IP Library Granted Patent US 11,700,281
Granted Patent B2
US 11,700,281 · App. 17/036,649 · Granted Jul 11, 2023

Methods and systems for enhancing cyber security in networks

Inventor: Michael J. Chen (Livingston, NJ)
H04L63/20H04L12/4641H04L12/4679H04L41/22H04L63/0236H04L63/0272H04L63/083H04L63/0823H04L63/0876H04L67/10H04L67/1001H04W4/70H04W12/086
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,700,281
App. No.
17/036,649
Granted
Jul 11, 2023
Kind
B2
Abstract

The present application is directed a computer-implemented technique for enhancing security and preventing cyber-attacks on a network. The technique includes receiving information from user equipment, selecting a first VPN server from a VPN service provider based upon a traffic-type of the user equipment, creating a policy to prevent cyber-attacks such that traffic associated with the received information of the user equipment is routed to the first VPN server, provisioning the first VPN server to last a predetermined amount of time based on the policy, coordinating the policy with a router on the network, with the traffic being sent to the VPN server via the router, and sending, after a predetermined condition is met, a request to the VPN service provider to transmit a second VPN server, and where the first VPN server terminates.

Claims (51)

1. A computer-implemented method for enhancing security and preventing cyber-attacks on a network comprising:

receiving, from a user equipment on the network, information including a source IP address and a destination IP address;

selecting a first VPN server from a VPN service provider based upon a traffic-type of the user equipment;

creating a policy to prevent cyber-attacks such that traffic associated with the information of the user equipment is routed to the first VPN server;

provisioning the first VPN server to last a predetermined amount of time based on the policy;

coordinating the policy with a router on the network, with the traffic being sent to the first VPN server via the router; and

sending, after a predetermined condition is met, a request to the VPN service provider to transmit a second VPN server,

wherein the first VPN server terminates when the predetermined condition is met.

2. The method of claim 1 , further comprising:

redirecting the traffic of the user equipment from the first VPN server to the second VPN server.

3. The method of claim 2 , wherein IP addresses of the first VPN and the second VPN are different.

4. The method of claim 1 , wherein the predetermined condition is based on a traffic-type.

5. The method of claim 4 , wherein the traffic-type is selected from the group consisting of video, web, voice and combinations thereof.

6. The method of claim 5 , further comprising:

selecting the VPN server based upon the traffic-type of the user equipment.

7. The method of claim 1 , wherein the predetermined condition is based on a load balancing requirement.

8. A computer-implemented system for enhancing web traffic security and preventing cyber-attacks on a network comprising:

a non-transitory memory having instructions stored thereon for dynamically managing web traffic of user equipment on the network; and

a processor, operably coupled to the non-transitory memory, the processor configured to execute the instructions of:

receiving information from the user equipment;

selecting a first VPN server from a VPN service provider based upon a traffic-type of the user equipment;

creating a policy to prevent cyber-attacks such that traffic associated with the received information of the user equipment is routed to the first VPN server;

provisioning the first VPN server to last a predetermined amount of time based on the policy;

coordinating the policy with a router on the network; with the traffic being sent to the first VPN server via the router; and

sending, after a predetermined condition is met, a request to the VPN service provider to transmit a second VPN server,

wherein the first VPN server terminates when the predetermined condition is met.

9. The system of claim 8 , wherein the processor is further configured to execute the instructions of redirecting the traffic of the user equipment from the first VPN server to the second VPN server.

10. The system of claim 8 , wherein the processor is further configured to execute the instructions of:

configuring the router with the policy; and

authorizing the traffic of the user equipment be sent through the configured router to the VPN server.

11. The system of claim 8 , wherein the processor is further configured to execute the instructions of receiving, from the VPN service provider, credentials of the first and second VPNs.

12. The system of claim 8 , wherein the predetermined condition is based on a traffic-type.

13. The system of claim 12 , wherein the traffic-type is selected from the group consisting of video, web, voice, and combinations thereof.

14. The system of claim 8 , wherein the predetermined condition is based on a load balancing requirement.

15. A system for securing web traffic to prevent cyber-attacks on a network comprising:

a non-transitory memory having instructions stored thereon for dynamically managing web traffic of user equipment on the network; and

a processor, operably coupled to the memory, the processor configured to execute the instructions of:

receiving information from the user equipment;

selecting a first VPN server from a VPN service provider based upon a traffic-type of the user equipment;

creating a policy to prevent cyber-attacks such that traffic associated with the received information of the user equipment is routed to the first VPN server;

provisioning the first VPN server to last a predetermined amount of time based on the policy;

coordinating the policy with a router on the network, with the traffic being sent to the VPN server via the router; and

sending, after a predetermined condition is met, a request to the VPN service provider to transmit a second VPN server, and where the first VPN server terminates; and

a router on the network operably coupled to the processor to prevent cyber-attacks.

16. The system of claim 15 , wherein the processor is further configured to execute the instructions of redirecting the traffic of the user equipment from the first VPN server to the second VPN server.

17. The system of claim 15 , wherein IP addresses of the first and second VPNs are different.

18. The system of claim 15 , wherein the processor is further configured to execute the instructions of:

configuring the router with the policy; and

authorizing the traffic of the user equipment be sent through the configured router to the VPN server.

19. The system of claim 15 , wherein the predetermined condition is based on a traffic-type.

20. The system of claim 15 , wherein the predetermined condition is based on a load balancing requirement.

Assignments (4)
NOTICE OF GRANT OF SECURITY INTEREST IN PATENTS Recorded Jan 22, 2025
From: CACI LGS INNOVATIONS LLC
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 069987/0444 →
CHANGE OF NAME Recorded Nov 4, 2024
From: LGS INNOVATIONS LLC
To: CACI LGS INNOVATIONS LLC
Reel/Frame 069292/0991 →
NOTICE OF GRANT OF SECURITY INTEREST IN PATENTS Recorded Dec 13, 2021
From: LGS INNOVATIONS LLC
To: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 058961/0065 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 24, 2021
From: CHEN, MICHAEL J.
To: LGS INNOVATIONS LLC
Reel/Frame 055696/0464 →