Patent ID: 11863530
Assignee: AVIATRIX SYSTEMS, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 13:
14. A system for establishing a secure channel between a virtual private network (VPN) client processing on a network device for a user and a network gateway, the system comprising:
a controller deployed within a cloud computing network and maintained within a non-transitory storage medium, wherein the controller is configured to:
transmit an authentication request to an identity provider based on receipt of a resource request from the VPN client,
receive an authentication response from the identity provider,
generate an authentication token based on the authentication response,
transmit the authentication token to the VPN client, wherein the controller further stores the authentication token; and

the network gateway deployed within the cloud computing network and managed by the controller, wherein the network gateway is configured to:
receive a secure connection request from the VPN client that includes the authentication token,
validate the authentication token by querying the controller for a comparison of a pairing of the authentication token and a user identifier with one or more stored pairings of authentication tokens and user identifiers,
establish the secure connection with VPN client, and
provide the VPN client with access to resources behind the network gateway via the secure connection.