Secure transparent virtual private networks
AssigneeNovell, Inc.
InventorsMark D. Ackerman, Hashem Mohammad Ebrahimi, Baber Amin
Life of this patent
Estimating the term…
Abstract
Techniques are provided for managing communications associated with Virtual Private Networks (VPNs). One or more local clients who attempt to communicate with one or more remote clients via a VPN are serviced by local and remote transparent VPN services. The services intercept VPN communications and, in some embodiments, satisfy the communications via local cache. In instances where the VPN communications cannot be satisfied from the cache, the services translate the intercepted communications and securely communicate with one another for purposes of interfacing the local clients with the remote clients via the VPN.
Claims26
A method for managing Virtual Private Network (VPN) communications, comprising:
- receiving a communication from a local client, which is redirected on behalf of the local client by a proxy that the local client is unaware of and the communication is being directed by the local client to a remote client over an insecure network, and wherein the proxy determines on behalf of the local client that communication is to be associated with a VPN;
- identifying the VPN associated with the communication;
- inspecting a local cache to determine when the communication can be satisfied via the local cache;
- translating the communication for delivery within the VPN when the communication is not satisfied from the local cache;
- and
- sending, when the communication is not satisfied from the local cache, the translated communication via the VPN to a remote transparent VPN service, which manages VPN traffic for the remote client.
A method for managing Virtual Private Network (VPN) communications, comprising:
- receiving a communication from a local client which is directed to a remote client associated with a VPN, and wherein the communication is intercepted by a proxy when the local client attempts to send the communication to the remote client and wherein the proxy determines that the communication is to use the VPN;
- and
- inspecting the communication for determining whether the communication is a request for data that resides in a local cache, and if so, delivering the data to the local client to ensure the local client experiences accelerated data delivery, and if not, locating a remote transparent VPN service associated with the VPN, and wherein the communication is translated into formats used by the VPN and sent securely over an insecure network to the remote transparent VPN service for delivery to the remote client.
A Virtual Private Network (VPN) managing system, comprising:
- a remote transparent VPN service;
- and
- a local transparent VPN service, wherein the local transparent VPN service intercepts and manages VPN traffic on behalf of one or more local clients via a proxy that determines traffic from the local clients is to be associated with the VPN traffic, and the local transparent VPN service also services communications of those local clients with data in a local cache, if available to provide accelerated data delivery to the local clients, and if the data is not available in the local cache, the local transparent VPN service transmits the communications securely to the remote transparent VPN service for delivery and servicing by one or more remote clients which the remote transparent VPN service manages.
A Virtual Private Network (VPN) managing system, comprising:
- a communication port;
- and
- a local transparent VPN service, wherein VPN communications directed to the communication port are relayed to the local transparent VPN service, the local transparent VPN service attempts to service the VPN communications from local cache and if attempts fail, the local transparent VPN service securely communicates with a remote transparent VPN service via an insecure network to service the VPN communications, and wherein a proxy that intercepts communications from local clients directed to remote clients directs those communications to the communication port as the VPN communications.
Dependencies are inferred from the claim text.