Establishment of a secure communication link based on a domain name service (DNS) request
    54.
    发明授权
    Establishment of a secure communication link based on a domain name service (DNS) request 有权
    建立一个基于域名服务(DNS)请求的安全通信链路

    公开(公告)号:US07490151B2

    公开(公告)日:2009-02-10

    申请号:US10259494

    申请日:2002-09-30

    IPC分类号: G06F15/173

    摘要: A plurality of computer nodes communicate using seemingly random Internet Protocol source and destination addresses. Data packets matching criteria defined by a moving window of valid addresses are accepted for further processing, while those that do not meet the criteria are quickly rejected. Improvements to the basic design include (1) a load balancer that distributes packets across different transmission paths according to transmission path quality; (2) a DNS proxy server that transparently creates a virtual private network in response to a domain name inquiry; (3) a large-to-small link bandwidth management feature that prevents denial-of-service attacks at system chokepoints; (4) a traffic limiter that regulates incoming packets by limiting the rate at which a transmitter can be synchronized with a receiver; and (5) a signaling synchronizer that allows a large number of nodes to communicate with a central node by partitioning the communication function between two separate entities.

    摘要翻译: 多个计算机节点使用看似随机的因特网协议源和目的地址进行通信。 由有效地址的移动窗口定义的数据包匹配条件被接受进一步处理,而不符合标准的数据包将被快速拒绝。 对基本设计的改进包括(1)根据传输路径质量在不同传输路径上分发数据包的负载平衡器; (2)响应于域名查询透明地创建虚拟专用网络的DNS代理服务器; (3)一个大到小的链路带宽管理功能,可防止系统阻塞点的拒绝服务攻击; (4)流量限制器,其通过限制发射机与接收机同步的速率来调节输入分组; 和(5)信令同步器,其允许大量节点通过分割两个单独实体之间的通信功能而与中央节点进行通信。

    User authenticated encrypted communication link

    公开(公告)号:US11240235B2

    公开(公告)日:2022-02-01

    申请号:US16299607

    申请日:2019-03-12

    申请人: VirnetX, Inc.

    IPC分类号: H04L29/06 H04L29/12

    摘要: Systems and methods are provided for establishing a secure communication link between a first client and a second client. One exemplary computer-implemented method for establishing a secure communication link between a first client and a second client includes accessing, from a storage, identification information of a user of the first client. The method further includes receiving a Domain Name Service (DNS) request from the first client requesting a secure network address corresponding to a secure domain name associated with the second client. The method further includes authenticating the user based on the user identification information. The method also includes transmitting the secure computer network address in response to the DNS request based on a determination that the user has been authenticated. A secure communication link between the first client and the second client is established based on the secure computer network address.

    Systems and methods for certifying devices to communicate securely

    公开(公告)号:US10680830B2

    公开(公告)日:2020-06-09

    申请号:US15960182

    申请日:2018-04-23

    申请人: VirnetX, Inc.

    发明人: Victor Larson

    摘要: A virtual private network (VPN) over a telecommunications network is created by sending a request from a first VPN device to a second VPN device for establishing a VPN between the first and second VPN devices. The request includes a first signed certificate having a verified VPN parameter for the first VPN device. A reply is received at the first VPN device from the second VPN device that includes a second signed certificate having a verified VPN parameter for the second VPN device. The VPN is established between the first and second VPN devices based on each verified VPN parameter for each of the first and second VPN devices.