System and method to provide built-in and mobile VPN connectivity

• US 8,782,764 B2
• Filed: 01/20/2012
• Issued: 07/15/2014
• Est. Priority Date: 11/23/2005
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Coskun, Risvan, Reza, Ahmed Areef, Estable, Luis
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): WYSZYNSKI, AUBREY H
• Application Number:
  US13/354,848
• Publication Number:
  US 20120173680A1
• Time in Patent Office: 907 Days
• Field of Search: 726/15, 709/220
• US Class Current: 726/8
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 88/04 adapted for relaying to or from another terminal or user

Abstract

A system and method for facilitating the establishment of a virtual private network between a network and a remote computer, the system having: a mobile device connectable to the remote computer and storing a user profile, virtual private network information, and password information; virtual private network software being located on one of the mobile device and the remote computer; an access point communicating with the network; and communication means for communications between the access point and one of the mobile device and the remote computer, wherein the user profile, virtual private network information, and password information is passed to the virtual private network software upon connection of the mobile device to the remote computer, the virtual private network software using the user profile, virtual private network information, and password information to establish a virtual private network through the communications means and the access point to the network.

Claims

1. A mobile communication device for establishing a virtual private network (VPN) connection to an enterprise server, comprising:

a VPN module configurable to establish the VPN connection over a network;

first communication means for communicating over a wireless network;

second communication means for communicating with a computer;

wherein the mobile communications device is configured to;

receive, from a server, information necessary to configure said VPN connection; and

wherein the VPN module is configured to;

establish the VPN connection with the enterprise server via the first communication means;

transmit data received over the VPN connection to the computer.

2. The mobile communication device of claim 1, wherein the information is stored with a user profile stored on said mobile communications device.

3. The mobile communication device of claim 1, wherein the information is a cryptographic key.

4. The mobile communication device of claim 3, wherein the cryptographic key is an RSA key.

5. The mobile communication device of claim 3, wherein the cryptographic key is a WEP key.

6. The mobile communication device of claim 1, wherein the information is updated periodically from said server.

7. The mobile communication device of claim 1, wherein the information is received as part of a service book at said device.

8. The mobile communication device of claim 1, wherein the information is received in response to a user input at said device.

9. The mobile communication device of claim 1, wherein the information is received upon initiation of said VPN connection.

10. The mobile communication device of claim 1, wherein the second communication means are one of a Universal Serial Bus (USB) connection, a firewire connection, a Bluetooth™

connection, and an Infrared Data Association (IrDA) connection.

11. A method for establishing a virtual private network (VPN) connection to an enterprise server, said method comprising:

receiving at a mobile communications device, from a server, information necessary to configure said VPN connection;

establish said VPN connection between the VPN module and the enterprise server;

transmit data received over the VPN connection to a computer.

12. The method of claim 11, wherein the information is stored with a user profile stored on said mobile communications device.

13. The method of claim 11, wherein the information is a cryptographic key.

14. The method of claim 13, wherein the cryptographic key is an RSA key.

15. The method of claim 13, wherein the cryptographic key is a WEP key.

16. The method of claim 11, wherein the information is updated periodically from said server.

17. The method of claim 11, wherein the information is received as part of a service book at said mobile communication device.

18. The method of claim 11, wherein the information is received in response to a user input at said mobile communication device.

19. The method of claim 11, wherein the information is received upon initiation of said VPN connection.

20. The method of claim 11, wherein the transmitting operation uses one of a Universal Serial Bus (USB) connection, a firewire connection, a Bluetooth™

connection, and an Infrared Data Association (IrDA) connection.