公开(公告)号：US07840701B2

公开(公告)日：2010-11-23

申请号：US11709927

申请日：2007-02-21

申请人： Nai-Ting Hsu ,  Junzheng Zhang ,  Zhuoyuan Chai ,  Leemay Yen ,  Pu-Chau Hsu

发明人： Nai-Ting Hsu ,  Junzheng Zhang ,  Zhuoyuan Chai ,  Leemay Yen ,  Pu-Chau Hsu

IPC分类号： G06F15/173 ,  G06F15/16

CPC分类号： H04L61/2535 ,  H04L29/06 ,  H04L61/2517 ,  H04L61/2539 ,  H04L63/0272 ,  H04L63/164 ,  H04L67/06

摘要： A system and method for virtual private network (VPN) packet level routing using a Dual-NAT architecture to provide a bi-directional secure connection between applications, hosts, or networks at any two end sites without exposing each other's actual IP addresses and network topologies. The method includes providing a client a list of available resources on a remote network; initiating a request by the client for at least one resource from the list of available remote resources as though the at least one resource is local to the client; NATting the source and destination IP addresses to a pair of client and resource Dynamic VPN (DVPN) addresses; routing the request to the remote network; NATting the client and resource DVPN addresses to local IP addresses on the remote network; issuing the request to the at least resource; and NATting/routing the response using the reverse process.

摘要翻译： 一种使用双NAT架构的虚拟专用网（VPN）数据包级别路由的系统和方法，可在任何两个终端站点的应用程序，主机或网络之间提供双向安全连接，而不会暴露彼此的实际IP地址和网络拓扑 。 该方法包括向客户端提供远程网络上的可用资源的列表; 从可用的远程资源的列表发起客户端对至少一个资源的请求，就好像该至少一个资源是客户端的本地资源一样; 将源和目的IP地址转换为一对客户端和资源动态VPN（DVPN）地址; 将请求路由到远程网络; 将客户端和资源DVPN地址转换为远程网络上的本地IP地址; 向至少资源发出请求; 并使用反向过程NAT /路由响应。

公开(公告)号：US20080201486A1

公开(公告)日：2008-08-21

申请号：US11709927

申请日：2007-02-21

申请人： Nai-Ting Hsu ,  Junzheng Zhang ,  Zhuoyuan Chai ,  Leemay Yen ,  Pu-Chau Hsu

发明人： Nai-Ting Hsu ,  Junzheng Zhang ,  Zhuoyuan Chai ,  Leemay Yen ,  Pu-Chau Hsu

IPC分类号： G06F15/173 ,  G06F15/16

CPC分类号： H04L61/2535 ,  H04L29/06 ,  H04L61/2517 ,  H04L61/2539 ,  H04L63/0272 ,  H04L63/164 ,  H04L67/06

摘要： A system and method for virtual private network (VPN) packet level routing using a Dual-NAT architecture to provide a bidirectional secure connection between applications, hosts, or networks at any two end sites without exposing each other's actual IP addresses and network topologies. The method includes providing a client a list of available resources on a remote network; initiating a request by the client for at least one resource from the list of available remote resources as though the at least one resource is local to the client; NATting the source and destination IP addresses to a pair of client and resource Dynamic VPN (DVPN) addresses; routing the request to the remote network; NATting the client and resource DVPN addresses to local IP addresses on the remote network; issuing the request to the at least resource; and NATting/routing the response using the reverse process.

摘要翻译： 一种使用双NAT架构的虚拟专用网（VPN）数据包级别路由的系统和方法，可在任何两个终端站点的应用程序，主机或网络之间提供双向安全连接，而不会暴露彼此的实际IP地址和网络拓扑。 该方法包括向客户端提供远程网络上的可用资源的列表; 从可用的远程资源的列表发起客户端对至少一个资源的请求，就好像该至少一个资源是客户端的本地资源一样; 将源和目的IP地址转换为一对客户端和资源动态VPN（DVPN）地址; 将请求路由到远程网络; 将客户端和资源DVPN地址转换为远程网络上的本地IP地址; 向至少资源发出请求; 并使用反向过程NAT /路由响应。