:
  US15/153,287
• Publication Number:
  US 20160337784A1
• Time in Patent Office: 1,258 Days
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]

Abstract

An architecture for the creation of a private network for a customer, suitable for use for machine to machine communications and the Internet of Things, is disclosed. The system includes a private networking system, which includes routers for connection to a carrier core network, and VPN servers, capable of securely connecting to a customer'"'"'s enterprise network. The private networking system also includes security appliances and a controller to configure and operate the system. Through use of this private networking system, customers may easily create private networks for their enterprises.

Claims

1. A method of connecting mobile devices operating on a carrier network to a customer enterprise network, comprising:

assigning a private static IP address to a mobile device, the IP address indicative of the customer enterprise network with which the mobile device is authorized to communicate;

providing the mobile device with an Access Point Name (APN), the APN allowing a communication from the mobile device to be routed to a private networking system;

receiving the communication from the mobile device at the private networking system, wherein the communication flows through a first tunnel from a first Border Gateway Protocol (BGP) router disposed in the carrier network to a second BGP router disposed in the private networking system;

determining the customer enterprise network that the mobile device is authorized to communicate with based on the IP address and APN; and

securely forwarding the communication from the private networking system to the customer enterprise network via a second tunnel.

2. The method of claim 1, wherein the second BGP router disposed in the private networking system terminates the tunnel that originated at the first BGP router in the carrier network.

3. The method of claim 2, wherein a Virtual Private Network (VPN) server is disposed within the private networking system, in communication with the second BGP router, and the VPN server creates the second tunnel to the customer enterprise network from the private networking system.

4. The method of claim 3, wherein the second tunnel is a SSL tunnel or an IPSec tunnel.

5. The method of claim 3, wherein the VPN server is adapted to create different types of second tunnels, depending on a device type of the device within the customer enterprise network.

6. The method of claim 1, further comprising a second mobile device authorized to communicate with the customer enterprise network, wherein a separate communication from the second mobile device flows through the first tunnel.

7. A method of connecting a customer'"'"'s mobile device operating on a carrier network to the Internet, comprising:

assigning a private static IP address to a mobile device, the private static IP address indicative of a customer;

providing the mobile device with an APN, the APN allowing a communication from the mobile device to be routed to a private networking system;

receiving the communication from the mobile device at the private networking system, wherein the communication flows through a tunnel from a first Border Gateway Protocol (BGP) router disposed in the carrier network to a second BGP router disposed in the private networking system;

determining the customer that the mobile device is associated with; and

forwarding the communication from the private networking system to the Internet, whereby the private network system implements policies that define access granted to the mobile device, based on the customer.

8. The method of claim 7, wherein the policies limit types of activities that may be performed by the mobile device.

9. The method of claim 7, wherein the policies limit an amount of data that may be transmitted by the mobile device.

10. The method of claim 7, wherein the policies limit websites and applications that may be accessed by the mobile device.

11. The method of claim 7, further comprising a second mobile device associated with the customer, wherein a separate communication from the second mobile device flows through the tunnel.

12. The method of claim 7, wherein the second BGP router disposed in the private networking system terminates the tunnel that originated at the first BGP router in the carrier network.