# US 10,313,156 B2 · Communication system, communication apparatus, communication method, terminal, non-transitory medium > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,313,156 B2 - Document ID: US10313156B2 - Status: Granted - Kind: B2 - Application number: 15/745,257 - Filed: 2016-07-14 - Published: 2019-01-03 - Granted: 2019-06-04 - Earliest claimed: 2015-07-17 - Assignees: NEC Corporation - Applicants: NEC Corporation - Inventors: Satoru Ishii; Hideo Hasegawa; Shintaro Nakano - Web page: https://patentgrep.com/patent/US10313156B2 ## CPC - H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)} - H04L 12/4633: {Interconnection of networks using encapsulation techniques, e.g. tunneling} - H04L 12/66: Arrangements for connecting between networks having differing types of switching systems, e.g. gateways - H04L 12/2854: {Wide area networks, e.g. public data networks} - H04W 84/12: WLAN [Wireless Local Area Networks] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract The present invention provides secure communication between a data center, in which a wide area network (WAN) is interposed between the data center and a wireless LAN to which a terminal connects to, comprises a VPN apparatus (GW) that connects with the terminal using a VPN through the wide area network and the wireless LAN; and a virtual core network virtualizing at least a part of constituent elements of a core network, wherein the VPN apparatus is connected to the virtual core network, and the terminal communicates with a connection destination, from the VPN via the VPN apparatus, via the virtual core network, and further via a packet data network to which the virtual core network connects. ## Claims ### Claim 1 A communication system comprising: a data center with a wide area network being interposed between the data center and a wireless LAN (Local Area Network) to which a terminal connects to, wherein the data center comprises: a VPN apparatus that connects with the terminal using a VPN (Virtual Private Network) through the wide area network and the wireless LAN; and a virtual core network virtualizing at least a part of constituent elements of a core network, wherein the VPN apparatus is connected to the virtual core network, wherein the terminal communicates with a connection destination, from the VPN via the VPN apparatus, via the virtual core network, and further via a packet data network to which the virtual core network connects. ### Claim 2 (depends on 1) The communication system according to claim 1, wherein the terminal receives an incoming call or data destined to the terminal from the packet data network side, via the virtual core network of the data center and through the VPN from the VPN apparatus of the data center. ### Claim 3 (depends on 1) The communication system according to claim 1, wherein the VPN apparatus of the data center manages the VPN between the terminal and the VPN apparatus, on a per terminal basis or on a per terminal user basis. ### Claim 4 (depends on 3) The communication system according to claim 3, wherein a plurality of terminals connecting to one wireless LAN access point, connect with the VPN apparatus of the data center, respectively by a plurality of the VPNs. ### Claim 5 (depends on 1) The communication system according to claim 1, wherein when switching from one wireless LAN access point to which the terminal connects, to another wireless LAN access point, the terminal releases a VPN tunnel via the one wireless LAN access point between the terminal and the VPN apparatus of the data center, and establishes a new VPN tunnel between said terminal and the VPN apparatus of the data center via the other wireless LAN access point. ### Claim 6 (depends on 1) The communication system according to claim 1, wherein the terminal comprises: a unit that selects a wireless LAN access point to which the terminal connects. ### Claim 7 (depends on 1) The communication system according to claim 1, wherein the VPN apparatus is arranged in a gateway in the data center or in a predetermined node in the virtual core network. ### Claim 8 A communication apparatus arranged in a data center, wherein a wide area network is interposed between the data center and a wireless LAN (Local Area Network) to which a terminal connects, the communication apparatus comprising: a VPN apparatus that performs connection between the terminal and the communication apparatus using a VPN (Virtual Private Network) extending through the wireless LAN and the wide area network, wherein the VPN apparatus is connected to a virtual core network in the data center, the virtual core network virtualizing at least a part of constituent elements of a core network, and wherein the terminal communicates with a connection destination, from the VPN via the VPN apparatus, via the virtual core network, and further via a packet data network to which the virtual core network connects. ### Claim 9 (depends on 8) The communication apparatus according to claim 8, wherein the VPN apparatus manages the VPN between the terminal and the VPN apparatus, on a per terminal basis or on a per terminal user basis. ### Claim 10 (depends on 8) The communication apparatus according to claim 8, wherein the terminal receives an incoming call or data destined to the terminal from the packet data network side, via the virtual core network of the data center and through the VPN from the VPN apparatus of the data center. ### Claim 11 A communication method comprising: performing connection between a terminal and a data center, using a VPN (Virtual Private Network) through a wireless LAN (Local Area Network) and a wide area network, the wide area network being interposed between the data center and the wireless LAN to which the terminal connects; terminating the VPN by a VPN apparatus in the data center, the VPN apparatus connecting to a virtual core network in the data center, the virtual core network virtualizing at least a part of constituent elements of a core network; and the terminal communicating, from the VPN via the VPN apparatus, via the virtual core network, and further via a packet data network to which the virtual core network connects, with a connection destination. ### Claim 12 (depends on 11) The communication method according to claim 11, comprising: the terminal receiving an incoming call or data destined to the terminal from the packet data network side, via the virtual core network of the data center and through the VPN. ### Claim 13 (depends on 11) The communication method according to claim 11, comprising: when switching from one wireless LAN access point to which the terminal connects, to another wireless LAN access point, the terminal releasing a VPN tunnel via the one wireless LAN access point between the terminal and the VPN apparatus of the data center, and establishing a new VPN tunnel between the terminal and the VPN apparatus of the data center via the other wireless LAN access point. ### Claim 14 (depends on 11) The communication method according to claim 11, comprising: the terminal selecting a wireless LAN access point to which the terminal connects. ### Claim 15 (depends on 11) The communication method according to claim 11, comprising: managing the VPN between the terminal and the VPN apparatus, on a per terminal basis or on a per terminal user basis. ### Claim 16 (depends on 15) The communication method according to claim 15, comprising: a plurality of terminals that connect to one wireless LAN access point, connecting with the VPN apparatus of the data center, respectively by a plurality of the VPNs. ### Claim 17 A terminal adapted to connect with a data center via a wireless LAN (Local Area Network) and a wide area network, comprising: an VPN (Virtual Private Network) apparatus that performs connection between the terminal and the data center using a VPN (Virtual Private Network) through the wireless LAN and the wide area network, wherein the terminal communicates with a connection destination, from the VPN, via a virtual core network provided in the data center, the virtual core network virtualizing at least a part of the constituent elements of a core network, and further, via a packet data network to which the virtual core network connects. ### Claim 18 (depends on 17) The terminal according to claim 17, wherein, when switching from one wireless LAN access point to which the terminal connects, to another wireless LAN access point, releases a VPN tunnel via the one wireless LAN access point between the terminal and the VPN apparatus of the data center, and establishes a new VPN tunnel between the terminal and the VPN apparatus of the data center via the other wireless LAN access point. ### Claim 19 (depends on 17) The terminal according to claim 17, comprising: a unit that selects a wireless LAN access point to which the terminal connects. ### Claim 20 (depends on 17) The terminal according to claim 17, wherein the terminal receives an incoming call or data destined to the terminal from the packet data network side, via the virtual core network of the data center and through the VPN.