# US 12,184,612 B2 · Utilization of multiple exit internet protocol addresses in a virtual private network

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,184,612 B2
- Document ID: US12184612B2
- Status: Granted
- Kind: B2
- Application number: 17/947,982
- Filed: 2022-09-19
- Published: 2024-03-21
- Granted: 2024-12-31
- Earliest claimed: 2022-09-15
- Assignees: Uab 360 It
- Applicants: Uab 360 It
- Inventors: Karolis Pabijanskas; Justinas Tubis
- Web page: https://patentgrep.com/patent/US12184612B2

## CPC

- H04L 63/0272: {Virtual private networks}
- H04L 12/4633: {Interconnection of networks using encapsulation techniques, e.g. tunneling}
- H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)}
- H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL}
- H04L 63/0263: {Rule management}
- H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70)
- H04L 61/4511: using domain name system [DNS]
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A method including configuring a VPN server to receive, from a user device during an established VPN connection between the VPN server and the user device, a data request for the VPN server to retrieve data of interest from a host device; configuring the VPN server to utilize, during the established VPN connection, a first exit IP address to transmit a query to the host device for retrieving the data of interest; configuring the VPN server to determine, based on transmitting the query, that the first exit IP address is blocked by the host device; and configuring the VPN server to transmit, during the established VPN connection and based on determining that the first exit IP address is blocked, the data request to a secondary server to enable retransmission of the query to the host device by utilizing a second exit IP address is disclosed. Various other aspects are contemplated.

## Claims

### Claim 1

A virtual private network (VPN) infrastructure device, comprising:
a memory; and
a processor communicatively coupled to the memory, the memory and the processor being configured to:
configure a VPN server to receive, from a user device during an established VPN connection between the VPN server and the user device, a data request for the VPN server to retrieve data of interest from a host device;
configure the VPN server to utilize, during the established VPN connection, a first exit internet protocol (IP) address to transmit a query to the host device for retrieving the data of interest;
configure the VPN server to determine, based at least in part on transmitting the query, that the first exit IP address is blocked by the host device; and
configure the VPN server to transmit, during the established VPN connection and based at least in part on determining that the first exit IP address is blocked, the data request to a secondary server to enable retransmission of the query to the host device by utilizing a second exit IP address, different from the first exit IP address.

### Claim 2 (depends on 1)

The VPN infrastructure device of claim 1, wherein the memory and the processor are configured to:
configure the VPN server to establish, based at least in part on determining that the first exit IP address is blocked, a secure connection between the VPN server and the secondary server.

### Claim 3 (depends on 1)

The VPN infrastructure device of claim 1, wherein the memory and the processor are configured to:
configure the VPN server to modify, based at least in part on determining that the first exit IP address is blocked, a configuration of an associated domain name system (DNS) server such that the DNS server returns communication information associated with the secondary server when information is to be retrieved from the host device.

### Claim 4 (depends on 1)

VPN infrastructure device of claim 1, wherein the memory and the processor are configured to:
configure the VPN server to transmit, to the secondary server based at least in part on determining that the first exit IP address is blocked, communication information associated with the host device to enable retransmission of the query to the host device.

### Claim 5 (depends on 1)

The VPN infrastructure device of claim 1, wherein the memory and the processor are configured to:
configure the VPN server to receive, from the secondary server during the established VPN connection, the data of interest retrieved from the host device based at least in part on utilization of the second exit IP address; and
configure the VPN server to transmit, during the established VPN connection, the data of interest to the user device.

### Claim 6 (depends on 1)

The VPN infrastructure device of claim 1, wherein the memory and the processor are configured to:
configure the VPN server to suspend, based at least in part on determining that the first exit IP address is blocked by the host device, utilization of the first exit IP address for retrieving information from the host device.

### Claim 7 (depends on 1)

The VPN infrastructure device of claim 1, wherein the memory and the processor are configured to:
configure the VPN server to transmit, a ping to the host device during a suspension of the first exit IP address to determine whether the first exit IP address is currently blocked by the host device.

### Claim 8

A method in a virtual private network (VPN), the method comprising:
configuring a VPN server to receive, from a user device during an established VPN connection between the VPN server and the user device, a data request for the VPN server to retrieve data of interest from a host device;
configuring the VPN server to utilize, during the established VPN connection, a first exit internet protocol (IP) address to transmit a query to the host device for retrieving the data of interest;
configuring the VPN server to determine, based at least in part on transmitting the query, that the first exit IP address is blocked by the host device; and
configuring the VPN server to transmit, during the established VPN connection and based at least in part on determining that the first exit IP address is blocked, the data request to a secondary server to enable retransmission of the query to the host device by utilizing a second exit IP address, different from the first exit IP address.

### Claim 9 (depends on 8)

The method of claim 8, further comprising:
configuring the VPN server to establish, based at least in part on determining that the first exit IP address is blocked, a secure connection between the VPN server and the secondary server.

### Claim 10 (depends on 8)

The method of claim 8, further comprising:
configuring the VPN server to modify, based at least in part on determining that the first exit IP address is blocked, a configuration of an associated domain name system (DNS) server such that the DNS server returns communication information associated with the secondary server when information is to be retrieved from the host device.

### Claim 11 (depends on 8)

The method of claim 8, further comprising:
configuring the VPN server to transmit, to the secondary server based at least in part on determining that the first exit IP address is blocked, communication information associated with the host device to enable retransmission of the query to the host device.

### Claim 12 (depends on 8)

The method of claim 8, further comprising:
configuring the VPN server to receive, from the secondary server during the established VPN connection, the data of interest retrieved from the host device based at least in part on utilization of the second exit IP address; and
configuring the VPN server to transmit, during the established VPN connection, the data of interest to the user device.

### Claim 13 (depends on 8)

The method of claim 8, further comprising:
configuring the VPN server to suspend, based at least in part on determining that the first exit IP address is blocked by the host device, utilization of the first exit IP address for retrieving information from the host device.

### Claim 14 (depends on 8)

The method of claim 8, further comprising:
configuring the VPN server to transmit a ping to the host device during a suspension of the first exit IP address to determine whether the first exit IP address is currently blocked by the host device.

### Claim 15

A non-transitory computer-readable medium configured to store instructions, which when executed by a processor associated with a virtual private network (VPN) infrastructure device, configure the processor to:
configure a VPN server to receive, from a user device during an established VPN connection between the VPN server and the user device, a data request for the VPN server to retrieve data of interest from a host device;
configure the VPN server to utilize, during the established VPN connection, a first exit internet protocol (IP) address to transmit a query to the host device for retrieving the data of interest;
configure the VPN server to determine, based at least in part on transmitting the query, that the first exit IP address is blocked by the host device; and
configure the VPN server to transmit, during the established VPN connection and based at least in part on determining that the first exit IP address is blocked, the data request to a secondary server to enable retransmission of the query to the host device by utilizing a second exit IP address, different from the first exit IP address.

### Claim 16 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the processor is configured to:
configure the VPN server to establish, based at least in part on determining that the first exit IP address is blocked, a secure connection between the VPN server and the secondary server.

### Claim 17 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the processor is configured to:
configure the VPN server to modify, based at least in part on determining that the first exit IP address is blocked, a configuration of an associated domain name system (DNS) server such that the DNS server returns communication information associated with the secondary server when information is to be retrieved from the host device.

### Claim 18 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the processor is configured to:
configure the VPN server to transmit, to the secondary server based at least in part on determining that the first exit IP address is blocked, communication information associated with the host device to enable retransmission of the query to the host device.

### Claim 19 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the processor is configured to:
configure the VPN server to receive, from the secondary server during the established VPN connection, the data of interest retrieved from the host device based at least in part on utilization of the second exit IP address; and
configure the VPN server to transmit, during the established VPN connection, the data of interest to the user device.

### Claim 20 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the processor is configured to:
configure the VPN server to suspend, based at least in part on determining that the first exit IP address is blocked by the host device, utilization of the first exit IP address for retrieving information from the host device.
