# US 8,782,764 B2 · System and method to provide built-in and mobile VPN connectivity

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 8,782,764 B2
- Document ID: US8782764B2
- Status: Granted
- Kind: B2
- Application number: 13/354,848
- Filed: 2012-01-20
- Published: 2012-07-05
- Granted: 2014-07-15
- Earliest claimed: 2005-11-23
- Assignees: BlackBerry Limited
- Applicants: Risvan Coskun; Ahmed Areef Reza; Luis Estable
- Inventors: Risvan Coskun; Ahmed Areef Reza; Luis Estable
- Web page: https://patentgrep.com/patent/US8782764B2

## CPC

- H04L 63/0272: {Virtual private networks}
- G06F 21/41: where a single sign-on provides access to a plurality of computers
- G06F 21/45: Structures or tools for the administration of authentication
- H04L 63/061: {for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838)}
- H04L 63/0815: {providing single-sign-on or federations}
- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)}
- H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70)
- H04L 67/306: User profiles
- G06F 21/31: User authentication
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 63/102: {Entity profiles}
- H04W 88/04: adapted for relaying to or from another terminal or user
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A system and method for facilitating the establishment of a virtual private network between a network and a remote computer, the system having: a mobile device connectable to the remote computer and storing a user profile, virtual private network information, and password information; virtual private network software being located on one of the mobile device and the remote computer; an access point communicating with the network; and communication means for communications between the access point and one of the mobile device and the remote computer, wherein the user profile, virtual private network information, and password information is passed to the virtual private network software upon connection of the mobile device to the remote computer, the virtual private network software using the user profile, virtual private network information, and password information to establish a virtual private network through the communications means and the access point to the network.

## Claims

### Claim 1

A mobile communication device for establishing a virtual private network (VPN) connection to an enterprise server, comprising:
a VPN module configurable to establish the VPN connection over a network;
first communication means for communicating over a wireless network;
second communication means for communicating with a computer;
wherein the mobile communications device is configured to:
receive, from a server, information necessary to configure said VPN connection; and
wherein the VPN module is configured to:
establish the VPN connection with the enterprise server via the first communication means;
transmit data received over the VPN connection to the computer.

### Claim 2 (depends on 1)

The mobile communication device of claim 1, wherein the information is stored with a user profile stored on said mobile communications device.

### Claim 3 (depends on 1)

The mobile communication device of claim 1, wherein the information is a cryptographic key.

### Claim 4 (depends on 3)

The mobile communication device of claim 3, wherein the cryptographic key is an RSA key.

### Claim 5 (depends on 3)

The mobile communication device of claim 3, wherein the cryptographic key is a WEP key.

### Claim 6 (depends on 1)

The mobile communication device of claim 1, wherein the information is updated periodically from said server.

### Claim 7 (depends on 1)

The mobile communication device of claim 1, wherein the information is received as part of a service book at said device.

### Claim 8 (depends on 1)

The mobile communication device of claim 1, wherein the information is received in response to a user input at said device.

### Claim 9 (depends on 1)

The mobile communication device of claim 1, wherein the information is received upon initiation of said VPN connection.

### Claim 10 (depends on 1)

The mobile communication device of claim 1, wherein the second communication means are one of a Universal Serial Bus (USB) connection, a firewire connection, a Bluetooth™ connection, and an Infrared Data Association (IrDA) connection.

### Claim 11

A method for establishing a virtual private network (VPN) connection to an enterprise server, said method comprising:
receiving at a mobile communications device, from a server, information necessary to configure said VPN connection;
establish said VPN connection between the VPN module and the enterprise server;
transmit data received over the VPN connection to a computer.

### Claim 12 (depends on 11)

The method of claim 11, wherein the information is stored with a user profile stored on said mobile communications device.

### Claim 13 (depends on 11)

The method of claim 11, wherein the information is a cryptographic key.

### Claim 14 (depends on 13)

The method of claim 13, wherein the cryptographic key is an RSA key.

### Claim 15 (depends on 13)

The method of claim 13, wherein the cryptographic key is a WEP key.

### Claim 16 (depends on 11)

The method of claim 11, wherein the information is updated periodically from said server.

### Claim 17 (depends on 11)

The method of claim 11, wherein the information is received as part of a service book at said mobile communication device.

### Claim 18 (depends on 11)

The method of claim 11, wherein the information is received in response to a user input at said mobile communication device.

### Claim 19 (depends on 11)

The method of claim 11, wherein the information is received upon initiation of said VPN connection.

### Claim 20 (depends on 11)

The method of claim 11, wherein the transmitting operation uses one of a Universal Serial Bus (USB) connection, a firewire connection, a Bluetooth™ connection, and an Infrared Data Association (IrDA) connection.
