Connecting VPN users in a public network

• US 20060236378A1
• Filed: 04/19/2005
• Published: 10/19/2006
• Est. Priority Date: 04/19/2005
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Burshan, Chen Yehezkel
• Granted Patent: US 7,568,220 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals
• CPC Class Codes: H04W 92/02 Inter-networking arrangements

Abstract

A method for connecting a user computer to a first computer network includes transmitting a connection request by the user computer, via a second computer network, requesting a connection to the first computer network. The second computer network is automatically solicited to authorize the user computer, responsively to a failure of the connection request. Upon authorization by the second computer network, a connection is established between the user computer and the first computer network via the second computer network.

Claims

1. A method for connecting a user computer to a first computer network, comprising:

transmitting a connection request by the user computer, via a second computer network, requesting a connection to the first computer network;

responsively to a failure of the connection request, automatically soliciting the second computer network to authorize the user computer; and

upon authorization by the second computer network, establishing a connection between the user computer and the first computer network via the second computer network.

2. The method according to claim 1, wherein the first computer network comprises a private network, and wherein establishing the connection comprises establishing a tunnel through the second computer network to the private network.

3. The method according to claim 2, wherein the private network comprises a VPN (Virtual Private Network), and wherein the second computer network comprises a public network.

4. The method according to claim 1, wherein transmitting the connection request via the second computer network comprises requesting Internet access via a wireless connection in a hotspot.

5. The method according to claim 1, wherein transmitting the connection request comprises transmitting the request periodically, until completion of the authorization by the second computer network.

6. The method according to claim 1, wherein automatically soliciting the second computer network comprises, upon failure of the connection request, invoking a dedicated authorization client for authorizing the user computer in the second computer network.

7. The method according to claim 6, wherein the authorization client is configured to communicate with the second computer network using a Hypertext Transfer Protocol (HTTP).

8. The method according to claim 6, wherein the authorization client is configured to permit a user to perform only authorization-related actions until the authorization of the user computer by the second computer network is completed.

9. The method according to claim 1, wherein establishing the connection between the user computer and the first computer network comprises receiving at the user computer predefined XML content from the first computer network responsively to the connection request, and parsing the XML content according to a predefined XML schema so as to validate the XML content.

10. The method according to claim 1, wherein soliciting the second computer network comprises causing the second computer network to request and receive billing information from the user computer.

11. Apparatus for connecting a user to a first computer network, comprising:

a network interface, which is arranged to communicate with a second computer network; and

a user terminal, which is coupled to the network interface so as to transmit a connection request, via the second computer network, requesting a connection to the first computer network, and which is arranged, responsively to a failure of the connection request, to automatically solicit the second computer network to authorize the user terminal, and upon authorization by the second computer network, to establish a connection between the user terminal and the first computer network via the second computer network.

12. The apparatus according to claim 11, wherein the first computer network comprises a private network, and wherein the user terminal is arranged to establish a tunnel through the second computer network to the private network.

13. The apparatus according to claim 12, wherein the private network comprises a VPN (Virtual Private Network), and wherein the second computer network comprises a public network.

14. The apparatus according to claim 11, wherein the network interface comprises a wireless interface, and wherein the user terminal is arranged to request Internet access via a wireless connection in a hotspot.

15. The apparatus according to claim 11, wherein the user terminal is arranged to transmit the connection request periodically, until completion of the authorization by the second computer network.

16. The apparatus according to claim 11, wherein the user terminal is configured to invoke an authorization client upon failure of the connection request, wherein the authorization client is arranged to authorize the user computer in the second computer network.

17. The apparatus according to claim 16, wherein the authorization client is arranged to communicate with the second computer network using a Hypertext Transfer Protocol (HTTP).

18. The apparatus according to claim 16, wherein the authorization client is arranged to permit a user of the apparatus to perform only authorization-related actions until the authorization of the user terminal by the second computer network is completed.

19. The apparatus according to claim 11, wherein the user terminal is arranged to receive predefined XML content from the first computer network responsively to the connection request, and to parse the XML content according to a predefined XML schema so as to validate the XML content.

20. The apparatus according to claim 11, wherein the user terminal is arranged to cause the second computer network to request and receive billing information from the user computer.

21. A communication server for connecting a user computer to a first computer network, comprising:

a network interface, which is arranged to communicate with the first computer network; and

a communication processor, which is coupled to the network interface so as to receive a connection request sent from the user computer via a second computer network, requesting a connection to the first computer network, and to transmit predefined XML content to the user computer so as to establish a connection between the user computer and the first computer network via the second computer network.

22. A computer software product for connecting a user computer to a first computer network, the product comprising a computer-readable medium in which program instructions are stored, which instructions, when executed by the user computer, cause the user computer to transmit a connection request via a second computer network, requesting a connection to the first computer network, and responsively to a failure of the connection request, to automatically solicit the second computer network to authorize the user computer, and upon authorization by the second computer network, to establish a connection between the user computer and the first computer network via the second computer network.

23. Apparatus for connecting a user computer to a first computer network, comprising:

means for transmitting a connection request by the user computer, via a second computer network, requesting a connection to the first computer network;

responsively to a failure of the connection request, means for automatically soliciting the second computer network to authorize the user computer; and

upon authorization by the second computer network, means for establishing a connection between the user computer and the first computer network via the second computer network.