Pre-shared key based virtual private network

A VPN server comprising:

• a processor;
• and
• a non-transitory storage medium storing instructions that, when executed by the processor, cause the processor to:
• receive a login request from a VPN client;
• obtain an identity of the VPN client from the login request;
• generate a unique pre-shared key (PSK) corresponding to the identity of the VPN client;
• create a mapping between the identity and the unique PSK of the VPN client;
• store the mapping in a database;
• send the unique PSK to the VPN client;
• receive an Internet Key Exchange (IKE) packet comprising an encrypted identity of the VPN client along with a timestamp;
• decrypt the encrypted identity of the VPN client from the IKE packet to determine the identity of the VPN client associated with the IKE packet;
• retrieve the unique PSK corresponding to the identity of the VPN client associated with the IKE packet from the mapping in the database;
• and
• establish a VPN connection with the VPN client, in response to retrieving the unique pre-shared key (PSK) corresponding to the identity of the VPN client.

A non-transitory machine-readable storage medium comprising instructions that upon execution cause a VPN server to:

• receive a login request from a first VPN client;
• obtain an identity of the first VPN client from the login request;
• generate, based on jitter entropy, a first unique pre-shared key (PSK) corresponding to the identity of the first VPN client;
• create a mapping between the identity and the first unique PSK of the first VPN client;
• store the mapping between the identity and the first unique PSK of the first VPN client in a database;
• send the first unique PSK to the first VPN client;
• receive a first Internet Key Exchange (IKE) packet comprising an encrypted identity of the first VPN client;
• decrypt the encrypted identity of the first VPN client from the first IKE packet to determine the identity of the first VPN client associated with the first IKE packet;
• retrieve the first unique PSK corresponding to the identity of the first VPN client associated with the first IKE packet from the mapping in the database;
• and
• establish a VPN connection with the first VPN client, in response to retrieving the first unique PSK corresponding to the identity of the first VPN client.