System and method to provide built-in and mobile VPN connectivity

• US 8,112,797 B2
• Filed: 12/22/2010
• Issued: 02/07/2012
• Est. Priority Date: 11/23/2005
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Coskun, Risvan, Reza, Areef, Estable, Luis
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Wyszynski, Aubrey
• Application Number:
  US12/975,835
• Publication Number:
  US 20110093602A1
• Time in Patent Office: 412 Days
• Field of Search: 726/15, 709/229
• US Class Current: 726/15
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 88/04 adapted for relaying to or from another terminal or user

Abstract

A system and method for facilitating the establishment of a virtual private network between a network and a remote computer, the system having: a mobile device connectable to the remote computer and storing a user profile, virtual private network information, and password information; virtual private network software being located on one of the mobile device and the remote computer; an access point communicating with the network; and communication means for communications between the access point and one of the mobile device and the remote computer, wherein the user profile, virtual private network information, and password information is passed to the virtual private network software upon connection of the mobile device to the remote computer, the virtual private network software using the user profile, virtual private network information, and password information to establish a virtual private network through the communications means and the access point to the network.

Claims

1. A system for establishing a virtual private network through an enterprise server comprising:

a client computer which is pre-configured;

a mobile communications device connectable to the client computer, the mobile communications device storing a user profile for establishing the virtual private network; and

virtual private network software located on the client computer,

wherein, upon connection of the mobile communications device to the client computer, the mobile communications device performs the steps of;

invoking the virtual private network software; and

providing the user profile to the virtual private network software;

and wherein upon receiving the user profile, the virtual private network software performs the step of;

communicating with the enterprise server through the mobile communications device to establish a virtual private network with the user profile.

2. The system of claim 1, wherein the mobile communications device communicates through an access point with the enterprise server.

3. The system of claim 2, wherein the user profile and password are selected from one of:

a static user identifier and password;

a static user identifier and a temporary password; and

a static user identifier and a password identifier and a dynamic component.

4. The system of claim 2 wherein the password is provisioned onto the mobile communications device.

5. The system of claim 4, wherein the provisioning is performed through a multi point distribution system.

6. The system of claim 1, wherein the mobile communications device further stores a password, remote virtual private network server information, or both a password and remote virtual private network server information.

7. The system of claim 1, wherein the user profile comprises one or more of group information, user name registered, or virtual private network configuration parameters.

8. The system of claim 1, wherein the mobile communications device further comprises access point configuration data.

9. The system of claim 1, wherein the user profile is provisioned onto the mobile communications device.

10. The system of claim 9, wherein the provisioning is performed through a multi point distribution system.

11. A method for establishing a virtual private network through an enterprise server in a system having a client computer which is pre-configured;

a mobile communications device connectable to the client computer, the mobile communications device storing a user profile for establishing the virtual private network; and

virtual private network software located on the mobile communications device, the method comprising;

establishing a connection between the mobile communications device and the client computer;

starting the virtual private network software from the mobile communications device;

passing the user profile to the private network software; and

the virtual private network software communicating with the enterprise server through the mobile communications device to establish a virtual private network with the user profile.

12. The method of claim 11, wherein the mobile communications device communicates through an access point with the enterprise server.

13. The method of claim 12, wherein the user profile and password are selected from one of:

a static user identifier and password;

a static user identifier and a temporary password; and

a static user identifier and a password identifier and a dynamic component.

14. The method of claim 12 wherein the password is provisioned onto the mobile communications device.

15. The method of claim 14, wherein the provisioning is performed through a multi point distribution system.

16. The method of claim 11, further comprising storing a password, remote virtual private network server information, or both a password and remote virtual private network server information on the mobile device.

17. The method of claim 11, wherein the user profile comprises one or more of group information, user name registered, or virtual private network configuration parameters.

18. The method of claim 11, wherein the mobile communications device further comprises access point configuration data.

19. The method of claim 11, wherein the user profile is provisioned onto the mobile communications device.

20. The method of claim 19, wherein the provisioning is performed through a multi point distribution system.