Hybrid cryptography virtual private networks
Assignee360 It, Uab
InventorsKarolis Pabijanskas, Mantas Jonytis
Life of this patent
Estimating the term…
Abstract
A virtual private network (VPN) client generates a short-term key pair. The VPN client generates a short-term high security key pair. The VPN client transmits a request for a pre-shared key (PSK) to a VPN server. The VPN client receives a response that includes the PSK. The VPN client decrypts the response based on the short-term key pair to obtain a ciphertext. The VPN client decrypts the ciphertext based on the short-term high security key pair to obtain the PSK. A VPN tunnel is then established between the VPN client and the VPN server based on the PSK.
Claims20
A method, comprising:
- generating, by a virtual private network (VPN) client, a short-term key pair;
- generating, by the VPN client, a short-term high security key pair, wherein the short-term high security key pair is quantum-resistant;
- transmitting, by the VPN client, a request for a pre-shared key (PSK) to a VPN server, wherein the PSK is not available at the VPN client;
- receiving, by the VPN client, a response that includes the PSK;
- and
- in response to receiving the response that includes the PSK:
- decrypting, by the VPN client, the response based on the short-term key pair to obtain a ciphertext;
- decrypting, by the VPN client, the ciphertext based on the short-term high security key pair to obtain the PSK;
- and
- establishing a VPN tunnel between the VPN client and the VPN server based on the PSK, wherein establishing the VPN tunnel comprises:
- transmitting, by the VPN client to the VPN server, a request to establish the VPN tunnel;
- and
- receiving, by the VPN client and from the VPN server, a response indicating that the VPN client is authorized to establish the VPN tunnel.
A virtual private network client (a VPN client), comprising:
- a memory;
- and
- a processor, the processor configured to execute instructions stored in the memory to:
- generate a short-term key pair;
- generate a short-term high security key pair, wherein the short-term high security key pair is quantum-resistant;
- transmit a request for a pre-shared key (PSK) to a VPN server, wherein the PSK is not available at the VPN client;
- receive a response that includes the PSK;
- and
- in response to receiving the response that includes the PSK:
- decrypt the response based on the short-term key pair to obtain a ciphertext;
- decrypt the ciphertext based on the short-term high security key pair to obtain the PSK;
- and
- establish a VPN tunnel with the VPN server based on the PSK, wherein to establish the VPN tunnel comprises to:
- transmit, to the VPN server, a request to establish the VPN tunnel;
- and
- receive, from the VPN server, a response indicating that the VPN client is authorized to establish the VPN tunnel.
A non-transitory computer readable medium storing instructions operable to cause one or more processors to perform operations comprising:
- generating, by a virtual private network (VPN) client, a short-term key pair that includes a short-term public key and a short-term private key;
- generating, by the VPN client, a short-term high security key pair that includes a short-term high security public key and a short-term high security private key, wherein the short-term high security key pair is quantum-resistant;
- transmitting, by the VPN client, a request for a pre-shared key (PSK) to a VPN server, wherein the PSK is not available at the VPN client;
- receiving, by the VPN client, a response that includes the PSK;
- and
- in response to receiving the response that includes the PSK:
- decrypting, by the VPN client, the response using the short-term private key to obtain a ciphertext;
- decrypting, by the VPN client, the ciphertext using the short-term high security private key to obtain the PSK;
- and
- establishing a VPN tunnel between the VPN client and the VPN server based on the PSK, wherein establishing the VPN tunnel comprises:
- transmitting, by the VPN client to the VPN server, a request to establish the VPN tunnel;
- and
- receiving, by the VPN client and from the VPN server, a response indicating that the VPN client is authorized to establish the VPN tunnel.
Dependencies are inferred from the claim text.