SYSTEM AND METHOD TO PROVIDE BUILT-IN AND MOBILE VPN CONNECTIVITY

• US 20140380450A1
• Filed: 07/02/2014
• Published: 12/25/2014
• Est. Priority Date: 11/23/2005
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: COSKUN, Risvan, REZA, Ahmed Areef, ESTABLE, Luis
• Granted Patent: US 9,172,695 B2
• Time in Patent Office: Days
• US Class Current: 726/8
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 88/04 adapted for relaying to or from another terminal or user

Abstract

A system and method for facilitating the establishment of a virtual private network between a network and a remote computer, the system having: a mobile device connectable to the remote computer and storing a user profile, virtual private network information, and password information; virtual private network software being located on one of the mobile device and the remote computer; an access point communicating with the network; and communication means for communications between the access point and one of the mobile device and the remote computer, wherein the user profile, virtual private network information, and password information is passed to the virtual private network software upon connection of the mobile device to the remote computer, the virtual private network software using the user profile, virtual private network information, and password information to establish a virtual private network through the communications means and the access point to the network.

Claims

1. A system for facilitating establishment of a virtual private network between a network and a remote computer, comprising:

a mobile device connectable to said remote computer, the mobile device storing a user profile, virtual private network information, and password information; and

virtual private network software located on a remote computer wherein said user profile, virtual private network information, and password information are passed to said virtual private network software from the mobile device to the remote computer, said virtual private network software using said user profile, virtual private network information, and password information to establish a virtual private network to said network.

2. The system of claim 1, wherein the mobile device is configured to receive, from a server, information necessary to configure said VPN connection.

3. The system of claim 1, wherein the user profile and virtual private network information are manually downloaded onto the mobile device from a remote location.

4. The system of claim 3, wherein parameters for configuring a password are manually downloaded onto the mobile device from a remote location.

5. The system of claim 3, wherein parameters for configuring a password are provisioned onto the mobile device.

6. The system of claim 1, wherein the user profile and virtual private network information are provisioned onto the mobile device.

7. The system of claim 6, further comprising a multipoint distribution system for provisioning the mobile device.

8. The system of claim 1, wherein the network further includes a gateway, the gateway being configured to verify user profile and password information from the remote computer.

9. The system of claim 1, wherein the mobile device is connectable to the remote computer through an interface selected from the group consisting of a Bluetooth™

connection, a Universal Serial Bus connection, an Infrared Data Association connection, and a firewire connection.

10. A method for facilitating establishment of a virtual private network between a network and a remote computer comprising the steps of:

passing, from the mobile device to virtual private network software on the remote computer, a user profile, virtual private network information, and password information;

configuring the virtual private network software with the user profile, virtual private network information, and password information; and

initiating a virtual private network from said virtual private network software using network transport.

11. The method of claim 10, including starting said virtual private network software from the mobile device.

12. The method of claim 11, wherein said network transport is an over the air communication means.

13. The method of claim 10, wherein said network transport is a modem connection with an access point.

14. The method of claim 10, wherein the connecting step utilizes an interface between the mobile device and the remote computer, the interface being selected from the group consisting of a Bluetooth™

connection, a Universal Serial Bus connection, an Infrared Data Association connection, and a firewire connection.