Virtual channel virtual private network

• US 9,935,790 B2
• Filed: 07/06/2015
• Issued: 04/03/2018
• Est. Priority Date: 02/11/2015
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Fausak, Andrew T., Rombakh, Oleg
• Primary Examiner(s): Chan, Wing F
• Assistant Examiner(s): Tseng, Leon Y
• Application Number:
  US14/792,021
• Publication Number:
  US 20160234040A1
• Time in Patent Office: 1,002 Days
• Field of Search: 709228
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 12/4679 Arrangements for the registration or de-registration of VLAN attribute values, e.g. VLAN identifiers, port VLAN membership
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/025 for remote control or remote monitoring of applications
• CPC Class Codes: H04L 67/08 specially adapted for terminal emulation, e.g. Telnet
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/131 Protocols for games, networked simulations or virtual reality
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/148 Migration or transfer of sessions
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 69/04 Protocols for data compression, e.g. ROHC
• CPC Class Codes: H04L 69/14 Multichannel or multilink protocols
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: Y02D 30/50 in wire-line communication networks, e.g. low power modes or reduced link rate

Abstract

A system and method of implementing a virtual channel virtual private network is disclosed. In one embodiment, a remote desktop protocol (RDP) client is connected to a RDP server. The RDP client requests a virtual connection to a first computing device. A virtual channel for the RDP connection is created. A client application or client gateway is bound to the first virtual channel at the RDP client. The RDP server establishes a connection to a server application or a server gateway, and binds the connection to the first virtual channel.

Claims

1. A method comprising:

by a first server;

receiving a request from a client device for a first connection;

establishing the first connection to the client device;

receiving a request from the client device to establish a virtual channel to a first computing device;

establishing a second connection to the first computing device;

establishing the virtual channel of the first connection;

creating a virtual private network by attaching one or more gateway functions to each end of the virtual channel; and

binding the second connection to the first computing device to the virtual channel of the first connection.

2. The method of claim 1, wherein binding the second connection to the first computing device to the virtual channel of the first connection comprises establishing port forwarding from the first server to the first computing device.

3. The method of claim 1, wherein establishing the second connection to the first computing device comprises launching a gateway server application.

4. The method of claim 3, wherein binding the second connection to the first computing device to the virtual channel of the first connection comprises binding the gateway server application to the virtual channel of the first connection.

5. The method of claim 1, wherein establishing a second connection to the first computing device comprises establishing a connection to a gateway server on a second computing device.

6. The method of claim 5, wherein binding the second connection to the first computing device to the virtual channel of the first connection comprises binding the connection to the gateway server on the second computing device to the virtual channel of the first connection.

7. The method of claim 6, wherein binding the second connection to the first computing device to the virtual channel of the first connection comprises establishing port forwarding from the first server to the second computing device.

8. One or more computer-readable non-transitory storage media embodying logic that is operable when executed to:

by a first server;

receiving a request from a client device for a first connection;

establishing the first connection to the client device;

receiving a request from the client device to establish a virtual channel to a first computing device;

establishing a second connection to the first computing device;

establishing the virtual channel of the first connection;

creating a virtual private network by attaching one or more gateway functions to each end of the virtual channel; and

binding the second connection to the first computing device to the virtual channel of the first connection.

9. The one or more computer-readable non-transitory storage media of claim 8, wherein binding the second connection to the first computing device to the virtual channel of the first connection comprises establishing port forwarding from the first server to the first computing device.

10. The one or more computer-readable non-transitory storage media of claim 8, wherein establishing the second connection to the first computing device comprises launching a gateway server application.

11. The one or more computer-readable non-transitory storage claim 10, wherein binding the second connection to the first computing device to the virtual channel of the first connection comprises binding the gateway server application to the virtual channel of the first connection.

12. The one or more computer-readable non-transitory storage media of claim 8, wherein establishing a second connection to the first computing device comprises establishing a connection to a gateway server on a second computing device.

13. The one or more computer-readable non-transitory storage claim 12, wherein binding the second connection to the first computing device to the virtual channel of the first connection comprises binding the connection to the gateway server on the second computing device to the virtual channel of the first connection.

14. The one or more computer-readable non-transitory storage media of claim 13, wherein binding the second connection to the first computing device to the virtual channel of the first connection comprises establishing port forwarding from the first server to the second computing device.

15. An information handling system comprising:

one or more processors; and

a memory coupled to the processors comprising instructions executable by the processors, the processors being operable when executing the instructions to;

by a first server;

receiving a request from a client device for a first connection;

establishing the first connection to the client device;

receiving a request from the client device to establish a virtual channel to a first computing device;

establishing a second connection to the first computing device;

establishing the virtual channel of the first connection;

creating a virtual private network by attaching one or more gateway functions to each end of the virtual channel; and

binding the second connection to the first computing device to the virtual channel of the first connection.

16. The information handling system of claim 15, wherein binding the second connection to the first computing device to the virtual channel of the first connection comprises establishing port forwarding from the first server to the first computing device.

17. The information handling system of claim 15, wherein establishing the second connection to the first computing device comprises launching a gateway server application.

18. The information handling system of claim 17, wherein binding the second connection to the first computing device to the virtual channel of the first connection comprises binding the gateway server application to the virtual channel of the first connection.

19. The information handling system of claim 15, wherein establishing a second connection to the first computing device comprises establishing a connection to a gateway server on a second computing device.

20. The information handling system of claim 19, wherein binding the second connection to the first computing device to the virtual channel of the first connection comprises binding the connection to the gateway server on the second computing device to the virtual channel of the first connection.