IP Library Granted Patent US 10,462,050
Granted Patent B1
US 10,462,050 · App. 16/022,784 · Granted Oct 29, 2019

Systems and methods for chaining virtual private networks

Inventors: Qu Bo Song (Singapore, SG); Shaun Aimoto (Ontario, CA); Joseph Chen (Culver City, CA)
Assignee: Symantec Corporation
H04L45/64H04L41/0803H04L45/16H04L63/0272H04L63/0428H04L12/4641
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,462,050
App. No.
16/022,784
Granted
Oct 29, 2019
Kind
B1
Abstract

The disclosed computer-implemented method for chaining virtual private networks may include (i) establishing a virtual private network client that routes network traffic to a virtual private network, (ii) establishing an additional virtual private network client that routes the network traffic to an additional virtual private network, (iii) configuring the virtual private network client for split routing such that the virtual private network client routes different ranges of incoming network traffic to respective different network addresses, (iv) configuring the additional virtual private network client to route all incoming network traffic according to a default route, and (v) chaining the virtual private network client and the additional virtual private network client such that they process incoming network traffic in series. Various other methods, systems, and computer-readable media are also disclosed.

Claims (50)

1. A computer-implemented method for chaining virtual private networks, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:

establishing a virtual private network client that routes network traffic to a virtual private network;

establishing an additional virtual private network client that routes the network traffic to an additional virtual private network;

configuring the virtual private network client for split routing such that the virtual private network client routes different ranges of incoming network traffic to respective different network addresses;

configuring the additional virtual private network client to route all incoming network traffic according to a default route; and

chaining the virtual private network client and the additional virtual private network client such that they process incoming network traffic in series.

2. The computer-implemented method of claim 1 , wherein the virtual private network client comprises a custom virtual private network client that performs traffic inspection.

3. The computer-implemented method of claim 2 , wherein the additional virtual private network client comprises a native virtual private network client that an operating system provides to perform traffic encryption.

4. The computer-implemented method of claim 3 , wherein chaining the virtual private network client and the additional virtual private network client enables an end user to benefit from both the traffic inspection performed by the custom virtual private network client and the traffic encryption performed by the native virtual private network client.

5. The computer-implemented method of claim 1 , wherein configuring the virtual private network client for split routing comprises replacing a default route configuration with a split route configuration.

6. The computer-implemented method of claim 1 , wherein:

the virtual private network client and the additional virtual private network client are established within a computing environment that is configured to create a conflict upon detecting that both the virtual private network client and the additional virtual private network client route all incoming network traffic to the default route; and

configuring the virtual private network client for split routing prevents the conflict such that chaining the virtual private network client and the additional virtual private network client is enabled.

7. The computer-implemented method of claim 6 , wherein:

the computing environment comprises an iOS operating system environment; and

the computing environment is configured to disable the additional virtual private network client upon detecting that both the virtual private network client and the additional virtual private network client route all incoming network traffic to the default route.

8. The computer-implemented method of claim 6 , wherein:

the computing environment comprises a WINDOWS operating system environment; and

the computing environment is configured to remove a default route configuration for the additional virtual private network client in response to detecting that both the virtual private network client and the additional virtual private network client route all incoming network traffic to the default route.

9. The computer-implemented method of claim 1 , wherein the different ranges of incoming network traffic sum together to effectively form the default route.

10. The computer-implemented method of claim 9 , wherein the different ranges of incoming network traffic sum together to effectively cover the entire range of INTERNET PROTOCOL version 4 addresses.

11. A system for chaining virtual private networks, the system comprising:

an establishment module, stored in memory, that:

establishes a virtual private network client that routes network traffic to a virtual private network; and

establishes an additional virtual private network client that routes the network traffic to an additional virtual private network;

a configuration module, stored in memory, that:

configures the virtual private network client for split routing such that the virtual private network client routes different ranges of incoming network traffic to respective different network addresses; and

configures the additional virtual private network client to route all incoming network traffic according to a default route;

a chaining module, stored in memory, that chains the virtual private network client and the additional virtual private network client such that they process incoming network traffic in series; and

at least one physical processor configured to execute the establishment module, the configuration module, and the chaining module.

12. The system of claim 11 , wherein the virtual private network client comprises a custom virtual private network client that performs traffic inspection.

13. The system of claim 12 , wherein the additional virtual private network client comprises a native virtual private network client that an operating system provides to perform traffic encryption.

14. The system of claim 13 , wherein the chaining module chains the virtual private network client and the additional virtual private network client such that an end user is enabled to benefit from both the traffic inspection performed by the custom virtual private network client and the traffic encryption performed by the native virtual private network client.

15. The system of claim 11 , wherein the configuration module configures the virtual private network client for split routing by replacing a default route configuration with a split route configuration.

16. The system of claim 11 , wherein:

the virtual private network client and the additional virtual private network client are established within a computing environment that is configured to create a conflict upon detecting that both the virtual private network client and the additional virtual private network client route all incoming network traffic to the default route; and

the configuration module configures the virtual private network client for split routing such that the conflict is prevented and such that chaining the virtual private network client and the additional virtual private network client is enabled.

17. The system of claim 16 , wherein:

the computing environment comprises an iOS operating system environment; and

the computing environment is configured to disable the additional virtual private network client upon detecting that both the virtual private network client and the additional virtual private network client route all incoming network traffic to the default route.

18. The system of claim 16 , wherein:

the computing environment comprises a WINDOWS operating system environment; and

the computing environment is configured to remove a default route configuration for the additional virtual private network client in response to detecting that both the virtual private network client and the additional virtual private network client route all incoming network traffic to the default route.

19. The system of claim 11 , wherein the different ranges of incoming network traffic sum together to effectively form the default route.

20. A non-transitory computer-readable medium comprising one or more computer-readable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

establish a virtual private network client that routes network traffic to a virtual private network;

establish an additional virtual private network client that routes the network traffic to an additional virtual private network;

configure the virtual private network client for split routing such that the virtual private network client routes different ranges of incoming network traffic to respective different network addresses;

configure the additional virtual private network client to route all incoming network traffic according to a default route; and

chain the virtual private network client and the additional virtual private network client such that they process incoming network traffic in series.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 21, 2019
From: SYMANTEC CORPORATION
To: CA, INC.
Reel/Frame 051144/0918 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 29, 2018
From: SONG, QU BO; AIMOTO, SHAUN; CHEN, JOSEPH
To: SYMANTEC CORPORATION
Reel/Frame 046235/0390 →
Cited By (1)
US 12,452,216