Patent ID: 9197603
Filing Date: 2015-11-24
Classification: H04L

Abstract:
1. A method for interconnecting a first computer network and at least one second extended computer network, wherein the at least one second extended computer network is not connected to the Internet, the method comprising: interconnecting the at least one second extended computer network to an intermediate network though a CPE router, and interconnecting the intermediate network to the Internet via a concentration router; interconnecting the first computer network to the Internet via a Point of Presence (POP) router; and implementing an Internet Protocol (IP) tunnel between the at least one second extended computer network and the first computer network across the intermediate network and the Internet, wherein the IP tunnel comprises a first internal non-encrypted IP tunnel portion across the intermediate network between the CPE router and the concentration router, and a second external and encrypted IP tunnel portion across the Internet between the concentration router and the POP router, wherein, for traffic transmitted from the at least one second extended computer network to the first computer network, the CPE router substitutes right addresses, used as destination addresses for traffic generated by hosts within the second extended computer network to hosts within the first computer network, with virtual right addresses, and the POP router substitutes the virtual right addresses with the right addresses, such that traffic transmitted from the at least one second extended computer network to the first computer network over the intermediate network is inspectable by a provider of the intermediate network, but with reciprocal isolation between the intermediate network and the first and second extended computer networks, wherein the CPE router stores a routing table that comprises a private address of the concentration router within the immediate network, the virtual right addresses, and internal left addresses, and wherein the method further comprises a set-up phase comprising collecting private IP addresses assigned to the intermediate network including private IP addresses of the concentration router and the CPE router, and choosing and configuring virtual left addresses and the virtual right addresses in the POP router and CPE router to be different from the collected private IP addresses to avoid IP address conflicts among the intermediate network, the first computer network, and the at least one second extended computer network.