# US 10,455,387 B2 · Network-based Machine-to-Machine (M2M) private networking system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,455,387 B2 - Document ID: US10455387B2 - Status: Granted - Kind: B2 - Application number: 15/153,287 - Filed: 2016-05-12 - Published: 2016-11-17 - Granted: 2019-10-22 - Earliest claimed: 2015-05-13 - Assignees: CyberReef Solutions Inc. - Applicants: CyberReef Solutions Inc - Inventors: Hilton Nicholson; Jamie Richmond Brown, III; William Pace; Linwood Staton; Christopher Landman; Bryce Reeves - Web page: https://patentgrep.com/patent/US10455387B2 ## CPC - H04W 4/70: Services for machine-to-machine communication [M2M] or machine type communication [MTC] - H04L 12/4633: {Interconnection of networks using encapsulation techniques, e.g. tunneling} - H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)} - H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL} - H04L 63/0272: {Virtual private networks} - H04L 63/102: {Entity profiles} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An architecture for the creation of a private network for a customer, suitable for use for machine to machine communications and the Internet of Things, is disclosed. The system includes a private networking system, which includes routers for connection to a carrier core network, and VPN servers, capable of securely connecting to a customer's enterprise network. The private networking system also includes security appliances and a controller to configure and operate the system. Through use of this private networking system, customers may easily create private networks for their enterprises. ## Claims ### Claim 1 A method of connecting mobile devices operating on a carrier network to a customer enterprise network, comprising: assigning a private static IP address to a mobile device, the IP address indicative of the customer enterprise network with which the mobile device is authorized to communicate; providing the mobile device with an Access Point Name (APN), the APN allowing a communication from the mobile device to be routed to a private networking system; receiving the communication from the mobile device at the private networking system, wherein the communication flows through a first tunnel from a first Border Gateway Protocol (BGP) router disposed in the carrier network to a second BGP router disposed in the private networking system; determining the customer enterprise network that the mobile device is authorized to communicate with based on the IP address and APN; and securely forwarding the communication from the private networking system to the customer enterprise network via a second tunnel. ### Claim 2 (depends on 1) The method of claim 1, wherein the second BGP router disposed in the private networking system terminates the tunnel that originated at the first BGP router in the carrier network. ### Claim 3 (depends on 2) The method of claim 2, wherein a Virtual Private Network (VPN) server is disposed within the private networking system, in communication with the second BGP router, and the VPN server creates the second tunnel to the customer enterprise network from the private networking system. ### Claim 4 (depends on 3) The method of claim 3, wherein the second tunnel is a SSL tunnel or an IPSec tunnel. ### Claim 5 (depends on 3) The method of claim 3, wherein the VPN server is adapted to create different types of second tunnels, depending on a device type of the device within the customer enterprise network. ### Claim 6 (depends on 1) The method of claim 1, further comprising a second mobile device authorized to communicate with the customer enterprise network, wherein a separate communication from the second mobile device flows through the first tunnel. ### Claim 7 A method of connecting a customer's mobile device operating on a carrier network to the Internet, comprising: assigning a private static IP address to a mobile device, the private static IP address indicative of a customer; providing the mobile device with an APN, the APN allowing a communication from the mobile device to be routed to a private networking system; receiving the communication from the mobile device at the private networking system, wherein the communication flows through a tunnel from a first Border Gateway Protocol (BGP) router disposed in the carrier network to a second BGP router disposed in the private networking system; determining the customer that the mobile device is associated with; and forwarding the communication from the private networking system to the Internet, whereby the private network system implements policies that define access granted to the mobile device, based on the customer. ### Claim 8 (depends on 7) The method of claim 7, wherein the policies limit types of activities that may be performed by the mobile device. ### Claim 9 (depends on 7) The method of claim 7, wherein the policies limit an amount of data that may be transmitted by the mobile device. ### Claim 10 (depends on 7) The method of claim 7, wherein the policies limit websites and applications that may be accessed by the mobile device. ### Claim 11 (depends on 7) The method of claim 7, further comprising a second mobile device associated with the customer, wherein a separate communication from the second mobile device flows through the tunnel. ### Claim 12 (depends on 7) The method of claim 7, wherein the second BGP router disposed in the private networking system terminates the tunnel that originated at the first BGP router in the carrier network.