System and method for enabling vpn-less session setup for connecting mobile data devices to an enterprise data network
AssigneeTango Networks, Inc.
InventorAndrew Silver
Life of this patent
Estimating the term…
Abstract
A mobile application gateway configured to interconnect mobile communication devices on a cellular network with an enterprise network is provided. The mobile application gateway includes a voice and data signaling gateway configured to provide routing functionalities, service functionalities and admission control. A gateway GPRS support node (GGSN) is configured to establish a secure data session between one or more of the mobile communication devices and the enterprise network by establishing a GPRS tunneling protocol (GTP) tunnel between a carrier-hosted serving GPRS support node (SGSN) and the GGSN.
Claims20
A method, comprising:
- identifying, by a first gateway server deployed in a carrier network, an enterprise network based on identified information corresponding to a mobile terminal;
- forwarding, by the first gateway server a request to invoke a data session issued by the mobile terminal to a second gateway server deployed in the enterprise network;
- wherein the request is based on a data policy of the mobile terminal;
- establishing a tunnel between the first gateway server and the second gateway server, wherein the tunnel supports selectable security and encryption specific to requirements of the enterprise network;
- and
- transmitting data of the data session to the enterprise network.
A system, comprising:
- a cellular network including a first gateway server configured to receive a request to invoke a data session issued by a mobile terminal;
- and
- an enterprise network including a second gateway server,
- wherein a first gateway server deployed in a carrier network identifies an enterprise network based on identified information corresponding to the mobile terminal;
- wherein the first gateway server forwards a request to invoke a data session issued by the mobile terminal to the second gateway server;
- wherein the request is based on a data policy of the mobile terminal;
- wherein a tunnel is established between the first gateway server and the second gateway server;
- wherein the tunnel supports selectable security and encryption specific to requirements of the enterprise network;
- and
- wherein data of the data session is transmitted to the enterprise network.
A non-transitory computer readable medium comprising instructions, that when read by a processor, cause the processor to perform:
- identifying, by a first gateway server deployed in a carrier network, an enterprise network based on identified information corresponding to a mobile terminal;
- forwarding, by the first gateway server a request to invoke a data session issued by the mobile terminal to a second gateway server deployed in the enterprise network;
- wherein the request is based on a data policy of the mobile terminal;
- establishing a tunnel between the first gateway server and the second gateway server, wherein the tunnel supports selectable security and encryption specific to requirements of the enterprise network;
- and
- transmitting data of the data session to the enterprise network.
Dependencies are inferred from the claim text.