# US 12,184,451 B2 · Systems and methods for providing a global virtual network (GVN)

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,184,451 B2
- Document ID: US12184451B2
- Status: Granted
- Kind: B2
- Application number: 18/358,519
- Filed: 2023-07-25
- Published: 2023-11-16
- Granted: 2024-12-31
- Earliest claimed: 2015-04-07
- Assignees: UMBRA Technologies Ltd.
- Applicants: UMBRA Technologies Ltd.
- Inventors: Joseph E. Rubenstein; Carlos Eduardo Oré; Thibaud Auguste Bernard Jean Saint-Martin; Fred Broussard; Jørn Allan Dose Knutsen
- Web page: https://patentgrep.com/patent/US12184451B2

## CPC

- H04L 47/825: {Involving tunnels, e.g. MPLS}
- G06F 9/4401: Bootstrapping (security arrangements therefor G06F21/57)
- G06F 9/4416: {Network booting; Remote initial program loading [RIPL]}
- G06F 21/575: {Secure boot}
- G06F 21/606: {by securing the transmission between two devices or processes}
- G06F 21/78: to assure secure storage of data (address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00)
- H04L 9/08: Key distribution {or management, e.g. generation, sharing or updating, of cryptographic keys or passwords (network architectures or network communication protocols for supporting key management in a packet data network H04L63/06)}
- H04L 12/4633: {Interconnection of networks using encapsulation techniques, e.g. tunneling}
- H04L 12/465: {wherein a single frame includes a plurality of VLAN tags}
- H04L 45/22: {Alternate routing}
- H04L 45/28: using route fault recovery
- H04L 45/302: Route determination based on requested QoS
- H04L 45/64: using an overlay routing layer
- H04L 47/726: Reserving resources in multiple paths to be used simultaneously (by balancing the load H04L47/125)
- H04L 47/801: {Real time traffic}
- H04L 47/805: {QOS or priority aware}
- H04L 47/83: based on usage prediction
- H04L 63/02: {for separating internal from external traffic, e.g. firewalls}
- H04L 63/0218: {Distributed architectures, e.g. distributed firewalls}
- H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL}
- H04L 63/0254: {Stateful filtering}
- H04L 63/0263: {Rule management}
- H04L 63/0272: {Virtual private networks}
- H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)}
- H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Systems and methods for managing a global virtual network connection between an endpoint device and an access point server are disclosed. In one embodiment the network system may include an endpoint device, an access point server, and a control server. The endpoint device and the access point server may be connected with a first tunnel. The access point server and the control server may be connected with a second tunnel.

## Claims

### Claim 1

A method, comprising:
detecting, by one or more processors, an upload stream for uploading a file from a first device to a second device;
determining, by the one or more processors, that the file is larger than a predetermined threshold; and
in response to determining that the file is larger than the predetermined threshold, redirecting, by the one or more processors, the upload stream to a first cache, wherein the first cache uploads the file to a third device, and the third device completes uploading the file to the second device.

### Claim 2 (depends on 1)

The method of claim 1, wherein the first device and the first cache are located in a first region, and wherein the second device and the third device are located in a second region.

### Claim 3 (depends on 1)

The method of claim 1, wherein the file is uploaded to the third device via a Global Virtual Network (GVN).

### Claim 4 (depends on 1)

The method of claim 1, wherein the first device is a client device and the second device is a target server.

### Claim 5 (depends on 1)

The method of claim 1, wherein at least a portion of the file is uploaded to the third device from the first cache after the first device has completed uploading the file to the first cache.

### Claim 6 (depends on 1)

The method of claim 1, wherein the file is uploaded from the first cache to a second cache of the third device.

### Claim 7 (depends on 1)

The method of claim 1, further comprising:
requesting, by the one or more processors, that the second device validate a connection for uploading the file from the first device to the second device, wherein the upload stream for uploading the file is detected in response to determining that the connection for uploading the file has been validated.

### Claim 8

A system comprising:
a non-transitory memory; and
one or more processors configured to read instructions from the non-transitory memory that, when executed, cause the one or more processors to perform operations comprising:
detecting an upload stream for uploading a file from a first device to a second device;
determining that the file is larger than a predetermined threshold; and
in response to determining that the file is larger than the predetermined threshold, redirecting the upload stream to a first cache, wherein the first cache uploads the file to a third device, and the third device completes uploading the file to the second device.

### Claim 9 (depends on 8)

The system of claim 8, wherein the first device and the first cache are located in a first region, and wherein the second device and the third device are located in a second region.

### Claim 10 (depends on 8)

The system of claim 8, wherein the file is uploaded to the third device via a Global Virtual Network (GVN).

### Claim 11 (depends on 8)

The system of claim 8, wherein the first device is a client device and the second device is a target server.

### Claim 12 (depends on 8)

The system of claim 8, wherein at least a portion of the file is uploaded to the third device from the first cache after the first device has completed uploading the file to the first cache.

### Claim 13 (depends on 8)

The system of claim 8, wherein the file is uploaded from the first cache to a second cache of the third device.

### Claim 14 (depends on 8)

The system of claim 8, the operations performed by the one or more processors further comprising:
requesting that the second device validate a connection for uploading the file from the first device to the second device, wherein the upload stream for uploading the file is detected in response to determining that the connection for uploading the file has been validated.

### Claim 15

A non-transitory computer-readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:
detecting an upload stream for uploading a file from a first device to a second device;
determining that the file is larger than a predetermined threshold; and
in response to determining that the file is larger than the predetermined threshold, redirecting the upload stream to a first cache, wherein the first cache uploads the file to a third device, and the third device completes uploading the file to the second device.

### Claim 16 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the first device and the first cache are located in a first region, and wherein the second device and the third device are located in a second region.

### Claim 17 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the file is uploaded to the third device via a Global Virtual Network (GVN).

### Claim 18 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the first device is a client device and the second device is a target server.

### Claim 19 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein at least a portion of the file is uploaded to the third device from the first cache after the first device has completed uploading the file to the first cache.

### Claim 20 (depends on 15)

The non-transitory computer-readable medium of claim 15, the operations performed by the one or more processors further comprising:
requesting that the second device validate a connection for uploading the file from the first device to the second device, wherein the upload stream for uploading the file is detected in response to determining that the connection for uploading the file has been validated.