IP Library Granted Patent US 9,413,766
Granted Patent B2
US 9,413,766 · App. 14/526,669 · Granted Aug 9, 2016

Method for establishing connection between devices

Inventors: Victor Larson (Fairfax, VA); Robert Dunham Short, III (Lexington, VA); Edmund Colby Munger (Tarpon Springs, FL); Michael Williamson (South Riding, VA)
Assignee: VirnetX, Inc.
H04L63/10H04L29/1232H04L29/12216H04L29/12301H04L29/12783H04L29/12801H04L45/00H04L45/24H04L45/28H04L61/2007H04L61/2076H04L61/2092H04L61/35H04L61/6004H04L63/029H04L63/0272H04L63/0414H04L63/0428H04L63/1458H04L63/1491H04L29/12047H04L61/15
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,413,766
App. No.
14/526,669
Granted
Aug 9, 2016
Kind
B2
Abstract

A device and method for establishing a connection between devices is disclosed. A first device receives a request to connect to a second network device and, based on the request, a determination is made as to whether the first device is set to a first communication mode or a second communication mode. If the first device is set to the first communication mode then a first name associated with the second device is sent to a first name service, the first name service supporting establishing an encrypted connection to the second device, a resource for the encrypted connection to the second device is received at the first device, and communication with the second device is established over the network via the encrypted connection using the received resource. If the first device is set to the second communication mode then communication with the second device is established via a second connection.

Claims (67)

1. A method performed by a first network device for communicating over a network, the method comprising:

receiving, at the first network device, a request to connect to a second network device;

based on the request to connect, determining whether the first network device is set to the first communication mode or the second communication mode;

if it is determined that the first network device is set to the first communication mode:

sending, to a first name service, a first name associated with the second network device and for which the first name service supports establishing an encrypted connection to the second network device;

receiving, at the first network device, a resource for the encrypted connection to the second network device; and

communicating with the second network device over the network via the encrypted connection using the received resource; and

if it is determined that the first network device is set to the second communication mode, communicating with the second network device via a second connection;

wherein the first name service determines a quality of service level for the encrypted connection, and the resource indicates the determined quality of service level for the encrypted connection.

2. The method of claim 1 , further comprising, in response to sending the first name to the first name service, receiving, at the first network device, a network address associated with the second network device.

3. The method of claim 1 , wherein the first name service determines the quality of service level based on the first name.

4. The method of claim 1 , wherein the first name service determines the quality of service level for the encrypted connection based on information associated with the first network device.

5. The method of claim 1 , wherein the first name service determines the quality of service level based on a subscription.

6. The method of claim 5 , wherein the subscription is associated with the first network device or the user of the first network device.

7. The method of claim 1 , wherein the resource includes one or more network addresses.

8. The method of claim 7 , wherein the set of one or more network addresses includes pseudorandom network addresses.

9. The method of claim 1 , wherein the resource is used for authenticating communications between the first network device and the second network device to the determined quality of service level.

10. The method of claim 1 , wherein the encrypted connection is a secure communication link.

11. The method of claim 1 , wherein the encrypted connection is a communication link between the first and second network devices in a virtual private network.

12. The method of claim 1 , wherein the encrypted connection passes through one or more intermediate devices on the network, the intermediate devices providing anonymity of at least one of the first network device and the second network device by translating one or more addresses in packets transmitted over the encrypted connection.

13. The method of claim 1 , further comprising executing an application program on the first network device, wherein the first and second communication modes are provided by the application program.

14. The method of claim 13 , wherein the application program comprises at least one of a video, audio, messaging, chat, telephony, or web browser application.

15. The method of claim 13 , wherein the application program comprises a user interface allowing the user to set the first network device to the first communication mode or the second communication mode, and the method further comprises receiving, via the user interface, a selection of the first communication mode or a selection of the second communication mode.

16. The method of claim 1 , further comprising:

based on a determination that the first network device is set to the first communication mode, determining whether an encrypted communication software module is installed on the first network device; and

if the module is not installed:

accessing a network address for downloading the module;

downloading the module; and

installing the module on the first network device.

17. The method of claim 1 , wherein the second connection is not encrypted.

18. The method of claim 1 , further comprising, based on a determination that the first network device is set to the second communication mode, sending, to a second name service, a second name associated with the second network device.

19. The method of claim 1 , wherein the first and second network devices are mobile devices.

20. A first network device configured to communicate over a network, the first network device comprising:

a memory storing instructions; and

one or more processors configured to execute the instructions to:

allow the first network device to be set to a first communication mode or a second communication mode by a user;

receive a request to connect to a second network device;

based on the request to connect, determine whether the first network device is set to the first communication mode or the second communication mode;

if it is determined that first network device is set to the first communication mode:

send, to a first name service, a first name associated with the second network device and for which the first name service supports establishing an encrypted connection to the second network device;

receive, at the first network device, a resource for the encrypted connection to the second network device; and

communicate with the second network device over the network via the encrypted connection using the received resource; and

if it is determined that the first network device is set to the second communication mode, communicate with the second network device via a second connection;

wherein the first name service determines a quality of service level for the encrypted connection, and the resource indicates the determined quality of service level for the encrypted connection.

21. The first network device of claim 20 , wherein the one or more processors are further configured to execute the instructions to, in response to sending the first name to the first name service, receive a network address associated with the second network device.

22. The first network device of claim 20 , wherein the first name service determines the quality of service level based on the first name.

23. The first network device of claim 20 , wherein the first name service determines the quality of service level for the encrypted connection based on information associated with the first network device.

24. The first network device of claim 20 , wherein the first name service determines the quality of service level based on a subscription.

25. The first network device of claim 24 , wherein the subscription is associated with the first network device or the user of the first network device.

26. The first network device of claim 20 , wherein the resource includes one or more network addresses.

27. The first network device of claim 26 , wherein the set of one or more network addresses includes pseudorandom network addresses.

28. The first network device of claim 20 , wherein the resource is used for authenticating communications between the first network device and the second network device to the determined quality of service level.

29. The first network device of claim 20 , wherein the encrypted connection is a secure communication link.

30. The first network device of claim 20 , wherein the encrypted connection is a communication link between the first and second network devices in a virtual private network.

31. The first network device of claim 20 , wherein the encrypted connection passes through one or more intermediate devices on the network, the intermediate devices providing anonymity of at least one of the first network device and the second network device by translating one or more addresses in packets transmitted over the encrypted connection.

32. The first network device of claim 20 , wherein the one or more processors are further configured to execute the instructions to, execute an application program on the first network device, wherein the first and second communication modes are provided by the application program.

33. The first network device of claim 32 , wherein the application program comprises at least one of a video, audio, messaging, chat, telephony, or web browser application.

34. The first network device of claim 32 , wherein the application program comprises a user interface allowing the user to set the first network device to the first communication mode or the second communication mode, and the one or more processors are further configured to execute the instructions to receive, via the user interface, a selection of the first communication mode or a selection of the second communication mode.

35. The first network device of claim 20 , wherein the one or more processors are further configured to execute the instructions to:

based on a determination that the first network device is set to the first communication mode, determine whether an encrypted communication software module is installed on the first network device; and

if the module is not installed:

access a network address for downloading the module;

download the module; and

install the module on the first network device.

36. The first network device of claim 20 , wherein the second connection is not encrypted.

37. The first network device of claim 20 , wherein the one or more processors are further configured to execute the instructions to send, based on a determination that the first network device is set to the second communication mode, to a second name service, a second name associated with the second network device.

38. The first network device of claim 20 , wherein the first and second network devices are mobile devices.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 6, 2016
From: LARSON, VICTOR; SHORT, ROBERT DUNHAM; MUNGER, EDMUND COLBY; WILLIAMSON, MICHAEL
To: VIRNETX, INC.
Reel/Frame 039082/0130 →
Continuity (9)
Continuation 13285962 · Oct 31, 2011
Continuation 11679416 · Feb 27, 2007
Continuation 10702486 · Nov 7, 2003
Division 09558209 · Apr 26, 2000
Continuation In Part 09504783 · Feb 15, 2000
Continuation In Part 09429643 · Oct 29, 1999
Provisional Application 60106261 · Oct 30, 1998
Provisional Application 60137704 · Jun 7, 1999
Related Publication 20150058933A1 · Feb 26, 2015