System and method to provide built-in and mobile VPN connectivity

• US 7,882,557 B2
• Filed: 11/23/2005
• Issued: 02/01/2011
• Est. Priority Date: 11/23/2005
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Estable, Luis, Coskun, Risvan, Raza, Areef
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Wyszynski; Aubrey H
• Application Number:
  US11/284,884
• Publication Number:
  US 20070118895A1
• Time in Patent Office: 1,896 Days
• Field of Search: 726/15
• US Class Current: 726/15
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 88/04 adapted for relaying to or from another terminal or user

Abstract

A system and method for facilitating the establishment of a virtual private network between a network and a remote computer, the system having: a mobile device connectable to the remote computer and storing a user profile, virtual private network information, and password information; virtual private network software being located on one of the mobile device and the remote computer; an access point communicating with the network; and communication means for communications between the access point and one of the mobile device and the remote computer, wherein the user profile, virtual private network information, and password information is passed to the virtual private network software upon connection of the mobile device to the remote computer, the virtual private network software using the user profile, virtual private network information, and password information to establish a virtual private network through the communications means and the access point to the network.

Claims

1. A system for facilitating establishment of a virtual private network between a network and a remote computer, comprising:

a mobile device connectable to said remote computer, the mobile device storing a user profile, virtual private network information, and password information;

virtual private network software, said virtual private network software being located on one of the mobile device and the remote computer;

an access point communicating with the network; and

communication means for communications between the access point and one of the mobile device and the remote computer, said communications means being located on the mobile device if said virtual private network software is on said mobile device, and located on one of the mobile device or the remote computer if the virtual private network software is located on the remote computer,

wherein said user profile, virtual private network information, and password information are passed to said virtual private network software upon connection of the mobile device to the remote computer, said virtual private network software using said user profile, virtual private network information, and password information to establish a virtual private network though said communications means and said access point to said network.

2. The system of claim 1, wherein the virtual private network software is located on the mobile device, and connection between the remote computer and mobile device perceived as a standard network connection by the remote computer.

3. The system of claim 1, wherein the user profile and virtual private network information are manually downloaded onto the mobile device from a remote location.

4. The system of claim 3, wherein parameters for configuring a password are manually downloaded onto the mobile device from a remote location.

5. The system of claim 1, wherein the user profile and virtual private network information are provisioned onto the mobile device.

6. The system of claim 3, wherein parameters for configuring a password are provisioned onto the mobile device.

7. The system of claim 5, further comprising a multipoint distribution system for provisioning the mobile device.

8. The system of claim 1, wherein the network further includes a gateway, the gateway being configured to verify user profile and password information from the remote computer.

9. The system of claim 1, wherein the mobile device is connectable to the remote computer through an interface selected from the group consisting of a Bluetooth™

connection, a Universal Serial Bus connection, an Infrared Data Association connection, and a firewire connection.

10. The system of claim 1, wherein said communications means includes an over the air communications means.

11. A method for facilitating establishment of a virtual private network between a network and a remote computer comprising the steps of:

connecting a mobile device to the remote computer;

starting virtual private network software from the mobile device;

passing, from the mobile device to virtual private network software, a user profile, virtual private network information, and password information;

configuring the virtual private network software with the user profile, virtual private network information, and password information; and

initiating a virtual private network from said virtual private network software using network transport.

12. The method of claim 11, wherein said virtual private network software is located on the mobile device.

13. The method of claim 12, wherein said network transport is an over the air communication means.

14. The method of claim 11, wherein said virtual private network software is located on the remote computer.

15. The method of claim 14, wherein said network transport is a modem connection with an access point.

16. The method of claim 11, wherein the connecting step utilizes an interface between the mobile device and the remote computer, the interface being selected from the group consisting of a Bluetooth™

connection, a Universal Serial Bus connection, an Infrared Data Association connection, and a firewire connection.