Mobile phone docking station VPNs

• US 9,338,093 B2
• Filed: 10/21/2014
• Issued: 05/10/2016
• Est. Priority Date: 12/17/2010
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: Goodman, Lee N., Eichen, Elliot G., Javaregowda, Gowtham, Flynn, James
• Primary Examiner(s): Sloms, Nicholas
• Application Number:
  US14/519,522
• Publication Number:
  US 20150036641A1
• Time in Patent Office: 567 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 1/1632 External expansion units, e.g. docking stations
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04M 7/0075 Details of addressing, directories or routing tables
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A device includes a memory that stores multiple different types of applications and a data table, and a processing unit. The processing unit is configured to receive configuration data that sets up multiple network interfaces on the device, and assigns one of multiple different network addresses to each of the multiple network interfaces, store the configuration data in the data table, execute a first type of application of the multiple different types of applications, receive one or more first packets from executing the first type of application of the multiple different types of applications, retrieve a first Virtual Private Network (VPN) identifier associated with a first VPN from the data table based on the first type of application of the multiple different types of applications, and send the one or more first packets via the first VPN identified by the first VPN identifier.

Claims

1. A device, comprising:

a memory configured to store multiple different types of applications and a data table;

a wired communication interface configured to connect to a port of a docking station when the device is docked with the docking station; and

a processing unit configured to;

receive, via the wired communication interface from the docking station when the device is docked with the docking station, configuration data that sets up multiple network interfaces on the device, assigns multiple different Virtual Private Networks (VPNs), each having a respective VPN identifier, to the multiple network interfaces, and further assigns one of multiple different network addresses to each of the multiple network interfaces,

store the configuration data in the data table,

execute a first type of application of the multiple different types of applications,

receive one or more first packets from the executing first type of application of the multiple different types of applications,

index the data table with the first type of application to identify a table entry having an application type field that stores an application type that matches the first type of application, wherein the identified table entry includes a first VPN identifier associated with a first VPN of the multiple different VPNs and first security credentials for use in accessing the first VPN identified by the first VPN identifier,

retrieve, from the identified table entry of the data table, the first VPN identifier associated with the first VPN of the multiple different VPNs and the first security credentials, and

send, using the retrieved first security credentials, the one or more first packets via the first VPN identified by the first VPN identifier.

2. The device of claim 1, wherein each one of the multiple different types of applications implements a certain function when executed at the device.

3. The device of claim 1, wherein the configuration data stored in the data table:

maps the first type of application of the multiple different types of applications to a first one of the multiple different network addresses, and

maps a second type of application of the multiple different types of applications to a second one of the multiple different network addresses.

4. The device of claim 1, wherein the device comprises a digital computing device that is configured to communicate via multiple different types of network connections.

5. The device of claim 4, wherein the device comprises a cellular telephone, a tablet computer, or a personal digital assistant (PDA).

6. The device of claim 1, wherein the processing unit is further configured to:

retrieve a network identifier and one of the network addresses from the identified table entry of the data table, wherein the network identifier identifies one of a wired local area network (LAN), a wired wide area network (WAN), a wireless LAN, a wireless WAN, or a wireless cellular network.

7. The device of claim 6, wherein the processing unit is further configured to:

send, using the first security credentials, the one or more first packets via the identified one of the wired LAN, the wired WAN, the wireless LAN, the wireless WAN, or the wireless cellular network over the first VPN identified by the first VPN identifier.

8. The device of claim 1, wherein the wired communication interface comprises a Universal Serial Bus (USB) interface and wherein the USB interface connects to a USB port of a docking station when the device is docked with the docking station.

9. The device of claim 8, wherein the processing unit is further configured to receive the configuration data from the docking station via the USB port of the docking station and via the USB interface of the device.

10. The device of claim 1, wherein the processing unit is further configured to:

execute a second type of application of the multiple different types of applications,

receive one or more second packets from the executing second type of application,

index the data table with the second type of application to identify a second table entry having an application type field that stores an application type that matches the second type of application, wherein the identified second table entry includes a second VPN identifier associated with a second VPN of the multiple different VPNs and second security credentials for use in accessing the second VPN identified by the second VPN identifier,

retrieve, from the identified second table entry of the data table, the second VPN identifier associated with the second VPN of the multiple different VPNs and the second security credentials, and

send, using the retrieved second security credentials, the one or more second packets via the second VPN identified by the second VPN identifier.

11. The device of claim 1, further comprising:

a wireless communication interface;

wherein the processing unit is further configured to;

send the one or more first packets, using the wireless communication interface, via a wireless Local Area Network (LAN) or a wireless cellular network.

12. A method, comprising:

receiving, at a device from a docking station when the device is docked with the docking station, configuration data that sets up multiple network interfaces on the device, assigns multiple different Virtual Private Networks (VPNs), each having a respective VPN identifier, to the multiple network interfaces, and assigns one of multiple different network addresses to each of the multiple network interfaces;

storing, at the device, the configuration data in a data table;

executing a first type of application of multiple types of applications, wherein each one of the multiple types of applications implements a certain function when executed;

receiving one or more first packets from the executing the first type of application of the multiple types of applications;

indexing the data table with the first type of application to identify a table entry having an application type field that stores an application type that matches the first type of application, wherein the identified table entry includes a first VPN identifier associated with a first VPN of the multiple different VPNs and first security credentials for use in accessing the first VPN identified by the first VPN identifier;

retrieving, from the identified table entry of the data table, the first VPN identifier associated with the first VPN of the multiple different VPNs and the first security credentials; and

sending, using the retrieved first security credentials, the one or more first packets via the first VPN identified by the first VPN identifier.

13. The method of claim 12, further comprising:

retrieving a network identifier and one of the network addresses from the identified table entry of the data table, wherein the network identifier identifies one of a wired local area network (LAN), a wired wide area network (WAN), a wireless LAN, a wireless WAN, or a wireless cellular network.

14. The method of claim 13, further comprising:

sending, using the retrieved first security credentials, the one or more first packets via the identified one of the wired LAN, the wired WAN, the wireless LAN, the wireless WAN, or the wireless cellular network over the first VPN identified by the first VPN identifier.

15. The method of claim 12, wherein the device includes a Universal Serial Bus (USB) interface and wherein the USB interface connects to a USB port of the docking station when the device is docked with the docking station, and the method further comprising:

receiving, at the device, the configuration data from the docking station via the USB port of the docking station and via the USB interface of the device.

16. The method of claim 12, further comprising:

executing a second type of application of the multiple types of applications;

receiving one or more second packets from the executing second type of application;

indexing the data table with the second type of application to identify a second table entry having an application type field that stores an application type that matches the second type of application, wherein the identified second table entry includes a second VPN identifier associated with a second VPN of the multiple different VPNs and second security credentials for use in accessing the second VPN identified by the second VPN identifier,

retrieving, from the identified second table entry of the data table, the second VPN identifier associated with the second VPN of the multiple different VPNs and the second security credentials; and

sending, using the retrieved second security credentials, the one or more second packets via the second VPN identified by the second VPN identifier.

17. A device, comprising:

a memory configured to store multiple types of applications;

a wired communication interface configured to connect to a port of a docking station when the device is docked with the docking station; and

a processing unit configured to;

receive, via the wired communication interface from the docking station when the device is docked with the docking station, configuration data that sets up multiple network interfaces on the device, and assigns multiple different virtual private networks (VPNs), each having a respective VPN identifier, to the multiple network interfaces,

store the configuration data in the memory,

execute a first type of application of multiple types of applications,

identify a first VPN of the multiple different VPNs based on the first type of application and the stored configuration data,

retrieve, from the configured data stored in the memory based on the first type of application, first security credentials associated with the first VPN,

send, using the first security credentials, one or more first packets generated by the first type of application via the identified first VPN of the multiple different VPNs,

execute a second type of application of the multiple types of applications,

identify a second VPN of the multiple different VPNs based on the second type of application and the stored configuration data,

retrieve, from the configuration data stored in the memory based on the second type of application, second security credentials associated with the second VPN, and

send, using the second security credentials, one or more second packets generated by the second type of application via the identified second VPN of the multiple different VPNs.

18. The device of claim 17, wherein the configuration data further assigns one of multiple different network addresses to each of the multiple network interfaces and wherein the processing unit is further configured to:

retrieve, from the configuration data stored in the memory based on the first type of application, a first network identifier and a first one of the multiple different network addresses, wherein the first network identifier identifies one of a wired local area network (LAN), a wired wide area network (WAN), a wireless LAN, a wireless WAN, or a wireless cellular network, and

send, using the first security credentials, the one or more first packets via the identified one of the wired LAN, the wired WAN, the wireless LAN, the wireless WAN, or the wireless cellular network over the first VPN identified by the first VPN identifier.

19. The device of claim 18, wherein the configuration data further assigns one of multiple different network addresses to each of the multiple network interfaces and wherein the processing unit is further configured to:

retrieve, from the configuration data stored in the memory based on the second type of application, a second network identifier and a second one of the multiple different network addresses, wherein the second network identifier identifies one of the wired LAN, the wired WAN, the wireless LAN, the wireless WAN, or the wireless cellular network, and

send, using the second security credentials, the one or more second packets via the identified one of the wired LAN, the wired WAN, the wireless LAN, the wireless WAN, or the wireless cellular network over the second VPN identified by the second VPN identifier.

20. The device of claim 17, wherein the configuration data stored in the memory:

maps the first type of application of the multiple different types of applications to a first one of the multiple different network addresses, the first VPN of the multiple different VPNs, and the first security credentials associated with the first VPN, and

maps a second type of application of the multiple different types of applications to a second one of the multiple different network addresses, the second VPN of the multiple different VPNs, and the second security credentials associated with the second VPN.