US6826616B2
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method for establishing secure communication link between computers of virtual private network
Assignee: Virnetx Inc
•
Filing: 2003-11-07
•
Granted: 2004-11-30
•
Expires: 2023-11-07
Abstract
Abstract A technique is disclosed for establishing a secure communication link between a first computer and a second computer over a computer network. Initially, a secure communication mode of communication is enabled at a first computer without a user entering any cryptographic information for establishing the secure communication mode of communication. Then, a secure communication link is established between the first computer and a second computer over a computer network based on the enabled secure communication mode of communication. The secure communication link is a virtual private network communication link over the computer network in which one or more data values that vary according to a pseudo-random sequence are inserted into each data packet.
Inventors
- 👤 Victor Larson
- 👤 Robert Dunham Short, III
- 👤 Edmund Colby Munger
- 👤 Michael Williamson
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 20:31
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; H04L63/0876; H04L45/00; H04L45/24; H04L45/28; H04L61/00; H04L61/35; H04L61/50; H04L61/5007; H04L61/5076; H04L61/5092; H04L63/02; H04L63/0272; H04L63/029; H04L63/04; H04L63/0407; H04L63/0414; H04L63/0421; H04L63/0428; H04L63/06; H04L63/061; H04L63/10; H04L63/14; H04L63/1441; H04L63/1458; H04L63/1491; H04L2101/00; H04L2101/60; H04L2101/604; H04L61/45; H04L63/0227; H04L63/0281; H04L63/18
Claims Analysis
Total Claims: 70
Claim 1
Independent Claim
140 words
A method for communicating using a private communication link between a client computer and a server computer over a computer network, the method comprising steps of: sending an information packet from the client computer to the server computer over the computer network, the information packet containing data that is used for forming a virtual private connection between the client computer and the server computer, the data that is used for forming the virtual private connection being inserted into a payload portion of the information packet at the client computer by an application layer program; receiving the information packet at a kernel layer of an operating system on the server computer; and determining at the kernel layer of the operating system on the server computer whether the information packet contains the data that is used for forming the virtual private connection.
Claim 2
Independent Claim
140 words
A method for communicating using a private communication link between a client computer and a server computer over a computer network, the method comprising steps of: sending an information packet from the client computer to the server computer over the computer network, the information packet containing data that is used for forming a virtual private connection between the client computer and the server computer, the data that is used for forming the virtual private connection being inserted into a payload portion of the information packet at the client computer by an application layer program; receiving the information packet at a kernel layer of an operating system on the server computer; and determining at the kernel layer of the operating system on the server computer whether the information packet contains the data that is used for forming the virtual private connection.
Claim 3
Dependent Claim
28 words
The method according to claim 1 , further comprising a step of passing the information packet through a firewall before sending the information packet over the computer network.
Claim 4
Dependent Claim
33 words
The method according to claim 1 , wherein the data used for forming the virtual private connection corresponds to a predetermined level of service provided to the client computer by the server computer.
Claim 5
Dependent Claim
77 words
The method according to claim 1 , further comprising step of sending a second information packet from the server computer to the client computer over the computer network, the second information packet containing data that is used for forming the virtual private connection, the data that is used for forming the virtual private connection being inserted into a payload portion of the second information packet by the kernel layer of the operating system on the server computer.
Claim 6
Dependent Claim
17 words
The method according to claim 1 , wherein the information packet is a UDP protocol information packet.
Claim 7
Dependent Claim
25 words
The method according to claim 1 , wherein the information packet is one of a TCP/IP protocol information packet and an ICMP protocol information packet.
Claim 8
Dependent Claim
32 words
The method according to claim 1 , wherein the data that is used for forming the virtual private connection includes one or more data values that vary according to a pseudo-random sequence.
Claim 9
Dependent Claim
48 words
The method according to claim 1 , wherein the data that is used for forming the virtual private connection is based on a computer network address hopping regime that is used to pseudorandomly change computer network addresses in packets transmitted between the client computer and the server computer.
Claim 10
Dependent Claim
45 words
The method according to claim 1 , wherein the data that is used for forming the virtual private connection is based on comparing a value in each data packet transmitted between the client computer and the server computer to a moving window of valid values.
Claim 11
Dependent Claim
47 words
The method according to claim 1 , wherein the data that is used for forming the virtual private connection is based on a comparison of a discriminator field in a header of each data packet to a table of valid discriminator fields maintained for the client computer.
Claim 12
Dependent Claim
14 words
The method according to claim 1 , wherein the computer network includes the Internet.
Claim 13
Dependent Claim
152 words
A computer-readable storage medium, comprising: a storage area; and computer-readable instructions for a method for communicating using a private communication link between a client computer and a server computer over a computer network, the method comprising steps of: sending an information packet from the client computer to the server computer over the computer network, the information packet containing data that is used for forming a virtual private connection between the client computer and the server computer, the data that is used for forming the virtual private connection being inserted into a payload portion of the information packet at the client computer by an application layer program; receiving the information packet at a kernel layer of an operating system on the server computer; and determining at the kernel layer of the operating system on the server computer whether the information packet contains the data that is used for forming the virtual private connection.
Claim 14
Dependent Claim
152 words
A computer-readable storage medium, comprising: a storage area; and computer-readable instructions for a method for communicating using a private communication link between a client computer and a server computer over a computer network, the method comprising steps of: sending an information packet from the client computer to the server computer over the computer network, the information packet containing data that is used for forming a virtual private connection between the client computer and the server computer, the data that is used for forming the virtual private connection being inserted into a payload portion of the information packet at the client computer by an application layer program; receiving the information packet at a kernel layer of an operating system on the server computer; and determining at the kernel layer of the operating system on the server computer whether the information packet contains the data that is used for forming the virtual private connection.
Claim 15
Dependent Claim
29 words
The computer-readable medium according to claim 12 , further comprising a step of passing the information packet through a firewall before sending the information packet over the computer network.
Claim 16
Dependent Claim
34 words
The computer-readable medium according to claim 12 , wherein the data used for forming the virtual private connection corresponds to a predetermined level of service provided to the client computer by the server computer.
Claim 17
Dependent Claim
78 words
The computer-readable medium according to claim 12 , further comprising step of sending a second information packet from the server computer to the client computer over the computer network, the second information packet containing data that is used for forming the virtual private connection, the data that is used for forming the virtual private connection being inserted into a payload portion of the second information packet by the kernel layer of the operating system on the server computer.
Claim 18
Dependent Claim
18 words
The computer-readable medium according to claim 12 , wherein the information packet is a UDP protocol information packet.
Claim 19
Dependent Claim
26 words
The computer-readable medium according to claim 12 , wherein the information packet is one of a TCP/IP protocol information packet and an ICMP protocol information packet.
Claim 20
Dependent Claim
33 words
The computer-readable medium according to claim 12 , wherein the data that is used for forming the virtual private connection includes one or more data values that vary according to a pseudo-random sequence.
Claim 21
Dependent Claim
48 words
The computer-readable according to claim 12 , wherein the data that is used for forming the virtual private connection is based on a computer network address hopping regime that is used to pseudorandomly change computer network addresses in packets transmitted between the client computer and the server computer.
Claim 22
Dependent Claim
46 words
The computer-readable medium according to claim 12 , wherein the data that is used for forming the virtual private connection is based on comparing a value in each data packet transmitted between the client computer and the server computer to a moving window of valid values.
Claim 23
Dependent Claim
48 words
The computer-readable medium according to claim 12 , wherein the data that is used for forming the virtual private connection is based on a comparison of a discriminator field in a header of each data packet to a table of valid discriminator fields maintained for the client computer.
Claim 24
Dependent Claim
15 words
The computer-readable medium according to claim 12 , wherein the computer network includes the Internet.
Claim 25
Independent Claim
92 words
A method for communicating using a private communication link between a client computer and a server computer over a computer network, the method comprising steps of: generating an information packet at the client computer, modifying the information packet at an application layer within the client computer by inserting data into a payload portion of the information packet that is used for forming a virtual private connection between the client computer and the server computer; and sending the modified information packet from the client computer to the server computer over the computer network.
Claim 26
Independent Claim
92 words
A method for communicating using a private communication link between a client computer and a server computer over a computer network, the method comprising steps of: generating an information packet at the client computer, modifying the information packet at an application layer within the client computer by inserting data into a payload portion of the information packet that is used for forming a virtual private connection between the client computer and the server computer; and sending the modified information packet from the client computer to the server computer over the computer network.
Claim 27
Dependent Claim
30 words
The method according to claim 23 , further comprising a step of passing the modified information packet through a firewall before sending the modified information packet over the computer network.
Claim 28
Dependent Claim
33 words
The method according to claim 23 , wherein the data used for forming the virtual private connection corresponds to a predetermined level of service provided to the client computer by the server computer.
Claim 29
Dependent Claim
59 words
The method according to claim 23 , further comprising steps of: receiving an information packet at the application layer in the client computer that is sent from the server computer over the computer network; and determining at the application layer of the client computer whether the information packet contains data that is used for forming the virtual private connection.
Claim 30
Dependent Claim
18 words
The method according to claim 23 , wherein the modified information packet is a UDP protocol information packet.
Claim 31
Dependent Claim
26 words
The method according to claim 23 , wherein the modified information packet is one of a TCP/IP protocol information packet and an ICMP protocol information packet.
Claim 32
Dependent Claim
32 words
The method according to claim 23 , wherein the data that is used for forming the virtual private connection includes one or more data values that vary according to a pseudo-random sequence.
Claim 33
Dependent Claim
49 words
The method according to claim 23 , wherein the data that is used for forming the virtual private connection is based on a computer network address hopping regime that is used to pseudorandomly change computer network addresses in information packets transmitted between the client computer and the server computer.
Claim 34
Dependent Claim
45 words
The method according to claim 23 , wherein the data that is used for forming the virtual private connection is based on comparing a value in each information packet transmitted between the client computer and the server computer to a moving window of valid values.
Claim 35
Dependent Claim
47 words
The method according to claim 23 , wherein the data that is used for forming the virtual private connection is based on a comparison of a discriminator field in a header of each information packet to a table of valid discriminator fields maintained for the client computer.
Claim 36
Dependent Claim
14 words
The method according to claim 23 , wherein the computer network includes the Internet.
Claim 37
Dependent Claim
104 words
A computer-readable storage medium, comprising: a storage area; and computer-readable instructions for a method for communicating using a private communication link between a client computer and a server computer over a computer network, the method comprising steps of: generating an information packet at the client computer, modifying the information packet at an application layer within the client computer by inserting data into a payload portion of the information packet that is used for forming a virtual private connection between the client computer and the server computer; and sending the modified information packet from the client computer to the server computer over the computer network.
Claim 38
Dependent Claim
104 words
A computer-readable storage medium, comprising: a storage area; and computer-readable instructions for a method for communicating using a private communication link between a client computer and a server computer over a computer network, the method comprising steps of: generating an information packet at the client computer, modifying the information packet at an application layer within the client computer by inserting data into a payload portion of the information packet that is used for forming a virtual private connection between the client computer and the server computer; and sending the modified information packet from the client computer to the server computer over the computer network.
Claim 39
Dependent Claim
31 words
The computer-readable medium according to claim 34 , further comprising a step of passing the modified information packet through a firewall before sending the modified information packet over the computer network.
Claim 40
Dependent Claim
34 words
The computer-readable medium according to claim 34 , wherein the data used for forming the virtual private connection corresponds to a predetermined level of service provided to the client computer by the server computer.
Claim 41
Dependent Claim
60 words
The computer-readable medium according to claim 34 , further comprising steps of: receiving an information packet at the application layer in the client computer that is sent from the server computer over the computer network; and determining at the application layer of the client computer whether the information packet contains data that is used for forming the virtual private connection.
Claim 42
Dependent Claim
19 words
The computer-readable medium according to claim 34 , wherein the modified information packet is a UDP protocol information packet.
Claim 43
Dependent Claim
27 words
The computer-readable medium according to claim 34 , wherein the modified information packet is one of a TCP/IP protocol information packet and an ICMP protocol information packet.
Claim 44
Dependent Claim
33 words
The computer-readable medium according to claim 34 , wherein the data that is used for forming the virtual private connection includes one or more data values that vary according to a pseudo-random sequence.
Claim 45
Dependent Claim
50 words
The computer-readable medium according to claim 34 , wherein the data that is used for forming the virtual private connection is based on a computer network address hopping regime that is used to pseudorandomly change computer network addresses in information packets transmitted between the client computer and the server computer.
Claim 46
Dependent Claim
46 words
The computer-readable medium according to claim 34 , wherein the data that is used for forming the virtual private connection is based on comparing a value in each information packet transmitted between the client computer and the server computer to a moving window of valid values.
Claim 47
Dependent Claim
48 words
The computer-readable medium according to claim 34 , wherein the data that is used for forming the virtual private connection is based on a comparison of a discriminator field in a header of each information packet to a table of valid discriminator fields maintained for the client computer.
Claim 48
Dependent Claim
15 words
The computer-readable medium according to claim 34 , wherein the computer network includes the Internet.
Claim 49
Independent Claim
100 words
A method for communicating using a private communication link between a server computer and a client computer over a computer network, the method comprising steps of: generating an information packet at the server computer, modifying the information packet at a kernel layer within an operating system of the server computer by inserting data into a payload portion of the information packet that is used for forming a virtual private connection between the server computer and the client computer; and sending the modified information packet from the server computer to an application layer in the client computer over the computer network.
Claim 50
Independent Claim
100 words
A method for communicating using a private communication link between a server computer and a client computer over a computer network, the method comprising steps of: generating an information packet at the server computer, modifying the information packet at a kernel layer within an operating system of the server computer by inserting data into a payload portion of the information packet that is used for forming a virtual private connection between the server computer and the client computer; and sending the modified information packet from the server computer to an application layer in the client computer over the computer network.
Claim 51
Dependent Claim
46 words
The method according to claim 45 , further comprising a step of passing the modified information packet through a firewall after the modified information packet is sent over the computer network before the modified information packet is received by the application layer at the client computer.
Claim 52
Dependent Claim
33 words
The method according to claim 45 , wherein the data used for forming the virtual private connection corresponds to a predetermined level of service provided to the client computer by the server computer.
Claim 53
Dependent Claim
18 words
The method according to claim 45 , wherein the modified information packet is a UDP protocol information packet.
Claim 54
Dependent Claim
26 words
The method according to claim 45 , wherein the modified information packet is one of a TCP/IP protocol information packet and an ICMP protocol information packet.
Claim 55
Dependent Claim
32 words
The method according to claim 45 , wherein the data that is used for forming the virtual private connection includes one or more data values that vary according to a pseudo-random sequence.
Claim 56
Dependent Claim
50 words
The method according to claim 45 , wherein the data that is used for forming the virtual private connection is based on a computer network address hopping regime that is used to pseudorandomly change computer network addresses in modified information packets transmitted between the server computer and the client computer.
Claim 57
Dependent Claim
47 words
The method according to claim 45 , wherein the data that is used for forming the virtual private connection is based on comparing a value in each data modified information packet transmitted between the server computer and the client computer to a moving window of valid values.
Claim 58
Dependent Claim
48 words
The method according to claim 45 , wherein the data that is used for forming the virtual private connection is based on a comparison of a discriminator field in a header of each modified information packet to a table of valid discriminator fields maintained for the server computer.
Claim 59
Dependent Claim
14 words
The method according to claim 45 , wherein the computer network includes the Internet.
Claim 60
Dependent Claim
112 words
A computer-readable storage medium, comprising: a storage area; and computer-readable instructions for a method for communicating using a private communication link between a server computer and a client computer over a computer network, the method comprising steps of: generating an information packet at the server computer, modifying the information packet at a kernel layer within an operating system of the server computer by inserting data into a payload portion of the information packet that is used for forming a virtual private connection between the server computer and the client computer; and sending the modified information packet from the server computer to an application layer in the client computer over the computer network.
Claim 61
Dependent Claim
112 words
A computer-readable storage medium, comprising: a storage area; and computer-readable instructions for a method for communicating using a private communication link between a server computer and a client computer over a computer network, the method comprising steps of: generating an information packet at the server computer, modifying the information packet at a kernel layer within an operating system of the server computer by inserting data into a payload portion of the information packet that is used for forming a virtual private connection between the server computer and the client computer; and sending the modified information packet from the server computer to an application layer in the client computer over the computer network.
Claim 62
Dependent Claim
47 words
The computer-readable medium according to claim 55 , further comprising a step of passing the modified information packet through a firewall after the modified information packet is sent over the computer network before the modified information packet is received by the application layer at the client computer.
Claim 63
Dependent Claim
34 words
The computer-readable medium according to claim 55 , wherein the data used for forming the virtual private connection corresponds to a predetermined level of service provided to the client computer by the server computer.
Claim 64
Dependent Claim
19 words
The computer-readable medium according to claim 55 , wherein the modified information packet is a UDP protocol information packet.
Claim 65
Dependent Claim
27 words
The computer-readable medium according to claim 55 , wherein the modified information packet is one of a TCP/IP protocol information packet and an ICMP protocol information packet.
Claim 66
Dependent Claim
33 words
The computer-readable medium according to claim 55 , wherein the data that is used for forming the virtual private connection includes one or more data values that vary according to a pseudo-random sequence.
Claim 67
Dependent Claim
51 words
The computer-readable medium according to claim 55 , wherein the data that is used for forming the virtual private connection is based on a computer network address hopping regime that is used to pseudorandomly change computer network addresses in modified information packets transmitted between the server computer and the client computer.
Claim 68
Dependent Claim
48 words
The computer-readable medium according to claim 55 , wherein the data that is used for forming the virtual private connection is based on comparing a value in each data modified information packet transmitted between the server computer and the client computer to a moving window of valid values.
Claim 69
Dependent Claim
49 words
The computer-readable medium according to claim 55 , wherein the data that is used for forming the virtual private connection is based on a comparison of a discriminator field in a header of each modified information packet to a table of valid discriminator fields maintained for the server computer.
Claim 70
Dependent Claim
15 words
The computer-readable medium according to claim 55 , wherein the computer network includes the Internet.
References Cited (Backward Citations)
US4933846A
Cited
US5341426A
Cited
US5787172A
Cited
US5588060A
Cited
US5878231A
Cited
US5689566A
Cited
US5842040A
Cited
EP0814589A2
Cited
US6016318A
Cited
US6487598B1
Cited
US5918019A
Cited
US5892903A
Cited
GB2317792A
Cited
US6052788A
Cited
US5898830A
Cited
EP0838930A2
Cited
US5796942A
Cited
WO1998027783A1
Cited
US5905859A
Cited
US5805801A
Cited
EP0858189A2
Cited
US6178505B1
Cited
WO1998055930A1
Cited
WO1998059470A2
Cited
US6092200A
Cited
US6158011A
Cited
WO1999038081A1
Cited
US6079020A
Cited
US6119171A
Cited
US6353614B1
Cited
WO1999048303A2
Cited
US6226751B1
Cited
DE19924575A1
Cited
US6286047B1
Cited
US6243749B1
Cited
US6502135B1
Cited
US6168409B1
Cited
US6006259A
Cited
US6332158B1
Cited
US6330562B1
Cited
WO2000070458A1
Cited
WO2001050688A1
Cited
US20020004898A1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2007-11-30 | 2008-05-31 | 2008-11-30 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2011-11-30 | 2012-05-31 | 2012-11-30 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2015-11-30 | 2016-05-31 | 2016-11-30 | $7700.00 | Window Closed / Lapsed |