# US 10,484,428 B2 · Methods and systems for securing VPN cloud servers > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,484,428 B2 - Document ID: US10484428B2 - Status: Granted - Kind: B2 - Application number: 15/275,988 - Filed: 2016-09-26 - Published: 2017-12-14 - Granted: 2019-11-19 - Earliest claimed: 2016-06-09 - Assignees: LGS Innovations LLC - Applicants: Lgs Innovations LLC - Inventors: Michael J. Chen - Web page: https://patentgrep.com/patent/US10484428B2 ## CPC - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)} - H04L 12/4679: {Arrangements for the registration or de-registration of VLAN attribute values, e.g. VLAN identifiers, port VLAN membership} - H04L 41/22: comprising specially adapted graphical user interfaces [GUI] - H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL} - H04L 63/0272: {Virtual private networks} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04L 67/1001: for accessing one among a plurality of replicated servers - H04W 4/70: Services for machine-to-machine communication [M2M] or machine type communication [MTC] - H04W 12/086: using security domains - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract The present application is directed a computer-implemented method for enhancing security. The method includes a step of sending, from a VPN service provider, a request to a cloud provider to create a dynamic server on a cloud. Then, the VPN service provider receives a notification from the cloud provider that the requested server is available on the cloud. Subsequently, the VPN service provider embeds the dynamic server with a VPN service. Further, the VPN service provider sends a credential of the dynamic server to an entity on the network. The application is also directed to system for enhancing security on a cloud server. ## Claims ### Claim 1 A computer-implemented method for enhancing security on a network comprising: sending, from a virtual private network (VPN) service provider, a request to a cloud provider to create a server on a cloud independent of an enterprise selection of the cloud server; receiving a notification from the cloud provider that the requested server is available on the cloud; embedding the server with a VPN service; sending, from the VPN service provider, a credential of the embedded server to the enterprise on the network; reviewing, via a graphical user interface (GUI) of the VPN service provider, a list of servers created by the cloud provider; determining, via the GUI of the VPN service provider, which users in the enterprise to match with the generated servers; evaluating on a portal on the GUI of the VPN service provider, progress of server generation by the cloud provider and one or more additional cloud providers; and ranking efficiency of the cloud provider and the one or more additional cloud providers based on the evaluating step. ### Claim 2 (depends on 1) The method of claim 1, wherein an active session of the dynamic server lasts for a finite period of time until a predetermined condition is met. ### Claim 3 (depends on 2) The method of claim 2, wherein the finite period of time is configurable by the VPN service provider. ### Claim 4 (depends on 1) The method of claim 1, wherein the predetermined condition is selected from the group consisting of activity type, traffic type, load balancing and combinations thereof. ### Claim 5 (depends on 4) The method of claim 4, wherein the traffic type is selected from video, voice, web and combinations thereof. ### Claim 6 (depends on 1) The method of claim 1, wherein the request to the cloud provider is based upon the activity type or traffic type. ### Claim 7 (depends on 1) The method of claim 1, wherein the credential information includes one or more of an IP address, username, password and certificate for logging into the server. ### Claim 8 (depends on 1) The method of claim 1, further comprising: receiving a request to create a second server on the cloud after the predetermined condition has been met. ### Claim 9 (depends on 8) The method of claim 8, wherein an IP address of the second server is different from the IP address of the server. ### Claim 10 (depends on 9) The method of claim 9, wherein the second server is hosted by a different cloud provider. ### Claim 11 A computer-implemented system in a cloud computing environment for enhancing network security comprising: a non-transitory memory having instructions stored thereon for embedding a server with a virtual private network (VPN); a transceiver, operably coupled to the memory, for receiving and sending data; and a processor operably coupled to the memory and the transceiver, the processor configured to execute the instructions of: receiving, at a VPN service provider, a request from an enterprise to create a dynamic server that directs traffic of a user on the network to the internet; sending, from the VPN service provider, a request to a cloud provider to create the dynamic server; receiving a notification from the cloud provider that the requested server is available on a cloud; embedding the server with a VPN service; sending, from the VPN service provider, a credential of the embedded server to the enterprise; reviewing, via a graphical user interface of the VPN service provider, a list of generated servers by the cloud provider; determining, via the graphical user interface, users in the enterprise to match with the generated servers; evaluating on a portal on the GUI of the VPN service provider, progress of server generation by the cloud provider and one or more additional cloud providers; and ranking efficiency of the cloud provider and the one or more additional cloud providers based on the evaluating step. ### Claim 12 (depends on 11) The system of claim 11, wherein the processor is further configured to execute the instructions of: receiving a request to create a second server for the enterprise after a predetermined condition has been met by a user; and creating the second server. ### Claim 13 (depends on 12) The system of claim 12, wherein an IP address of the second server is different from the IP address of the server. ### Claim 14 (depends on 13) The system of claim 13, wherein the second server is hosted by a different cloud provider. ### Claim 15 (depends on 12) The system of claim 12, wherein the predetermined condition is selected from the group consisting of activity type, traffic type, load balancing and combinations thereof. ### Claim 16 (depends on 15) The system of claim 15, wherein the traffic type is selected from video, voice, web and combinations thereof. ### Claim 17 (depends on 11) The system of claim 11, wherein the request to the cloud provider to create the server is based upon the traffic type of the user in the enterprise. ### Claim 18 (depends on 11) The system of claim 11, further comprising: a display with a graphical user interface operably connected to the processor, wherein the graphical user interface includes a list of generated servers from the cloud provider, and a list of requests from the enterprise. ### Claim 19 (depends on 11) The system of claim 11, configured for use in security applications.