VIRTUAL PRIVATE NETWORK

• US 20070101421A1
• Filed: 08/11/2006
• Published: 05/03/2007
• Est. Priority Date: 10/17/1996
• Status: Abandoned Application

• Current Assignee: GraphOn Corporation
• Original Assignee: GraphOn Corporation
• Inventors: Coley, Christopher, Wesinger, Raph
• Application Number:
  US11/464,111
• Publication Number:
  US 20070101421A1
• Time in Patent Office: Days
• US Class Current: 726/11
• CPC Class Codes: B65B 11/004 in blanks, e.g. sheets precut and creased for folding
• CPC Class Codes: G06F 16/958 Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: H04L 2101/677 Multiple interfaces, e.g. multihomed nodes
• CPC Class Codes: H04L 61/25 of the same type
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2521 Translation architectures other than single NAT servers
• CPC Class Codes: H04L 61/256 NAT traversal
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/4552 Lookup mechanisms between a plurality of directories; Synchronisation of directories, e.g. metadirectories
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/164 Adaptation or special uses of UDP protocol
• CPC Class Codes: H04L 9/40 : Network security protocols

Abstract

A virtual private network is disclosed. The network may include a first private network including a first firewall interposed between a first private network and a public network and a second firewall interposed between a first client machine and the first firewall machine. The network may include a second private network including a third firewall interposed between the second private network and the public network, and a fourth firewall interposed between a second client machine and the third firewall. An encrypted path is provided for traffic flowing between the first and second client machines over the public network. The encrypted path comprises encryption of a first type for traffic the first and second firewalls and the third and fourth firewalls, and encryption of a second type is used between the first and second private networks for traffic flowing over the public network.

Claims

1. A virtual private network comprising:

a first private network, the first private network including;

a first firewall interposed between a first private network and a public network, and

a second firewall interposed between a first client machine and the first firewall machine;

a second private network, the second private network including;

a third firewall interposed between the second private network and the public network, and

a fourth firewall interposed between a second client machine and the third firewall;

an encrypted path for traffic flowing between the first and second client machines over the public network; and

wherein the encrypted path comprises encryption of a first type for traffic said first and second firewalls and said third and fourth firewalls, and encryption of a second type is used between the first and second private networks for traffic flowing over the public network.

2. The virtual private network of claim 1, further comprising a dedicated domain name server associated with each of the firewalls for establishing DNS mappings for the virtual private network.

3. The virtual private network of claim 2, where the dedicated domain name server comprises a virtual host on the same physical machine as any of said firewalls.

4. The virtual private network of claim 3, wherein said first, second, third, or fourth firewalls further comprises a plurality of virtual hosts, each of said virtual hosts corresponding to a home through which a connection may be made.

5. The virtual private network of claim 4, wherein said domain name server responds with address information to the virtual host responding to a connection request.

6. The virtual private network of claim 1, wherein any of said first, second, third, or fourth firewalls further comprise a configurator for providing a web-based front-end for configuration through a point-and-click interface using a web browser.

7. A virtual private network comprising:

a first private network, the first private network including;

first firewall means interposed between a first private network and a public network, and

second firewall means interposed between a first client machine and the first firewall machine;

a second private network, the second private network including;

third firewall means interposed between the second private network and the public network, and

fourth firewall means interposed between a second client machine and the third firewall;

means for providing an encrypted path for traffic flowing between the first and second client machines over the public network; and

means for providing encryption of a first type for traffic said first and second firewalls means and said third and fourth firewalls means, and means for providing encryption of a second type is used between the first and second private networks for traffic flowing over the public network.

8. The virtual private network of claim 7, further comprising dedicated domain name server means for establishing DNS mappings for the virtual private network associated with each of the firewalls.

9. The virtual private network of claim 8, where the dedicated domain name server means comprises virtual host means on the same physical machine as any of said firewall means.

10. The virtual private network of claim 9, wherein said any of first, second, third, or fourth firewalls further comprises a plurality of virtual host for providing a home through which a connection may be made.

11. The virtual private network of claim 10, wherein said domain name server means responds with address information to the virtual host responding to a connection request.

12. The virtual private network of claim 7, wherein any of said first, second, third, or fourth firewalls further comprise configurator means for providing a web-based front-end for configuration through a point-and-click interface using a web browser.