US 8,949,968 B2 · Multi-service VPN network client for mobile device

Abstract

An integrated, multi-service network client for cellular mobile devices is described. The multi-service network client can be deployed as a single software package on cellular mobile network devices to provide integrated services including secure enterprise virtual private network (VPN) connectivity, acceleration, security management including monitored and enforced endpoint compliance, and collaboration services. Once installed on the cellular mobile device, the multi-service client integrates with an operating system of the device to provide a single entry point for user authentication for secure enterprise connectivity, endpoint security services including endpoint compliance with respect to anti-virus and spyware software, and comprehensive integrity checks. That is, the multi-service client provides a common user interface to the integrated services, and provides a VPN handler that interfaces with the operating system to provide an entry point for network traffic to which the integrated services can be seamlessly applied.

Claims37

Dependent claims

A cellular mobile device comprising:

a transmitter and receiver to send and receive cellular communications in the form of radio frequency signals;
a microprocessor;
an operating system executing on the microprocessor to provide an operating environment for application software;
and
a multi-service network client registered with the operating system as a single application, wherein the multi-service network client comprises:
a virtual private network (VPN) handler to establish a VPN connection with a remote VPN security device, wherein the VPN handler encrypts outbound network packets for transmission through the VPN connection and decrypts inbound network packets received from the VPN connection to securely tunnel the network packets between the cellular mobile device and the remote VPN security device;
a security manager to receive the decrypted inbound network packets from the VPN handler and apply one or more security services to the decrypted network packets received by the VPN handler through the VPN connection;
and
a VPN control application that provides a unified user interface that allows a user to configure both the VPN handler and the security manager.

6 more elements

A method comprising:

receiving, with a cellular mobile device from an electronic repository, a single distribution software package that includes a multi-service network client, wherein the multi-service network client includes a virtual private network (VPN) handler, a security manager;
and a VPN control application that provides a unified user interface that allows a user to configure both the VPN handler and the security manager;
and
installing the multi-service network client on the cellular mobile device including registering the VPN handler with an operating system of the cellular mobile device, wherein the VPN handler provides a single point of entry for network packets from the operating system to apply VPN services with the VPN handler and security services with the security manager,
wherein the VPN handler is configured to encrypt outbound network packets for transmission through a VPN connection and decrypt inbound network packets received from the VPN connection, and
wherein the security manager is configured to apply the security services to outbound network packets prior to encryption of the outbound network packets and transmission through the VPN connection by the VPN handler and configured to apply the security services to inbound network packets received through the VPN connection after decryption of the inbound network packets by the VPN handler.

3 more elements

A non-transitory computer-readable medium storing a downloadable distribution package comprising software program code to execute a multi-service network client on a processor within a cellular device, wherein the multi-service network client comprises:

a virtual private network (VPN) handler to establish a VPN connection with a remote VPN security device, wherein the VPN handler encrypts outbound network packets for transmission through the VPN connection and decrypts inbound network packets received from the VPN connection to securely tunnel the network packets between the cellular mobile device and the remote VPN security device;
a security manager to receive the decrypted inbound network packets from the VPN handler and apply at least one security service to the decrypted network packets received by the VPN handler through the VPN connection;
and
a VPN control application that provides a unified user interface that allows a user to configure both the VPN handler and the security manager.

1 more element

Dependencies are inferred from the claim text.

Multi-service VPN network client for mobile device

Life of this patent

Multi-service VPN network client for mobile device

Life of this patent

Abstract

Claims37