Method and system to enable a virtual private network client

• US 10,505,921 B2
• Filed: 02/12/2019
• Issued: 12/10/2019
• Est. Priority Date: 04/01/2014
• Status: Expired due to Fees

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Albisu, Luis Francisco
• Primary Examiner(s): Hirl, Joseph P
• Assistant Examiner(s): Gyorfi, Thomas A
• Application Number:
  US16/273,221
• Publication Number:
  US 20190190906A1
• Time in Patent Office: 301 Days
• CPC Class Codes: H04L 12/2858 Access network architectures
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 92/10 between terminal device and access point, i.e. wireless air interface

Abstract

Aspects of the subject disclosure may include, for example, a method comprising transmitting, by a controller comprising a processor, a request to a server to enable initiation of a virtual private network session on behalf of devices other than the controller. The controller transmits authentication information to enable the server to validate the request, and receives a first list of computing devices. The controller transmits a first selection of a target device from the first list to cause the server to initiate the virtual private network session between the target device and a service node providing services to the target device via the virtual private network session. The controller receives a second list of applications executable on each of the computing devices, and transmits to the server a second selection of an application from the second list that is executable by the target device. Other embodiments are disclosed.

Claims

1. A machine-readable medium comprising executable instructions that, when executed by a processing system including a processor, facilitate performance of operations comprising:

authenticating a mobile application executing on a mobile device; and

providing a virtual private network (VPN) including a VPN platform executing on the processing system and a VPN client executing on a client device, responsive to a request transmitted via the mobile application, wherein the mobile device is distinct from the processing system and the client device and is not communicatively coupled to the client device at a time the request is transmitted, the providing comprising;

facilitating a first virtual private network (VPN) session between the VPN platform and the VPN client,

facilitating a second virtual private network (VPN) session between the VPN platform and a service node for performing a client service, and

facilitating a connection between the first VPN session and the second VPN session.

2. The machine-readable medium of claim 1, wherein the service node comprises a virtual machine executing on the processing system.

3. The machine-readable medium of claim 1, wherein the service node is integrated with the VPN platform.

4. The machine-readable medium of claim 1, wherein the operations further comprise transmitting to the mobile device a list of devices authorized to establish a VPN connection with the platform.

5. The machine-readable medium of claim 4, wherein the list of devices is included in an encrypted data stream.

6. The machine-readable medium of claim 5, wherein the encrypted data stream further comprises a list of applications that can be executed on a device selected from the list of devices.

7. The machine-readable medium of claim 1, wherein the authenticating comprises the platform receiving a secure message sent from the mobile application.

8. The machine-readable medium of claim 1, wherein the service node executes on a server, and wherein the client device and the server communicate only via the VPN platform.

9. The machine-readable medium of claim 8, wherein the server executes a user-selected application.

10. A method comprising:

authenticating, by a processing system including a processor, an application executing on a first device distinct from the processing system; and

providing, by the processing system, a virtual private network (VPN) including a VPN platform executing on the processing system and a VPN client executing on a second device distinct from the first device, responsive to a request transmitted via the application, wherein the first device is not communicatively coupled to the second device at a time the request is transmitted, the providing comprising;

facilitating a first virtual private network (VPN) session between the VPN platform and the VPN client,

facilitating a second virtual private network (VPN) session between the VPN platform and a service node for performing a client service, and

facilitating a connection between the first VPN session and the second VPN session.

11. The method of claim 10, wherein the service node comprises a virtual machine executing on the processing system.

12. The method of claim 10, wherein the service node is integrated with the VPN platform.

13. The method of claim 10, further comprising transmitting, by the processing system, to the first device a list of devices authorized to establish a VPN connection with the platform.

14. The method of claim 10, wherein the authenticating comprises the platform receiving a secure message sent from the application.

15. The method of claim 10, wherein the service node executes on a server, and wherein the second device and the server communicate only via the VPN platform.

16. The method of claim 15, wherein the server executes a user-selected application.

17. A device comprising:

a processing system including a processor; and

a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations comprising;

authenticating an application executing on a first device distinct from the processing system; and

providing a virtual private network (VPN) including a VPN platform executing on the processing system and a VPN client executing on a second device distinct from the first device, responsive to a request transmitted via the application, wherein the first device is not communicatively coupled to the second device at a time the request is transmitted, the providing comprising;

facilitating a first virtual private network (VPN) session between the VPN platform and the VPN client,

facilitating a second virtual private network (VPN) session between the VPN platform and a service node for performing a client service, the service node comprising a virtual machine; and

facilitating a connection between the first VPN session and the second VPN session.

18. The device of claim 17, wherein the operations further comprise transmitting to the first device a list of devices authorized to establish a VPN connection with the platform.

19. The device of claim 17, wherein the authenticating comprises the platform receiving a secure message sent from the application.

20. The device of claim 17, wherein the virtual machine executes on the processing system.