Virtual private network software system

• US 7,216,173 B2
• Filed: 05/21/2002
• Issued: 05/08/2007
• Est. Priority Date: 06/12/2001
• Status: Active Grant

• Current Assignee: Varian Medical Systems Incorporated (Siemens AG)
• Original Assignee: Varian Medical Systems Incorporated (Siemens AG)
• Inventors: Rakes, Richard Bruce, Clayton, Tom
• Primary Examiner(s): Dalencourt; Yves
• Application Number:
  US10/154,445
• Publication Number:
  US 20020199007A1
• Time in Patent Office: 1,813 Days
• Field of Search: 709/227, 713168-170, 713/201, 713/400, 713/161, 713/166
• US Class Current: 709/227
• CPC Class Codes: G06F 8/60 Software deployment
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A virtual private network service provider, wherein virtual private network (“VPN”) software for setting up a virtual private network connection is delivered from a server computer to one or more client computers over a computer network, such as the Internet. Once the VPN software is delivered to the client computers, it can be executed so that data communications are made as virtual private network communications under control of the VPN software. Because the VPN software is stored and maintained on a server computer, and preferably delivered to the various client computers on an as-needed basis, the distribution, integrity and updating of the VPN software is improved because the “master” version of the VPN software can be controlled and revised by merely accessing the server computer system, rather than by attempting to control and revise numerous copies of the VPN software resident on various, scattered client computers.

Claims

1. A computer network communication system comprising:

a client computer system;

a first computer network; and

a server computer system comprising;

a storage device, VPN software stored on the storage device, wherein the VPN software is an applet, and

VPN server software for downloading the VPN software to a client computer system over the first network, with the VPN software being executable by the client computer system;

wherein the VPN software comprises machine readable instructions and data for causing the client computer system to set up bi-directional communications, where such bi-directional communications are established by requests initiated by the client computer system, wherein the bi-directional communications include an unsolicited-input connection with the first network such that the client computer system will receive first-network-ready machine readable data from the first network over the unsolicited-input connection, regardless of whether the first-network ready data has been requested by the client computer system wherein the VPN software instructs the client computer system to set up the unsolicited-input connection of the bi-directional communications, by issuing a HTTP GET request, and if no response is provided in response to the HTTP GET request, the client computer system will issue subsequent HTTP GET requests, whereby the issuing of the HTTP GET requests, followed by the issuance of subsequent HTTP GET requests operates to create an idle state which provides for the unsolicited-input connection.

2. The computer network communication system of claim 1 wherein:

the VPN software further comprises machine readable instructions and data for restructuring the first-network-ready data received over the unsolicited-input connection into corresponding second-network-ready data;

the first-network-ready machine readable data is structured according to a first protocol; and

the second-network-ready machine readable data is structured according to a second protocol, with the second protocol being different than the first protocol.

3. The computer network communication system of claim 2 wherein:

the first protocol is a protocol adapted for data communications over a public network; and

the second protocol is a protocol adapted for data communications over a private network.

4. The computer network communication system of claim 2 wherein:

the first protocol is a TCP/IP protocol at a first layer; and

the second protocol is DICOM at a second layer.

5. The computer network communication system of claim 1 wherein the client computer system comprises:

a second computer network;

a VPN client computer; and

a destination computer, with the destination computer being structured to receive the second-network-ready data from the VPN client computer over the second network.

6. The computer network communication system of claim 1 wherein the first-network-ready data is sent to the client computer system over the first network by the server computer system.

7. The computer network communication system of claim 1 wherein:

the client computer system further comprises browser software comprising machine readable instructions for decrypting data; and

the VPN software further comprises machine readable instructions for utilizing the decryption capability of the browser software to decrypt the first-network-ready data when the execution of the VPN software by the client computer restructures the first-network-unready data into corresponding second-network-ready data.

8. The computer network communication system of claim 7 wherein:

the browser is an Internet browser; and

the encryption is SSL encryption.

9. A computer network communication system comprising:

a server computer system which is coupled to a first network, and with a client computer system;

wherein the server computer system includes a storage device, with VPN software stored on the storage device, wherein the VPN software is an applet, and the server computer system is operable to download the VPN software to the client computer system, and the VPN software being executable by the client computer system;

wherein the VPN software comprises machine readable instructions and data for causing the client computer to set up bi-directional communications, where such bi-directional communications are established by requests initiated by the client computer system, wherein the bi-directional communications include an unsolicited-input connection such that the client computer system will receive data over the unsolicited-input connection, regardless of whether the data has been requested by the client computer system wherein the VPN software instructs the client computer system to set up the unsolicited-input connection of the bi-directional communications, by issuing a HTTP GET request, and if no response is provided in response to the HTTP GET request, the client computer system will issue subsequent HTTP GET requests, whereby the issuing of the HTTP GET requests, followed by the issuance of subsequent HTTP GET requests operates to create an idle state which provides for the unsolicited-input connection.

10. The computer network communication system of claim 9 wherein:

the VPN software further comprises machine readable instructions and data for restructuring first-network-ready data received over the unsolicited-input connection into corresponding second-network-ready data;

wherein the first-network-ready machine readable data is structured according to a first protocol; and

wherein the second-network-ready machine readable data is structured according to a second protocol, with the second protocol being different than the first protocol.

11. The computer network communication system of claim 10 wherein:

the first protocol is a protocol adapted for data communications over a public network; and

the second protocol is a protocol adapted for data communications over a private network.

12. The computer network communication system of claim 10 wherein:

the first protocol is a TCP/IP protocol at a first layer; and

the second protocol is DICOM at a second layer.

13. The computer network communication system of claim 10 wherein:

the VPN software further comprises machine readable instructions for utilizing a decryption capability of a browser software program loaded on the client computer system to decrypt the first-network-ready data when the execution of the VPN software by the client computer system restructures the first-network-unready data into corresponding second-network-ready data.

14. The computer network communication system of claim 9 wherein the VPN software includes instructs the client computer system to set up the bi-directional communications, by issuing a series HTTP GET requests to create an idle state which provides for the unsolicited-input connection, and issuing HTTP POST requests where the client computer system is to send data.