METHODS AND SYSTEMS FOR CONTROLLING TRAFFIC TO VPN SERVERS

• US 20170359311A1
• Filed: 09/26/2016
• Published: 12/14/2017
• Est. Priority Date: 06/09/2016
• Status: Active Grant

• Current Assignee: LGS Innovations LLC (CACI International Incorporated)
• Original Assignee: LGS Innovations LLC (CACI International Incorporated)
• Inventors: CHEN, MICHAEL J.
• Granted Patent: US 10,440,058 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 12/4679 Arrangements for the registration or de-registration of VLAN attribute values, e.g. VLAN identifiers, port VLAN membership
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]

Abstract

The present application is directed a computer-implemented method for for managing traffic in a network. The method includes a step of receiving, from a user on the network, a request to access the internet. The method also includes a step of determining information of the user based upon the request. The information includes a security privilege of the user in the network. The method also includes a step of reviewing selection criteria of plural, dynamic, virtual private network (VPN) cloud servers in the network. The method also includes a step of matching the determined information of the user with the selection criteria. Further, the method includes a step of sending traffic of the user to one of the plural, dynamic VPN cloud servers based upon the matching step. The application is also directed to a system for securing web traffic on a network including a policy controller and router.

Claims

1. A computer-implemented method for managing traffic in a network comprising:

receiving, from a user on the network, a request to access the internet;

determining information of the user based upon the request, the information including security access in the network;

reviewing selection criteria of plural, dynamic, virtual private network (VPN) cloud servers in the network;

matching the determined information of the user with the selection criteria;

sending traffic of the user to one of the plural, dynamic VPN cloud servers based upon the matching step.

2. The method of claim 1, wherein the selection criteria is selected from source IP address, destination IP address, type of traffic to support, security access of the user or combinations thereof.

3. The method of claim 1, wherein an active session of the dynamic server lasts for a finite period of time.

4. The method of claim 3, wherein a unique IP address is associated with the dynamic server.

5. method of claim 3, wherein the active session lasts until a predetermined condition is met.

6. The method of claim 5, wherein the predetermined condition is selected from activity-type, traffic-type, load balancing, or combinations thereof.

7. The method of claim 6, wherein the traffic-type is selected from video, web, voice or combinations thereof.

8. The method of claim 6, wherein the activity type is selected from inactivity, logging on, logging off, or combinations thereof.

9. The method of claim 1, further comprising:

determining second information of a second user, the second information including security access in the network, the second information being different from the determined information of the user;

matching the determined second information of the user with the selection criteria; and

sending traffic of the second user to another dynamic cloud server.

10. The method of claim 1, further comprising;

creating a policy based upon the matching step for future traffic management; and

sending, from a policy controller on the network, the created policy to a gateway router on the network, wherein the traffic is sent to the VPN server via the gateway router.

11. The method of claim 1, wherein the network is an enterprise network for a company.

13. The system of claim 11, wherein

the processor is further configured to execute the instructions of sending traffic of the user, based upon the security access, to one of the plural, dynamic VPN cloud servers based upon the matching step, and

a second user having information is unauthorized to connect with the dynamic VPN cloud server based upon the security access.

14. The system of claim 11, wherein the processor is further configured to execute the instructions of selecting the VPN server based upon a traffic-type of the user equipment.

15. The system of claim 11, wherein an active session of the dynamic server lasts until a predetermined condition is met.

16. The system of claim 15, wherein the predetermined condition is selected from activity-type, traffic-type, load balancing, or combinations thereof.

17. The system of claim 16, wherein the traffic-type is selected from video, web, voice or combinations thereof.

12. A computer-implemented system for enhancing security of traffic on a network comprising:

a non-transitory memory having instructions stored thereon for dynamically managing the web traffic of user equipment on the network;

a display including a graphical user interface; and

a processor, operably coupled to the memory and the display, the processor configured to execute the instructions of;

receiving, from a user on the network, a request to access the internet;

determining information of the user based upon the request, the information including security access in the network;

reviewing selection criteria of plural, dynamic, virtual private network (VPN) cloud servers in the network; and

matching the determined information of the user with the selection criteria.

12-1. (canceled)

18. A system for securing web traffic on a network comprising:

a policy controller including;

a non-transitory memory having instructions stored thereon for dynamically managing the web traffic of user equipment on the network;

a display including a graphical user interface; and

a processor, operably coupled to the memory and the display, the processor configured to execute the instructions of;

determining information of the user based upon the request, the information including security access in the network; and

matching the determined information of the user with one of plural, dynamic virtual private network (VPN) servers in the network; and

a router operably coupled to the policy controller for directing traffic of the user to the VPN server.

19. The system of claim 18, wherein the processor is further configured to execute the instructions of sending traffic of the user to one of the plural, dynamic VPN cloud servers based upon the matching step.

20. The system 19, wherein a second user having information is unauthorized to connect with the dynamic VPN cloud server based upon the security access.