IP Library Granted Patent US 11,658,940
Granted Patent B1
US 11,658,940 · App. 18/045,107 · Granted May 23, 2023

Client-side virtual private network (VPN) chaining

Inventor: Oliver Scott (Alexandria, CA)
Assignee: OSOM PRODUCTS, INC.
H04L63/0272
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,658,940
App. No.
18/045,107
Granted
May 23, 2023
Kind
B1
Abstract

A client-side virtual private network (VPN) chaining architecture can provision multiple sessions for multiple VPN clients that are configured to communicate packet traffic in parallel between an end-user device and one or more destinations. The client-side chaining architecture can capture packet traffic per specific users/apps and process (e.g., drop) or reroute the captured packet traffic for different VPN clients. For example, packet traffic can be rerouted from a main VPN client to a secondary VPN client. As such, there can be multiple VPN clients that are simultaneously chained in various ways to the same end-user device.

Claims (70)

1. A handheld mobile device comprising:

at least one hardware processor; and

at least one non-transitory memory storing instructions, which, when executed by the at least one hardware processor, cause the handheld mobile device to:

establish multiple sessions for multiple virtual private network (VPN) clients that are configured to communicate packet traffic in parallel or serially between the handheld mobile device and one or more destinations;

communicate packet traffic on a first session of the multiple sessions via a first VPN client of the multiple VPN clients to a first destination,

wherein packet traffic communicated via the first VPN client is secured in accordance with a first encryption protocol;

communicate packet traffic on a second session of the multiple sessions via a second VPN client of the multiple VPN clients to a second destination,

wherein packet traffic communicated via the second VPN client is secured in accordance with a second encryption protocol, and

wherein the first VPN client and the second VPN client are independently and concurrently operable;

send data of a particular software application through a first interface of the first VPN client to a second interface of the second VPN client,

wherein the data is routed via a combination of servers that form a pathway for bidirectional traffic between the handheld mobile device and a particular destination; and

receive response data for the particular software application through the second interface of the second VPN client to the first interface of the first VPN client,

wherein the response data is routed via the combination of servers that form the pathway for bidirectional traffic.

2. The handheld mobile device of claim 1 further caused to concurrently:

communicate packet traffic on the first session via the first VPN client for a particular software application on the handheld mobile device; and

communicate packet traffic on the second session via the second VPN client for the particular software application on the handheld mobile device.

3. The handheld mobile device of claim 1 further caused to concurrently:

communicate packet traffic of a first software application on the handheld mobile device via the first VPN client; and

communicate packet traffic of a second software application on the handheld mobile device via the second VPN client,

wherein the second software application is different from the first software application.

4. The handheld mobile device of claim 1 further caused to concurrently:

communicate a first data type on the first session via the first VPN client, wherein the first VPN client precludes communication of a second data type; and

communicate the second data type on the second session via the second VPN client, wherein the second VPN client precludes communication of the first data type.

5. The handheld mobile device of claim 4 , wherein the first data type corresponds to a first content type and the second data type corresponds to a second content type different from the first content type.

6. The handheld mobile device of claim 1 , wherein the first encryption protocol is different from the second encryption protocol.

7. The handheld mobile device of claim 1 , wherein the first destination and the second destination correspond to one or more websites on the internet.

8. The handheld mobile device of claim 1 :

wherein the first VPN client is established by a first server communicatively coupled over a wide area network (WAN) to the handheld mobile device; and

wherein the second VPN client is established by a second server different from the first server and communicatively coupled over the WAN to the handheld mobile device.

9. The handheld mobile device of claim 8 , wherein the first server and the second server are configured to directly exchange packet traffic of a software application that resides on the handheld mobile device.

10. The handheld mobile device of claim 1 further caused to:

capture sets of packet traffic at the handheld mobile device,

wherein the captured sets of packet traffic are at different levels of granularity from an entirety of the handheld mobile device or particular apps; and

route the sets of packet traffic through different VPN clients of the multiple VPN clients.

11. The handheld mobile device of claim 10 further caused to:

redirect a captured set of packet traffic from one VPN client to another VPN client of the multiple VPN clients.

12. A computer-readable storage medium, excluding transitory signals and carrying instructions, which, when executed by at least one data processor of a system, cause the system to:

provision multiple virtual private network (VPN) clients that are configured to transport data between an end-user device and multiple servers;

process data transported via a first VPN client of the multiple VPNs clients through a first server to a first destination,

wherein the first server is directly connected to the end-user device via the first VPN client;

communicate a first type of data via the first VPN client through the first server, wherein the first VPN client precludes communication of a second type of data;

process data transported via a second VPN client of the multiple VPN clients through a second server to a second destination,

wherein the second server is directly connected to the end-user device via the second VPN client, and

wherein the first VPN client and the second VPN client are independently and concurrently operable; and

communicate the second type of data via the second VPN client, wherein the second VPN client precludes communication of the first type of data.

13. The computer-readable storage medium of claim 12 , wherein the system is further caused to:

redirect packet traffic from one VPN client directly to another VPN client of the multiple VPN clients.

14. The computer-readable storage medium of claim 12 , wherein the system is further caused to:

encrypt packet traffic transported via the first VPN client or the second VPN client.

15. The computer-readable storage medium of claim 12 , wherein the system is further caused to:

transport the first type of data via the first server of the first VPN client, and

transport the second type of data via the second server of the second VPN client.

16. A method of client-side virtual private network (VPN) chaining, the method comprising:

configuring a first VPN client between an end-user device and a destination via a first server, wherein the first VPN client is configured to route a first type of data to the destination;

configuring a second VPN client between the end-user device and the destination via a second server,

wherein the second VPN client is configured to route a second type of data to the destination, and

wherein the first type of data is different from the second type of data;

communicating the first type of data on a first session of multiple sessions over the first VPN client via the first server to the destination; and

communicating the second type of data on a second session of the multiple sessions over the second VPN client via the second server to the destination,

wherein the first VPN client and the second VPN client are each configured to concurrently communicate the first type of data and the second type of data to the destination,

wherein the first VPN client precludes communication of the second type of data and the second VPN client precludes communication of the first type of data.

17. The method of claim 16 comprising:

causing the first VPN client to block the second type of data at the first server; and

causing the second VPN client to block the first type of data at the second server.

18. The method of claim 16 :

wherein the first VPN client and the second VPN client are each configured at the end-user device to route the first type of data and the second type of data; and

wherein the first type of data and the second type of data are both of one or more software applications on the end-user device.

19. The method of claim 16 :

wherein the first VPN client is configured at the first server to route the first type of data; and

wherein the second VPN client is configured at the second server to route the first type of data.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 31, 2025
From: OSOM PRODUCTS INC
To: ENSIGHT LLC
Reel/Frame 072743/0051 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 14, 2022
From: SCOTT, OLIVER
To: OSOM PRODUCTS, INC.
Reel/Frame 061426/0599 →