# US 10,484,335 B2 · Secure remote computer network > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,484,335 B2 - Document ID: US10484335B2 - Status: Granted - Kind: B2 - Application number: 14/765,115 - Filed: 2013-02-11 - Published: 2016-01-07 - Granted: 2019-11-19 - Earliest claimed: 2012-02-09 - Assignees: Connectify, Inc. - Applicants: Connectify, Inc. - Inventors: Brian Prodoehl; David Lewanda; Alex Gizis; Brian Lutz - Web page: https://patentgrep.com/patent/US10484335B2 ## CPC - H04L 63/0272: {Virtual private networks} - H04L 45/20: {Hop count for routing purposes, e.g. TTL} - H04L 61/4523: using lightweight directory access protocol [LDAP] - H04L 63/0281: {Proxies} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 61/2514: between local and global IP addresses - H04L 61/2592: using tunnelling or encapsulation - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems and methods to provide improved secure, high speed networking between two or more computers is disclosed. The invention provides a robust and flexible means to readily establish a secure connection between two or more computers using insecure public or private network connections, while eliminating most of the difficulties and issues a user typically experiences with varying virtual private networks (“VPN”) and firewall configurations. The inventive system can be adapted to route traffic across multiple network connections based on a variety of criteria, including without limitation, the importance of any given data, the cost of each means of connection, and/or the performance of each possible means of connecting to the client system. ## Claims ### Claim 1 A computer communications network system, comprising: (a) at least one VPN server computer in a hub mode in communication connectivity with an external network; (b) at least one VPN client computer in a client mode in communication connectivity with an external network; (c) a directory service in communication connectivity with an external network, the directory service enabling open protocol real-time messaging; and (d) a management database for recording real time statistics related to the computer communications network system, the real time statistics including (i) cost, (ii) performance, and (iii) expected reliability of each of a plurality of potential connections between the at least one VPN server computer in a hub mode and the at least one VPN client computer in a client mode, wherein said at least one VPN server computer in a hub mode initiates a connection with said directory service to be registered and made available for said at least one VPN client computer in a client mode to dynamically communicate via the open protocol real-time messaging with said at least one VPN server computer in a hub mode through an external network. ### Claim 2 (depends on 1) The computer communications network system, as described in claim 1, wherein the external network is a global communications network. ### Claim 3 (depends on 1) The computer communications network system, as described in claim 1, wherein the external network is the internet. ### Claim 4 (depends on 1) The computer communications network system, as described in claim 1, wherein the directory service is an Extensible Messaging and Presence Protocol (“XMPP”). ### Claim 5 (depends on 1) The computer communications network system, as described in claim 1, wherein the directory service is a Lightweight Directory Access Protocol. ### Claim 6 (depends on 1) The computer communications network system, as described in claim 1, wherein the directory service is hosted on a server appliance computer. ### Claim 7 (depends on 1) The computer communications network system, as described in claim 1, wherein the directory service is hosted on a public server. ### Claim 8 (depends on 1) The computer communications network system, as described in claim 1, which uses the XMPP-related Jingle protocol to exchange data packets between the at least one VPN client computer in a client mode, and the at least one VPN server computer in a hub mode. ### Claim 9 A computer communications network system, comprising: (a) at least one VPN server computer in a hub mode in communication connectivity with an external network, said at least one VPN server computer in a hub mode further comprising a discovery server to monitor external activity, a management data base to record current network communication statistics, a plurality of network address translators, a virtual network interface to communicate with a plurality of client computers, and a virtual private network to encrypt data prior to transmitting said encrypted data to one of said network address translators; (b) at least one VPN client computer in a client mode in communication connectivity with an external network, said at least one VPN client computer in a client mode further comprising a discovery server to monitor external activity, a management data base to record current network communication statistics, a plurality of network address translators, a virtual network interface to communicate with a plurality of client computers, and a virtual switch and router in communication connectivity with a virtual private network to encrypt data prior to transmitting said encrypted data to one of said network address translators; (c) a directory service in communication connectivity with an external network, the directory service enabling open protocol real-time messaging; and (d) a management database for recording real time statistics related to the computer communications network system, the real time statistics including (i) cost, (ii) performance, and (iii) expected reliability of each of a plurality of potential connections between the at least one VPN server computer in a hub mode and the at least one VPN client computer in a client mode, wherein said at least one VPN server computer in a hub mode initiates a connection with said directory service to be registered and made available for said at least one switchboard computer in a client mode to communicate via the open protocol real-time messaging with said at least one VPN server computer in a hub mode through an external network. ### Claim 10 (depends on 9) The computer communications network system, as described in claim 9, which uses the XMPP-related Jingle protocol to exchange data packets between the at least one VPN client computer in a client mode, and the at least one VPN server computer in a hub mode. ### Claim 11 (depends on 9) The computer communications network system, as described in claim 9, wherein the external network is a global communications network. ### Claim 12 A virtual private network for computer communications, comprising: (a) at least one VPN server computer in a hub mode in communication connectivity with an external network; (b) at least one VPN client computer in a client mode in communication connectivity with an external network; (c) a directory service in communication connectivity with an external network, the directory service enabling open protocol real-time messaging; and (d) a management database for recording real time statistics related to the virtual private network, the real time statistics including (i) cost, (ii) performance, and (iii) expected reliability of each of a plurality of potential connections between the at least one VPN server computer in a hub mode and the at least one VPN client computer in a client mode, wherein said at least one VPN server computer in a hub mode initiates a connection with said directory service to be registered and made available for said at least one VPN client computer in a client mode to dynamically communicate via the open protocol real-time messaging with said at least one VPN server computer in a hub mode through an external network. ### Claim 13 (depends on 12) The virtual private network for computer communications, as described in claim 12, wherein said directory service is an XMPP and uses at least one Interactive Connectivity Establishment protocol to establish the connection between the at least one VPN server computer in a hub mode, and the at least one VPN client computer in a client mode. ### Claim 14 (depends on 12) The virtual private network for computer communications, as described in claim 12, wherein said directory service is an XMPP and creates a connection between the at least one VPN server computer in a hub mode, and the at least one VPN client computer in a client mode, using the XMPP service as a two-hop relay point. ### Claim 15 (depends on 12) The virtual private network for computer communications, as described in claim 12, which uses the XMPP-related Jingle protocol to exchange data packets between the at least one VPN client computer in a client mode, and the at least one VPN server computer in a hub mode. ### Claim 16 (depends on 12) The virtual private network for computer communications, as described in claim 12, further comprising protocols that allow said at least one VPN client computer in a client mode to select an optimal access hub from a plurality of access hubs. ### Claim 17 A method for creating a flexible and secure network connection between two or more computers, having at least one VPN server computer in a hub mode in communication connectivity with an external network; and at least one VPN client computer in a client mode in communication connectivity with an external network; a directory service in communication connectivity with an external network, the directory service enabling open protocol real-time messaging; and a management database for recording real time statistics related to the flexible and secure network connection, the real time statistics including (i) cost, (ii) performance, and (iii) expected reliability of each of a plurality of potential connections between the at least one VPN server computer in a hub mode and the at east one VPN client computer in a client mode, the method comprising the steps of: (a) initiating from said at least one VPN server computer in a hub mode a connection with said directory service; and (b) registering said at least one VPN server computer in a hub mode a connection with said directory service as available for said at least one VPN client computer in a client mode to dynamically communicate via the open protocol real-time messaging with said at least one VPN server computer in a hub mode through an external network. ### Claim 18 (depends on 17) The method for creating a flexible and secure network connection between two or more computers, as described in claim 17, further comprising the steps of: (c) monitoring data for one or more of connection cost, point-to-point performance analysis, point-to-point reliability, packet importance, and overall connection load; and (d) analyzing said data for one or more of connection cost, point-to-point performance analysis, point-to-point reliability, packet importance, and overall connection load to determine an optimal routing of virtual network traffic across multiple network interfaces. ### Claim 19 (depends on 18) The method for creating a flexible and secure network connection between two or more computers, as described in claim 18, wherein the analyzing step to determine an optimal routing of virtual network traffic across multiple network interfaces is made for each data packet being transmitted. ### Claim 20 (depends on 18) The method for creating a flexible and secure network connection between two or more computers, as described in claim 18, further comprising the step of: (e) posting to the directory service at least one of the data analyzed in step (d).