Patent ID: 8196181
Filing Date: 2012-06-05
Classification: G06F,H04L

Abstract:
1. A method for forming a secure virtual private network (VPN) consisting of two or more linked entities having internet connectability where each entity has links with at least one other device on the VPN, said method comprising the steps of: (a) providing a lookup device having a known address with an updatable index of entities known to be connectable to the VPN, which look up device accepts requests from known entities (“joining entity”) wishing to link to the VPN, (b) causing at least one pre-designated contact entity on the VPN to periodically poll the lookup device for received joining requests, (c) said lookup device receiving a request from a joining entity to connect to the VPN, (d) in response to a poll for joining requests said lookup device notifying the polling contact entity of at least the address of each joining entity, (e) if the contact entity permits a connection to the VPN, the contact entity supplies at least its address to the lookup device which passes this to the joining entity, (f) the joining entity and contact entity establish a first link between them, (g) the joining entity and the contact entity conduct an authentication process over said first link, (h) and if the authentication process is successful the contact entity notifies the joining entity of at least the status of other entities belonging to the VPN and notifies all entities on the VPN that the joining entity is joining the VPN, (i) said joining entity using the status of other entities belonging to the VPN to calculate its node position in the VPN including its node position with respect to one or two neighbor entities it will connect to, (j) said one or two neighbor entities polling said lookup device for a received joining request, (k) said lookup device receiving a request from said joining entity to connect to a neighbor entity, (l) in response to a poll from a neighbor entity for a received joining request said lookup device notifying the neighbor entity of at least the address of said joining entity, (m) if the neighbor entity permits a connection to the joining entity, the neighbor entity supplying at least its address to the lookup device which passes this to the joining entity, (n) the joining entity and the neighbor entity establishing a second link between them, (o) said joining entity and at least one neighbor entity conducting a mutual authentication process which if successful sustains said one or more second links, (p) providing an initial registration step whereby entities register with the lookup device for access to one or more desired VPNs and only entities which are so registered are subsequently recognized or known to the lookup device, said registration step comprising: the entity sending to the lookup device registration information including at least a username, a password, and the lookup device storing said registration information for identification purposes when a registered entity sends a VPN joining request to the lookup device, (q) wherein said registration step includes the lookup device sending to registering entities a security key to allow such entities to access security keys unique to VPN for which registration has been made and the other entities registered for that VPN.