Granted Patent B2

US 12,609,913 · App. 18/504,688 · Granted Apr 21, 2026

Inventors: Donatas Budvytis (Vilnius, LT); Karolis Kaciulis (Kaisiadorys, LT)

Assignee: Netflow, UAB

H04L63/0272H04L63/0435H04L63/0876H04L63/20

Abstract

Claims (52)

1 . A method, comprising:

receiving a VPN connection request from a user device;

associating two or more VPN servers with a single entry Internet Protocol (IP) address, wherein the two or more VPN servers includes a first VPN server and a second VPN server;

transmitting the single entry IP address to the user device;

establishing a secure VPN connection between the user device and the first VPN server using the single entry IP address;

transmitting, from the first VPN server to the second VPN server, key information associated with the secure VPN connection, wherein the key information comprises encryption related keys specific to the secure VPN connection between the user device and the first VPN server, the encryption related keys being used for encrypting and decrypting communications in the secure VPN connection; and

switching the secure VPN connection to the second VPN server when the first VPN server becomes unavailable,

wherein the secure VPN connection remains intact and the user device continues to communicate via the single entry IP address, and

wherein the secure VPN connection remains intact by utilizing the key information received by the second VPN server without authenticating again or establishing new encryption keys when switching from the first VPN server to the second VPN server.

2 . The method of claim 1 , wherein the key information associated with the secure VPN connection comprises at least one of an encryption key or a decryption key.

3 . The method of claim 1 , further comprising:

selecting the first VPN server in response to determining that the first VPN server is an optimal server for the user device; and

selecting the second VPN server in response to determining that the second VPN server is a next optimal server after the first VPN server for the user device.

4 . The method of claim 1 , further comprising:

selecting the second VPN server based on factors including at least one of a location of the second VPN server relative to the user device or available bandwidth of the second VPN server.

5 . The method of claim 1 , further comprising:

determining that the first VPN server is unavailable in response to a failure to receive an availability notification from the first VPN server.

6 . The method of claim 1 , further comprising:

monitoring an availability of the first VPN server at configured intervals.

7 . A system, comprising:

one or more processors, the one or more processors configured to execute instructions to:

receive a VPN connection request from a user device;

associate a first VPN server and a second VPN server with a single entry Internet Protocol (IP) address;

transmit the single entry IP address to the user device;

establish a secure VPN connection between the user device and the first VPN server using the single entry IP address;

transmit, from the first VPN server to the second VPN server, a key information associated with the secure VPN connection, wherein the key information comprises encryption related keys specific to the secure VPN connection between the user device and the first VPN server, the encryption related keys being used for encrypting and decrypting communications in the secure VPN connection; and

switch the secure VPN connection to the second VPN server when the first VPN server becomes unavailable,

wherein the secure VPN connection remains intact and the user device continues to communicate via the single entry IP address, and

wherein the secure VPN connection remains intact by utilizing the key information received by the second VPN server without authenticating again or establishing new encryption keys when switching from the first VPN server to the second VPN server.

8 . The system of claim 7 , wherein the key information associated with the secure VPN connection comprises at least one of an encryption key or a decryption key.

9 . The system of claim 7 , wherein the one or more processors is further configured to:

select the first VPN server in response to determining that the first VPN server is an optimal server for the user device; and

select the second VPN server in response to determining that the second VPN server is a next optimal server after the first VPN server for the user device.

10 . The system of claim 7 , wherein the one or more processors is further configured to:

select the second VPN server based on factors including at least one of a location of the second VPN server relative to the user device or available bandwidth of the second VPN server.

11 . The system of claim 7 , wherein the one or more processors is further configured to:

determine that the first VPN server is unavailable in response to a failure to receive an availability notification from the first VPN server.

12 . The system of claim 7 , wherein the one or more processors is further configured to:

monitor an availability of the first VPN server at configured intervals.

13 . Non-transitory computer readable media storing instructions operable to cause one or more processors to perform operations comprising:

receiving a VPN connection request from a user device;

associating a first VPN server and a second VPN server with a single entry Internet Protocol (IP) address;

transmitting the single entry IP address to the user device;

establishing a secure VPN connection between the user device and the first VPN server using the single entry IP address;

transmitting, from the first VPN server to the second VPN server, key information associated with the secure VPN connection, wherein the key information comprises encryption related keys specific to the secure VPN connection between the user device and the first VPN server, the encryption related keys being used for encrypting and decrypting communications in the secure VPN connection; and

switching the secure VPN connection to the second VPN server when the first VPN server becomes unavailable,

wherein the secure VPN connection remains intact and the user device continues to communicate via the single entry IP address, and

wherein the secure VPN connection remains intact by utilizing the key information received by the second VPN server without authenticating again or establishing new encryption keys when switching from the first VPN server to the second VPN server.

14 . The non-transitory computer readable media of claim 13 , wherein the key information associated with the secure VPN connection comprises at least one of an encryption key or a decryption key.

15 . The non-transitory computer readable media of claim 13 , wherein the operations further comprise: selecting the first VPN server in response to determining that the first VPN server is an optimal server for the user device; and selecting the second VPN server in response to determining that the second VPN server is a next optimal server after the first VPN server for the user device.

16 . The non-transitory computer readable media of claim 13 , wherein the operations further comprise: selecting the second VPN server based on factors including at least one of geographic proximity a location of the second VPN server relative to the user device or available bandwidth of the second VPN server.

17 . The non-transitory computer readable media of claim 13 , wherein the operations further comprise: determining that the first VPN server is unavailable in response to a failure to receive an availability notification from the first VPN server.

Assignments (1)

Continuity (3)

References Cited (43)