WAP XML extension to define VPN connections

• US 7,333,799 B2
• Filed: 11/07/2003
• Issued: 02/19/2008
• Est. Priority Date: 08/29/2003
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Natarajan, Sureshkumar
• Primary Examiner(s): Beamer; Temica
• Application Number:
  US10/703,365
• Publication Number:
  US 20050101305A1
• Time in Patent Office: 1,565 Days
• Field of Search: 370/349, 370/352, 370/401, 370389-3951, 455/414.1, 455/556.1, 455/557, 455/558, 455/556.2, 455/552, 707/200, 709223-227, 709230-233, 709243-249, 709/200, 713/201
• US Class Current: 455/411
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0886 Fully automatic configuration
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning

Abstract

Described is a method and system for automatically provisioning a mobile device with VPN (Virtual Private Network) information so that users can automatically connect to their corporate networks using their devices. An XML based mechanism uses the WAP (wireless application protocol) XML structure and extends it to define VPN connections and provision them onto the devices automatically either over-the-air or by an IT application provided by the corporation.

Claims

1. A method for defining VPN connections for a mobile device, comprising:

creating a VPN definition;

wherein the VPN definition includes a unique identifier that uniquely identifies a VPN connection, a name of a VPN connection, an address of a VPN server;

characteristics to define security credentials and network access points that can use the VPN connection;

incorporating the VPN definition into a WAP schema;

wherein the WAP schema is used to provision cellular data connections, proxy connections and access characteristics; and

provisioning the mobile device with a VPN connection using the WAP schema that creates a secure tunnel from the mobile device to a network.

2. The method of claim 1, wherein the WAP schema further comprises using an XML schema.

3. The method of claim 1, wherein provisioning the mobile device with the VPN connection occurs automatically.

4. The method of claim 1, wherein provisioning the mobile device with the VPN connection further comprises loading a SIM card with the VPN connection.

5. The method of claim 2, wherein incorporating the VPN definition into the WAP schema further comprises extending a WAP XML structure to define the VPN connection.

6. The method of claim 5, wherein provisioning the mobile device further comprises using a wireless connection to automatically provision the mobile device.

7. The method of claim 6, wherein the provisioning the mobile device further comprises using an application to provision the mobile device.

8. The method of claim 2, wherein creating the VPN definition further comprises creating a stand-alone characteristic associated with the WAP XML schema.

9. The method of claim 2, wherein creating the VPN definition further comprises extending an existing characteristic associated with the WAP XML schema.

10. A system for provisioning VPN information associated with a mobile device, comprising:

a server configured to maintain data relating to the VPN information, wherein the VPN information is incorporated into a WAP XML schema;

wherein the VPN information includes a unique identifier that uniquely identifies a VPN connection, a name of the VPN connection, an address of a VPN server;

characteristics to define security credentials and network access points that can use the VPN connection and wherein the WAP XML schema is used to provision cellular data connections, proxy connections and access characteristics; and

a mobile device coupled to the server and configured to receive the VPN information enabling the mobile device to communicate with a network through a secure tunnel.

11. The system of claim 10, wherein the mobile device is bootstrapped with the VPN information.

12. The system of claim 11, wherein the mobile device further comprises a SIM card that is provisioned with the VPN information.

13. The system of claim 10, wherein the server is further configured to transfer the VPN information to the mobile device.

14. The system of claim 11, wherein the mobile device is further configured to receive updated VPN information based on determined network connections.

15. The system of claim 10, wherein the VPN information incorporated into the WAP XML schema further comprises extending a WAP XML structure to define the VPN information.

16. The method of claim 10, wherein the VPN information incorporated into the WAP XML schema further comprises creating a stand-alone characteristic associated with the WAP XML schema.

17. A computer-readable medium for automatically provisioning a mobile device with VPN information, comprising:

creating a VPN definition that includes a unique identifier that uniquely identifies a VPN connection, a name of the VPN connection, an address of a VPN server;

characteristics to define security credentials and network access points that can use the VPN connection;

incorporating the VPN definition into a WAP XML schema;

wherein the WAP XML schema is used to provision cellular data connections, proxy connections and access characteristics; and

provisioning the mobile device with a VPN connection using the WAP XML schema that creates a secure tunnel from the mobile device to a network.

18. The computer-readable medium of claim 17, wherein provisioning the mobile device with the VPN connection further comprises loading a SIM card with the VPN connection.

19. The computer-readable medium of claim 17, wherein creating the VPN definition further comprises creating a stand-alone characteristic associated with the WAP XML schema.

20. The computer-readable medium of claim 17, wherein creating the VPN definition further comprises extending an existing characteristic associated with the WAP XML schema.