Patent ID: 11888869
Assignee: SAUDI ARABIAN OIL COMPANY
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A method for securely isolating access by one or more users in a group of network users to an enterprise network implementing Multi-Protocol Label Switching (MPLS), the method comprising:
configuring, on the network, an MPLS Layer-3 virtual private network (L3VPN) including an L3VPN instance, wherein the L3VPN instance is configured for the group of network users and for isolating the one or more users' access to the network from other enterprise network users;
configuring a remote and mobile enterprise access (RMEA) gateway within the network, the RMEA gateway having client-based secure socket layer virtual private network (SSL-VPN) capability and being integrated with a two-factor user authentication system;
configuring a de-militarized zone (DMZ), wherein the DMZ is configured to implement cybersecurity checks on data traffic between the L3VPN instance and the RMEA gateway;
establishing an SSL-VPN session between a user computing device associated with a first user of the group and the RMEA gateway, wherein the SSL-VPN session is established on top of the L3VPN instance;
authenticating the first user using two-factor authentication;
routing all data traffic between the user computing device and the enterprise network through the first L3VPN instance to the RMEA gateway and via the DMZ;
providing, by the RMEA gateway and subject to establishing the SSL-VPN and the two-factor authentication of the first user, the user computing device access to the enterprise network.