Systems and methods for remotely maintaining virtual private networks

• US 8,136,151 B2
• Filed: 07/15/2007
• Issued: 03/13/2012
• Est. Priority Date: 02/14/2005
• Status: Active Grant

• Current Assignee: Anxebusiness Corporation (Open Text Corporation)
• Original Assignee: Anxebusiness Corporation (Open Text Corporation)
• Inventors: Smith, Robert Douglas, Wobst, Olaf Alexander
• Primary Examiner(s): Lipman, Jacob
• Application Number:
  US11/778,064
• Publication Number:
  US 20080046996A1
• Time in Patent Office: 1,703 Days
• Field of Search: 726/15, 713/1, 713/2, 709/229
• US Class Current: 726/15
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Systems and methods are disclosed for automatically configuring, managing, and maintaining a network device or VPN using a public network such as the Internet. Initial configuration of a network device or VPN occurs upon a user entering minimal information via a simple HTML page. After receipt of this minimal information, the present invention automatically configures the network device or VPN without user intervention. Thereafter, a user may modify the network device or VPN configuration via an easy-to-use and easy-to-understand graphical user interface. Parameters are presented such that a user simply checks and unchecks boxes, or clicks on radio buttons, to configure network device parameters. Upon completion of the selection, the user clicks on save, and the configuration is automatically modified. In addition, upon a significant change to any network device, the changed network device automatically initiates reconfiguration of the network device or VPN with zero input from a user.

Claims

1. A method for remotely maintaining a VPN configured using VPN data input by a user at a portal comprising the steps of:

transmitting maintenance data to at least one management device from a first network device in the VPN through a management portal;

creating (i) a VPN configuration file or (ii) a VPN configuration file and a device configuration file, each at the at least one management device;

automatically establishing a communication between the at least one management device and at least one network device, which may be the same or different than the first network device, via at least one connection of at least one network; and

transmitting at least one of the VPN configuration file or the VPN configuration file and the device configuration file from the at least one management device to the at least one network device via the network connection;

wherein at least one parameter of the at least one network device, the VPN, and combinations thereof is automatically configured upon local processing of the VPN configuration file or the VPN configuration file and the device configuration file.

2. A method according to claim 1, wherein the maintenance data is at least one of the group consisting of virus definitions, block lists, policies, and firmware.

3. A method according to claim 1, wherein the at least one network device is at least one of the group consisting of a broadband device, a router, a modem, a switch, a wireless gateway, and combinations thereof.

4. A method according to claim 1, further comprising the steps of:

encoding the VPN configuration file or the VPN configuration file and the device configuration file, and

encrypting the VPN configuration file or the VPN configuration file and the device configuration file,

wherein the encoding and the encrypting occur prior to transmission of the VPN configuration file or the VPN configuration file and the device configuration file via the at least one network.

5. A method according to claim 1, wherein the network connection is at least one of the group consisting of a wireless connection, a cable connection, a digital subscriber line, a telephone line, and combinations thereof.

6. A method according to claim 1, wherein the network is at least one of the group consisting of an Internet, a wide area network, and combinations thereof.

7. A method according to claim 1, wherein a configuration transfer tool integral to the at least one management device creates and transmits the VPN configuration file or the VPN configuration file and the device configuration file to the at least one network device.

8. A method according to claim 1, wherein the local processing of the VPN configuration file or the VPN configuration file and the device configuration file, includes the sub-steps of:

extracting configuration data from the VPN configuration file or the VPN configuration file and the device configuration file, and

writing the configuration data to at least one storage location of the at least one network device;

wherein at least one daemon executed by each of the at least one network device retrieves and processes at least a portion of the configuration data contained in each of the storage locations.

9. A method according to claim 1, wherein the local processing of the VPN configuration file or the VPN configuration file and the device configuration file includes the sub-steps of:

decrypting the VPN configuration file or the VPN configuration file and the device configuration file,

decoding the VPN configuration file or the VPN configuration file and the device configuration file,

extracting configuration data from the VPN configuration file or the VPN configuration file and the device configuration file and

writing the configuration data to at least one storage location of the at least one network device;

wherein at least one daemon executed by each of the at least one network device retrieves and processes at least a portion of the configuration data contained in each of the storage locations.

10. A method according to claim 1, wherein the transmitting maintenance data to the at least one management device includes the sub-steps of:

transmitting the maintenance data to a master device; and

transmitting the maintenance data from the master device to the at least one management device.

11. A method according to claim 1, wherein the maintenance data is input via a user interface coupled to the network device in the VPN.

12. A method according to claim 11, wherein the user interface is at least one of the group consisting of a personal computer, a personal data assistant, and a network-equipped appliance.

13. A method according to claim 11, wherein the coupling of the user interface to the network device in the VPN is at least one of the group consisting of a cable, an Ethernet cable, a wireless connection, a local area network, a wide area network, an Internet connection, and combinations thereof.

14. A method according to claim 1, further comprising the step of:

authenticating a communication channel prior to the establishing of the communication between the at least one management device and the at least one network device.

15. A method according to claim 14, wherein the authenticating is performed using at least one of the group consisting of IP security, secure sockets layer, passwords, digital certificates, smart cards, biometrics, dynamic biometrics, and combinations thereof.