Encrypted VPN Connection

• US 20160006820A1
• Filed: 09/15/2015
• Published: 01/07/2016
• Est. Priority Date: 01/10/2011
• Status: Abandoned Application

• Current Assignee: Secure Global Solutions, LLC (EverCommerce, Inc.)
• Original Assignee: Secure Global Solutions, LLC (EverCommerce, Inc.)
• Inventors: Walker, Kenneth Robert, Goldberg, Henry, Brousseau, William Reynolds
• Application Number:
  US14/855,251
• Publication Number:
  US 20160006820A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 49/354 for supporting virtual local area networks [VLAN]
• CPC Class Codes: H04L 61/2521 Translation architectures other than single NAT servers
• CPC Class Codes: H04L 61/256 NAT traversal
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70

Abstract

A method, apparatus, and system are described that provides fully automated network access to remote networked devices. The device and system permits the remote access of a local network without any pre-configuration or administrative burden at the local network. Embodiments as described herein provide a “plug and play” option to insert a device into the local network and provide access to select target devices on the network, even non-routable devices, without first requiring dedicated host software or other administrative privileges or configurations be set at the local network.

Claims

1. A method for creating a remote connection between a user and a target device, comprising:

connecting a hardware device to a local network including at least one target device, the hardware device automatically initiating a connection to a host server;

downloading initialization data from the host server to the hardware device;

reconnecting the hardware device to a primary server to create a connection between the hardware device and the primary server.

2. The method of claim 1, further comprising creating a second connection to the primary server to create a complete connection between a user and the target device.

3. The method of claim 2, further comprising configuring the initialization data on the host server by entering in select information to the host server.

4. The method of claim 3, wherein the select information includes a MAC address of the primary server.

5. The method of claim 3, further comprising configuring the initialization data including a Network Addressing Translation between an IP address of at least one target device and an associate VIP address of at least one target device.

6. The method of claim 3, further comprising entering in administrative data to primary server including a Network Addressing Translation between an IP address of at least one target device and an associate VIP address of at least one target device.

7. The method of claim 1, wherein connecting the hardware device includes plugging in an Ethernet cable connected to a local network including at least one target device into the hardware device and providing power to the hardware device.

8. The method of claim 7, wherein once the hardware device is connected, the hardware device initiates a VPN tunnel to the host server identified by a MAC address configured into the hardware device and downloads the initialization data.

9. The method of claim 8, wherein the reconnection of the hardware device to the primary server is created by a VPN tunnel initiated by the hardware device to the primary server identified by a second MAC address included in the initialization data downloaded from the host server to the hardware device.

10. The method of claim 1, wherein the hardware device automatically initiates a connection to a host server by obtaining a local IP Address from a DHCP server and creating a secure tunnel to a pre-configured IP address of the host server over port 443.

11. The method of claim 1, wherein the initialization data downloaded from the host server to the hardware device includes an IP address for the primary server and certificates required for the hardware device to authenticate with the primary server.

12. A system for creating a remote connection between a user and a target device, comprising:

a hardware device connected to a local network including at least one target device, the hardware device programmed to automatically initiate a connection to a host server and obtain initialization data from the host server;

a primary server connected to the hardware device after the hardware device has initiated a connection to the host server.

13. The method of claim 12, wherein the initialization data includes a MAC address of the primary server.

14. The system of claim 12, wherein data entered into the host server comprises the initialization data transferred to the hardware device, including an IP address of the primary server.

15. The system of claim 14, wherein the initialization data includes a Network Addressing Translation table between an IP address of at least one target device and an associate VIP address of at least one target device.

16. The system of claim 12, wherein the hardware device includes a network connection for an Ethernet cable capable of connection to a local network including at least one target device and a power connection.

17. The system of claim 12, wherein the hardware device is programmed to initiate a VPN tunnel to the host server identified by a MAC address configured into the hardware device and download the initialization data.

18. The system of claim 12, wherein the hardware device is programmed to reconnect the hardware device to the primary server by creating a VPN tunnel initiated by the hardware device to the primary server identified by a MAC address included in the initialization data downloaded from the host server to the hardware device.