SYSTEM AND METHOD TO PROVIDE BUILT-IN AND MOBILE VPN CONNECTIVITY

• US 20120173680A1
• Filed: 01/20/2012
• Published: 07/05/2012
• Est. Priority Date: 11/23/2005
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Research In Motion Limited (Blackberry Limited)
• Inventors: ESTABLE, Luis, COSKUN, Risvan, REZA, Ahmed Areef
• Granted Patent: US 8,782,764 B2
• Time in Patent Office: Days
• US Class Current: 709/220
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 88/04 adapted for relaying to or from another terminal or user

Abstract

A system and method for facilitating the establishment of a virtual private network between a network and a remote computer, the system having: a mobile device connectable to the remote computer and storing a user profile, virtual private network information, and password information; virtual private network software being located on one of the mobile device and the remote computer; an access point communicating with the network; and communication means for communications between the access point and one of the mobile device and the remote computer, wherein the user profile, virtual private network information, and password information is passed to the virtual private network software upon connection of the mobile device to the remote computer, the virtual private network software using the user profile, virtual private network information, and password information to establish a virtual private network through the communications means and the access point to the network.

Claims

1. A system for establishing a virtual private network (VPN) connection to an enterprise server, said system comprising:

a VPN module configurable to establish the VPN connection over a network; and

a mobile communications device, the mobile communications device being adapted to receive, from a server over a wireless network, information necessary to configure said VPN connection and for providing said information to the VPN module to allow the VPN module to perform a self-configuration in order to connect to the enterprise server.

2. The system of claim 1, wherein said VPN module is located on the mobile communications device.

3. The system of claim 1, wherein said VPN module is located on a client computer.

4. The system of claim 1, wherein the information is stored with a user profile stored on said mobile communications device.

5. The system of claim 1, wherein the information is a cryptographic key.

6. The system of claim 5, wherein the cryptographic key is an RSA key.

7. The system of claim 5, wherein the cryptographic key is a WEP key.

8. The system of claim 1, wherein the information is updated periodically from said server.

9. The system of claim 1, wherein the information is received as part of a service book at said device.

10. The system of claim 1, wherein the information is received in response to a user input at said device.

11. The system of claim 1, wherein the information is received upon initiation of said VPN connection.

12. A method for establishing a virtual private network (VPN) connection to an enterprise server, said method comprising:

receiving at a mobile communications device, from a server over a wireless network, information necessary to configure said VPN connection; and

providing said information to a VPN module to allow the VPN module to perform a self-configuration in order to connect to the enterprise server.

13. The method of claim 12, wherein the information is stored with a user profile stored on said mobile communications device.

14. The method of claim 12, wherein the information is a cryptographic key.

15. The method of claim 14, wherein the cryptographic key is an RSA key.

16. The method of claim 14, wherein the cryptographic key is a WEP key.

17. The method of claim 12, wherein the information is updated periodically from said server.

18. The method of claim 12, wherein the information is received as part of a service book at said device.

19. The method of claim 12, wherein the information is received in response to a user input at said device.

20. The method of claim 12, wherein the information is received upon initiation of said VPN connection.