IP Library Granted Patent US 10,798,132
Granted Patent B2
US 10,798,132 · App. 16/385,081 · Granted Oct 6, 2020

Methods and systems for enhancing cyber security in networks

Inventor: Michael J. Chen (Livingston, NJ)
H04L63/20H04L12/4641H04L12/4679H04L41/22H04L63/0236H04L63/0272H04L63/083H04L63/0823H04L63/0876H04L67/10H04L67/1002H04W4/70H04W12/0806
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,798,132
App. No.
16/385,081
Granted
Oct 6, 2020
Kind
B2
Abstract

The present application is directed a computer-implemented method for enhancing security and preventing cyber-attacks on a network. The method includes a step of receiving, from a user equipment on the network, information including a source IP address and a destination IP address. The method also includes a step of selecting a first VPN server from a VPN service provider based upon a traffic-type of the user equipment. The method also includes a step of creating, via a graphical user interface, a policy to prevent cyber-attacks such that traffic associated with the information of the user equipment is routed to the first VPN server. The method further includes a step of sending the traffic of the user equipment to the VPN server. The method even further includes a step of provisioning the first VPN server to last a predetermined amount of time base on the created policy. The method yet even further includes a step of coordinating the created policy with a router on the network, with the traffic being sent to the first VPN server via the router. The method yet even further includes a step of sending, after a predetermined condition is met, a request to the VPN service provider to transmit a second VPN server, where the first VPN server terminates when the predetermined condition is met. The application is also directed to a system and method for securing web traffic preventing cyber-attacks on a network.

Claims (54)

1. A computer-implemented method for enhancing security and preventing cyber-attacks on a network comprising:

receiving, from a user equipment on the network, information including a source IP address and a destination IP address;

selecting a first VPN server from a VPN service provider based upon a traffic-type of the user equipment;

creating, via a graphical user interface, a policy to prevent cyber-attacks such that traffic associated with the information of the user equipment is routed to the first VPN server;

provisioning the first VPN server to last a predetermined amount of time based on the created policy;

coordinating the created policy with a router on the network, with the traffic being sent to the first VPN server via the router; and

sending, after a predetermined condition is met, a request to the VPN service provider to transmit a second VPN server,

wherein the first VPN server terminates when the predetermined condition is met.

2. The method of claim 1 , further comprising:

redirecting the traffic of the user equipment from the first VPN server to the second VPN server.

3. The method of claim 2 , wherein IP addresses of the first and second VPNs are different.

4. The method of claim 1 , wherein the predetermined condition is selected from the group consisting of activity-type, traffic-type, load balancing, and combinations thereof.

5. The method of claim 4 , wherein the traffic-type is selected from the group consisting of video, web, voice and combinations thereof.

6. The method of claim 5 , further comprising:

selecting the VPN server based upon the traffic-type of the user equipment.

7. The method of claim 1 , wherein the network is an enterprise network for a company.

8. A computer-implemented system for enhancing web traffic security and preventing cyber-attacks on a network comprising:

a non-transitory memory having instructions stored thereon for dynamically managing web traffic of user equipment on the network;

a display including a graphical user interface; and

a processor, operably coupled to the non-transitory memory, the processor configured to execute the instructions of:

receiving information from the user equipment;

selecting a first VPN server from a VPN service provider based upon a traffic-type of the user equipment;

creating, via the graphical user interface, a policy to prevent cyber-attacks such that traffic associated with the received information of the user equipment is routed to the first VPN server;

provisioning the first VPN server to last a predetermined amount of time based on the created policy;

coordinating the created policy with a router on the network, with the traffic being sent to the first VPN server via the router; and

sending, after a predetermined condition is met, a request to the VPN service provider to transmit a second VPN server,

wherein the first VPN server terminates when the predetermined condition is met.

9. The system of claim 8 , wherein the processor is further configured to execute the instructions of redirecting the traffic of the user equipment from the first VPN server to the second VPN server.

10. The system of claim 8 , wherein the processor is further configured to execute the instructions of:

configuring the router with the policy; and

authorizing the traffic of the user equipment be sent through the configured router to the VPN server.

11. The system of claim 8 , wherein the information of the user equipment includes a source IP address and a destination IP address.

12. The system of claim 8 , wherein sending of the instructions is performed automatically.

13. The system of claim 8 , wherein the processor is further configured to execute the instructions of receiving, from the VPN service provider, credentials of the first and second VPNs.

14. The system of claim 13 , wherein IP addresses of the first and second VPNs are different.

15. The system of claim 8 , wherein the predetermined condition is selected from the group consisting of activity-type, traffic-type, load balancing, and combinations thereof.

16. The system of claim 15 , wherein the traffic-type is selected from the group consisting of video, web, voice, and combinations thereof.

17. A system for securing web traffic to prevent cyber-attacks on a network comprising:

a policy controller including:

a non-transitory memory having instructions stored thereon for dynamically managing web traffic of user equipment on the network;

a display including a graphical user interface; and

a processor, operably coupled to the memory, the processor configured to execute the instructions of:

receiving information from the user equipment;

selecting a first VPN server from a VPN service provider based upon a traffic-type of the user equipment;

creating, via the graphical user interface, a policy to prevent cyber-attacks such that traffic associated with the received information of the user equipment is routed to the first VPN server;

provisioning the first VPN server to last a predetermined amount of time based on the created policy;

coordinating the created policy with a router on the network, with the traffic being sent to the VPN server via the router; and

sending, after a predetermined condition is met, a request to the VPN service provider to transmit a second VPN server, and where the first VPN server terminates; and

a router on the network operably coupled to the policy controller to prevent cyber-attacks.

18. The system of claim 17 , wherein the processor of the policy controller is further configured to execute the instructions of redirecting the traffic of the user equipment from the first VPN server to the second VPN server.

19. The system of claim 17 , wherein IP addresses of the first and second VPNs are different.

20. The system of claim 17 , wherein the processor of the policy controller is further configured to execute the instructions of:

configuring the router with the policy; and

authorizing the traffic of the user equipment be sent through the configured router to the VPN server.

Assignments (4)
NOTICE OF GRANT OF SECURITY INTEREST IN PATENTS Recorded Jan 22, 2025
From: CACI LGS INNOVATIONS LLC
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 069987/0444 →
CHANGE OF NAME Recorded Nov 4, 2024
From: LGS INNOVATIONS LLC
To: CACI LGS INNOVATIONS LLC
Reel/Frame 069292/0991 →
NOTICE OF GRANT OF SECURITY INTEREST IN PATENTS Recorded Dec 13, 2021
From: LGS INNOVATIONS LLC
To: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 058961/0065 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 16, 2019
From: CHEN, MICHAEL J.
To: LGS INNOVATIONS LLC
Reel/Frame 048892/0675 →
Continuity (3)
Continuation 15275982 · Sep 26, 2016
Provisional Application 62347705 · Jun 9, 2016
Related Publication 20190245892A1 · Aug 8, 2019
Cited By (3)
US 12,388,841 US 12,388,854 US 12,619,753