Back to results
US 11,695,733 B2Granted
Automatic virtual private network (VPN) establishment
AssigneeFortinet, Inc.
InventorEric C. Hastings
Life of this patent
Estimating the term…
Abstract
Systems and methods for automatic VPN establishment are provided.
Claims21
A network device associated communicably coupled to a network, the network device comprising:
- a processing resource including one or more processors;
- a non-transitory computer-readable storage medium embodying a set of instructions, which when executed by the processing resource causes the processing resource to:
- receive, from a remote device communicably coupled to the network and remote from the network device, a first message specifying a plurality of virtual private network (VPN) connection attributes corresponding to a lowest encryption and authentication suite supported by the remote device;
- automatically create a VPN tunnel entry based at least in part on the plurality of VPN connection attributes;
- generate a second message specifying encryption and authentication attributes based on corresponding encryption and authentication attributes of the plurality of VPN connection attributes;
- receive a third message from the remote device, wherein the third message is responsive to the second message and is indicative of a highest level encryption and authentication suite that the remote device is able to support;
- and
- transmit a random pre-shared key (PSK) to replace a temporary PSK received from the remote device as part of a connection request message so as to enable creation of a permanent tunnel and establishment of the VPN connection upon determining the network device is compatible with the highest level encryption and authentication suite.
5 more elements
A method for automatically establishing a virtual private network (VPN) connection, the method comprising:
- receiving, from a remote device communicably coupled to a network, a first message specifying a plurality of virtual private network (VPN) connection attributes corresponding to a lowest encryption and authentication suite supported by the remote device;
- automatically creating, by a network device coupled to the network, a VPN tunnel entry based at least in part on the plurality of VPN connection attributes, wherein the network device is remote from the remote device;
- generating, by the network device, a second message specifying encryption and authentication attributes based on corresponding encryption and authentication attributes of the plurality of VPN connection attributes;
- receiving, by the network device, a third message from the remote device, wherein the third message is indicative of a highest level encryption and authentication suite that the remote device is able to support;
- and
- transmitting, by the network device, a random pre-shared key (PSK) to replace a temporary PSK received from the remote device as part of a connection request message so as to enable creation of a permanent tunnel and establishment of the VPN connection.
3 more elements
A non-transitory computer-readable storage medium embodying a set of instructions, which when executed by one or more processors of a network device associated with a first site of a private network, causes the one or more processors to perform a method comprising:
- receiving, from a remote device communicably coupled to a network, a first message specifying a plurality of virtual private network (VPN) connection attributes corresponding to a lowest encryption and authentication suite supported by the remote device;
- automatically creating, by a network device coupled to the network, a VPN tunnel entry based at least in part on the plurality of VPN connection attributes, wherein the network device is remote from the remote device;
- generating, by the network device, a second message specifying encryption and authentication attributes based on corresponding encryption and authentication attributes of the plurality of VPN connection attributes;
- receiving, by the network device, a third message from the remote device, wherein the third message is indicative of a highest level encryption and authentication suite that the remote device is able to support;
- and
- transmitting, by the network device, a random pre-shared key (PSK) to replace a temporary PSK received from the remote device as part of a connection request message so as to enable creation of a permanent tunnel and establishment of the VPN connection.
3 more elements
Dependencies are inferred from the claim text.