Network-based Machine-To-Machine (M2M) Private Networking System

• US 20180220285A1
• Filed: 03/27/2018
• Published: 08/02/2018
• Est. Priority Date: 05/13/2015
• Status: Active Grant

• Current Assignee: CyberReef Solutions Inc.
• Original Assignee: CyberReef Solutions Inc.
• Inventors: Nicholson, Hilton, Brown, III, Jamie Richmond, Pace, William, Staton, Linwood, Landman, Christopher, Reeves, Bryce
• Granted Patent: US 10,462,630 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]

Abstract

An architecture for the creation of a private network for a customer, suitable for use for machine to machine communications and the Internet of Things, is disclosed. The system includes a private networking system, which includes routers for connection to a carrier core network, and VPN servers, capable of securely connecting to a customer'"'"'s enterprise network. The private networking system also includes security appliances and a controller to configure and operate the system. Through use of this private networking system, customers may easily create private networks for their enterprises.

Claims

1. A private networking system to connect devices operating on a carrier network to a customer enterprise network, comprising:

a router to terminate a first tunnel originating on the carrier network; and

a VPN server to create a second tunnel which is terminated at the customer enterprise network,

wherein the router and the VPN server are in communication with one another.

2. The private networking system of claim 1, wherein the VPN server is adapted to create a plurality of second tunnels which are respectively terminated at a plurality of different customer enterprise networks.

3. The private networking system of claim 1, wherein connections to the carrier network are via the internet.

4. The private networking system of claim 1, wherein connections to the customer enterprise network are via the internet.

5. The private networking system of claim 1, further comprising control logic to set policy for communications occurring on the customer enterprise network.

6. The private networking system of claim 1, wherein the second tunnel comprises an IPSec or SSL tunnel.

7. A communication system, comprising:

a carrier network;

a customer enterprise network; and

a private networking system disposed between the carrier network and the customer enterprise network, wherein the private networking system terminates a first tunnel that originates in the carrier network and creates a second tunnel that terminates in the customer enterprise network.

8. The communications system of claim 7, wherein the first tunnel is terminated by a router disposed in the private networking system.

9. The communication system of claim 7, wherein the second tunnel is created by a VPN server disposed in the private networking system.

10. The communication system of claim 7, further comprising a second customer enterprise network, wherein the private networking system creates a second tunnel to the second customer enterprise network.

11. The communication system of claim 10, wherein a mobile device in the carrier network has an IP address and the IP address is used by the private networking system to determine which customer enterprise network the mobile device is authorized to access.

12. The communication system of claim 7, further comprising a second carrier network, wherein the private networking system terminates a first tunnel originating in the second carrier network.