Multi-tunneling virtual network adapter

• US 9,906,497 B2
• Filed: 02/24/2015
• Issued: 02/27/2018
• Est. Priority Date: 10/06/2014
• Status: Active Grant

• Current Assignee: Cryptzone North America Inc. (Cryptzone Group AB)
• Original Assignee: Cryptzone North America Inc. (Cryptzone Group AB)
• Inventors: Glazemakers, Kurt, Allansson, Per Johan
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US14/630,550
• Publication Number:
  US 20160099917A1
• Time in Patent Office: 1,099 Days
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 69/14 Multichannel or multilink protocols
• CPC Class Codes: H04L 69/30 Definitions, standards or architectural aspects of layered protocol stacks

Abstract

Among other things, embodiments of the present disclosure allow multiple virtual private network connections to be created without the need for administrative privileges, and allow network traffic to be routed using a single virtual adapter instead of a dedicated virtual adapter for each virtual network connection.

Claims

1. A computer-implemented method comprising:

Receiving, via a single virtual adapter of a virtual private network (VPN) client, a plurality of separate data packets over a network, the VPN client residing in a user space portion of an operating system running on a computer system;

identifying, by the single virtual adapter, respective destinations for the plurality of separate data packets;

creating, by the VPN client, a plurality of connections to gateways corresponding to the respective destinations for the plurality of separate data packets; and

transmitting the data packets to the respective destinations via the respective gateways.

2. The method of claim 1, wherein the single virtual adapter is operating in a kernel space portion of the operating system.

3. The method of claim 1, wherein identifying the destinations for the plurality of separate data packets includes identifying the gateways corresponding to the destinations for the plurality of separate data packets.

4. The method of claim 1, wherein creating the connection to the gateway includes creating a transmission control protocol connection.

5. The method of claim 1, wherein creating the plurality of connections to the gateways includes creating a user datagram protocol connection.

6. The method of claim 1, further comprising removing the gateway connection.

7. The method of claim 1, wherein the plurality of data packets are each routed through a single virtual adapter operating in a kernel space of the operating system.

8. The method of claim 1, wherein the single virtual adapter comprises a routing table.

9. The method of claim 8, wherein the routing table identifies a destination address for a data packet.

10. A non-transitory, computer-readable medium storing instructions that, when executed, cause a computer system to:

receive, via a single virtual adapter of a virtual private network (VPN) client, a plurality of separate data packets over a network, the VPN client residing in a user space portion of an operating system running on a computer system;

identify, by the single virtual adapter, respective destinations for the plurality of separate data packets;

create, by the VPN client, a plurality of connections to gateways corresponding to the respective destinations for the plurality of separate data packets; and

transmit the data packets to the respective destinations via the respective gateways.

11. A computer system comprising:

a processor; and

a non-transitory memory in communication with the processor and storing instructions that, when executed by the processor, cause the computer system to;

receive, via a single virtual adapter of a virtual private network (VPN) client, a plurality of separate data packets over a network, the VPN client residing in a user space portion of an operating system running on a computer system;

identify, by the single virtual adapter, respective destinations for the plurality of separate data packets;

create, by the VPN client, a plurality of connections to gateways corresponding to the respective destinations for the plurality of separate data packets; and

transmit the data packets to the respective destinations via the respective gateways.