US 12,615,144 B2 · Method for tunneling an internet protocol connection between two endpoints

Abstract

The present invention describes a method for secure communication between two endpoints comprising a first endpoint connected with a request collector using a first poll-pull communication link, wherein the first endpoint authenticates with the request collector. A second endpoint connects with the request collector using a second poll-pull communication link and authenticates with the request collector. Once both endpoints are authenticated, the first endpoint prepares a first encrypted communication by encrypting a communication, encapsulates the first encrypted communication in a first IP packet and sends the first IP packet to the request collector using the first poll-pull communication link. The request collector receives the first IP packet and extracts and decrypts the first encrypted communication to obtain the communication and prepares a second encrypted communication by encrypting the communication and encapsulates the second encrypted communication in a second IP packet. The request collector makes the IP packet available to the second poll-pull communication link. The second endpoint extracts the second IP packet from the request collector using the second poll-pull communication link and receives the IP packet from the second poll-pull communication link, extracts the second encrypted communication from the IP packet and decrypts the second encrypted communication to obtain the communication.

Claims20

Dependent claims

A method for secure communication between two endpoints comprising:

a first endpoint connects with a request collector using a first poll-pull communication link originating from an outbound port of a firewall of the first endpoint, wherein the first endpoint authenticates with the request collector;
a second endpoint connects with the request collector using a second poll-pull communication link originating from an outbound port of a firewall of the second endpoint, wherein the second endpoint authenticates with the request collector;
the first endpoint prepares a first SYN (synchronization packet) and encrypts the first SYN to create a first encrypted SYN, encapsulates the first encrypted SYN in a first IP packet and sends the first IP packet to the request collector using the first poll-pull communication link;
the request collector receives the first IP packet and extracts and decrypts the first encrypted SYN to obtain the first SYN;
the request collector prepares a second encrypted SYN by encrypting the first SYN and encapsulates the second encrypted SYN in a second IP packet and makes the second IP packet available to the second poll-pull communication link;
the second endpoint retrieves the second IP packet from the request collector using the second poll-pull communication link through the outbound port of the firewall of the second endpoint;
and
the second endpoint extracts the second encrypted SYN from the second IP packet and decrypts the second encrypted SYN to obtain the first SYN.

5 more elements

A system for secure communications between two endpoints comprising:

a first endpoint connected to a request collector through an outbound port of a first firewall of the first endpoint using a first poll-pull communication link originating from the outbound port of the first endpoint, wherein the first endpoint authenticates with the request collector;
a second endpoint connected to the request collector through an outbound port of a second firewall of the second endpoint using a second poll-pull communication link originating from the outbound port of the second endpoint, wherein the second endpoint authenticates with the request collector;
the first endpoint transmitting to the request collector along the first poll-pull communication link a first encrypted SYN (synchronization packet) that has been encrypted by the first endpoint and embedded in a first IP packet;
the request collector retrieving the first encrypted SYN from the first IP packet and decrypting the first encrypted SYN to obtain a first SYN;
the request collector generating a second encrypted SYN from the first SYN and embedding the second encrypted SYN in a second IP packet and making the second IP packet available to the second poll-pull communication;
and
the second endpoint retrieving the second IP packet through the second outbound port using the second poll-pull communication link, extracting the second encrypted SYN from the second IP packet, and decrypting the second encrypted SYN to obtain the first SYN.

4 more elements

Dependencies are inferred from the claim text.

Method for tunneling an internet protocol connection between two endpoints

Life of this patent

Method for tunneling an internet protocol connection between two endpoints

Life of this patent

Abstract

Claims20