로그인시 본인확인과정이 필요할 수 있습니다.
다음과 같은 기능을 한번의 로그인으로 사용 할 수 있습니다.
NTIS 바로가기
다음과 같은 기능을 한번의 로그인으로 사용 할 수 있습니다.
DataON 바로가기
다음과 같은 기능을 한번의 로그인으로 사용 할 수 있습니다.
Edison 바로가기
다음과 같은 기능을 한번의 로그인으로 사용 할 수 있습니다.
Kafe 바로가기
| 국가/구분 | United States(US) Patent 등록 |
|---|---|
| 국제특허분류(IPC7판) |
|
| 출원번호 | US-0794446 (2010-06-04) |
| 등록번호 | US-8261057 (2012-09-04) |
| 발명자 / 주소 |
|
| 출원인 / 주소 |
|
| 대리인 / 주소 |
|
| 인용정보 | 피인용 횟수 : 15 인용 특허 : 449 |
A system and method for establishing a virtual private network (VPN) between a client and a private data communication network. An encrypted data communication session, such as a—Secure Sockets Layer (SSL) data communication session, is established between a gateway and the client over a public data
A system and method for establishing a virtual private network (VPN) between a client and a private data communication network. An encrypted data communication session, such as a—Secure Sockets Layer (SSL) data communication session, is established between a gateway and the client over a public data communication network. The gateway then sends a programming component to the client for automatic installation and execution thereon. The programming component operates to intercept communications from client applications destined for resources on the private data communication network and to send the intercepted communications to the gateway via the encrypted data communication session instead of to the resources on the private data communication network.
1. A method comprising: (a) establishing, by a network device, a connection with a client requesting access to a network via the network device;(b) transmitting, by the network device, a first program to the client for automatic installation and execution thereon in response to the establishment;(c)
1. A method comprising: (a) establishing, by a network device, a connection with a client requesting access to a network via the network device;(b) transmitting, by the network device, a first program to the client for automatic installation and execution thereon in response to the establishment;(c) installing, by the first program upon execution, a second program in a network stack of the client, the second program redirecting to the first program a packet from a client application destined for the network;(d) encapsulating, by the first program, payload from the redirected packet; and(e) transmitting, by the first program, the encapsulated payload to the network device. 2. The method of claim 1, wherein step (a) further comprises requesting, by the client, access from a public network to a private network via the network device. 3. The method of claim 1, wherein step (a) further comprises establishing the connection with the client in response to the client application requesting access to the network. 4. The method of claim 1, wherein establishing the connection further comprises establishing a secure sockets layer (SSL) connection with the client. 5. The method of claim 1, wherein transmitting the first program further comprises transmitting an ActiveX control or a Java applet. 6. The method of claim 1, further comprising providing, by the first program, a first endpoint for communications over the established connection and providing, by the network device, a second endpoint for the communications over the established connection. 7. The method of claim 1, wherein installing the second program further comprises installing a filter at the transport layer of the network stack. 8. The method of claim 1, wherein step (c) further comprises determining whether to redirect the packet to the first program. 9. The method of claim 1, wherein step (d) further comprises encrypting the payload from the redirected packet. 10. The method of claim 1, further comprising transmitting, by the network device, the payload to a destination in the network. 11. A method comprising: (a) establishing a connection between a client on a first network and a network device intermediary to the first network and a second network;(b) intercepting, by a filter operating at a transport layer of the client, a packet from an application of the client responsive to the establishment, the packet destined for the second network;(c) forwarding, by the filter, the intercepted packet to a program executing on the client, the program terminating an end of the connection at the client; and(d) transmitting, by the program, payload from the intercepted packet to the network device via the connection. 12. The method of claim 11, wherein step (a) further comprises establishing the connection with the client in response to the application requesting access to the second network. 13. The method of claim 11, wherein the program executes in an application layer of the client. 14. The method of claim 11, wherein a web browser of the client executes the program. 15. The method of claim 11, further comprising providing, by the program, a first endpoint for the connection and providing, by the network device, a second endpoint for the connection. 16. The method of claim 11, wherein step (c) further comprises determining whether to forward the packet to the program. 17. The method of claim 11, wherein step (d) further comprises encrypting the payload from the intercepted packet prior to transmission to the network device. 18. The method of claim 11, further comprising transmitting, by the network device, the payload to a destination in the second network. 19. The method of claim 11, further comprising establishing, by the application, a connection to the transport layer of the client to activate the filter for intercepting packets. 20. The method of claim 11, further comprising installing, by the program, the filter at the transport layer of the client.
해당 특허가 속한 카테고리에서 활용도가 높은 상위 5개 콘텐츠를 보여줍니다.
더보기 버튼을 클릭하시면 더 많은 관련자료를 살펴볼 수 있습니다.
Copyright KISTI. All Rights Reserved.
※ AI-Helper는 부적절한 답변을 할 수 있습니다.