Single-modem multi-user virtual private network

• US 20030055990A1
• Filed: 08/23/2001
• Published: 03/20/2003
• Est. Priority Date: 08/23/2001
• Status: Active Grant

• Current Assignee: Hughes Electronics Corporation (Rtx Corporation)
• Original Assignee: Hughes Electronics Corporation (Rtx Corporation)
• Inventors: Zhang, Ye, Cheline, Douglas A., Ma, Michael, Chong, Lester J.
• Granted Patent: US 7,769,838 B2
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A request is received to establish a VPN session with a server-side system from at least one client computer out of a plurality of client computers coupled to a modem within a client-side system. The request contains login details for a user of the at least one client computer. A network address, such as an IP (Internet Protocol) or MAC (Media Access Control) address of the at least one client computer is then determined. The user is authenticated based on the user login details, and a VPN tunnel is established over the modem between the at least one client computer having the network address and the server-side system. The same method is then used for the remainder of the plurality of client computers coupled to the modem within the client-side system.

Claims

1. A computer implemented method for establishing a Virtual Private Network (VPN) communication tunnel between a client computer and a server-side system, comprising:

receiving a request to establish a VPN session with a server-side system from at least one client computer out of a plurality of client computers coupled to a modem within a client-side system, where said request contains login details for a user of said at least one client computer;

determining a network address of said at least one client computer;

authenticating said user based on said user login details; and

establishing a VPN tunnel between said at least one client computer having said network address and said server-side system, where said VPN tunnel is established over said modem.

2. The computer implemented method of claim 1, wherein said receiving further comprises obtaining security details from said client.

3. The computer implemented method of claim 1, wherein said determining further comprises reading a connection log to extract the network address of said at least one client computer.

4. The computer implemented method of claim 1, further comprising the step, after said determining step, of storing said network address.

5. The computer implemented method of claim 1, wherein said authenticating further comprises the steps of:

transmitting said login details to an authentication server for authentication; and

accepting an authentication response from said server.

6. The computer implemented method of claim 5, wherein said transmitting further comprises sending said login details to a Radius server.

7. The computer implemented method of claim 1, wherein said authenticating step further comprises the steps of:

transmitting said login details to an authentication server for authentication;

accepting a challenge from said server; and

re-transmitting said login details to said authentication server for authentication.

8. The computer implemented method of claim 1, wherein said determining further comprises ascertaining an Internet Protocol (IP) address of said client.

9. The computer implemented method of claim 1, wherein said determining further comprises ascertaining a Media Access Control (MAC) address of said client.

10. The computer implemented method of claim 1, further comprising:

receiving a new request to establish a new VPN session with a different server-side system from a different client computer out of said plurality of client computers coupled to said modem within said client-side system, where said request contains new login details for a new user of said different client computer;

determining a new network address of said different client computer;

authenticating said new user based on said new user login details; and

establishing a new VPN tunnel between said different client computer having said new network address and said new server-side system, where said VPN tunnel is established over said modem.

11. The computer implemented method of claim 1, further comprising:

receiving a new request to establish a new VPN session with said server-side system from a different client computer out of said plurality of client computers coupled to said modem within said client-side system, where said request contains new login details for a new user of said different client computer;

determining a new network address of said different client computer;

authenticating said new user based on said new user login details; and

establishing a new VPN tunnel between said different client computer having said new network address and said new server-side system, where said VPN tunnel is established over said modem.

12. The computer implemented method of claim 1, further comprising severing the VPN tunnel after a predetermined time of inactivity.

13. A computer program product for use in conjunction with a computer system for establishing a Virtual Private Network (VPN) communication tunnel between a client computer and a server-side system, the computer program product comprising a computer readable storage and a computer program embedded therein, the computer program comprising:

instructions for receiving a request to establish a VPN session with a server-side system from at least one client computer out of a plurality of client computers coupled to a modem within a client-side system, where said request contains login details for a user of said at least one client computer;

instructions for determining a network address of said at least one client computer;

instructions for authenticating said user based on said user login details; and

instructions for establishing a VPN tunnel between said at least one client computer having said network address and said server-side system, where said VPN tunnel is established over said modem.

14. The computer program product of claim 13, wherein said instructions for determining further comprise instructions for reading a connection log to extract the network address of said at least one client computer.

15. The computer program product of claim 13, wherein said computer program further comprises instructions for storing said network address.

16. The computer program product of claim 13, wherein said instructions for authenticating further comprise:

instructions for transmitting said login details to an authentication server for authentication; and

instructions for accepting an authentication response from said server.

17. The computer program product of claim 13, wherein said instructions for transmitting further comprise instructions for sending said login details to a Radius server.

18. The computer program product of claim 13, wherein said instructions for authenticating further comprise:

instructions for transmitting said login details to an authentication server for authentication;

instructions for accepting a challenge from said server; and

instructions for re-transmitting said login details to said authentication server for authentication.

19. The computer program product of claim 13, wherein said instructions for determining further comprise instructions for ascertaining an Internet Protocol (IP) address of said client.

20. The computer program product of claim 13, wherein said instructions for determining further comprise instructions for ascertaining a Media Access Control (MAC) address of said client.

21. The computer program product of claim 13, wherein said computer program further comprises:

instructions for receiving a new request to establish a new VPN session with a different server-side system from a different client computer out of said plurality of client computers coupled to said modem within said client-side system, where said request contains new login details for a new user of said different client computer;

instructions for determining a new network address of said different client computer;

instructions for authenticating said new user based on said new user login details; and

instructions for establishing a new VPN tunnel between said different client computer having said new network address and said new server-side system, where said VPN tunnel is established over said modem.

22. The computer program product of claim 13, wherein said computer program further comprises:

instructions for receiving a new request to establish a new VPN session with said server-side system from a different client computer out of said plurality of client computers coupled to said modem within said client-side system, where said request contains new login details for a new user of said different client computer;

instructions for determining a new network address of said different client computer;

instructions for authenticating said new user based on said new user login details; and

instructions for establishing a new VPN tunnel between said different client computer having said new network address and said new server-side system, where said VPN tunnel is established over said modem.

23. The computer program product of claim 13, wherein said computer program further comprises instructions for severing the VPN tunnel after a predetermined time of inactivity.