| CPC H04L 63/0823 (2013.01) [H04L 9/0819 (2013.01); H04L 9/3073 (2013.01); H04L 9/3268 (2013.01); H04L 63/0272 (2013.01); H04L 63/0485 (2013.01); H04L 63/123 (2013.01); H04L 63/166 (2013.01)] | 19 Claims |

|
1. A method comprising:
sending, by a virtual private network (VPN) client, a VPN server profile request message to a VPN server during a first log in by the VPN client to the VPN server;
in response to the VPN server profile request message, receiving, by the VPN client, from the VPN server, a VPN server profile comprising a public key of a public-private key pair associated with a server certificate of the VPN server;
storing, by the VPN client, the VPN server profile;
sending, by the VPN client, an Internet Key Exchange (IKE) message to the VPN server;
in response to the IKE message, receiving, by the VPN client, from the VPN server, a signed IKE response message signed using a private key of the public-private key pair associated with the server certificate;
verifying, by the VPN client, authenticity of the signed IKE response message received from the VPN server, wherein verifying comprises:
retrieving, by the VPN client, from the VPN server profile, the public key of the public-private key pair associated with the server certificate; and
verifying, by the VPN client, the signed IKE response message using the public key; and
in response to successfully verifying the signed IKE response message, sending, by the VPN client, an identity of the VPN client to the VPN server.
|