Dynamic virtual private network
AssigneeInternational Business Machines Corporation
InventorsCharles K. YOUNG, Terrence E. WHITE, Melanie R. DIGGS, Gerald D. COLAR
Life of this patent
Estimating the term…
Abstract
Various embodiments establish a virtual private network (VPN) between a remote network and a private network. In one embodiment, a first system in the remote network establishes a connection with a central system through a public network. The central system is situated between the first system and a second system in the private network. The first system receives, from the central system and based on establishing the connection, a set of VPN information associated with at least the second system. The first system disconnects from the central system and establishes a VPN directly with the second system through the public network based on the set of VPN information.
Claims12
A method, by an information processing system situated between a first virtual private network (VPN) device in a remote network and a second VPN device in a private network, for establishing a site-to-site virtual private network (VPN) between the remote network and the private network, the method comprising:
- establishing a first VPN connection with the first VPN device;
- receiving, from the first VPN device in response to establishing the first VPN connection with the first VPN device, a request to establish a VPN with the second VPN device, wherein the first VPN device is utilized by one or more clients within the remote network to communicate with the private network through via a site-to-site VPN, and wherein the second VPN device is utilized by one or more clients within the private network to communicate with the remote network through via a site-to-site VPN;
- establishing a second VPN connection with the second VPN device in response to receiving the request to establish a VPN with the second VPN device from the first VPN device;
- identifying, based on the request, a first set of VPN information associated with the second VPN device;
- and
- sending the first set of VPN information to the first VPN device over the first VPN connection, wherein the first set of VPN information configures the first VPN device to establish the VPN directly with the second VPN device.
An information processing system situated between a first virtual private network (VPN) device in a remote network and a second VPN device in a private network for establishing a site-to-site virtual private network (VPN) between the remote network and the private network, the information processing system comprising:
- a memory;
- a processor communicatively coupled to the memory;
- and
- a central VPN device communicatively coupled to the memory and the processor, wherein the central VPN device is configured to perform a method comprising:
- establishing a first VPN connection with the first VPN device;
- receiving, from the first VPN device in response to establishing the first VPN connection with the first VPN device, wherein the first VPN device is utilized by one or more clients within the remote network to communicate with the private network through via a site-to-site VPN, and wherein the second VPN device is utilized by one or more clients within the private network to communicate with the remote network through via a site-to-site VPN;
- establishing a second VPN connection with the second VPN device in response to receiving the request to establish a VPN with the second VPN device from the first VPN device;
- identifying, based on the request, a first set of VPN information associated with the second VPN device;
- and
- sending the first set of VPN information to the first VPN device over the first VPN connection, wherein the first, wherein the set of VPN information configures the first VPN device to establish the VPN directly with the second VPN device.
A computer program storage product for establishing, by an information processing system situated between a first virtual private network (VPN) device in a remote network and a second VPN device in a private network, a site-to-site virtual private network (VPN) between the remote network and the private network, the computer program storage product comprising instructions configured to perform a method comprising:
- establishing a first VPN connection with the first VPN device;
- receiving, from the first VPN device in response to establishing the first VPN connection with the first VPN device, a request to establish a VPN with the second VPN device, wherein the first VPN device is utilized by one or more clients within the remote network to communicate with the private network through via a site-to-site VPN, and wherein the second VPN device is utilized by one or more clients within the private network to communicate with the remote network through via a site-to-site VPN;
- establishing a second VPN connection with the second VPN device in response to receiving the request to establish a VPN with the second VPN device from the first VPN device;
- identifying, based on the request, a first set of VPN information associated with the second VPN device;
- and
- sending the first set of VPN information to the first VPN device over the first VPN connection, wherein the first set of VPN information configures the first VPN device to establish the VPN directly with the second VPN device.
Dependencies are inferred from the claim text.