IP Library Granted Patent US 12,445,491
Granted Patent B2
US 12,445,491 · App. 18/121,671 · Granted Oct 14, 2025

Protocol switching and secure sockets layer (SSL) cross-wiring to enable inter-network resource connectivity

Inventors: John Kilroy (Portsmouth, NH); Patrick Peralta (Arlington, MA); Glenn Bruce McElhoe (Arlington, MA)
Assignee: VMware LLC
H04L63/166H04L63/029
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,445,491
App. No.
18/121,671
Granted
Oct 14, 2025
Kind
B2
Abstract

Aspects of protocol switching and cross-wiring to enable inter-network connectivity are described. For example, a transporter system including a transporter server and a transporter client can securely connect applications to resources in differing networked environments (e.g., clouds and/or data centers). The transporter client may establish data channels as secure socket layer (SSL) connections (e.g., Secure Websockets (WSS)) between a resource in one networked environment and a transporter server that is in communication via a proxy channel with an initiator device in another networked environment. Upon completing the build of a data path between the initiator device and the resource, the handling protocol of the data channels that are established as SSL connections can be modified to a basic socket-level channel (e.g., transmission control protocol, user datagram protocol, etc.) to permit socket-level data stream communications without restrictions.

Claims (37)

1. A system, comprising:

at least one computing device; and

program instructions executable in the at least one computing device that, when executed by the at least one computing device, cause the at least one computing device to:

receive a command from a transporter server to prepare for a request from a device in a source network that is directed to a resource in a target network, the source network being different from the target network, and the transporter server being outside the target network;

establish a first tunnel channel with the resource;

establish a second tunnel channel with the transporter server;

modify a handling protocol of the first tunnel channel and the second tunnel channel from a first, secure protocol to a second protocol to permit an exchange of data between the device and the resource using the second protocol; and

facilitate the exchange of the data between the device and the resource using the second protocol and via the first tunnel channel and the second tunnel channel.

2. The system of claim 1 , wherein the first protocol is a web-socket secure protocol.

3. The system of claim 2 , wherein the second protocol is a transmission control protocol (TCP).

4. The system of claim 1 , wherein, when executed by the at least one computing device, the program instructions cause the at least one computing device to send a message to the transporter server indicating that a data path is complete in the target network, the transporter server being in communication with the device via a third channel to complete the data path.

5. The system of claim 4 , wherein the command and the message are transmitted over a command channel established between the transporter server and the at least one computing device.

6. The system of claim 5 , wherein a handling protocol of the command channel is a web-socket secure protocol, and the handling protocol of the command channel remains unchanged.

7. The system of claim 1 , wherein data reads received via the second tunnel channel become data writes via the first tunnel channel.

8. A method, comprising:

receiving, via at least one computing device, a command from a transporter server to prepare for a request from a device in a source network that is directed to a resource in a target network, the source network being different from the target network, and the transporter server being outside the target network;

establishing, via the at least one computing device, a first tunnel channel with the resource;

establishing, via the at least one computing device, a second tunnel channel with the transporter server;

modifying, via the at least one computing device, a handling protocol of the first tunnel channel and the second tunnel channel from a first, secure protocol to a second protocol to permit an exchange of data between the device and the resource using the second protocol; and

facilitating, via the at least one computing device, the exchange of the data between the device and the resource using the second protocol and via the first tunnel channel and the second tunnel channel.

9. The method of claim 8 , wherein the first protocol is a web-socket secure protocol.

10. The method of claim 9 , wherein the second protocol is a transmission control protocol (TCP).

11. The method of claim 8 , further comprising sending a message to the transporter server indicating that a data path is complete in the target network, the transporter server being in communication with the device via a third channel to complete the data path.

12. The method of claim 11 , wherein the command and the message are transmitted over a command channel established between the transporter server and the at least one computing device.

13. The method of claim 12 , wherein a handling protocol of the command channel is a web-socket secure protocol, and the handling protocol of the command channel remains unchanged.

14. The method of claim 8 , wherein data reads received via the second tunnel channel become data writes via the first tunnel channel.

15. A non-transitory computer readable storage medium embodying executable instructions which, when executed by a processor, cause a computing device to at least:

receive a command from a transporter server to prepare for a request from a device in a source network that is directed to a resource in a target network, the source network being different from the target network, and the transporter server being outside the target network;

establish a first tunnel channel with the resource;

establish a second tunnel channel with the transporter server;

modify a handling protocol of the first tunnel channel and the second tunnel channel from a first, secure protocol to a second protocol to permit an exchange of data between the device and the resource using the second protocol; and

facilitate the exchange of the data between the device and the resource using the second protocol and via the first tunnel channel and the second tunnel channel.

16. The non-transitory computer readable storage medium of claim 15 , wherein the first protocol is a web-socket secure protocol.

17. The non-transitory computer readable storage medium of claim 16 , wherein the second protocol is a transmission control protocol (TCP).

18. The non-transitory computer readable storage medium of claim 15 , wherein, when executed by the computing device, the executable instructions cause the computing device to send a message to the transporter server indicating that a data path is complete in the target network, the transporter server being in communication with the device via a third channel to complete the data path.

19. The non-transitory computer readable storage medium of claim 18 , wherein the command and the message are transmitted over a command channel established between the transporter server and the at least one computing device.

20. The non-transitory computer readable storage medium of claim 19 , wherein a handling protocol of the command channel is a web-socket secure protocol, and the handling protocol of the command channel remains unchanged.

Assignments (2)
CHANGE OF NAME Recorded May 8, 2024
From: VMWARE, INC.
To: VMWARE LLC
Reel/Frame 067355/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 15, 2023
From: KILROY, JOHN; PERALTA, PATRICK; MCELHOE, GLENN BRUCE
To: VMWARE, INC.
Reel/Frame 062986/0073 →