US 11,943,201 B2
Authentication procedure in a virtual private network
Karolis Pabijanskas, Vilnius (LT); Andzej Valcik, Vilnius (LT); and Ramünas Keliuotis, Kaunas (LT)
Assigned to UAB 360 IT, Vilnius (LT)
Filed by UAB 360 IT, Vilnius (LT)
Filed on Nov. 28, 2021, as Appl. No. 17/536,092.
Application 17/536,092 is a continuation of application No. 17/536,076, filed on Nov. 28, 2021, granted, now 11,729,147.
Prior Publication US 2023/0171263 A1, Jun. 1, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); H04L 9/08 (2006.01); H04L 9/32 (2006.01)
CPC H04L 63/0272 (2013.01) [H04L 9/0869 (2013.01); H04L 9/32 (2013.01); H04L 63/0435 (2013.01); H04L 63/08 (2013.01); H04L 63/123 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method in a virtual private network (VPN) environment, comprising:
configuring a first server to receive, from a second server, an encrypted authentication packet to enable the first server and the second server to conduct an authentication process to authenticate a client device communicating with the second server to allow the client device to receive VPN services from the second server, wherein
the first server and the second server communicate utilizing a remote authentication dial-in user service (RADIUS) protocol, and
the encrypted authentication packet, encrypted utilizing a predetermined encryption algorithm, includes (i) a crypted code field indicating that a portion of the encrypted authentication packet is encrypted, and (ii) a crypted payload including an encrypted initial authentication packet, which comprises (a) a code field indicating a type, from a plurality of types, associated with the encrypted initial authentication packet, and (b) a payload field that indicates client information associated with authenticating the client device; and
configuring the first server to transmit, to the second server, a response based at least in part on determining that the portion of the encrypted authentication packet is encrypted and on decrypting, utilizing a predetermined decryption algorithm, the encrypted initial authentication packet, the response indicating successful authentication of the client device, unsuccessful authentication of the client device, or a request for additional information from the second server.