# US 12,120,094 B2 · Header-based authentication in a virtual private network > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,120,094 B2 - Document ID: US12120094B2 - Status: Granted - Kind: B2 - Application number: 18/225,145 - Filed: 2023-07-23 - Published: 2023-12-21 - Granted: 2024-10-15 - Earliest claimed: 2021-11-02 - Assignees: Uab 360 It - Applicants: Uab 360 It - Inventors: Mindaugas Valkaitis - Web page: https://patentgrep.com/patent/US12120094B2 ## CPC - H04L 9/40: Network security protocols - H04L 63/0272: {Virtual private networks} - H04L 9/3236: {using cryptographic hash functions} - H04L 9/3247: {involving digital signatures} - H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/12: {Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method including transmitting, by a user device, a connection request to a VPN service provider for obtaining VPN services; receiving, by the user device, a response to the connection request, the response including a custom digest header containing identification information that identifies an existing association between the user device and the VPN service provider; determining, by the user device based at least in part on the identification information, that the response is received from the VPN service provider; authenticating, by the user device, the VPN service provider based at least in part on determining that the response is received from the VPN service provider; and transmitting, by the user device to a VPN server associated with the VPN service provider, a service request for obtaining the VPN services based at least in part on authenticating the VPN service provider is disclosed. Various other aspects are contemplated. ## Claims ### Claim 1 A method in a virtual private network (VPN) service environment, the method comprising: transmitting, by a user device, a connection request to a VPN service provider for obtaining VPN services; receiving, by the user device from the VPN service provider, a response to the connection request, the response including a custom digest header containing identification information that identifies an existing association between the user device and the VPN service provider; determining, by the user device based at least in part on the identification information, that the response is received from the VPN service provider; authenticating, by the user device, the VPN service provider based at least in part on determining that the response is received from the VPN service provider; and transmitting, by the user device to a VPN server associated with the VPN service provider, a service request for obtaining the VPN services based at least in part on authenticating the VPN service provider. ### Claim 2 (depends on 1) The method of claim 1, wherein the custom digest header contains the identification information in a hashed format. ### Claim 3 (depends on 1) The method of claim 1, wherein the identification information identifies the existing association by indicating a predetermined set of alphanumeric characters known to the user device and to the VPN service provider. ### Claim 4 (depends on 1) The method of claim 1, wherein the identification information identifies the existing association by identifying an account registered by the user device with the VPN service provider. ### Claim 5 (depends on 1) The method of claim 1, wherein the identification information identifies the existing association by identifying the user device and the VPN service provider. ### Claim 6 (depends on 1) The method of claim 1, wherein the identification information identifies the existing association by identifying the user device and the VPN service provider. ### Claim 7 (depends on 1) The method of claim 1, wherein the custom digest header contains server information identifying the VPN server to enable the user device to transmit the service request to the VPN server. ### Claim 8 A user device, comprising: a memory; and a processor communicatively coupled to the memory, the memory and the processor being configured to: transmit a connection request to a VPN service provider for obtaining VPN services; receive a response to the connection request, the response including a custom digest header containing identification information that identifies an existing association between the user device and the VPN service provider; determine, based at least in part on the identification information, that the response is received from the VPN service provider; authenticate the VPN service provider based at least in part on determining that the response is received from the VPN service provider; and transmit, to a VPN server associated with the VPN service provider, a service request for obtaining the VPN services based at least in part on authenticating the VPN service provider. ### Claim 9 (depends on 8) The user device of claim 8, wherein the custom digest header contains the identification information in a hashed format. ### Claim 10 (depends on 8) The user device of claim 8, wherein the identification information identifies the existing association by indicating a predetermined set of alphanumeric characters known to the user device and to the VPN service provider. ### Claim 11 (depends on 8) The user device of claim 8, wherein the identification information identifies the existing association by identifying an account registered by the user device with the VPN service provider. ### Claim 12 (depends on 8) The user device of claim 8, wherein the identification information identifies the existing association by identifying the user device and the VPN service provider. ### Claim 13 (depends on 8) The user device of claim 8, wherein the identification information identifies the existing association by identifying the user device and the VPN service provider. ### Claim 14 (depends on 8) The user device of claim 8, wherein the custom digest header contains server information identifying the VPN server to enable the user device to transmit the service request to the VPN server. ### Claim 15 A non-transitory computer-readable medium configured to store instructions, which when executed by a processor associated with a user device in a virtual private network (VPN) environment, configures the processor to: transmit a connection request to a VPN service provider for obtaining VPN services; receive a response to the connection request, the response including a custom digest header containing identification information that identifies an existing association between the user device and the VPN service provider; determine, based at least in part on the identification information, that the response is received from the VPN service provider; authenticate the VPN service provider based at least in part on determining that the response is received from the VPN service provider; and transmit, to a VPN server associated with the VPN service provider, a service request for obtaining the VPN services based at least in part on authenticating the VPN service provider. ### Claim 16 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the custom digest header contains the identification information in a hashed format. ### Claim 17 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the identification information identifies the existing association by indicating a predetermined set of alphanumeric characters known to the user device and to the VPN service provider. ### Claim 18 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the identification information identifies the existing association by identifying an account registered by the user device with the VPN service provider. ### Claim 19 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the identification information identifies the existing association by identifying the user device and the VPN service provider. ### Claim 20 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the identification information identifies the existing association by identifying the user device and the VPN service provider.