Patent ID: 9077686
Filing Date: 2015-07-07
Classification: H04L

Abstract:
1. A method for dynamically switching access modes during a communication session, the method comprising: establishing, by a processor-enabled device a Secure Socket Layer (SSL) Virtual Private Network (VPN) connection between a client and a server, the SSL VPN providing one or more secure communication channels over an insecure network; pushing, by the processor-enabled device, a first applet to the client for managing the SSL VPN connection, the first applet retaining a random username and a random password generated by the processor-enabled device based on one or more cookies received from the client and permitting a first mode of security during the SSL VPN connection between the client and the server, the first mode of security providing access to resources in the established SSL VPN connection between the client and the server based on an authorization of the user of the client; receiving, by the processor enabled device, a request from the client to switch to a second mode of security during the SSL VPN connection between the client and the server and after providing access to resources to the client in the first mode of security, the second mode of security providing greater access to resources in the established session between the client and the server than the first mode of security; validating, by the processor enabled device and based on said validating, that the user of the client is authorized for the second mode of security; instructing, by the processor enabled device, the client to uninstall the first applet and install the second applet that supports the second mode of security; receiving, by the processor enabled device from the client, the random username and random password; verifying, by the processor enabled device, the random username and random password received from the client; and establishing, by the processor enabled device with the client, a secure tunnel for the established SSL VPN connection in response to verifying the random username and random password received from the client, wherein interacting between the client and the server in the established SSL VPN connection continues in the second mode of security using the second applet and without terminating the SSL VPN connection between the client and the server.