Centralized management of private networks
AssigneeTailscale Inc.
InventorsDavid F. Carney, Avery Pennarun, David J. Crawshaw
Life of this patent
Estimating the term…
Abstract
Described herein are systems, methods, and software to manage private networks for computing elements. In one example, a computing element may obtain credential information associated with a user and generate a public-private key pair for the computing element. The computing element may further communicate the public key from the pair with metadata to a coordination service to register the computing element at the coordination service. Once registered, the computing element may receive communication information associated with one or more other computing elements that permit the computing element to communicate with the other computing elements.
Claims20
A method of joining a computing element to a private network, the method comprising:
- obtaining credential information associated with a user of the computing element;
- generating a public key and a private key associated with the computing element and the user;
- communicating the public key with computing element metadata to a coordination service, wherein the computing element metadata comprises at least a portion of the credential information;
- and
- receiving communication information associated with one or more other computing elements for the user.
A computing apparatus comprising:
- a storage system;
- a processing system operatively coupled to the storage system;
- and
- program instructions stored on the storage system that join a computing element to a private network that, when executed by the processing system, direct the computing apparatus to:
- obtain credential information associated with a user of the computing element;
- generate a public key and a private key associated with the computing element and the user;
- communicate the public key with computing element metadata to a coordination service, wherein the computing element metadata comprises at least a portion of the credential information;
- and
- receive communication information associated with one or more other computing elements for the user.
A computing apparatus comprising:
- a storage system;
- a processing system operatively coupled to the storage system;
- and
- program instructions stored on the storage system to maintain one or more private networks that, when executed by a processing system, direct the computing apparatus to:
- obtain a public key and metadata from a computing element;
- identify one or more other computing elements associated with the computing element in a private network of the one or more private networks based on a user identified from the metadata;
- and
- communicate the public key and addressing information derived from metadata to the one or more other computing elements.
Dependencies are inferred from the claim text.