Method for providing a virtual private network connection

• US 20060053486A1
• Filed: 10/13/2005
• Published: 03/09/2006
• Est. Priority Date: 10/17/1996
• Status: Abandoned Application

• Current Assignee: GraphOn Nes Sub, LLC (Hopto Inc.)
• Original Assignee: GraphOn Nes Sub, LLC (Hopto Inc.)
• Inventors: Coley, Christopher D., Wesinger, Ralph E. Jr.
• Application Number:
  US11/250,909
• Publication Number:
  US 20060053486A1
• Time in Patent Office: Days
• US Class Current: 726/15
• CPC Class Codes: B65B 11/004 in blanks, e.g. sheets precut and creased for folding
• CPC Class Codes: G06F 16/958 Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: H04L 2101/677 Multiple interfaces, e.g. multihomed nodes
• CPC Class Codes: H04L 61/25 of the same type
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2521 Translation architectures other than single NAT servers
• CPC Class Codes: H04L 61/256 NAT traversal
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/4552 Lookup mechanisms between a plurality of directories; Synchronisation of directories, e.g. metadirectories
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/164 Adaptation or special uses of UDP protocol
• CPC Class Codes: H04L 9/40 : Network security protocols

Abstract

Systems and methods for providing a virtual private network connection between a first private network and a second private network through a public network are disclosed. The system may include a first gateway device and a second gateway device, the first gateway device being disposed between a first private network and a public network, and the second gateway device being disposed between a second private network and the public network. Associations are provided between the first and second gateway devices, between names hosted by the first gateway device and addresses of network elements residing on the first private network, and between names hosted by the second gateway device and addresses of network elements residing on the second private network. A secure connection is then provided between elements residing on the first and second private networks through the public network.

Claims

1. A method for providing a virtual private network connection between a first private network and a second private network through a public network comprising:

providing an association between a first gateway device and a second gateway device, the first gateway device disposed between a first private network and a public network, and the second gateway device disposed between a second private network and the public network;

providing an association between names hosted by the first gateway device and addresses of network elements residing on the first private network;

providing an association between names hosted by the second gateway device and addresses of network elements residing on the second private network; and

providing for secure connectivity between elements residing on the first and second private networks through the public network.

2. The method of claim 1, wherein said act of providing for secure connectivity between elements residing on the first and second private networks through the public network further comprises providing encryption and decryption services for traffic flowing between said first and second private networks.

3. The method of claim 2, further comprising the act of collecting information regarding connection attempts directed at either of the first or second private networks.

4. The method of claim 3, wherein said information comprises the date and time of each connection attempt.

5. The method of claim 3, wherein said information comprises the identity of the virtual private network server to which the virtual private network the host is attempting to connect.

6. An apparatus for providing a virtual private network connection between a first private network and a second private network through a public network comprising:

means for providing an association between a first gateway device and a second gateway device, the first gateway device disposed between a first private network and a public network, and the second gateway device disposed between a second private network and the public network;

means for providing an association between names hosted by the first gateway device and addresses of network elements residing on the first private network;

means for providing an association between names hosted by the second gateway device and addresses of network elements residing on the second private network; and

means for providing for secure connectivity between elements residing on the first and second private networks through the public network.

7. The apparatus of claim 6, further comprising means for providing encryption and decryption services for traffic flowing between said first and second private networks.

8. The apparatus of claim 6, further comprising means for collecting information regarding connection attempts directed at either of the first or second private networks.

9. The apparatus of claim 6, wherein said information comprises the date and time of each connection attempt.

10. The apparatus of claim 6, wherein said information comprises the identity of the virtual private network server to which the virtual private network the host is attempting to connect.

11. A system for providing a virtual private network connection between a first private network and a second private network through a public network comprising:

a first gateway device and a second gateway device, the first gateway device disposed between a first private network and a public network, and the second gateway device disposed between a second private network and the public network;

an association between said first and second gateway devices;

an association between names hosted by the first gateway device and addresses of network elements residing on the first private network;

an association between names hosted by the second gateway device and addresses of network elements residing on the second private network; and

a secure connection between elements residing on the first and second private networks through the public network.

12. The system of claim 11, further comprising encryption and decryption services for traffic flowing between said first and second private networks through said secure connection.

13. The system of claim 12, the system being further configured to collect information regarding connection attempts directed at either of the first or second private networks.

14. The system of claim 13, wherein said information comprises the date and time of each connection attempt.

15. The system of claim 13, wherein said information comprises the identity of the virtual private network server to which the virtual private network the host is attempting to connect.

16. A computer-readable device for causing a computer to perform a method for providing a virtual private network connection between a first private network and a second private network through a public network, the method comprising:

providing an association between a first gateway device and a second gateway device, the first gateway device disposed between a first private network and a public network, and the second gateway device disposed between a second private network and the public network;

providing an association between names hosted by the first gateway device and addresses of network elements residing on the first private network;

providing an association between names hosted by the second gateway device and addresses of network elements residing on the second private network; and

providing for secure connectivity between elements residing on the first and second private networks through the public network.

17. The device of claim 16, wherein said act of providing for secure connectivity between elements residing on the first and second private networks through the public network further comprises providing encryption and decryption services for traffic flowing between said first and second private networks.

18. The device of claim 17, said method further comprising the act of collecting information regarding connection attempts directed at either of the first or second private networks.

19. The device of claim 18, wherein said information comprises the date and time of each connection attempt.

20. The device of claim 18, wherein said information comprises the identity of the virtual private network server to which the virtual private network the host is attempting to connect.