US 12,316,623 B2
Verifying the authenticity of internet key exchange messages in a virtual private network
Ravi Suhane, Bangalore (IN); Amit Agrawal, Bangalore (IN); and Nagendra Babu Rapaka, Bangalore (IN)
Assigned to Hewlett Packard Enterprise Development LP, Spring, TX (US)
Filed by HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP, Spring, TX (US)
Filed on May 9, 2023, as Appl. No. 18/314,436.
Claims priority of application No. 202341012031 (IN), filed on Feb. 22, 2023.
Prior Publication US 2024/0283776 A1, Aug. 22, 2024
Int. Cl. H04L 29/06 (2006.01); H04L 9/08 (2006.01); H04L 9/30 (2006.01); H04L 9/32 (2006.01); H04L 9/40 (2022.01)
CPC H04L 63/0823 (2013.01) [H04L 9/0819 (2013.01); H04L 9/3073 (2013.01); H04L 9/3268 (2013.01); H04L 63/0272 (2013.01); H04L 63/0485 (2013.01); H04L 63/123 (2013.01); H04L 63/166 (2013.01)] 19 Claims
OG exemplary drawing
 
1. A method comprising:
sending, by a virtual private network (VPN) client, a VPN server profile request message to a VPN server during a first log in by the VPN client to the VPN server;
in response to the VPN server profile request message, receiving, by the VPN client, from the VPN server, a VPN server profile comprising a public key of a public-private key pair associated with a server certificate of the VPN server;
storing, by the VPN client, the VPN server profile;
sending, by the VPN client, an Internet Key Exchange (IKE) message to the VPN server;
in response to the IKE message, receiving, by the VPN client, from the VPN server, a signed IKE response message signed using a private key of the public-private key pair associated with the server certificate;
verifying, by the VPN client, authenticity of the signed IKE response message received from the VPN server, wherein verifying comprises:
retrieving, by the VPN client, from the VPN server profile, the public key of the public-private key pair associated with the server certificate; and
verifying, by the VPN client, the signed IKE response message using the public key; and
in response to successfully verifying the signed IKE response message, sending, by the VPN client, an identity of the VPN client to the VPN server.