Patent ID: 9148408
Filing Date: 2015-09-29
Classification: H04L

Abstract:
1. A computer-implemented method comprising: receiving, by a computer system implementing a gateway to a private network, a request from a client device for a network tunnel between the client device and a network device in the private network; authenticating the client device by the computer system; upon authenticating the client device, receiving, from an authentication server in communication with the computer system, a client access list that includes a list of network devices the client device is allowed to communicate with; upon receiving the client access list, verifying, by the computer system, that the network device in the private network is part of the list of network devices the client device is allowed to communicate with; and upon verifying that the network device in the private network is part of the list of network devices the client device is allowed to communicate with, establishing, by the computer system, the network tunnel between the client device and the network device in the private network through the gateway.