Method and apparatus for providing a virtual private network

• US 6,092,200 A
• Filed: 08/01/1997
• Issued: 07/18/2000
• Est. Priority Date: 08/01/1997
• Status: Expired due to Term

• Current Assignee: Micro Focus Software, Inc. (Open Text Corporation)
• Original Assignee: Novell Incorporated (Open Text Corporation)
• Inventors: Muniyappa, Umesh, Brailas, Nicholas Michael, Natarajan, Alampoondi Eswaran, Porlman, Radia Joy, Terzich, Michael
• Primary Examiner(s): Peeso, Thomas R.
• Application Number:
  US08/904,817
• Time in Patent Office: 1,082 Days
• Field of Search: 713/100, 713/150, 713/162, 713/163, 713/168
• US Class Current: 726/15
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

A method and apparatus for establishing a virtual private network provides a technique for automatically configuring nodes of the network. The nodes are established to include a master node. Each node includes a public key and a private key for cryptographic communication in a first mode, such as RSA. Configuration data regarding communication in the network is provided to the master node. The configuration data is securely transferred into each other node from the master node. Nodes communicate with each other based upon a configuration data. The configuration data can include cryptographic key data related to a second cryptographic mode such as Diffie-Hellman.

Claims

1. A method for establishing a virtual private network including a master node, and slave nodes, the method comprising:

establishing a plurality of nodes by a public network, and each of the nodes including a public key and a private key in a first cryptographic mode;

providing in the master node configuration information that defines allowable virtual private network communication links between each of the nodes;

securely and electronically transferring the configuration information to each of the slave nodes from the master node; and

establishing the virtual private network links among each of the nodes based upon the configuration information.

2. The method as set forth in claim 1 wherein the step of securely and electronically transferring the configuration information includes transferring the configuration information in encrypted form in the first cryptographic mode.

3. The method as set forth in claim 2 further comprising securely transferring cryptographic key data related to a second cryptographic mode from the master node to each of the slave nodes in an encrypted form in the first cryptographic mode.

4. The method as set forth in claim 3 further comprising providing a first cryptographic mode that comprises RSA cryptography and providing a second cryptographic mode that comprises Diffie-Hellman cryptography.

5. The method as set forth in claim 4 wherein the step of securely and electronically transferring the configuration data includes providing signature data in the configuration data and authenticating the signature data at each of the slave nodes.

6. The method as set forth in claim 1 wherein the step of securely and electronically transferring the configuration information includes transferring information to each of the slave nodes that includes an address of at least one other of the nodes.