# US 12,184,611 B2 · Utilization of multiple exit internet protocol addresses in a virtual private network

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,184,611 B2
- Document ID: US12184611B2
- Status: Granted
- Kind: B2
- Application number: 17/947,979
- Filed: 2022-09-19
- Published: 2024-03-21
- Granted: 2024-12-31
- Earliest claimed: 2022-09-15
- Assignees: Uab 360 It
- Applicants: Uab 360 It
- Inventors: Karolis Pabijanskas; Justinas Tubis
- Web page: https://patentgrep.com/patent/US12184611B2

## CPC

- H04L 63/0272: {Virtual private networks}
- H04L 12/4633: {Interconnection of networks using encapsulation techniques, e.g. tunneling}
- H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)}
- H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL}
- H04L 63/0263: {Rule management}
- H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70)
- H04L 61/4511: using domain name system [DNS]
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A method including receiving, at a VPN server from a user device, a data request for the VPN server to retrieve data of interest from a host device; transmitting, by the VPN server to the host device during the established VPN connection, a query to retrieve the data of interest based on utilizing a first exit IP address; and determining, by the VPN server based on transmitting the query, that the first exit IP address is blocked by the host device; retrieving, by the VPN server during the established VPN connection and based on determining that the first exit IP address is blocked by the host device, the data of interest based on utilizing a second exit IP address; and transmitting, by the VPN server to the user device during the established VPN connection, the data of interest retrieved based on utilizing the second exit IP address is disclosed.

## Claims

### Claim 1

A virtual private network (VPN) server, comprising:
a memory; and
a processor communicatively coupled to the memory, the memory and the processor being configured to:
receive, from a user device during an established VPN connection between the VPN server and the user device, a data request for the VPN server to retrieve data of interest from a host device;
transmit, to the host device during the established VPN connection, a query to retrieve the data of interest based at least in part on utilizing a first exit IP address; and
determine, during the established VPN connection and based at least in part on transmitting the query, that the first exit IP address is blocked by the host device;
retrieve, during the established VPN connection and based at least in part on determining that the first exit IP address is blocked by the host device, the data of interest based at least in part on utilizing a second exit IP address, different from the first exit IP address; and
transmit, to the user device during the established VPN connection, the data of interest that is retrieved based at least in part on utilizing the second exit IP address.

### Claim 2 (depends on 1)

The VPN server of claim 1, wherein the memory and the processor are configured to:
determine that the first exit IP address is blocked by the host device based at least in part on the host device declining to provide the data of interest.

### Claim 3 (depends on 1)

The VPN server of claim 1, wherein the memory and the processor are configured to:
determine that the first exit IP address is blocked by the host device based at least in part on determining that the query transmitted by utilizing the first exit IP address is discarded by the host device.

### Claim 4 (depends on 1)

The VPN server of claim 1, wherein the memory and the processor are configured to:
automatically suspend utilization of the first exit IP address to retrieve information from the host device when the first exit IP address is blocked by the host device.

### Claim 5 (depends on 1)

The VPN server of claim 1, wherein the memory and the processor are configured to:
transmit, during the established VPN connection based at least in part on receiving another data request for the VPN server to retrieve other data of interest from another host device, another query to retrieve the other data of interest from the other host device based at least in part on utilizing the first exit IP address.

### Claim 6 (depends on 1)

The VPN server of claim 1, wherein the memory and the processor are configured to:
update, based at least in part on retrieving the data of interest by utilizing the second exit IP address, a local connection tracking table to include a positive correlation between the second exit IP address and the host device to indicate that the second exit IP address is available for retrieving information from the host device.

### Claim 7 (depends on 1)

The VPN server of claim 1, wherein the memory and the processor are configured to: modify, based at least in part on determining that the first exit IP address is blocked, a configuration of an associated domain name system (DNS) server such that the DNS server returns communication information associated with the secondary server when information is to be retrieved from the host device.

### Claim 8

A method in a virtual private network (VPN), the method comprising:
receiving, at a VPN server from a user device during an established VPN connection between the VPN server and the user device, a data request for the VPN server to retrieve data of interest from a host device;
transmitting, by the VPN server to the host device during the established VPN connection, a query to retrieve the data of interest based at least in part on utilizing a first exit IP address; and
determining, by the VPN server during the established VPN connection and based at least in part on transmitting the query, that the first exit IP address is blocked by the host device;
retrieving, by the VPN server during the established VPN connection and based at least in part on determining that the first exit IP address is blocked by the host device, the data of interest based at least in part on utilizing a second exit IP address, different from the first exit IP address; and
transmitting, by the VPN server to the user device during the established VPN connection, the data of interest that is retrieved based at least in part on utilizing the second exit IP address.

### Claim 9 (depends on 8)

The method of claim 8, further comprising:
determining, by the VPN server, that the first exit IP address is blocked by the host device based at least in part on the host device declining to provide the data of interest.

### Claim 10 (depends on 8)

The method of claim 8, further comprising:
determining, by the VPN server, that the first exit IP address is blocked by the host device based at least in part on determining that the query transmitted by utilizing the first exit IP address is discarded by the host device.

### Claim 11 (depends on 8)

The method of claim 8, further comprising:
automatically suspending, by the VPN server, utilization of the first exit IP address to retrieve information from the host device based at least in part on determining that the first exit IP address is blocked by the host device.

### Claim 12 (depends on 8)

The method of claim 8, further comprising:
transmitting, during the established VPN connection by the VPN server based at least in part on receiving another data request for the VPN server to retrieve other data of interest from another host device, another query to retrieve the other data of interest from the other host device based at least in part on utilizing the first exit IP address.

### Claim 13 (depends on 8)

The method of claim 8, further comprising:
updating, by the VPN server based at least in part on retrieving the data of interest by utilizing the second exit IP address, a local connection tracking table to include a positive correlation between the second exit IP address and the host device to indicate that the second exit IP address is available for retrieving information from the host device.

### Claim 14 (depends on 8)

The method of claim 8, further comprising:
modifying, by the VPN server based at least in part on determining that the first exit IP address is blocked, a configuration of an associated domain name system (DNS) server such that the DNS server returns communication information associated with the secondary server when information is to be retrieved from the host device.

### Claim 15

A non-transitory computer-readable medium configured to store instructions, which when executed by a processor associated with a virtual private network (VPN) server, configure the processor to:
receive, from a user device during an established VPN connection between the VPN server and the user device, a data request for the VPN server to retrieve data of interest from a host device;
transmit, to the host device during the established VPN connection, a query to retrieve the data of interest based at least in part on utilizing a first exit IP address; and
determine, during the established VPN connection and based at least in part on transmitting the query, that the first exit IP address is blocked by the host device;
retrieve, during the established VPN connection and based at least in part on determining that the first exit IP address is blocked by the host device, the data of interest based at least in part on utilizing a second exit IP address, different from the first exit IP address; and
transmit, to the user device during the established VPN connection, the data of interest that is retrieved based at least in part on utilizing the second exit IP address.

### Claim 16 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the processor is configured to:
determine that the first exit IP address is blocked by the host device based at least in part on the host device declining to provide the data of interest.

### Claim 17 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the processor is configured to:
determine that the first exit IP address is blocked by the host device based at least in part on determining that a communication transmitted by utilizing the first exit IP address is discarded by the host device.

### Claim 18 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the processor is configured to:
automatically suspend utilization of the first exit IP address to retrieve information from the host device when the first exit IP address is blocked by the host device.

### Claim 19 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the processor is configured to:
transmit, during the established VPN connection based at least in part on receiving another data request for the VPN server to retrieve other data of interest from another host device, another query to retrieve the other data of interest from the other host device based at least in part on utilizing the first exit IP address.

### Claim 20 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the processor is configured to:
update, based at least in part on retrieving the data of interest by utilizing the second exit IP address, a local connection tracking table to include a positive correlation between the second exit IP address and the host device to indicate that the second exit IP address is available for retrieving information from the host device.
