IP Library Granted Patent US 10,880,265
Granted Patent B1
US 10,880,265 · App. 16/263,330 · Granted Dec 29, 2020

Systems and methods for improving network efficiency

Inventor: Qing Li (Cupertino, CA)
Assignee: NORTONLIFELOCK, INC.
H04L61/2592G06F9/45558H04L12/4633H04L12/66H04L45/64H04L63/164G06F2009/45595
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,880,265
App. No.
16/263,330
Granted
Dec 29, 2020
Kind
B1
Abstract

The disclosed computer-implemented method for improving network efficiency may include (i) receiving, from a client device, and at a publicly available on-demand cloud computing platform, a network packet that indicates an origination network address of an intermediary local network gateway that forwarded the network packet rather than an actual network address of the client device, and (ii) inserting, into the network packet, and at the publicly available on-demand cloud computing platform, network address translation information indicating a path to the actual network address of the client device to enable a virtual node within the publicly available on-demand cloud computing platform to identify the client device. Various other methods, systems, and computer-readable media are also disclosed.

Claims (34)

1. A computer-implemented method for improving network efficiency, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:

receiving, from a client device, and at a publicly available on-demand cloud computing platform, a network packet that indicates an origination network address of an intermediary local network gateway that forwarded the network packet rather than an actual network address of the client device; and

inserting, into the network packet, and at the publicly available on-demand cloud computing platform, network address translation information indicating a path to the actual network address of the client device to enable a virtual node within the publicly available on-demand cloud computing platform to identify the client device.

2. The computer-implemented method of claim 1 , wherein the network packet is routed to the publicly available on-demand cloud computing platform to perform a service comprising at least one of a security service or a network management service.

3. The computer-implemented method of claim 1 , wherein the network address translation information is inserted into a header space within the network packet.

4. The computer-implemented method of claim 3 , wherein the header space contains network protocol information that is used for network transmission prior to receiving the network packet at the publicly available on-demand cloud computing platform but is not used within the publicly available on-demand cloud computing platform such that at least a portion of the network protocol information may be overwritten.

5. The computer-implemented method of claim 4 , wherein the network protocol information corresponds to a network security protocol.

6. The computer-implemented method of claim 5 , wherein the network security protocol comprises IPsec.

7. The computer-implemented method of claim 1 , wherein inserting the network address translation information into the network packet is performed according to a distributed algorithm such that any virtual node within the publicly available on-demand cloud computing platform is enabled to execute the distributed algorithm.

8. The computer-implemented method of claim 1 , wherein:

inserting the network address translation information is performed for each network packet within an entire transaction of network packets; or

inserting the network address translation information is performed for a first subset of network packets within the entire transaction of network packets.

9. The computer-implemented method of claim 1 , wherein the network packet, after inserting the network address translation information, still satisfies a maximum transmission unit.

10. The computer-implemented method of claim 1 , wherein:

inserting the network address translation information into the network packet is performed by an overlay network within the publicly available on-demand cloud computing platform;

the overlay network receives the network packet according to an in-line zero-copy network packet routing operation; and

the overlay network forwards the network packet to a final destination according to an in-line zero-copy network packet routing operation.

11. A system for improving network efficiency, the system comprising:

a reception module, stored in memory, that receives, from a client device, and at a publicly available on-demand cloud computing platform, a network packet that indicates an origination network address of an intermediary local network gateway that forwarded the network packet rather than an actual network address of the client device;

an insertion module, stored in memory, that inserts, into the network packet, and at the publicly available on-demand cloud computing platform, network address translation information indicating a path to the actual network address of the client device to enable a virtual node within the publicly available on-demand cloud computing platform to identify the client device; and

at least one physical processor configured to execute the reception module and the insertion module.

12. The system of claim 11 , wherein the network address translation information is inserted into a header space within the network packet.

13. The system of claim 12 , wherein the header space contains network protocol information that is used for network transmission prior to receiving the network packet at the publicly available on-demand cloud computing platform but is not used within the publicly available on-demand cloud computing platform such that at least a portion of the network protocol information may be overwritten.

14. The system of claim 13 , wherein the network protocol information corresponds to a network security protocol.

15. The system of claim 14 , wherein the network security protocol comprises IPsec.

16. The system of claim 11 , wherein the insertion module inserts the network address translation information into the network packet according to a distributed algorithm such that any virtual node within the publicly available on-demand cloud computing platform is enabled to execute the distributed algorithm.

17. The system of claim 11 , wherein:

inserting the network address translation information is performed for each network packet within an entire transaction of network packets; or

inserting the network address translation information is performed for a first subset of network packets within the entire transaction of network packets.

18. The system of claim 11 , wherein the network packet, after inserting the network address translation information, still satisfies a maximum transmission unit.

19. The system of claim 11 , wherein the network packet is routed to the publicly available on-demand cloud computing platform to perform a service comprising at least one of a security service or a network management service.

20. A non-transitory computer-readable medium comprising one or more computer-readable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

receive, from a client device, and at a publicly available on-demand cloud computing platform, a network packet that indicates an origination network address of an intermediary local network gateway that forwarded the network packet rather than an actual network address of the client device; and

insert, into the network packet, and at the publicly available on-demand cloud computing platform, network address translation information indicating a path to the actual network address of the client device to enable a virtual node within the publicly available on-demand cloud computing platform to identify the client device.

Assignments (6)
CHANGE OF NAME Recorded Feb 6, 2023
From: NORTONLIFELOCK INC.
To: GEN DIGITAL INC.
Reel/Frame 062714/0605 →
NOTICE OF SUCCESSION OF AGENCY (REEL 050926 / FRAME 0560) Recorded Sep 13, 2022
From: JPMORGAN CHASE BANK, N.A.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 061422/0371 →
SECURITY AGREEMENT Recorded Sep 13, 2022
From: NORTONLIFELOCK INC.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 062220/0001 →
CHANGE OF NAME Recorded Feb 14, 2020
From: SYMANTEC CORPORATION
To: NORTONLIFELOCK INC.
Reel/Frame 051935/0228 →
SECURITY AGREEMENT Recorded Nov 4, 2019
From: SYMANTEC CORPORATION; BLUE COAT LLC; LIFELOCK, INC,; SYMANTEC OPERATING CORPORATION
To: JPMORGAN, N.A.
Reel/Frame 050926/0560 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 31, 2019
From: LI, QING
To: SYMANTEC CORPORATION
Reel/Frame 048204/0105 →