US 12,603,865 B2Granted

Systems and methods for remote access latency reduction

AssigneeMastercard International Incorporated

InventorGregory T. Spillman

Life of this patent

Estimating the term…

Loading patent…

Abstract

Systems and methods are provided for use in providing remote access across multiple regions. One example method includes receiving a remote access request from a user terminal associated with a remote user, where the request is specific to a first data center of a network, and opening, by a front-end firewall, a first IP security (IPSec) tunnel with the user terminal. The method also includes forwarding, by the front-end firewall, the request to a distribution firewall and routing, by the distribution firewall, the request to a back-end firewall, which is specific to the first data center. The method then further includes opening, by the back-end firewall, a second IPSec tunnel with the network and forwarding the request, through the second IPSec tunnel, to the network to thereby support communication between the user terminal and the network, via the first and second IPSec tunnels.

Claims12

Dependent claims

A system for use in providing remote access across multiple regions, the system comprising:

a cloud platform including multiple front-end firewalls, multiple back-end firewalls, and at least one distribution firewall disposed in communication between the multiple front-end firewalls and the multiple back-end firewalls;
wherein each of the multiple front-end firewalls is associated with a different subregion of the multiple regions, and is configured to:
receive a remote access request from a user terminal associated with a remote user, the remote access request specific to a first data center of a corporate network;
enforce one or more policies for the remote access request;
and
upon conformance with the one or more policies, open a first IP security (IPSec) tunnel with a terminal associated with the remote access request and forward the remote access request to the at least one distribution firewall;
and
wherein the at least one distribution firewall is configured to receive the remote access request from the front-end firewall and to route the remote access request from the front-end firewall to one of the multiple back-end firewalls, which is specific to the first data center;
and
wherein the one of the multiple back-end firewalls is configured to:
enforce one or more further policies associated with the remote access request;
and
upon conformance with the one or more further policies, open a second IPSec tunnel with the corporate network and forward the remote access request, through the second IPSec tunnel, to the corporate network, whereby remote access is provided to the user terminal through the first and second IPSec tunnels.

10 more elements

A computer-implemented method for use in providing remote access across multiple regions, the method comprising:

receiving, by one of multiple front-end firewalls of a cloud platform, a remote access request from a user terminal associated with a remote user, the remote access request specific to a first data center of a corporate network, each of the multiple front-end firewalls associated with a different subregion of the multiple regions;
enforcing, by the one of the multiple front-end firewalls, one or more policies for the remote access request;
and
upon conformance with the one or more policies:
opening, by the one of the multiple front-end firewalls, a first IP security (IPSec) tunnel with a terminal associated with the remote access request;
and
forwarding, by the one of the multiple front-end firewalls, the remote access request to a distribution firewall of the cloud platform;
and
receiving, by the distribution firewall of the cloud platform, the remote access request from the one of the multiple front-end firewalls, the distribution firewall disposed in communication between the multiple front-end firewalls and multiple back-end firewalls of the cloud platform;
routing, by the distribution firewall, the remote access request from the one of the multiple front-end firewalls to one of the multiple back-end firewalls of the cloud platform, which is specific to the first data center;
enforcing, by the one of the multiple back-end firewalls, one or more further policies associated with the remote access request;
and
upon conformance with the one or more further policies:
opening, by the one of the multiple back-end firewalls, a second IPSec tunnel with the corporate network;
and
forwarding, by the one of the multiple back-end firewalls, the remote access request, through the second IPSec tunnel, to the corporate network, whereby remote access is provided to the user terminal through the first and second IPSec tunnels.

13 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/136,841Filed 19 Apr 2023
Published: US 2024/0356901 A124 Oct 2024
Granted: 14 Apr 2026
Term ends: Not estimatedThe source records don’t support an estimate.

Classification5 codes

H04L 63/029
For separating internal from external traffic, e.g. firewalls: firewall traversal, e.g. tunnelling or, creating pinholes
H04L 63/0218
Architectural arrangements, e.g. perimeter networks or demilitarized zones: distributed architectures, e.g. distributed firewalls
H04L 63/0236
Filtering policies: filtering by address, protocol, port number or service, e.g. IP-address or URL
H04L 63/0272
For separating internal from external traffic, e.g. firewalls: virtual private networks

Family

US 2024/0356901 A1Pre-grant publication · published 24 Oct 2024
US 12,603,865 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key