IP Library Granted Patent US 8,904,516
Granted Patent B2
US 8,904,516 · App. 13/911,813 · Granted Dec 2, 2014

System and method employing an agile network protocol for secure communications using secure domain names

Inventors: Victor Larson (Fairfax, VA); Robert Dunham Short, III (Lexington, VA); Edmund Colby Munger (Tarpon Springs, FL); Michael Williamson (South Riding, VA)
Assignee: VirnetX, Inc.
H04L67/14H04L29/12594H04L61/303H04L63/1466H04L45/24H04L61/6004H04L63/04H04L63/0227H04L29/12216H04L63/1458H04L29/1232H04L63/0407H04L61/2007H04L63/1408H04L61/2076H04L29/12783G06F21/606H04L12/4641H04L63/0428H04L45/28H04L29/12066H04L29/12801H04L61/2092H04L63/08H04L61/35H04L63/0272H04L63/105H04L61/1511H04L45/00H04L41/00H04L63/164H04L29/12301H04L63/1416
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,904,516
App. No.
13/911,813
Granted
Dec 2, 2014
Kind
B2
Abstract

A system for connecting a first network device and a second network device includes one or more servers. The servers are configured to: (a) receive, from the first network device, a request to look up a network address of the second network device based on an identifier associated with the second network device; (b) determine, in response to the request, whether the second network device is available for a secure communications service; and (c) initiate a virtual private network communication link between the first network device and the second network device based on a determination that the second network device is available for the secure communications service, wherein the secure communications service uses the virtual private network communication link.

Claims (39)

1. A system for connecting a first network device and a second network device, the system including one or more servers configured to:

intercept, from the first network device, a request to look up an internet protocol (IP) address of the second network device based on an identifier associated with the second network device;

determine, in response to the request, whether the second network device is available for a secure communications service; and

initiate an encrypted communication link between the first network device and the second network device based on a determination that the second network device is available for the secure communications service, wherein

the secure communications service communicates using the encrypted communication link,

the first network device is a device at which a user uses the secure communications service to access the encrypted communication link, and;

the one or more servers includes one or more processors.

2. The system of claim 1 , wherein the secure communications service includes an audio-video conferencing service that communicates at least one of encrypted video data and audio data over the encrypted communication link.

3. The system of claim 1 , wherein the secure communications service includes a messaging service.

4. The system of claim 3 , wherein the messaging service includes an e-mail service.

5. The system of claim 1 , wherein the secure communications service includes a telephony service.

6. The system of claim 5 , wherein the telephony service uses modulation.

7. The system of claim 6 , wherein the modulation is based on one of frequency-division multiplexing (FDM), time-division multiplexing (TDM), or code division multiple access (CDMA).

8. The system of claim 1 , wherein at least one of the first network device and the second network device is a mobile device.

9. The system of claim 1 , wherein the identifier associated with the second network device is associated with a domain name.

10. The system of claim 1 , wherein the encrypted communication link is part of a virtual private network communication link based on inserting into each data packet communicated over the virtual private network communication link one or more data values that vary according to a pseudo-random sequence.

11. The system of claim 1 , wherein the determination that the second network device is available for the secure communications service is a function of the result of a domain name lookup.

12. The system of claim 1 , wherein the encrypted communication link is an end-to-end link extending from the first network device to the second network device.

13. The system of claim 1 , wherein the one or more servers are configured to intercept the request by receiving the request to determine whether the second network device is available for a secure communications service.

14. The system of claim 1 , wherein the one or more servers configured to intercept the request are separate from the first network device.

15. A method of connecting a first network device and a second network device, the method performed by one or more processors and comprising:

intercepting, from the first network device, a request to look up an internet protocol (IP) address of the second network device based on an identifier associated with the second network device;

determining, in response to the request, whether the second network device is available for a secure communications service; and

initiating an encrypted communication link between the first network device and the second network device based on a determination that the second network device is available for the secure communications service, wherein

the secure communications service communicates using the encrypted communication link, and

the first network device is a device at which a user uses the secure communications service to access the encrypted communication link.

16. The method of claim 15 , wherein the secure communications service is a video conferencing service that communicates at least one of encrypted video data and audio data over the encrypted communication link.

17. The method of claim 15 , wherein the secure communications service is a messaging service.

18. The method of claim 17 , wherein the messaging service is an e-mail service.

19. The method of claim 15 , wherein the secure communications service is a telephony service.

20. The method of claim 15 , wherein the telephony service uses modulation.

21. The method of claim 20 , wherein the modulation is based on one of frequency-division multiplexing (FDM), time-division multiplexing (TDM), or code division multiple access (CDMA).

22. The method of claim 15 , wherein at least one of the first network device and the second network device is a mobile device.

23. The method of claim 15 , wherein the identifier associated with the second network device is a domain name.

24. The method of claim 15 , wherein the encrypted communication link is part of a virtual private network communication link, and communicating with the second network device using the secure communications service includes inserting into data packets communicated over the virtual private network communication link one or more data values that vary according to a pseudo-random sequence.

25. The method of claim 15 , wherein determination that the second network device is available for a secure communications service is a function of a domain name lookup.

26. The method of claim 15 , wherein the encrypted communication link is an end-to-end link extending from the first network device to the second network device.

27. The method of claim 15 , wherein intercepting the request consists of receiving the request to determine whether the second network device is available for the secure communications service.

28. The method of claim 15 , wherein the intercepting the request occurs within another network device that is separate from the first network device.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 6, 2013
From: LARSON, VICTOR; SHORT, ROBERT DUNHAM, III; MUNGER, EDMUND COLBY; WILLIAMSON, MICHAEL
To: VIRNETX, INC.
Reel/Frame 030563/0215 →
Continuity (11)
Continuation 13903788 · May 28, 2013
Continuation 13336790 · Dec 23, 2011
Continuation 13049552 · Mar 16, 2011
Continuation 11840560 · Aug 17, 2007
Continuation 10714849 · Nov 18, 2003
Continuation 09558210 · Apr 26, 2000
Continuation In Part 09504783 · Feb 15, 2000
Continuation In Part 09429643 · Oct 29, 1999
Provisional Application 60106261 · Oct 30, 1998
Provisional Application 60137704 · Jun 7, 1999
Related Publication 20130275534A1 · Oct 17, 2013