Multi-part TCP connection over VPN

    公开(公告)号:US20220166647A1

    公开(公告)日:2022-05-26

    申请号:US17669535

    申请日:2022-02-11

    申请人: 360 IT, UAB

    IPC分类号: H04L12/46 H04L47/36

    摘要: An encrypted tunnel is established between a virtual private network (VPN) server and a VPN user device. A request to establish a connection with a target device is received from the VPN user device. The request uses initial connection parameters. The connection the converted into a first connection between the VPN user device and the VPN server and a second connection between the VPN server and the target device. The first connection uses first connection parameters and the second connection uses second connection parameters. At least one parameter of the first connection parameters or of the second connection parameters is different from a corresponding parameter of the initial connection parameters. First network packets received from the VPN user device according to the first connection parameters are converted into second network packets according to the second connection parameters. The second network packets are transmitted to the target device.

    Multi-Part TCP Connection Over VPN
    2.
    发明公开

    公开(公告)号:US20240267259A1

    公开(公告)日:2024-08-08

    申请号:US18597614

    申请日:2024-03-06

    申请人: 360 IT, UAB

    IPC分类号: H04L12/46 H04L47/36

    摘要: Based on an initiation request for a first connection from a Virtual Private Network (VPN) user device intended for a target, a second connection is established between a VPN concentrator and the VPN user device across a VPN tunnel and a third connection is established between the VPN concentrator and the target. The second connection is established with a first Maximum Segment Size (MSS) and the third connection is established with a second MSS. A first round trip time (RTT) for the second connection is measured. A second RTT for the third connection is measured. Parameters of at least one of the second connection or the third connection are optimized, where first parameters of the second connection are optimized based on the first RTT and second parameters of the third connection are optimized based on the second RTT.

    USING CREATION TIMES IN IDENTIFYING OPTIMAL VPN SERVERS

    公开(公告)号:US20240022637A1

    公开(公告)日:2024-01-18

    申请号:US18364407

    申请日:2023-08-02

    申请人: 360 IT, UAB

    IPC分类号: H04L67/141 H04L12/46 H04L9/40

    摘要: A request is received from a user device. In response to the request, respective penalty scores for VPN servers are calculated. A respective penalty score for a VPN server is calculated based on a time of creation of the VPN server such that a first VPN server of the VPN servers having a first creation time that is earlier in time than a second creation time of a second VPN server of the VPN servers is assigned a higher weight than the second VPN server. One or more of the VPN servers are selected based on the respective penalty scores. Respective internet protocol (IP) addresses of the one or more of the VPN servers are transmitted to the user device.

    Enhanced privacy-preserving access to a VPN service

    公开(公告)号:US11611536B2

    公开(公告)日:2023-03-21

    申请号:US16898374

    申请日:2020-06-10

    申请人: 360 IT, UAB

    摘要: Systems and methods for effectively managing security and privacy measures during a user's connectivity session with a VPN service are provided. The systems and methods use a computer program that introduces a double-NAT feature at the network layer and a temporary hash table containing the minimally necessary temporary data to link two NAT sessions together in a secure manner. The systems and methods avoid including the dynamic management of IP addresses or requiring each client to have an IP address assigned beforehand to avoid compromising the user's identity by hard linking the session traces with the client.

    DYNAMIC SYSTEM AND METHOD FOR IDENTIFYING OPTIMAL SERVERS IN A VIRTUAL PRIVATE NETWORK

    公开(公告)号:US20220201086A1

    公开(公告)日:2022-06-23

    申请号:US17649676

    申请日:2022-02-01

    申请人: 360 IT, UAB

    IPC分类号: H04L67/141 H04L12/46

    摘要: The present embodiment relates to method and system for dynamically identifying the optimal servers from among a plurality of VPN servers. The method and system to score or rank the plurality of VPN servers through mathematical operations to produce a scored list of servers. The servers are dynamically scored based on several server conditions including but not limited to server location, server hub score, server creation time, server load, captcha rates and other like information. The method and system further calculate server penalty scores for a plurality of VPN servers and dynamically identifies optimal servers based on the least server penalty score. Further, the method and system provide means for the VPN service provider to direct their users to connect with the optimal servers consistently.

    DYNAMIC SYSTEM AND METHOD FOR IDENTIFYING OPTIMAL SERVERS IN A VIRTUAL PRIVATE NETWORK

    公开(公告)号:US20220200964A1

    公开(公告)日:2022-06-23

    申请号:US17580838

    申请日:2022-01-21

    申请人: 360 IT, UAB

    IPC分类号: H04L9/40 G06F9/54

    摘要: A request for a virtual private network (VPN) server that is an optimal VPN server for a user device is received. Respective penalty scores for VPN servers including the optimal VPN server are calculated. A respective penalty score of a VPN server is calculated based on whether the VPN server is in a same country as the user device and a proximity of the VPN server to an international Internet exchange hub. The optimal VPN is server is selected based on the respective penalty scores. An internet protocol (IP) address of the optimal VPN server is transmitted to the user device.

    ENHANCED PRIVACY-PRESERVING ACCESS TO A VPN SERVICE

    公开(公告)号:US20210392112A1

    公开(公告)日:2021-12-16

    申请号:US16898374

    申请日:2020-06-10

    申请人: 360 IT, UAB

    IPC分类号: H04L29/06 H04L9/06 H04L9/30

    摘要: Systems and methods for effectively managing security and privacy measures during a user's connectivity session with a VPN service are provided. The systems and methods use a computer program that introduces a double-NAT feature at the network layer and a temporary hash table containing the minimally necessary temporary data to link two NAT sessions together in a secure manner. The systems and methods avoid including the dynamic management of IP addresses or requiring each client to have an IP address assigned beforehand to avoid compromising the user's identity by hard linking the session traces with the client

    Hybrid cryptography virtual private networks

    公开(公告)号:US12010102B1

    公开(公告)日:2024-06-11

    申请号:US18474688

    申请日:2023-09-26

    申请人: 360 IT, UAB

    摘要: A virtual private network (VPN) client generates a short-term key pair. The VPN client generates a short-term high security key pair. The VPN client transmits a request for a pre-shared key (PSK) to a VPN server. The VPN client receives a response that includes the PSK. The VPN client decrypts the response based on the short-term key pair to obtain a ciphertext. The VPN client decrypts the ciphertext based on the short-term high security key pair to obtain the PSK. A VPN tunnel is then established between the VPN client and the VPN server based on the PSK.

    Multi-part TCP connection over VPN

    公开(公告)号:US11956099B2

    公开(公告)日:2024-04-09

    申请号:US17739315

    申请日:2022-05-09

    申请人: 360 IT, UAB

    IPC分类号: H04L12/46 H04L47/36

    摘要: Transmitting data over a VPN connection includes receiving, at a VPN concentrator, from a VPN user device, an initiation request of a first connection, initialized to have an initial MSS, from the VPN user device to a target. The first connection is terminated at the VPN concentrator. A second connection is established across a VPN tunnel between the VPN concentrator and the VPN user device. A third connection is established between the VPN concentrator and the target. A first MSS for the second connection and a second MSS for the third connection are set. One of the first MSS or the second MSS are set to prevent packet fragmentation due to VPN-related encapsulation. First data packets are transmitted between the VPN concentrator and the VPN user device using the first MSS. Second data packets are transmitted between the VPN concentrator and the target using the second MSS.

    Dynamic system and method for identifying optimal servers in a virtual private network

    公开(公告)号:US11245670B1

    公开(公告)日:2022-02-08

    申请号:US17126012

    申请日:2020-12-17

    申请人: 360 IT, UAB

    IPC分类号: H04L29/06 G06F9/54

    摘要: The present embodiment relates to method and system for dynamically identifying the optimal servers from among a plurality of VPN servers. The method and system to score or rank the plurality of VPN servers through mathematical operations to produce a scored list of servers. The servers are dynamically scored based on several server conditions including but not limited to server location, server hub score, server creation time, server load, and other like information. The method and system further calculate server penalty scores for a plurality of VPN servers and dynamically identifies optimal servers based on the least server penalty score. Further, the method and system provide means for the VPN service provider to direct their users to connect with the optimal servers consistently.