IP Library Granted Patent US 10,965,715
Granted Patent B2
US 10,965,715 · App. 16/552,121 · Granted Mar 30, 2021

Methods and systems for controlling traffic to VPN servers

Inventor: Michael J. Chen (Livingston, NJ)
Assignee: CACI, Inc.—Federal
H04L63/20H04L12/4641H04L12/4679H04L41/22H04L63/0236H04L63/0272H04L63/083H04L63/0823H04L63/0876H04L67/10H04L67/1002H04W4/70H04W12/0806
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,965,715
App. No.
16/552,121
Granted
Mar 30, 2021
Kind
B2
Abstract

The present application is directed a computer-implemented method for for managing traffic in a network. The method includes a step of providing, at a computer including a graphical user interface (GUI), a request from a user to access the internet. The method also includes a step of determining information of the user including a security access in the network. The method further includes a step of reviewing, via the GUI, selection criteria of plural, dynamic, virtual private network (VPN) cloud servers in the network. The method even further includes a step of ranking efficiency of the plural, dynamic, virtual VPN cloud servers in the network. The method yet even further includes a step of matching the user request with one of the plural, dynamic VPN cloud servers based on the ranked efficiency and the determined information. The active session of the one of the plural, dynamic VPN cloud servers lasts until a predetermined condition is met. Moreover, the GUI displays a current, dynamically changing list of users matched with respective VPN cloud servers. Still further, the GUI displays a current, dynamically changing queue list of other users still to be matched with VPN cloud servers.

Claims (63)

1. A computer-implemented method for managing traffic in a network comprising:

providing, at a computer including a graphical user interface (GUI), a request from a user to access the Internet;

determining, via the computer, information of the user including a security access in the network;

reviewing, via the GUI, selection criteria of plural, dynamic, virtual private network (VPN) cloud servers in the network;

ranking efficiency of the plural, dynamic, virtual VPN cloud servers in the network;

matching the user request with one of the plural, dynamic VPN cloud servers based on the ranked efficiency and the determined information; and

communicating with the matched dynamic VPN cloud server, wherein

an active session of the one of the plural, dynamic VPN cloud servers lasts until a predetermined condition is met,

the GUI displays a current, dynamically changing list of users matched with respective VPN cloud servers, and

the GUI displays a current, dynamically changing queue list of other users still to be matched with VPN cloud servers.

2. The method of claim 1 , wherein a unique IP address is associated with the one of the dynamic VPN cloud servers.

3. The method of claim 2 , wherein the predetermined condition is selected from activity-type, traffic-type, load balancing, and combinations thereof.

4. The method of claim 3 , wherein the traffic-type is selected from video, web, voice and combinations thereof.

5. The method of claim 3 , wherein the activity-type is selected from inactivity, logging on, logging off, and combinations thereof.

6. The method of claim 3 , wherein the selection criteria are selected from source IP address, destination IP address, type of traffic to support, security access of the user or combinations thereof.

7. The method of claim 1 , further comprising:

determining second information of a second user including security access in the network, the second information being different from the determined information of the user; and

matching the determined second information with another one of the plural, dynamic VPN cloud servers and the ranked efficiency.

8. The method of claim 1 , further comprising:

creating a policy based upon the matching step for future traffic management.

9. The method of claim 1 , wherein the network is an enterprise network for a company.

10. A computer-implemented system for enhancing security of traffic on a network comprising:

a non-transitory memory having instructions stored thereon for dynamically managing web traffic of user equipment on the network;

a display including a graphical user interface (GUI); and

a processor, operably coupled to the non-transitory memory and the display, the processor configured to execute the instructions of:

providing a request from a user to access the Internet;

determining information of the user including a security access in the network;

reviewing selection criteria of plural, dynamic, virtual private network (VPN) cloud servers in the network;

ranking efficiency of the plural, dynamic, virtual VPN cloud servers in the network;

matching the user request with one of the plural, dynamic VPN cloud servers based on the ranked efficiency; and

communicating with the matched dynamic VPN cloud server, wherein

an active session of the one of the plural, dynamic VPN cloud servers lasts until a predetermined condition is met,

the GUI displays a current, dynamically changing list of users matched with respective VPN cloud servers, and

the GUI displays a current, dynamically changing queue list of other users still to be matched with VPN cloud servers.

11. The system of claim 10 , wherein the processor configured to further execute the instructions of:

determining second information of a second user including a security access in the network, the determined second information of the second user being different from the determined information of the user; and

matching the determined second information with another one of the plural, dynamic VPN cloud servers and the ranked efficiency.

12. The system of claim 10 , wherein the processor configured to further execute the instructions of:

determining second information of a second user; and

determining the second user is unauthorized to connect with the one of the plural, dynamic VPN cloud servers based upon the second information.

13. The system of claim 10 , wherein the processor is further configured to execute the instructions of selecting the one of the plural, dynamic VPN cloud servers based upon a traffic-type of the user.

14. The system of claim 10 , wherein the predetermined condition is selected from activity-type, traffic-type, load balancing, and combinations thereof.

15. The system of claim 14 , wherein the traffic-type is selected from video, web, voice and combinations thereof.

16. The system of claim 14 , wherein the activity-type is selected from inactivity, logging on, logging off, and combinations thereof.

17. The system of claim 10 , wherein the selection criteria are selected from source IP address, destination IP address, type of traffic to support, security access of the user or combinations thereof.

18. A system for securing web traffic on a network comprising:

a policy controller including:

a non-transitory memory having instructions stored thereon for dynamically managing the web traffic;

a display including a graphical user interface (GUI); and

a processor, operably coupled to the non-transitory memory and the display, the processor configured to execute the instructions of:

determining information of a user based upon a request, the information including security access in the network;

reviewing, via the GUI, selection criteria of plural, dynamic, virtual private network (VPN) cloud servers in the network;

ranking efficiency of the plural, dynamic, virtual VPN cloud servers in the network; and

matching the user request with one of the plural, dynamic VPN cloud servers based on the ranked efficiency; and

a router operably coupled to the policy controller for directing traffic of the user to the one of the plural, dynamic VPN cloud servers, wherein

an active session of the one of the plural, dynamic VPN cloud servers lasts until a predetermined condition is met,

the GUI displays a current, dynamically changing list of users matched with respective VPN cloud servers, and

the GUI displays a current, dynamically changing queue list of other users still to be matched with VPN cloud servers.

19. The system of claim 18 , wherein

the processor is further configured to execute the instructions of sending the web traffic of the user to the one of the plural, dynamic VPN cloud servers based upon the matching step.

20. The system of claim 19 , wherein the processor configured to further execute the instructions of:

determining second information of a second user; and

determining the second user is unauthorized to connect with the one of the dynamic VPN cloud servers based upon the second information.

Assignments (3)
NOTICE OF GRANT OF SECURITY INTEREST IN PATENTS Recorded Jan 22, 2025
From: CACI, INC. - FEDERAL
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 069987/0475 →
NOTICE OF GRANT OF SECURITY INTEREST IN PATENTS Recorded Dec 13, 2021
From: CACI, INC. - FEDERAL
To: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 058741/0731 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 3, 2019
From: CHEN, MICHAEL J.
To: CACI, INC. - FEDERAL
Reel/Frame 050614/0900 →
Continuity (3)
Continuation 15276046 · Sep 26, 2016
Provisional Application 62347705 · Jun 9, 2016
Related Publication 20190387026A1 · Dec 19, 2019