US6487598B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Virtual dial-up protocol for network communication
Assignee: Cisco Technology Inc
•
Filing: 2001-07-11
•
Granted: 2002-11-26
•
Expires: 2021-07-11
Abstract
Abstract A layer two forwarding protocol (L2F) provides virtual direct dial-up service into private networks through public internet service providers. An authorized remote client appears as a direct dial-up client to the home gateway, even through the client is accessing the home gateway remotely through the ISP. The new forwarding protocol allows the remote client to conduct point-to-point link protocols, such as point-to-point protocol (PPP) and serial line interface protocol (SLIP) directly with the local network home gateway. The network access server changes from a routing mode where a communication protocol is conducted with the client to a switching mode where the POP simply sends data from one port to a tunnel. The tunnel then transmits the data to another port, regardless of the header information on transmitted data packets. The remote client can then be managed through databases controlled by the local network and gain access to resources not typically accessible through the internet. The layer two forwarding protocol conducts an independent authorization session to prevent unauthorized access to the private network and provides point-to-point protocol transport over the internet independently of internet transport protocols.
Inventors
- 👤 Andrew J. Valencia
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 07:36
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L12/00; H04L12/28; H04L12/2854; H04L12/2856; H04L12/2858; H04L12/2859; H04L12/2869; H04L12/287; H04L12/2872; H04L12/2898; H04L63/08; H04L63/083; H04L63/16; H04L63/162; H04L9/00; H04L9/40; H04L69/00; H04L69/14; H04L69/24
Claims Analysis
Total Claims: 58
Claim 1
Independent Claim
46 words
A method for establishing a network session, comprising: establishing a point-to-point session with a remote client; and projecting the point-to-point session to a local network using a data link layer projection scheme for creating a virtual point-to-point session between the remote client and the local network.
Claim 2
Independent Claim
46 words
A method for establishing a network session, comprising: establishing a point-to-point session with a remote client; and projecting the point-to-point session to a local network using a data link layer projection scheme for creating a virtual point-to-point session between the remote client and the local network.
Claim 3
Dependent Claim
50 words
A method according to claim 1 including: transmitting an authentication request to the remote client; receiving a keyed random number from the remote client; transmitting the keyed random number to the local network; and creating the virtual point-to-point session when the keyed random number is authenticated by the local network.
Claim 4
Dependent Claim
24 words
A method according to claim 2 including using a Challenge Authentication Protocol (CHAP) or Password Authentication Protocol (PAP) for obtaining the keyed random number.
Claim 5
Dependent Claim
23 words
A method according to claim 1 including using a Point-to-Point Protocol (PPP) or a Serial Line Interface Protocol (SLIP) for the point-to-point session.
Claim 6
Dependent Claim
26 words
A method according to claim 1 including forwarding a Link Control Protocol (LCP) point-to-point session to the local network using the data link layer projection scheme.
Claim 7
Dependent Claim
26 words
A method according to claim 1 including connecting to the local network through a public switched telephone network access or an integrated services digital network access.
Claim 8
Dependent Claim
46 words
A method according to claim 1 including: encapsulating the point-to-point session with a data link layer protocol; forwarding the encapsulated point-to-point session to the local network so that the encapsulated point-to-point session operates as a direct point-to-point connection between the remote client and the local network.
Claim 9
Dependent Claim
28 words
A method according to claim 7 including identifying virtual dial-up clients among different remote clients and conducting the encapsulation and forwarding only for the identified virtual dial-up clients.
Claim 10
Dependent Claim
56 words
Computer code stored on a computer readable medium for establishing a network session, comprising: code for establishing a point-to-point session with a remote client; and code for projecting the point-to-point session to a local network using a data link layer projection scheme for creating a virtual point-to-point session between the remote client and the local network.
Claim 11
Dependent Claim
56 words
Computer code stored on a computer readable medium for establishing a network session, comprising: code for establishing a point-to-point session with a remote client; and code for projecting the point-to-point session to a local network using a data link layer projection scheme for creating a virtual point-to-point session between the remote client and the local network.
Claim 12
Dependent Claim
58 words
Computer code according to claim 9 including: code for transmitting an authentication request to the remote client; code for receiving a keyed random number from the remote client; code for transmitting the keyed random number to the local network; and code for creating the virtual point-to-point session when the keyed random number is authenticated by the local network.
Claim 13
Dependent Claim
26 words
Computer code according to claim 10 including code for using a Challenge Authentication Protocol (CHAP) or Password Authentication Protocol (PAP) for obtaining the keyed random number.
Claim 14
Dependent Claim
25 words
Computer code according to claim 9 including code for using a Point-to-Point Protocol (PPP) or a Serial Line Interface Protocol (SLIP) for the point-to-point session.
Claim 15
Dependent Claim
28 words
Compute code according to claim 9 including code for forwarding a Link Control Protocol (LCP) point-to-point session to the local network using the data link layer projection scheme.
Claim 16
Dependent Claim
28 words
Computer code according to claim 9 including code for connecting to the local network through a public switched telephone network access or an integrated services digital network access.
Claim 17
Dependent Claim
51 words
Computer code according to claim 9 including: code for encapsulating the point-to-point session with a data link layer protocol; and code for forwarding the encapsulated point-to-point session to the local network so that the encapsulated point-to-point session operates as a direct point-to-point connection between the remote client and the local network.
Claim 18
Dependent Claim
30 words
Computer code according to claim 15 including code for identifying virtual dial-up clients among different remote clients and conducting the encapsulation and forwarding only for the identified virtual dial-up clients.
Claim 19
Independent Claim
50 words
A system for establishing a network session, comprising: means for establishing a point-to-point session with a remote client; and means for projecting the point-to-point session to a local network using a data link layer projection scheme for creating a virtual point-to-point session between the remote client and the local network.
Claim 20
Independent Claim
50 words
A system for establishing a network session, comprising: means for establishing a point-to-point session with a remote client; and means for projecting the point-to-point session to a local network using a data link layer projection scheme for creating a virtual point-to-point session between the remote client and the local network.
Claim 21
Dependent Claim
58 words
A system according to claim 17 including: means for transmitting an authentication request to the remote client; means for receiving a keyed random number from the remote client; means for transmitting the keyed random number to the local network; and means for creating the virtual point-to-point session when the keyed random number is authenticated by the local network.
Claim 22
Dependent Claim
26 words
A system according to claim 18 including means for using a Challenge Authentication Protocol (CHAP) or Password Authentication Protocol (PAP) for obtaining the keyed random number.
Claim 23
Dependent Claim
25 words
A system according to claim 17 including means for using a Point-to-Point Protocol (PPP) or a Serial Line Interface Protocol (SLIP) for the point-to-point session.
Claim 24
Dependent Claim
28 words
A system according to claim 17 including means for forwarding a Link Control Protocol (LCP) point-to-point session to the local network using the data link layer projection scheme.
Claim 25
Dependent Claim
28 words
A system according to claim 17 including means for connecting to the local network through a public switched telephone network access or an integrated services digital network access.
Claim 26
Dependent Claim
51 words
A system according to claim 17 including: means for encapsulating the point-to-point session with a data link layer protocol; and means for forwarding the encapsulated point-to-point session to the local network so that the encapsulated point-to-point session operates as a direct point-to-point connection between the remote client and the local network.
Claim 27
Dependent Claim
30 words
A system according to claim 23 including means for identifying virtual dial-up clients among different remote clients and conducting the encapsulation and forwarding only for the identified virtual dial-up clients.
Claim 28
Independent Claim
58 words
A method for remotely accessing a local network, comprising: identifying a remote client having authorized access to a local network using a data link layer protocol; establishing a connection to the local network for authorized remote client; and conducting a virtual point-to-point session with the authorized remote client and the local network using the data link layer protocol.
Claim 29
Independent Claim
58 words
A method for remotely accessing a local network, comprising: identifying a remote client having authorized access to a local network using a data link layer protocol; establishing a connection to the local network for authorized remote client; and conducting a virtual point-to-point session with the authorized remote client and the local network using the data link layer protocol.
Claim 30
Dependent Claim
57 words
A method according to claim 25 including: receiving a remote client name, a random number and an encrypted random number for the remote client; locally encrypting the random number using a stored password corresponding to the remote client name; and establishing the virtual point-to-point session when the received encrypted random number matches the locally encrypted random number.
Claim 31
Dependent Claim
19 words
A method according to claim 25 including receiving the virtual point-to-point session encapsulated in the data link layer protocol.
Claim 32
Dependent Claim
29 words
A method according to claim 25 including receiving a multiplex identification field for multiplexing multiple virtual point-to-point sessions using the data link layer forwarding protocol at the same time.
Claim 33
Dependent Claim
18 words
A method according to claim 28 including receiving a client ID field for demultiplexing multiple virtual point-to-point sessions.
Claim 34
Dependent Claim
22 words
A method according to claim 25 including receiving a packet key in a data link level protocol header for encrypting authentication responses.
Claim 35
Dependent Claim
70 words
Computer code stored on a computer readable medium for remotely accessing a local network, comprising: code for identifying a remote client having authorized access to a local network using a data link layer protocol; code for establishing a connection to the local network for authorized remote client; and code for conducting a virtual point-to-point session with the authorized remote client and the local network using the data link layer protocol.
Claim 36
Dependent Claim
70 words
Computer code stored on a computer readable medium for remotely accessing a local network, comprising: code for identifying a remote client having authorized access to a local network using a data link layer protocol; code for establishing a connection to the local network for authorized remote client; and code for conducting a virtual point-to-point session with the authorized remote client and the local network using the data link layer protocol.
Claim 37
Dependent Claim
63 words
Computer code according to claim 31 including: code for receiving a remote client name, a random number and an encrypted random number for the remote client; code for locally encrypting the random number using a stored password corresponding to the remote client name; and code for establishing the virtual point-to-point session when the received encrypted random number matches the locally encrypted random number.
Claim 38
Dependent Claim
21 words
Computer code according to claim 31 including code for receiving the virtual point-to-point session encapsulated in the data link layer protocol.
Claim 39
Dependent Claim
31 words
Computer code according to claim 31 including code for receiving a multiplex identification field for multiplexing multiple virtual point-to-point sessions using the data link layer forwarding protocol at the same time.
Claim 40
Dependent Claim
20 words
Computer code according to claim 34 including code for receiving a client ID field for demultiplexing multiple virtual point-to-point sessions.
Claim 41
Dependent Claim
24 words
Computer code according to claim 31 including code for receiving a packet key in a data link level protocol header for encrypting authentication responses.
Claim 42
Independent Claim
64 words
A system for remotely accessing a local network, comprising: means for identifying a remote client having authorized access to a local network using a data link layer protocol; means for establishing a connection to the local network for authorized remote client; and means for conducting a virtual point-to-point session with the authorized remote client and the local network using the data link layer protocol.
Claim 43
Independent Claim
64 words
A system for remotely accessing a local network, comprising: means for identifying a remote client having authorized access to a local network using a data link layer protocol; means for establishing a connection to the local network for authorized remote client; and means for conducting a virtual point-to-point session with the authorized remote client and the local network using the data link layer protocol.
Claim 44
Dependent Claim
63 words
A system according to claim 37 including: means for receiving a remote client name, a random number and an encrypted random number for the remote client; means for locally encrypting the random number using a stored password corresponding to the remote client name; and means for establishing the virtual point-to-point session when the received encrypted random number matches the locally encrypted random number.
Claim 45
Dependent Claim
21 words
A system according to claim 37 including means for receiving the virtual point-to-point session encapsulated in the data link layer protocol.
Claim 46
Dependent Claim
31 words
A system according to claim 37 including means for receiving a multiplex identification field for multiplexing multiple virtual point-to-point sessions using the data link layer forwarding protocol at the same time.
Claim 47
Dependent Claim
20 words
A system according to claim 40 including means for receiving a client ID field for demultiplexing multiple virtual point-to-point sessions.
Claim 48
Dependent Claim
24 words
A system according to claim 37 including code for receiving a packet key in a data link level protocol header for encrypting authentication responses.
Claim 49
Dependent Claim
55 words
A computer, comprising: a first interface configured to receive a point-to-point session transported over a data link layer forwarding protocol; a second interface configured to communicate with a local network; and a processor configured to establish the point-to-point session between a remote client and the local network according to the data link layer forwarding protocol.
Claim 50
Dependent Claim
55 words
A computer, comprising: a first interface configured to receive a point-to-point session transported over a data link layer forwarding protocol; a second interface configured to communicate with a local network; and a processor configured to establish the point-to-point session between a remote client and the local network according to the data link layer forwarding protocol.
Claim 51
Dependent Claim
23 words
A computer according to claim 43 wherein the data link layer forwarding protocol encapsulates the point-to-point session in a data link layer header.
Claim 52
Dependent Claim
20 words
A computer according to claim 43 wherein the processor authenticates the remote client using the data link layer forwarding protocol.
Claim 53
Dependent Claim
40 words
A computer according to claim 45 wherein the authentication comprises encrypting a random number according to a prestored remote client password and comparing the encrypted random number with an encrypted random number received over the data link layer forwarding protocol.
Claim 54
Dependent Claim
18 words
A computer according to claim 43 wherein the processor conducts an accounting for the direct point-to-point link session.
Claim 55
Dependent Claim
49 words
A computer, comprising: a first interface conducting a point-to-point session with a remote client; a second interface connected to an internet infrastructure; and a processor configured for projecting the point-to-point session through the internet infrastructure to a local network using a forwarding protocol operating at a data link layer.
Claim 56
Dependent Claim
49 words
A computer, comprising: a first interface conducting a point-to-point session with a remote client; a second interface connected to an internet infrastructure; and a processor configured for projecting the point-to-point session through the internet infrastructure to a local network using a forwarding protocol operating at a data link layer.
Claim 57
Dependent Claim
18 words
A computer according to claim 48 wherein the processor attaches a forwarding protocol header to the point-to-point session.
Claim 58
Dependent Claim
28 words
A computer according to claim 49 wherein the processor establishes a tunnel through the internet infrastructure to the local network and transmits the point-to-point session through the tunnel.
References Cited (Backward Citations)
US4644532A
Cited
US5437013A
Cited
US5014265A
Cited
US5159592A
Cited
US5642515A
Cited
US5802290A
Cited
US5371852A
Cited
US5604803A
Cited
US5416842A
Cited
US5623605A
Cited
US5715399A
Cited
US5689566A
Cited
US5602918A
Cited
US5918019A
Cited
US6308213B1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2005-11-25 | 2006-05-27 | 2006-11-26 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2009-11-25 | 2010-05-27 | 2010-11-26 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2013-11-25 | 2014-05-27 | 2014-11-26 | $7700.00 | Window Closed / Lapsed |