Methods and systems for securing VPN cloud servers

• US 10,484,428 B2
• Filed: 09/26/2016
• Issued: 11/19/2019
• Est. Priority Date: 06/09/2016
• Status: Active Grant

• Current Assignee: LGS Innovations LLC (CACI International Incorporated)
• Original Assignee: LGS Innovations LLC (CACI International Incorporated)
• Inventors: Chen, Michael J.
• Primary Examiner(s): Pyzocha, Michael
• Assistant Examiner(s): Tafaghodi, Zoha Piyadehghibi
• Application Number:
  US15/275,988
• Publication Number:
  US 20170359312A1
• Time in Patent Office: 1,149 Days
• Field of Search: 726 7
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 12/4679 Arrangements for the registration or de-registration of VLAN attribute values, e.g. VLAN identifiers, port VLAN membership
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]

Abstract

The present application is directed a computer-implemented method for enhancing security. The method includes a step of sending, from a VPN service provider, a request to a cloud provider to create a dynamic server on a cloud. Then, the VPN service provider receives a notification from the cloud provider that the requested server is available on the cloud. Subsequently, the VPN service provider embeds the dynamic server with a VPN service. Further, the VPN service provider sends a credential of the dynamic server to an entity on the network. The application is also directed to system for enhancing security on a cloud server.

Claims

1. A computer-implemented method for enhancing security on a network comprising:

sending, from a virtual private network (VPN) service provider, a request to a cloud provider to create a server on a cloud independent of an enterprise selection of the cloud server;

receiving a notification from the cloud provider that the requested server is available on the cloud;

embedding the server with a VPN service;

sending, from the VPN service provider, a credential of the embedded server to the enterprise on the network;

reviewing, via a graphical user interface (GUI) of the VPN service provider, a list of servers created by the cloud provider;

determining, via the GUI of the VPN service provider, which users in the enterprise to match with the generated servers;

evaluating on a portal on the GUI of the VPN service provider, progress of server generation by the cloud provider and one or more additional cloud providers; and

ranking efficiency of the cloud provider and the one or more additional cloud providers based on the evaluating step.

2. The method of claim 1, wherein an active session of the dynamic server lasts for a finite period of time until a predetermined condition is met.

3. The method of claim 2, wherein the finite period of time is configurable by the VPN service provider.

4. The method of claim 1, wherein the predetermined condition is selected from the group consisting of activity type, traffic type, load balancing and combinations thereof.

5. The method of claim 4, wherein the traffic type is selected from video, voice, web and combinations thereof.

6. The method of claim 1, wherein the request to the cloud provider is based upon the activity type or traffic type.

7. The method of claim 1, wherein the credential information includes one or more of an IP address, username, password and certificate for logging into the server.

8. The method of claim 1, further comprising:

receiving a request to create a second server on the cloud after the predetermined condition has been met.

9. The method of claim 8, wherein

an IP address of the second server is different from the IP address of the server.

10. The method of claim 9, wherein

the second server is hosted by a different cloud provider.

11. A computer-implemented system in a cloud computing environment for enhancing network security comprising:

a non-transitory memory having instructions stored thereon for embedding a server with a virtual private network (VPN);

a transceiver, operably coupled to the memory, for receiving and sending data; and

a processor operably coupled to the memory and the transceiver, the processor configured to execute the instructions of;

receiving, at a VPN service provider, a request from an enterprise to create a dynamic server that directs traffic of a user on the network to the internet;

sending, from the VPN service provider, a request to a cloud provider to create the dynamic server;

receiving a notification from the cloud provider that the requested server is available on a cloud;

embedding the server with a VPN service;

sending, from the VPN service provider, a credential of the embedded server to the enterprise;

reviewing, via a graphical user interface of the VPN service provider, a list of generated servers by the cloud provider;

determining, via the graphical user interface, users in the enterprise to match with the generated servers;

evaluating on a portal on the GUI of the VPN service provider, progress of server generation by the cloud provider and one or more additional cloud providers; and

ranking efficiency of the cloud provider and the one or more additional cloud providers based on the evaluating step.

12. The system of claim 11, wherein the processor is further configured to execute the instructions of:

receiving a request to create a second server for the enterprise after a predetermined condition has been met by a user; and

creating the second server.

13. The system of claim 12, wherein

an IP address of the second server is different from the IP address of the server.

14. The system of claim 13, wherein

the second server is hosted by a different cloud provider.

15. The system of claim 12, wherein

the predetermined condition is selected from the group consisting of activity type, traffic type, load balancing and combinations thereof.

16. The system of claim 15, wherein the traffic type is selected from video, voice, web and combinations thereof.

17. The system of claim 11, wherein the request to the cloud provider to create the server is based upon the traffic type of the user in the enterprise.

18. The system of claim 11, further comprising:

a display with a graphical user interface operably connected to the processor, wherein the graphical user interface includes a list of generated servers from the cloud provider, and a list of requests from the enterprise.

19. The system of claim 11, configured for use in security applications.