Agile network protocol for secure communications using secure domain names
AssigneeVirnetX, Inc.
InventorsVictor Larson, Robert Dunham Short, III, Edmund Colby Munger, Michael Williamson
Life of this patent
Estimating the term…
Abstract
A secure domain name service for a computer network is disclosed that includes a portal connected to a computer network, such as the Internet, and a domain name database connected to the computer network through the portal. The portal authenticates a query for a secure computer network address, and the domain name database stores secure computer network addresses for the computer network. Each secure computer network address is based on a non-standard top-level domain name, such as .scom, .sorg, .snet, .snet, .sedu, .smil and .sint.
Claims22
A system for establishing a virtual private network (VPN) communication link, comprising:
- a storage device having instructions stored thereon;
- and
- one or more processors configured to execute the instructions and, on executing the instructions:
- generate a Domain Name Service (DNS) request;
- determine that the DNS request corresponds to one or more computers configured to communicate securely;
- send, based on the determination, a request to establish a VPN communication link with a first computer of the one or more computers configured to communicate securely, the request including an identifier of a client device used for determining whether the client device is authorized to communicate with the first computer;
- receive, in response to the request to establish a VPN communication link, a resource for establishing the VPN communication link;
- and
- automatically establish the VPN communication link with the first computer using the received resource.
A system for establishing a virtual private network (VPN) communication link, comprising:
- storage configured to store client device identifiers;
- and
- one or more processors configured to:
- receive a request to communicate securely, the request including an identifier of a client device, the request having been sent in response to a determination that a DNS request from the client device corresponds to a first computer configured to communicate securely;
- compare the received client device identifier to one or more of the stored client device identifiers;
- determine, based on the comparison, whether the client device is authorized to communicate with the first computer;
- and
- in response to determining that the client device is authorized to communicate with the first computer, make a resource available to the client device for automatically establishing the VPN communication link between the client device and the first computer.
Dependencies are inferred from the claim text.