US 2024/0179133 A1 · SYSTEMS AND METHODS FOR VIRTUAL PRIVATE NETWORK AUTHENTICATION

Abstract

A computerized method for establishing a secure channel between a virtual private network (VPN) client processing on a network device for a user and a network gateway is disclosed. The computerized method includes operations of the controller of transmitting an authentication request to an identity provider based on receipt of a resource request from the VPN client, receiving an authentication response from the identity provider, generating an authentication token based on the authentication response and transmitting the authentication token to the VPN client, wherein the controller further stores the authentication token. The method includes operations of the network gateway of receiving a secure connection request from the VPN client that includes the authentication token, validating the authentication token by querying the controller, in response to validation of the authentication token, establishing the secure connection with VPN client, and providing the VPN client with access to resources via the secure connection.

Claims20

Dependent claims

A computerized method, by a controller deployed within a cloud computing network and maintained within a non-transitory storage medium, for establishing a secure channel between a virtual private network (VPN) client processing on a network device for a user and a network gateway, the computerized method comprising:

receiving, by the controller, a resource request from the VPN client;
determining, by the controller, if a valid logon session has been established for the VPN client;
responsive to a determination that a valid logon session has not been established for the VPN client, transmitting, by the controller, an authentication request to an identity provider based;
responsive to VPN client being validated via the identity provider, receiving, by the controller, an assertion from the identity provider that the VPN client has been validated;
extracting, by the controller, from the assertion at least one profile association of the user;
generating, by the controller, a one-time token that is stored by the controller in a database;
transmitting, by the controller, the one-time token and the at least one profile association to the VPN client;
and
responsive to a validation of the one-time token, establishing the secure channel between the VPN client and the network device.

6 more elements

A system for establishing a secure channel between a virtual private network (VPN) client processing on a network device for a user and a network gateway, the system comprising:

a controller deployed within a cloud computing network and maintained within a non-transitory storage medium, wherein the controller is configured to:
receive a resource request from the VPN client;
determine if a valid logon session has been established for the VPN client;
responsive to a determination that a valid logon session has not been established for the VPN client, transmit an authentication request to an identity provider based;
responsive to VPN client being validated via the identity provider, receive an assertion from the identity provider that the VPN client has been validated;
extract from the assertion at least one profile association of the user;
generate a one-time token that is stored by the controller in a database;
transmit the one-time token and the at least one profile association to the VPN client;
and
responsive to a validation of the one-time token, establish the secure channel between the VPN client and the network device.

7 more elements

Dependencies are inferred from the claim text.

Systems and methods for virtual private network authentication

Life of this patent

Systems and methods for virtual private network authentication

Life of this patent

Abstract

Claims20