# US 2020/0403979 A1 · Secure Virtual Personalized Network

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2020/0403979 A1
- Document ID: US20200403979A1
- Status: Published application
- Kind: A1
- Application number: 17/013,622
- Filed: 2020-09-06
- Published: 2020-12-24
- Earliest claimed: 2018-12-10
- Assignees: Neone, Inc.
- Applicants: Neone, Inc.
- Inventors: Dave M. Glassco
- Web page: https://patentgrep.com/patent/US20200403979A1

## CPC

- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- G06F 9/45558: {Hypervisor-specific management and integration aspects}
- G06F 11/2023: {Failover techniques}
- H04L 9/0819: {Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) (network architectures or network communication protocols for key distribution in a packet data network H04L63/062)}
- H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage}
- H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)}
- H04W 12/033: of the user plane, e.g. user's traffic
- H04W 12/041: Key generation or derivation
- G06F 9/45533: {Hypervisors; Virtual machine monitors}
- G06F 11/2038: {with a single idle spare processing component}
- G06F 11/2041: {with more than one idle spare processing component}
- G06F 11/2048: {where the redundant components share neither address space nor persistent storage}
- G06F 11/2097: {maintaining the standby controller/processing unit updated (initialisation or re-synchronisation thereof G06F11/1658 and subgroups)}
- G06F 2009/45587: {Isolation or security of virtual machine instances}
- G06F 2009/45595: {Network integration; Enabling network access in virtual machine instances}
- G06F 2201/805: Real-time
- G06F 2201/815: Virtual
- H04L 63/0272: {Virtual private networks}
- H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)}
- H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A computer provides a secure, virtual personalized network (SVPN) for a first user with master privileges and at least a second user with guest privileges in the SVPN. Notably, the computer may execute a virtual machine that provides a container for the SVPN of the first user, and the first electronic device associated with the first user and a second electronic device associated with the second user may execute instances of an application that facilitates secure communication in the SVPN. Moreover, the first electronic device may store a set of first encryption keys and the second electronic device may store a set of second encryption keys, which allow the first electronic device and the second electronic device to securely communicate with each other via the SVPN. Note that the computer may not be able to access the set of first encryption keys or the set of second encryption keys.

## Claims

### Claim 1

A computer, comprising:
an interface circuit configured to communicate with a second computer, wherein the computer is associated with a provider, the second computer is associated with a second provider of a service, and the second provider is different from the provider;
memory configured to store program instructions; and
a processor, coupled to the interface circuit and the memory, configured to execute the program instructions, wherein, when executed by the processor, the program instructions cause the computer to perform operations comprising:
receiving, at the interface circuit, a verification query associated with the second computer, wherein the verification query comprises information specifying a verified persona, and wherein an identity of an individual associated with the verified persona is anonymous to the second provider;
confirming that the verified persona is valid based at least in part on the verification query; and
providing, from the interface circuit, a verification response addressed to the second computer, wherein the verification response indicates whether the verified persona is valid, while keeping the identity of the individual associated with the verified persona anonymous to at least the second provider.

### Claim 2 (depends on 1)

The computer of claim 1, wherein the service comprises a social network or another type of online application.

### Claim 3 (depends on 1)

The computer of claim 1, wherein the provider provides a secure, virtual personalized network (SVPN) that includes the individual.

### Claim 4 (depends on 3)

The computer of claim 3, wherein the providing, the receiving or both occur in a band of frequencies that is different from a second band of frequencies used by the SVPN.

### Claim 5 (depends on 1)

The computer of claim 1, wherein the verification query is based at least in part on a login attempt associated with the verified persona.

### Claim 6 (depends on 5)

The computer of claim 5, wherein the login attempt includes second information specifying a location of the computer.

### Claim 7 (depends on 1)

The computer of claim 1, wherein the information specifying the verified persona comprises a fictitious username.

### Claim 8 (depends on 7)

The computer of claim 7, wherein the information specifying the verified persona comprises a password.

### Claim 9 (depends on 1)

The computer of claim 1, wherein the verified persona is confirmed based at least in part on account information with the provider that is associated with a pre-existing account of the individual.

### Claim 10 (depends on 9)

The computer of claim 9, wherein the account information comprises billing information and the verified persona or the identity of the individual is confirmed based on the billing information.

### Claim 11 (depends on 9)

The computer of claim 9, wherein the verified persona obfuscates the identity of the individual from the provider; and
wherein confirming the verified persona comprises:
providing, from the interface circuit, a second verification query addressed to a third computer associated with a third provider, wherein the second verification query requests verification of the verified persona, the third provider is different from the provider and the second provider, and the third provider comprises: a credit-card company, a type of bank, or another provider of a financial instrument associated with the individual; and
receiving, at the interface circuit, a second verification response associated with the third computer, wherein the second verification response indicates whether the verified persona is valid, while keeping the identity of the individual associated with the verified persona anonymous to the provider, and
wherein the verification response is based at least in part on the second verification response.

### Claim 12 (depends on 1)

The computer of claim 1, wherein the operations comprise:
receiving, at the interface circuit, a request associated with the second computer, wherein the request indicates there is an emergency associated with the verified persona, or unwanted, potentially dangerous or possible criminal activity associated with the verified persona;
determining the identity of the individual based at least in part on the request; and
providing, from the interface circuit, a response addressed to the second computer, wherein the response specifies the identity of the individual, so that the individual is no longer anonymous to the second provider.

### Claim 13 (depends on 1)

The computer of claim 1, wherein the verified persona obfuscates the identity of the individual from the second provider.

### Claim 14

A non-transitory computer-readable storage medium for use in conjunction with a computer, the computer-readable storage medium storing program instructions, wherein, when executed by the computer, the program instructions cause the computer to perform operations comprising:
receiving a verification query associated with a second computer, wherein the computer is associated with a provider, the second computer is associated with a second provider of a service, and the second provider is different from the provider, wherein the verification query comprises information specifying a verified persona, and wherein an identity of an individual associated with the verified persona is anonymous to the second provider;
confirming that the verified persona is valid based at least in part on the verification query; and
providing a verification response addressed to the second computer, wherein the verification response indicates whether the verified persona is valid, while keeping the identity of the individual associated with the verified persona anonymous to at least the second provider.

### Claim 15 (depends on 14)

The non-transitory computer-readable storage medium of claim 14, wherein the service comprises a social network or another type of online application.

### Claim 16 (depends on 14)

The non-transitory computer-readable storage medium of claim 14, wherein the provider provides a secure, virtual personalized network (SVPN) that includes the individual.

### Claim 17 (depends on 14)

The non-transitory computer-readable storage medium of claim 14, wherein the verified persona is confirmed based at least in part on account information with the provider that is associated with a pre-existing account of the individual.

### Claim 18 (depends on 17)

The non-transitory computer-readable storage medium of claim 17, wherein the verified persona obfuscates the identity of the individual from the provider; and
wherein confirming the verified persona comprises:
providing a second verification query addressed to a third computer associated with a third provider, wherein the second verification query requests verification of the verified persona, the third provider is different from the provider and the second provider, and the third provider comprises: a credit-card company, a type of bank, or another provider of a financial instrument associated with the individual; and
receiving a second verification response associated with the third computer, wherein the second verification response indicates whether the verified persona is valid, while keeping the identity of the individual associated with the verified persona anonymous to the provider, and
wherein the verification response is based at least in part on the second verification response.

### Claim 19 (depends on 17)

The non-transitory computer-readable storage medium of claim 17, wherein the operations comprise:
receiving a request associated with the second computer, wherein the request indicates there is an emergency associated with the verified persona, or unwanted, potentially dangerous or possible criminal activity associated with the verified persona;
determining the identity of the individual based at least in part on the request; and
providing a response addressed to the second computer, wherein the response specifies the identity of the individual, so that the individual is no longer anonymous to the second provider.

### Claim 20

A method for verifying a verified persona, comprising:
by a computer associated with a provider:
receiving a verification query associated with a second computer, wherein the second computer is associated with a second provider of a service, and the second provider is different from the provider, wherein the verification query comprises information specifying the verified persona, and wherein an identity of an individual associated with the verified persona is anonymous to the second provider;
confirming that the verified persona is valid based at least in part on the verification query; and
providing a verification response addressed to the second computer, wherein the verification response indicates whether the verified persona is valid, while keeping the identity of the individual associated with the verified persona anonymous to at least the second provider.
