Patent ID: 11888869
Assignee: SAUDI ARABIAN OIL COMPANY
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 8:
9. A system for securely isolating access by one or more users in a group of network users to an enterprise network implementing Multi-Protocol Label Switching (MPLS), the system comprising:
an MPLS Layer-3 virtual private network (L3VPN) provided within the network, including, an L3VPN instance, wherein the L3VPN instance is configured for the group of network users and for isolating the one or more users' access to the network from other enterprise network users;
a remote and mobile enterprise access (RMEA) gateway provided within the network, the RMEA gateway having client-based secure socket layer virtual private network (SSL-VPN) capability;
a two-factor user authentication system; and
a de-militarized zone (DMZ), wherein the DMZ is configured to implement cybersecurity checks on data traffic between the L3VPN instance and the RMEA gateway, and
wherein the RMEA gateway is configured establish, on top of the L3VPN instance, an SSL-VPN session between a user computing device associated with a first user of the group and the RMEA gateway,
wherein the L3VPN instance is configured to route all data traffic from the user computing device to the RMEA gateway via the DMZ, and the RMEA gateway is configured to route all data traffic to the user computing device via the DMZ, and
wherein the RMEA gateway and is configured to provide the user computing device access to the enterprise network, subject to establishing the SSL-VPN session and two-factor authentication of the first user using the two-factor user authentication system.