Granted Patent B2

US 12,647,397 · App. 18/191,315 · Granted Jun 2, 2026

Inventors: Karolis Kaciulis (Kaisiadorys, LT); Nikodemas Zaliauskas (Vilnius, LT); Donatas Budvytis (Vilnius, LT)

Assignee: Netflow, UAB

H04L63/0272

Abstract

Claims (86)

1 . A method comprising:

operating a hierarchical-context area network as a virtual private network infrastructure network, wherein the hierarchical-context area network includes a hierarchy of context areas, wherein:

the hierarchical-context area network includes:

a first context area network, wherein the first context area network is a level-one context area network corresponding to a first context level;

a second context area network, wherein the second context area network is a level-one context area network corresponding to the first context level; and

a third context area network, wherein the third context area network is a level-two context area network corresponding to a second context level that includes the first context level;

the first context area network is allocated, in the hierarchical-context area network, a first range of Internet Protocol addresses, wherein the first range of Internet Protocol addresses includes a first Internet Protocol address allocated as a first shared Internet Protocol address for the first context area network;

the first context area network includes a first virtual private network server having a second Internet Protocol address in the first range of Internet Protocol addresses, different from the first shared Internet Protocol address;

the second context area network is allocated, in the hierarchical-context area network, a second range of Internet Protocol addresses, wherein the second range of Internet Protocol addresses includes a third Internet Protocol address allocated as a second shared Internet Protocol address for the second context area network;

the second context area network includes a second virtual private network server having a fourth Internet Protocol address in the second range of Internet Protocol addresses, different from the second shared Internet Protocol address;

communication between the first virtual private network server and the second virtual private network server is unavailable via the first context area network;

communication between the first virtual private network server and the second virtual private network server is unavailable via the second context area network; and

communication between the first virtual private network server and the second virtual private network server is available via a data link layer network established between the first virtual private network server and the second virtual private network server via the third context area network.

2 . The method of claim 1 , wherein operating the hierarchical-context area network includes:

operating a hierarchical-context area network manager at a virtual private network infrastructure administration server for managing the hierarchical-context area network, the hierarchical-context area network manager configured in accordance with hierarchical-context area network manager configuration data obtained from a virtual private network control infrastructure device.

3 . The method of claim 2 , wherein operating the hierarchical-context area network includes:

operating a virtual private network operating system of the first virtual private network server, the virtual private network operating system configured in accordance with virtual private network server configuration data obtained from the virtual private network control infrastructure device.

4 . The method of claim 3 , wherein operating the hierarchical-context area network manager includes:

registering the first virtual private network server as a component of the hierarchical-context area network in accordance with virtual private network server registration data identifying the first virtual private network server obtained by the hierarchical-context area network manager from the virtual private network control infrastructure device.

5 . The method of claim 4 , wherein operating the virtual private network operating system includes:

sending, by the first virtual private network server, a peering data request, to the hierarchical-context area network manager.

6 . The method of claim 5 , wherein operating the hierarchical-context area network manager includes the hierarchical-context area network manager:

receiving the peering data request;

obtaining, responsive to the peering data request, peering data that identifies a second virtual private network server of the hierarchical-context area network as a peer of the first virtual private network server; and

sending a peering data response indicating the peering data to the first virtual private network server.

7 . The method of claim 6 , wherein operating the virtual private network operating system includes:

receiving the peering data response; and

configuring the second virtual private network server as a virtual private network infrastructure peer in the hierarchical-context area network.

8 . A virtual private network infrastructure system, which includes at least one processor performing instructions stored in at least one memory, operating a hierarchical-context area network as a virtual private network infrastructure network, wherein the hierarchical-context area network includes a hierarchy of context areas, the virtual private network infrastructure system comprising:

a virtual private network infrastructure administration server;

virtual private network control infrastructure device; and

a first virtual private network server, wherein:

the hierarchical-context area network includes:

a first context area network, wherein the first context area network is a level-one context area network corresponding to a first context level;

a second context area network, wherein the second context area network is a level-one context area network corresponding to the first context level; and

a third context area network, wherein the third context area network is a level-two context area network corresponding to a second context level that includes the first context level;

the first context area network is allocated, in the hierarchical-context area network, a first range of Internet Protocol addresses, wherein the first range of Internet Protocol addresses includes a first Internet Protocol address allocated as a first shared Internet Protocol address for the first context area network;

the first context area network includes the first virtual private network server, the first virtual private network server having a second Internet Protocol address in the first range of Internet Protocol addresses, different from the first shared Internet Protocol address;

the second context area network is allocated, in the hierarchical-context area network, a second range of Internet Protocol addresses, wherein the second range of Internet Protocol addresses includes a third Internet Protocol address allocated as a second shared Internet Protocol address for the second context area network;

the second context area network includes a second virtual private network server having a fourth Internet Protocol address in the second range of Internet Protocol addresses, different from the second shared Internet Protocol address;

communication between the first virtual private network server and the second virtual private network server is unavailable via the first context area network;

communication between the first virtual private network server and the second virtual private network server is unavailable via the second context area network; and

communication between the first virtual private network server and the second virtual private network server is available via a data link layer network established between the first virtual private network server and the second virtual private network server via the third context area network.

9 . The virtual private network infrastructure system of claim 8 , wherein operating the hierarchical-context area network includes:

the virtual private network infrastructure administration server operating a hierarchical-context area network manager for managing the hierarchical-context area network, the hierarchical-context area network manager configured in accordance with hierarchical-context area network manager configuration data obtained from the virtual private network control infrastructure device.

10 . The virtual private network infrastructure system of claim 9 , wherein operating the hierarchical-context area network includes:

the first virtual private network server operating a virtual private network operating system, the virtual private network operating system configured in accordance with virtual private network server configuration data obtained from the virtual private network control infrastructure device.

11 . The virtual private network infrastructure system of claim 10 , wherein operating the hierarchical-context area network includes:

the hierarchical-context area network manager registering the first virtual private network server as a component of the hierarchical-context area network in accordance with virtual private network server registration data identifying the first virtual private network server obtained by the hierarchical-context area network manager from the virtual private network control infrastructure device.

12 . The virtual private network infrastructure system of claim 11 , wherein operating the hierarchical-context area network includes:

the virtual private network operating system sending a peering data request to the hierarchical-context area network manager.

13 . The virtual private network infrastructure system of claim 12 , wherein operating the hierarchical-context area network includes the hierarchical-context area network manager:

receiving the peering data request;

obtaining, responsive to the peering data request, peering data that identifies the second virtual private network server as a peer of the first virtual private network server; and

sending a peering data response indicating the peering data to the first virtual private network server.

14 . The virtual private network infrastructure system of claim 13 , wherein operating the hierarchical-context area network includes the virtual private network operating system:

receiving the peering data response; and

configuring the second virtual private network server as a virtual private network infrastructure peer in the hierarchical-context area network.

15 . A non-transitory computer-readable storage medium, comprising processor-executable instructions for operating, in response to the instructions, a hierarchical-context area network as a virtual private network infrastructure network, wherein the hierarchical-context area network includes a hierarchy of context areas, wherein:

the hierarchical-context area network includes:

a first context area network, wherein the first context area network is a level-one context area network corresponding to a first context level;

a second context area network, wherein the second context area network is a level-one context area network corresponding to the first context level; and

a third context area network, wherein the third context area network is a level-two context area network corresponding to a second context level that includes the first context level;

the first context area network is allocated, in the hierarchical-context area network, a first range of Internet Protocol addresses, wherein the first range of Internet Protocol addresses includes a first Internet Protocol address allocated as a first shared Internet Protocol address for the first context area network;

the first context area network includes a first virtual private network server having a second Internet Protocol address in the first range of Internet Protocol addresses, different from the first shared Internet Protocol address;

the second context area network is allocated, in the hierarchical-context area network, a second range of Internet Protocol addresses, wherein the second range of Internet Protocol addresses includes a third Internet Protocol address allocated as a second shared Internet Protocol address for the second context area network;

the second context area network includes a second virtual private network server having a fourth Internet Protocol address in the second range of Internet Protocol addresses, different from the second shared Internet Protocol address;

communication between the first virtual private network server and the second virtual private network server is unavailable via the first context area network;

communication between the first virtual private network server and the second virtual private network server is unavailable via the second context area network; and

communication between the first virtual private network server and the second virtual private network server is available via a data link layer network established between the first virtual private network server and the second virtual private network server via the third context area network.

16 . The non-transitory computer-readable storage medium of claim 15 , wherein operating the hierarchical-context area network includes:

operating a hierarchical-context area network manager at a virtual private network infrastructure administration server for managing the hierarchical-context area network, the hierarchical-context area network manager configured in accordance with hierarchical-context area network manager configuration data obtained from a virtual private network control infrastructure device.

17 . The non-transitory computer-readable storage medium of claim 16 , wherein operating the hierarchical-context area network includes:

operating a virtual private network operating system of the first virtual private network server, the virtual private network operating system configured in accordance with virtual private network server configuration data obtained from the virtual private network control infrastructure device.

18 . The non-transitory computer-readable storage medium of claim 17 , wherein operating the hierarchical-context area network manager includes:

registering the first virtual private network server as a component of the hierarchical-context area network in accordance with virtual private network server registration data identifying the first virtual private network server obtained by the hierarchical-context area network manager from the virtual private network control infrastructure device.

19 . The non-transitory computer-readable storage medium of claim 18 , wherein operating the virtual private network operating system includes:

sending, by the first virtual private network server, a peering data request, to the hierarchical-context area network manager.

20 . The non-transitory computer-readable storage medium of claim 19 , wherein:

operating the hierarchical-context area network manager includes the hierarchical-context area network manager:

receiving the peering data request;

obtaining, responsive to the peering data request, peering data that identifies a second virtual private network server of the hierarchical-context area network as a peer of the first virtual private network server; and

sending a peering data response indicating the peering data to the first virtual private network server; and

operating the virtual private network operating system includes:

receiving the peering data response; and

configuring the second virtual private network server as a virtual private network infrastructure peer in the hierarchical-context area network.

Assignments (1)

Continuity (1)

References Cited (71)