Method and system to enable a virtual private network client

• US 9,548,963 B2
• Filed: 04/01/2014
• Issued: 01/17/2017
• Est. Priority Date: 04/01/2014
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Albisu, Luis Francisco
• Primary Examiner(s): Schwartz, Darren B
• Assistant Examiner(s): GYORFI, THOMAS A
• Application Number:
  US14/231,969
• Publication Number:
  US 20150281181A1
• Time in Patent Office: 1,022 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 12/2858 Access network architectures
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 92/10 between terminal device and access point, i.e. wireless air interface

Abstract

Aspects of the subject disclosure may include, for example, a method comprising transmitting, by a controller comprising a processor, a request to a server to enable initiation of a virtual private network session on behalf of devices other than the controller. The controller transmits authentication information to enable the server to validate the request, and receives a first list of computing devices. The controller transmits a first selection of a target device from the first list to cause the server to initiate the virtual private network session between the target device and a service node providing services to the target device via the virtual private network session. The controller receives a second list of applications executable on each of the computing devices, and transmits to the server a second selection of an application from the second list that is executable by the target device. Other embodiments are disclosed.

Claims

1. A server, comprising:

a processing system including a processor; and

a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations comprising;

receiving from a mobile device a request to enable facilitation of a virtual private network session on behalf of computing devices other than the mobile device;

receiving from the mobile device authentication information to validate the request;

responsive to successfully authenticating the mobile device;

transmitting to the mobile device a first list of computing devices and a second list of applications executable on each of the computing devices;

receiving from the mobile device a first selection of a target device from the first list of computing devices and a second selection of an application from the second list of applications that is executable by the target device;

facilitating the virtual private network session between the target device and a service node providing services to the target device via the virtual private network session, the target device being other than the mobile device; and

limiting the services provided to the target device by the service node to the application selected from the second list of applications.

2. The server of claim 1, wherein the authentication information is provided over a secure communication session between the mobile device and the server.

3. The server of claim 1, wherein the mobile device is not communicatively coupled to the target device when submitting the request or when the mobile device selects the target device or the application executable by the target device.

4. The server of claim 1, wherein the mobile device is not provided access to the virtual private network session and is not communicatively coupled to the target device.

5. The server of claim 1, wherein the service node is remotely located from the server.

6. The server of claim 1, wherein the service node is an integral part of the server.

7. The server of claim 1, wherein the virtual private network session is facilitated by facilitating a first virtual private network session between the server and the service node, facilitating a second virtual private network session between the server and the target device, and facilitating a connection between the first virtual private network session and the second virtual private network session.

8. A non-transitory computer-readable storage device comprising executable instructions that, when executed by a processing system including a processor, cause the processor to perform operations comprising:

receiving from a first device a request to enable facilitation of a virtual private network session on behalf of devices other than the first device;

receiving from the first device authentication information to validate the request;

responsive to successfully authenticating the first device;

transmitting to the first device a first list of computing devices;

receiving from the first device a first selection of a target device from the first list of computing devices; and

facilitating the virtual private network session between the target device and a service node providing services to the target device via the virtual private network session, the target device being other than the first device.

9. The non-transitory computer-readable storage device of claim 8, wherein the service node comprises a second device not communicatively coupled to the first device.

10. The non-transitory computer-readable storage device of claim 8, wherein the first device comprises a mobile communication device.

11. The non-transitory computer-readable storage device of claim 8, wherein the operations further comprise transmitting to the first device a second list of applications executable on each of the computing devices, and receiving from the first device a second selection of an application from the second list of applications that is executable by the target device.

12. The non-transitory computer-readable storage device of claim 11, wherein the operations further comprise limiting the services provided to the target device by the service node to the application selected from the second list of applications.

13. The non-transitory computer-readable storage device of claim 8, wherein the service node is remotely located from the processor.

14. The non-transitory computer-readable storage device of claim 8, wherein the virtual private network session is facilitated by initiating a first virtual private network session between the processor and the service node, initiating a second virtual private network session between the processor and the target device, and initiating a connection between the first virtual private network session and the second virtual private network session.

15. A method, comprising:

transmitting, by a processing system including a processor of a requesting device, a request to a server to enable initiation of a virtual private network session on behalf of devices other than the requesting device;

transmitting, by the processing system, authentication information to enable the server to validate the request;

receiving, by the processing system, from the server a first list of computing devices; and

transmitting, by the processing system, to the server a first selection of a target device from the first list of computing devices to cause the server to initiate the virtual private network session between the target device and a service node providing services to the target device via the virtual private network session, the target device being other than the requesting device.

16. The method of claim 15, wherein the requesting device comprises a mobile device.

17. The method of claim 15, wherein the authentication information is provided over a secure communication session between the requesting device and the server.

18. The method of claim 15, further comprising receiving, by the processing system, from the server a second list of applications executable on each of the computing devices, and transmitting, by the processing system, to the server a second selection of an application from the second list of applications that is executable by the target device.

19. The method of claim 18, further comprising restricting, by the processing system, a scope of the services provided to the target device by the service node to the application selected from the second list of applications.

20. The method of claim 15, wherein the requesting device is not provided access to the virtual private network session and is not communicatively coupled to the target device.