Software implemented virtual private network service

• US 20040083290A1
• Filed: 10/25/2002
• Published: 04/29/2004
• Est. Priority Date: 10/25/2002
• Status: Abandoned Application

• Current Assignee: AT&T Knowledge Ventures, L.P. (AT&T, Inc.)
• Original Assignee: AT&T Knowledge Ventures, L.P. (AT&T, Inc.)
• Inventors: Chen, Zesen, Gonsalves, Brian
• Application Number:
  US10/281,056
• Publication Number:
  US 20040083290A1
• Time in Patent Office: Days
• US Class Current: 709/227
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming

Abstract

A method and system for implementing a virtual private network utilizes a single public IP address and avoids the use of a firewall. The method includes having a router in a private network perform one-to-one mapping of a public IP address to a private IP address such that a firewall, and the additional public IP address typically used to access the firewall, are not used. The system comprises a router having instructions for one-to-one mapping of a public IP address to a private IP address and does not include a firewall.

Claims

1. A method of communicating between remotely located computers over a virtual private network connection established over an Internet connection, the method comprising:

receiving a query from a remotely located computer on a communication line over the Internet at a router, the query directed to a public Internet protocol address;

mapping the public Internet protocol address to a private Internet protocol address without using a firewall; and

establishing a virtual private network connection over the communication line and communicating between a host computer associated with the private Internet protocol address and the remotely located computer, wherein the host computer is accessible via a single public Internet protocol address.

2. The method of claim 1, wherein the communication line comprises a digital subscriber line.

3. The method of claim 2, wherein the router comprises a digital subscriber line router.

4. The method of claim 3, wherein mapping a public Internet protocol address comprises comparing, at the router, the public Internet protocol address to an address table in the router and obtaining the private Internet protocol address associated with the public Internet address from the address table, wherein the public Internet address is associated with a unique private Internet address.

5. The method of claim 3, wherein the public Internet protocol address comprises an address of a local area network.

6. The method of claim 1, wherein establishing a virtual private network connection comprises establishing an IP layer encryption between the remotely located computers.

7. A system for implementing a virtual private network over an Internet connection, the system comprising:

a router having at least one public Internet protocol address, the router comprising instructions for mapping the public Internet protocol address to a unique private Internet protocol address;

a virtual private network host associated with the private Internet protocol address and in communication with the router, the virtual private network connection with a remotely located computer in communication with the router over the Internet, wherein the virtual private network host is accessible by the remotely located computer via the public Internet protocol address and the public Internet protocol address is uniquely associated with the private Internet address without an intervening firewall.

8. The system of claim 7, wherein the Internet connection comprises a digital subscriber line connection and the router comprises a digital subscriber line router.

9. The system of claim 7, wherein the Internet connection comprises an ISDN connection and the router comprises an ISDN router.

10. The system of claim 7, wherein the Internet connection comprises a T1 connection and the router comprises at T1 router.

11. The system of claim 8, wherein the instructions for mapping the public Internet protocol address to the unique private Internet protocol address comprises a table of at least one public Internet protocol address and a unique Internet protocol address associated with each respective of the public Internet protocol addresses.

12. The system of claim 11 wherein the instructions for mapping comprise a table of at least one public Internet protocol address wherein each of the at least one public Internet protocol addresses is associated with a respective private Internet protocol address.

13. The system of claim 7, wherein the virtual private network host comprises instructions for forming a virtual private network connection.

14. The system of claim 12, wherein the instructions for forming a virtual private network comprise instructions for generating an IP layer encryption.

15. The system of claim 12, wherein the virtual private network host is part of a local area network.

16. The system of claim 15, wherein the VPN host is in communication with at least one computer within the local area network associated with a private Internet protocol address within the local area network.