System and method to provide built-in and mobile VPN connectivity

• US 9,537,830 B2
• Filed: 10/26/2015
• Issued: 01/03/2017
• Est. Priority Date: 11/23/2005
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Reza, Ahmed, Coskun, Risvan, Estable, Luis
• Primary Examiner(s): Hailu, Teshome
• Assistant Examiner(s): WYSZYNSKI, AUBREY H
• Application Number:
  US14/922,751
• Publication Number:
  US 20160099918A1
• Time in Patent Office: 435 Days
• Field of Search: 726/8, 726/150, 726/15
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 88/04 adapted for relaying to or from another terminal or user

Abstract

A system and method for facilitating the establishment of a virtual private network between a network and a remote computer, the system having: a mobile device connectable to the remote computer and storing a user profile, virtual private network information, and password information; virtual private network software being located on one of the mobile device and the remote computer; an access point communicating with the network; and communication means for communications between the access point and one of the mobile device and the remote computer, wherein the user profile, virtual private network information, and password information is passed to the virtual private network software upon connection of the mobile device to the remote computer, the virtual private network software using the user profile, virtual private network information, and password information to establish a virtual private network through the communications means and the access point to the network.

Claims

1. A method for establishing a virtual private network (VPN) connection to a first server, the method comprising:

receiving, at a mobile communications device from a second server, information to configure the VPN connection;

storing the information on the mobile communications device;

providing the information to a VPN module on the mobile communications device; and

establishing the VPN connection between the VPN module and the first server using the information.

2. The method of claim 1, wherein the information includes at least one of a user profile, second server information, or a password.

3. The method of claim 1, wherein the information includes a cryptographic key.

4. The method of claim 3, wherein the cryptographic key is at least one of an RSA key or a WEP key.

5. The method of claim 1, wherein the information is updated periodically from the second server.

6. The method of claim 1, wherein the information is received as part of a service book at the mobile communication device.

7. The method of claim 1, wherein the receiving is over-the-air.

8. The method of claim 1, wherein the providing is done on connecting the mobile communications device to a computer.

9. The method of claim 8, wherein the connecting uses a short range wired or wireless communications link.

10. The method of claim 8, wherein information received over the VPN connection is passed through the mobile communications device to the computer.

11. A mobile communications device configured to establish a virtual private network (VPN) connection to a first server, the mobile communications device comprising:

a processor; and

a communications subsystem,

wherein the mobile communications device is configured to;

receive, from a second server, information to configure the VPN connection;

store the information on the mobile communications device;

provide the information to a VPN module on the mobile communications device; and

establish the VPN connection between the VPN module and the first server using the information.

12. The mobile communications device of claim 11, wherein the information includes at least one of a user profile, second server information, or a password.

13. The mobile communications device of claim 11, wherein the information includes a cryptographic key.

14. The mobile communications device of claim 13, wherein the cryptographic key is at least one of an RSA key or a WEP key.

15. The mobile communications device of claim 11, wherein the information is updated periodically from the second server.

16. The mobile communications device of claim 11, wherein the information is received as part of a service book at the mobile communication device.

17. The mobile communications device of claim 11, wherein the mobile communications device is provisioned is over-the-air.

18. The mobile communications device of claim 11, wherein the mobile communications device is configured to provide the information on connecting the mobile communications device to a computer.

19. The mobile communications device of claim 18, wherein the mobile communications device is configured to connect using a short range wired or wireless communications link.

20. The mobile communications device of claim 18, wherein information received over the VPN connection is passed through the mobile communications device to the computer.

21. A non-transitory computer readable medium having stored thereon executable code, which when executed by a processor of a mobile communications device, are configured to establish a virtual private network (VPN) connection to a first server, the executable code including instructions for:

receiving, at the mobile communications device from a second server, information to configure the VPN connection;

storing the information on the mobile communications device;

providing the information to a VPN module on the mobile communications device; and

establishing the VPN connection between the VPN module and the first server using the information.

22. The non-transitory computer readable medium of claim 21, wherein the information includes at least one of a user profile, second server information, or a password.

23. The non-transitory computer readable medium of claim 21, wherein the information includes a cryptographic key.

24. The non-transitory computer readable medium of claim 23, wherein the cryptographic key is at least one of an RSA key or a WEP key.

25. The non-transitory computer readable medium of claim 21, wherein the information is updated periodically from the second server.

26. The non-transitory computer readable medium of claim 21, wherein the information is received as part of a service book at the mobile communication device.

27. The non-transitory computer readable medium of claim 21, wherein the receiving is over-the-air.

28. The non-transitory computer readable medium of claim 21, wherein the providing is done on connecting the mobile communications device to a computer.

29. The non-transitory computer readable medium of claim 28, wherein the connecting uses a short range wired or wireless communications link.

30. The non-transitory computer readable medium of claim 28, wherein information received over the VPN connection is passed through the mobile communications device to the computer.