Patent ID: 11743724

Abstract:
A method and system for determining a path of data traffic based on a destination Internet Protocol (IP) address, the destination IP address being either private or public and belonging to any one of multiple organizations. In the method and system, a VPN is activated at a telecommunication endpoint. In response to activating the VPN, a service device on a private network interconnects with a VPN gateway. A subscriber identifier associated with the telecommunication endpoint and the destination IP address of one of the multiple organizations is received at a managed service platform. If both the subscriber identifier and the destination IP address of the one of the multiple organizations are not registered in a predetermined policy database at the telecommunication endpoint, a subscriber identified by the subscriber identifier is prompted to register the subscriber identifier associated with the telecommunication endpoint. The subscriber identifier is then registered in the predetermined policy database, based on information received from the telecommunication endpoint in response to the prompting. If the subscriber identifier and the destination IP address of the one of the multiple organizations are registered in the predetermined policy database, the service device on the private network routes the data traffic to a private network resource of the one of the multiple organizations matching the destination IP address. If the subscriber identifier is registered in the predetermined policy database and the destination IP address of the one of the multiple organizations is not registered in the predetermined policy database, the service device on the private network routes the data traffic via an IP transit service to a public internet.