Patent ID: 6804777
Filing Date: 2004-10-12
Classification: H04L

Abstract:
A method for application-level virtual private networking, comprising the steps of:requesting access to a connection manager for sending requestor messages over a virtual private network tunneled network connection to an external network resource via a channel receiver by a requestor application within a user workstation; identifying and configuring the requestor application to use loopback network address resources on a local host; calculating a hash value as a validating signature of the requestor application by a the connection manager within the user workstation; forwarding the calculated application hash value, a digital signature, user ID and user password by the connection manager over a persistent tunnel network connection to a key access authority network node to obtain a session key for connection negotiation; receiving by the connection manager from the key access authority network node an approval notice, session key, and IP address of a channel gateway where the external network resource is accessed on the network; opening a local port, encrypting the calculated hash and requestor messages using a session key, and forwarding the encrypted requestor messages, and the encrypted calculated application hash value, and the session key by the connection manager over a network to a channel receiver in the channel gateway; receiving over the network and decrypting the requestor messages and the calculated application hash value using the session key by the channel receiver within the channel gateway; authenticating the received requestor messages using the calculated application hash value and forwarding the requestor messages to the external resource; receiving the requestor messages by the external resource; and returning response messages to the requestor application.