Back to results
US 12,470,523 B1Granted
Systems, and methods for secure remote multi-user LAN access
AssigneeMobulusNet LTD.
InventorOleg Vaisband
Life of this patent
Estimating the term…
Abstract
The disclosure relates to systems, methods and computer readable media for enabling distributed secure remote access from a device via a wide area network (WAN), to a designated physical site covered by local area network (LAN). Specifically, the disclosure relates to a computerized systems, methods and computer-readable media using hardware-based, virtual private network pairs having preshared encryption/decryption keys, operable to transmit data over WAN from a physical computing device to an exclusively designated site in a physical area covered by a LAN.
Claims36
A networked system for secure communication of a plurality of remote users over wide area network, the system comprising:
- a. a plurality of remote access nodes, each remote access node comprising a network edge switch with a client transceiver hardware virtual private network (HW VPN) module forming a first half of a paired HW VPN modules;
- b. a modular network switch operable to accommodate a plurality of an enterprise transceiver HW VPN Modules, each enterprise transceiver HW VPN module forming a second half of the paired HW VPN modules, wherein the modular network switch is in communication with a wide-area network (WAN);
- c. a secure local area network (LAN) switch, in two-way communication with each of the enterprise transceiver HW VPN module;
- d. a key management server, in one-way communication with each of the enterprise transceiver HW VPN Modules via a hardware-based selector;
- and
- e. a user workstation, in two-way communication with the secure LAN switch, the user workstation associated with the enterprise transceiver HW VPN module,
- wherein, the secure LAN switch further comprises a LAN switch central processing module (CPM), with at least one processor in communication with a non-transitory memory device storing thereon processor-readable media with a set of executable instructions configured, when executed, to cause the at least one processor to:
- i. receive incoming encrypted data from the WAN;
- ii. upon a hardware authentication of the at least one client transceiver HW VPN module, rout the incoming data to the transceiver HW VPN module paired with the authenticated client transceiver HW VPN module;
- iii. using a current encryption/decryption preshared key (PSK) associated with the transceiver HW VPN module paired with the authenticated client transceiver HW VPN module, decrypt the incoming data;
- and
- iv. using port isolation, rout the decrypted data to the user workstation exclusively associated with the transceiver HW VPN module paired with the client transceiver HW VPN module.
9 more elements
A computerized method of providing secure communication for a plurality of remote users over wide area network, implemented in a system comprising:
- a plurality of remote access nodes, each remote access node comprising a network edge switch with a client transceiver hardware virtual private network (HW VPN) module forming a first half of a paired HW VPN modules;
- a modular network switch operable to accommodate a plurality of an enterprise HW VPN Modules, each enterprise transceiver HW VPN module forming a second half of the paired HW VPN modules, wherein the modular network switch is in communication with a wide-area network (WAN);
- a secure local area network (LAN) switch, in two-way communication with each of the transceiver HW VPN module paired with the client transceiver HW VPN module;
- a key management server, in one-way communication with the secure LAN switch via a hardware selector;
- and a user workstation, in two-way communication with the secure LAN switch, the user workstation exclusively associated with the transceiver HW VPN module paired with the client transceiver HW VPN module via port isolation, wherein the secure LAN switch further comprises a LAN switch central processing module (sCPM), with at least one processor in communication with a non-transitory memory device storing thereon processor-readable media with a set of executable instructions configured, when executed, to control the at least one processor, the method comprising:
- a. receiving incoming encrypted data from the WAN;
- b. authenticating at least one of the client transceiver HW VPN module;
- c. upon a hardware authentication of the at least one of the client transceiver HW VPN module, routing the incoming data to the enterprise transceiver HW VPN module paired with the authenticated client transceiver HW VPN module;
- d. using a current encryption/decryption preshared key (PSK) associated with the enterprise transceiver HW VPN module paired with the authenticated client transceiver HW VPN module, decrypting the incoming data;
- and
- e. routing the decrypted data to the user workstation associated with the transceiver HW VPN module paired with the authenticated client transceiver HW VPN module.
8 more elements
Dependencies are inferred from the claim text.