Systems and Methods for Remotely Maintaining Virtual Private Networks

• US 20080046996A1
• Filed: 07/15/2007
• Published: 02/21/2008
• Est. Priority Date: 02/14/2005
• Status: Active Grant

• Current Assignee: Anxebusiness Corporation (Open Text Corporation)
• Original Assignee: Anxebusiness Corporation (Open Text Corporation)
• Inventors: Smith, Robert, Wobst, Olaf
• Granted Patent: US 8,136,151 B2
• Time in Patent Office: Days
• US Class Current: 726/15
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Systems and methods are disclosed for automatically configuring, managing, and maintaining a network device or VPN using a public network such as the Internet. Initial configuration of a network device or VPN occurs upon a user entering minimal information via a simple HTML page. After receipt of this minimal information, the present invention automatically configures the network device or VPN without user intervention. Thereafter, a user may modify the network device or VPN configuration via an easy-to-use and easy-to-understand graphical user interface. Parameters are presented such that a user simply checks and unchecks boxes, or clicks on radio buttons, to configure network device parameters. Upon completion of the selection, the user clicks on save, and the configuration is automatically modified. In addition, upon a significant change to any network device, the changed network device automatically initiates reconfiguration of the network device or VPN with zero input from a user.

Claims

1-4. -4. (canceled)

5. A method for remotely maintaining a VPN, said method comprising the steps of:

transmitting maintenance data to at least one management device;

creating at least one of the group consisting of a device configuration file, a VPN configuration file, and combinations thereof at said management device;

automatically establishing a communication between said management device and at least one of said network devices via at least one network connection of at least one network; and

transmitting at least one of the group consisting of said device configuration file, said VPN configuration file, and combinations thereof from said management device to said network device via said network connection;

wherein at least one parameter of at least one of said network device, said VPN, and combinations thereof is automatically configured upon local processing of at least one of the group consisting of said device configuration file, said VPN configuration file, and combinations thereof.

6. A method according to claim 5, wherein said maintenance data is at least one of the group consisting of virus definitions, block lists, policies, and firmware.

7. A method according to claim 5, wherein said network device is at least one of the group consisting of a broadband device, a router, a modem, a switch, a wireless gateway, and combinations thereof.

8. A method according to claim 5, said method further comprising the steps of:

encoding at least one of the group consisting of said device configuration file, said VPN configuration file, and combinations thereof, and

encrypting at least one of the group consisting of said device configuration file, said VPN configuration file, and combinations thereof,

wherein said encoding and said encrypting occur prior to transmission of at least one of the group consisting of said device configuration file, said VPN configuration file, and combinations thereof via said at least one network.

9. A method according to claim 5, wherein said maintenance data is input via a user interface coupled to said network device.

10. A method according to claim 9, wherein said user interface is at least one of the group consisting of a personal computer, a personal data assistant, and a network-equipped appliance.

11. A method according to claim 9, wherein said coupling of said user interface to said network device is at least one of the group consisting of a cable, an Ethernet cable, a wireless connection, a local area network, a wide area network, an Internet connection, and combinations thereof.

12. A method according to claim 5, wherein said network connection is at least one of the group consisting of a wireless connection, a cable connection, a digital subscriber line, a telephone line, and combinations thereof.

13. A method according to claim 5, wherein said network is at least one of the group consisting of an Internet, a wide area network, and combinations thereof.

14. A method according to claim 5, wherein a configuration transfer tool integral to said management device creates and transmits at least one of the group consisting of said device configuration file, said VPN configuration file, and combinations thereof to said network device.

15. A method according to claim 5, wherein said local processing of at least one of the group consisting of said device configuration file, said VPN configuration file, and combinations thereof includes the sub-steps of:

extracting configuration data from at least one of the group consisting of said device configuration file, said VPN configuration file, and combinations thereof, and

writing said configuration data to at least one storage location of said network device;

wherein at least one daemon executed by each of said at least one network device retrieves and processes at least a portion of said configuration data contained in each of said storage locations.

16. A method according to claim 5, wherein said local processing of at least one of the group consisting of said device configuration file, said VPN configuration file, and combinations thereof includes the sub-steps of:

decrypting at least one of the group consisting of said device configuration file, said VPN configuration file, and combinations thereof,

decoding at least one of the group consisting of said device configuration file, said VPN configuration file, and combinations thereof,

extracting configuration data from at least one of the group consisting of said device configuration file, said VPN configuration file, and combinations thereof, and

writing said configuration data to at least one storage location of said network device;

wherein at least one daemon executed by each of said at least one network device retrieves and processes at least a portion of said configuration data contained in each of said storage locations.

17. A method according to claim 5, said method further comprising the step of:

authenticating a communication channel prior to said establishing of said communication between said at least one management device and said at least one network device.

18. A method according to claim 17, wherein said authenticating is performed using at least one of the group consisting of IP security, secure sockets layer, passwords, digital certificates, smart cards, biometrics, dynamic biometrics, and combinations thereof.

19. A method according to claim 5, wherein said transmitting maintenance data to at least one of said management devices includes the sub-steps of:

transmitting said maintenance data to a master device; and

transmitting said maintenance data from said master device to said at least one management devices.