Patent ID: 9258295
Filing Date: 2016-02-09
CPC Classification: H04L,H04W

Claim Text:
1. A method, comprising: accessing a website by a device to request use of over-the-air VPN services; in response to the device accessing the website, establishing, by the device, an over-the-air connection to a services provisioning system of a virtual private network (VPN), the services provisioning system configured to provision both mobile and desktop devices; performing device posture validation by pushing a script to the device which scans the device to provide a unique identification (ID) of the device to the provisioning system, wherein the unique ID is confirmed by a backend access control system; participating in device user authentication upon confirmation of the unique ID; in response to authentication, generating a security key pair at the device; receiving over-the-air a root certificate at the device in response to the device being approved for services; sending over-the-air a certificate enrollment request from the device to the provisioning system; receiving over-the-air a valid certificate at the device in response to a certificate authority signing the certificate request; and installing the valid certificate on the device to be used in connecting the device over-the-air to the VPN.