Patent ID: 7930732

Claim:
A machine-implemented method, comprising: establishing a Secure Sockets Layer (SSL) Virtual Private Network (VPN) session between a client and a server for a first mode of access; receiving a request from a principal of the client to switch from the first mode of access to a second mode of access, wherein the second mode of access includes additional security permissions than the first mode of access; verifying that the principal has root or administrative privileges on the client when the request was made to switch from the first mode to the second mode; reconfiguring the SSL VPN session from the first mode to the second mode when the principal is determined to have root or administrative privileges on the client, and wherein reconfiguring occurs without disconnecting the SSL VPN session; and continuing the SSL VPN session in the second mode of access, without manually requiring the principal to re-authenticate for the additional security permissions associated with the second mode; wherein establishing further includes pushing an applet to the client, wherein the applet retains a random username and a random password that was generated for data channel authentication when the principal initially authenticate to the SSL VPN session in the first mode of access; wherein verifying further includes receiving a notice from the applet that the principal is logged into the client already as root or administrator having the root or administrative privileges for the client; and where reconfiguring further includes: receiving notice from the applet that first mode binaries running on the client for the VPN session have been terminating; and instructing the applet to install and initiate second mode binaries on the client for the VPN session associated with the second mode of access.