IP Library › Granted Patent US 8,910,273
Granted Patent B1
US 8,910,273 · App. 13/487,139 · Granted Dec 9, 2014

Virtual private network over a gateway connection

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,910,273
App. No.
13/487,139
Granted
Dec 9, 2014
Kind
B1
Abstract

Systems and methods for setting up VPN connection are provided. Method includes facilitating creating gateway connection between client side and server side. Client side comprises multiple client side virtual NICs and server side comprises multiple server side virtual NICs. Method includes facilitating creating data paths for VPN connection between each of at least portion of client side virtual NICs and each of at least portion of server side virtual NICs. Data path of each pair of corresponding client side virtual NICs and corresponding server side virtual NIC is associated with gateway connection and port forward. Method includes facilitating transmitting data, via first data path for VPN connection, between first client computing device communicatively coupled with corresponding client side virtual NIC of first data path and first server computing device communicatively coupled with corresponding server side virtual NIC of first data path.

Claims (42)

1. A computer-implemented method for setting up a virtual private network connection, the method comprising:

creating a gateway connection between a client side virtual network interface card and a server side virtual network interface card, wherein the client side virtual network interface card is communicatively coupled to multiple client side computing devices and the server side virtual network interface card is communicatively coupled to multiple server side computing devices;

creating a data path for a virtual private network connection between the client side virtual network interface card and the server side virtual network interface card, wherein the data path is associated with the gateway connection and a port forward;

translating, according to a routing table, between the client side virtual network interface card and the server side virtual network interface card;

transcoding from a format associated with a first client computing device to a format associated with a first server computing device; and

transmitting data, via the data path for the virtual private network connection, between the first client computing device communicatively coupled with the corresponding client side virtual network interface card of the data path and the first server computing device communicatively coupled with the corresponding server side virtual network interface card of the data path.

2. The method of claim 1 , wherein the gateway connection comprises a network-based procedure call interface, wherein the network-based procedure call interface is configured to bind input received from the client side to an address space of the server side, and wherein the input received from the client side is not associated with the address space of the server side.

3. The method of claim 1 , wherein the gateway connection comprises a user datagram protocol (UDP) based gateway service.

4. The method of claim 3 , wherein the virtual private network connection is configured to transfer user datagram protocol (UDP) traffic.

5. The method of claim 1 , wherein the data path comprises a tunnel, and wherein the tunnel comprises one or more channels.

6. The method of claim 5 , wherein the tunnel comprises one or more of a secure socket layer (SSL) tunnel, a hypertext transfer protocol (HTTP) tunnel, or a hypertext transfer protocol secure (HTTPS) tunnel.

7. The method of claim 1 , wherein the client side virtual network interface card or the server side virtual network interface card comprises a TUN (network tunnel) virtual network kernel configured to operate in conjunction with packets of an open systems interconnection model network layer, which is layer 3.

8. The method of claim 1 , wherein the client side virtual network interface card or the server side virtual network interface card comprises a TAP (network tap) virtual network kernel configured to operate in conjunction with packets of an open systems interconnection model data link layer, which is layer 2.

9. The method of claim 1 , wherein the client side virtual network interface card or the server side virtual network interface card comprises software associated with a network interface card (NIC).

10. The method of claim 9 , wherein the client side virtual network interface card or the server side virtual network interface card lacks a corresponding hardware component.

11. The method of claim 1 , wherein the client side and the server side are separated by a firewall, and wherein the firewall is associated with a first data passage protocol through the firewall.

12. The method of claim 11 , wherein the virtual private network connection is independent of the first data passage protocol through the firewall.

13. A non-transitory machine-readable medium comprising instructions stored therein, the instructions executable by one or more processors, the instructions comprising:

code for causing the one or more processors to create a gateway connection between a client side virtual network interface card and a server side virtual network interface card, wherein the client side virtual network interface card is communicatively coupled to multiple client side computing devices and the server side virtual network interface card is communicatively coupled to multiple server side computing devices;

code for causing the one or more processors to create a data path for a virtual private network connection between the client side virtual network interface card and the server side virtual network interface card, wherein the data path is associated with the gateway connection and a port forward;

code for causing the one or more processors to translate, according to a routing table, between the client side virtual network interface card and the server side virtual network interface card;

code for causing the one or more processors to transcode from a format associated with a first client computing device to a format associated with a first server computing device; and

code for causing the one or more processors to transmit data, via the data path for the virtual private network connection, between the first client computing device communicatively coupled with the corresponding client side virtual network interface card of the data path and the first server computing device communicatively coupled with the corresponding server side virtual network interface card of the data path.

14. The non-transitory machine-readable medium of claim 13 , wherein the gateway connection comprises a network-based procedure call interface, wherein the network-based procedure call interface is configured to bind input received from the client side to an address space of the server side, and wherein the input received from the client side is not associated with the address space of the server side.

15. The non-transitory machine-readable medium of claim 13 , wherein the gateway connection comprises a user datagram protocol (UDP) based gateway service.

16. The non-transitory machine-readable medium of claim 15 , wherein the virtual private network connection is configured to transfer user datagram protocol (UDP) traffic.

17. The non-transitory machine-readable medium of claim 13 , wherein the data path comprises a tunnel, and wherein the tunnel comprises one or more channels.

18. The non-transitory machine-readable medium of claim 17 , wherein the tunnel comprises one or more of a secure socket layer (SSL) tunnel, a hypertext transfer protocol (HTTP) tunnel, or a hypertext transfer protocol secure (HTTPS) tunnel.

19. The non-transitory machine-readable medium of claim 13 , wherein the client side virtual network interface card or the server side virtual network interface card comprises a TUN (network tunnel) virtual network kernel configured to operate in conjunction with packets of an open systems interconnection model network layer, which is layer 3.

20. The non-transitory machine-readable medium of claim 13 , wherein the client side virtual network interface card or the server side virtual network interface card comprises a TAP (network tap) virtual network kernel configured to operate in conjunction with packets of an open systems interconnection model data link layer, which is layer 2.

21. The non-transitory machine-readable medium of claim 13 , wherein the client side virtual network interface card or the server side virtual network interface card comprises software associated with a network interface card (NIC).

22. The non-transitory machine-readable medium of claim 21 , wherein the client side virtual network interface card or the server side virtual network interface card lacks a corresponding hardware component.

23. The non-transitory machine-readable medium of claim 13 , wherein the client side and the server side are separated by a firewall, and wherein the firewall is associated with a first data passage protocol through the firewall.

24. The non-transitory machine-readable medium of claim 23 , wherein the virtual private network connection is independent of the first data passage protocol through the firewall.

25. The non-transitory machine-readable medium of claim 13 , wherein the corresponding client side virtual network interface card resides within the first client computing device or the corresponding server side virtual network interface card resides within the first server computing device.

26. The non-transitory machine-readable medium of claim 13 , wherein the corresponding client side virtual network interface card resides externally to the first client computing device or the corresponding server side virtual network interface card resides externally to the first server computing device.

27. A system comprising:

one or more modules stored on a non-transitory computer-readable medium and configured to create a gateway connection between a client side virtual network interface card and a server side virtual network interface card, wherein the client side virtual network interface card is communicatively coupled to multiple client side computing devices and the server side virtual network interface card is communicatively coupled to multiple server side computing devices;

one or more modules stored on a non-transitory computer-readable medium and configured to create a data path for a virtual private network connection between the client side virtual network interface card and the server side virtual network interface card, wherein the data path is associated with the gateway connection and a port forward;

one or more modules stored on a non-transitory computer-readable medium and configured to translate, according to a routing table, between the client side virtual network interface card and the server side virtual network interface card;

one or more modules stored on a non-transitory computer-readable medium and configured to transcode from a format associated with a first client computing device to a format associated with a first server computing device; and

one or more modules stored on a non-transitory computer-readable medium and configured to transmit data, via the data path for the virtual private network connection, between the first client computing device communicatively coupled with the corresponding client side virtual network interface card of the data path and the first server computing device communicatively coupled with the corresponding server side virtual network interface card of the data path.

Assignments (16)
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053546/0001) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC IP HOLDING COMPANY LLC
Reel/Frame 071642/0001 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (045455/0001) Recorded May 20, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO ASAP SOFTWARE EXPRESS, INC.); DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC CORPORATION (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MAGINATICS LLC); EMC IP HOLDING COMPANY LLC (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MOZY, INC.); SCALEIO LLC
Reel/Frame 061753/0001 →
MERGER Recorded May 13, 2022
From: WYSE TECHNOLOGY L.L.C.
To: DELL MARKETING CORPORATION
Reel/Frame 060064/0586 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (040136/0001) Recorded Apr 26, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO ASAP SOFTWARE EXPRESS, INC.); DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC CORPORATION (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MAGINATICS LLC); EMC IP HOLDING COMPANY LLC (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MOZY, INC.); SCALEIO LLC
Reel/Frame 061324/0001 →
RELEASE OF SECURITY INTEREST Recorded Nov 3, 2021
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: DELL USA L.P.; ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL INTERNATIONAL, L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; WYSE TECHNOLOGY L.L.C.
Reel/Frame 058216/0001 →
SECURITY AGREEMENT Recorded Mar 21, 2019
From: CREDANT TECHNOLOGIES, INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 049452/0223 →
SECURITY AGREEMENT Recorded Sep 21, 2016
From: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; SPANNING CLOUD APPS LLC; WYSE TECHNOLOGY L.L.C.
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
Reel/Frame 040136/0001 →
SECURITY AGREEMENT Recorded Sep 21, 2016
From: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; SPANNING CLOUD APPS LLC; WYSE TECHNOLOGY L.L.C.
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 040134/0001 →
RELEASE OF SECURITY INTEREST Recorded Sep 14, 2016
From: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
To: DELL MARKETING L.P.; ASAP SOFTWARE EXPRESS, INC.; APPASSURE SOFTWARE, INC.; COMPELLENT TECHNOLOGIES, INC.; CREDANT TECHNOLOGIES, INC.; DELL INC.; DELL PRODUCTS L.P.; DELL USA L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; PEROT SYSTEMS CORPORATION; SECUREWORKS, INC.; WYSE TECHNOLOGY L.L.C.
Reel/Frame 040040/0001 →
RELEASE OF SECURITY INTEREST Recorded Sep 14, 2016
From: BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS COLLATERAL AGENT
To: DELL MARKETING L.P.; ASAP SOFTWARE EXPRESS, INC.; APPASSURE SOFTWARE, INC.; COMPELLENT TECHNOLOGIES, INC.; CREDANT TECHNOLOGIES, INC.; DELL INC.; DELL PRODUCTS L.P.; DELL USA L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; PEROT SYSTEMS CORPORATION; SECUREWORKS, INC.; WYSE TECHNOLOGY L.L.C.
Reel/Frame 040065/0618 →
RELEASE OF SECURITY INTEREST Recorded Sep 13, 2016
From: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
To: DELL MARKETING L.P.; ASAP SOFTWARE EXPRESS, INC.; APPASSURE SOFTWARE, INC.; COMPELLANT TECHNOLOGIES, INC.; CREDANT TECHNOLOGIES, INC.; DELL INC.; DELL PRODUCTS L.P.; DELL USA L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; PEROT SYSTEMS CORPORATION; SECUREWORKS, INC.; WYSE TECHNOLOGY L.L.C.
Reel/Frame 040065/0216 →
PATENT SECURITY AGREEMENT (NOTES) Recorded Jan 2, 2014
From: APPASSURE SOFTWARE, INC.; ASAP SOFTWARE EXPRESS, INC.; BOOMI, INC.; COMPELLENT TECHNOLOGIES, INC.; CREDANT TECHNOLOGIES, INC.; DELL INC.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL USA L.P.; FORCE10 NETWORKS, INC.; GALE TECHNOLOGIES, INC.; PEROT SYSTEMS CORPORATION; SECUREWORKS, INC.; WYSE TECHNOLOGY L.L.C.
To: BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS FIRST LIEN COLLATERAL AGENT
Reel/Frame 031897/0348 →
PATENT SECURITY AGREEMENT (TERM LOAN) Recorded Jan 2, 2014
From: DELL INC.; APPASSURE SOFTWARE, INC.; ASAP SOFTWARE EXPRESS, INC.; BOOMI, INC.; COMPELLENT TECHNOLOGIES, INC.; CREDANT TECHNOLOGIES, INC.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL USA L.P.; FORCE10 NETWORKS, INC.; GALE TECHNOLOGIES, INC.; PEROT SYSTEMS CORPORATION; SECUREWORKS, INC.; WYSE TECHNOLOGY L.L.C.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 031899/0261 →
PATENT SECURITY AGREEMENT (ABL) Recorded Jan 2, 2014
From: DELL INC.; APPASSURE SOFTWARE, INC.; ASAP SOFTWARE EXPRESS, INC.; BOOMI, INC.; COMPELLENT TECHNOLOGIES, INC.; CREDANT TECHNOLOGIES, INC.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL USA L.P.; FORCE10 NETWORKS, INC.; GALE TECHNOLOGIES, INC.; PEROT SYSTEMS CORPORATION; SECUREWORKS, INC.; WYSE TECHNOLOGY L.L.C.
To: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 031898/0001 →
CHANGE OF NAME Recorded Nov 15, 2013
From: WYSE TECHNOLOGY INC.
To: WYSE TECHNOLOGY L.L.C.
Reel/Frame 031645/0051 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 3, 2012
From: FAUSAK, ANDREW T.; ROMBAKH, OLEG; LIU, DE YU
To: WYSE TECHNOLOGY INC.
Reel/Frame 028724/0682 →