US 12,452,192 B2
Systems and methods for providing a global virtual network (GVN)
Joseph E. Rubenstein, Beijing (CN); Carlos Eduardo Ore, Saint-Herblain (FR); Thibaud August Bernard Jean Saint-Martin, Aubignan (FR); Fred Broussard, Indianapolis, IN (US); and Jørn Allen Dose Knutsen, Oslo (NO)
Assigned to UMBRA Technologies Ltd., British Virgin Islands (GB)
Filed by UMBRA Technologies Ltd., Hong Kong (CN)
Filed on May 12, 2025, as Appl. No. 19/205,114.
Application 19/205,114 is a continuation of application No. 18/981,108, filed on Dec. 13, 2024, granted, now 12,309,001.
Application 18/981,108 is a continuation of application No. 18/358,519, filed on Jul. 25, 2023, granted, now 12,184,451, issued on Dec. 31, 2024.
Application 18/358,519 is a continuation of application No. 17/888,249, filed on Aug. 15, 2022, granted, now 11,750,419, issued on Sep. 5, 2023.
Application 17/888,249 is a continuation of application No. 17/461,624, filed on Aug. 30, 2021, granted, now 11,418,366, issued on Aug. 16, 2022.
Application 17/461,624 is a continuation of application No. 17/000,997, filed on Aug. 24, 2020, granted, now 11,108,595, issued on Aug. 31, 2021.
Application 17/000,997 is a continuation of application No. 15/563,253, granted, now 10,756,929, issued on Aug. 25, 2020, previously published as PCT/US2016/026489, filed on Apr. 7, 2016.
Claims priority of provisional application 62/151,174, filed on Apr. 22, 2015.
Claims priority of provisional application 62/144,293, filed on Apr. 7, 2015.
Prior Publication US 2025/0274308 A1, Aug. 28, 2025
Int. Cl. G06F 15/16 (2006.01); G06F 9/4401 (2018.01); G06F 21/57 (2013.01); H04L 9/08 (2006.01); H04L 9/40 (2022.01); H04L 12/46 (2006.01); H04L 45/00 (2022.01); H04L 45/28 (2022.01); H04L 45/302 (2022.01); H04L 45/64 (2022.01)
CPC H04L 12/465 (2013.01) [G06F 9/4401 (2013.01); G06F 9/4416 (2013.01); G06F 21/575 (2013.01); H04L 9/08 (2013.01); H04L 12/4633 (2013.01); H04L 45/22 (2013.01); H04L 45/28 (2013.01); H04L 45/302 (2013.01); H04L 45/64 (2013.01); H04L 63/02 (2013.01); H04L 63/0218 (2013.01); H04L 63/0236 (2013.01); H04L 63/0254 (2013.01); H04L 63/0263 (2013.01); H04L 63/0272 (2013.01); H04L 12/4641 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A network system operating a virtual network over the top of one or more underlying packet networks, the network system comprising:
a plurality of endpoint devices;
a plurality of access point servers including two or more access point servers granted access to the virtual network; and
a set of one or more control servers configured to
maintain a central device registry of information for each endpoint device and access point server that is allowed to access the virtual network,
establish respective secure management tunnels with each of the endpoint devices and each of the access point servers that are granted access to the virtual network, and
for each of multiple devices of the endpoint devices that are granted access to the virtual network,
dynamically determine, based at least on information for a particular device of the multiple devices and information for one or more of the access point servers, a ranked list, for that particular device, of peer access point servers selected from the access point servers that are granted access to the virtual network, and
configure that particular device, over the secure management tunnel established with that particular device, with the ranked list of peer access point servers and tunnel configuration information to build virtual network tunnels to the peer access point servers;
wherein the multiple devices of the endpoint devices are each configured to
automatically seek establishment of a secure management tunnel with the set of one or more control servers,
upon establishment of the secure management tunnel with the set of one or more control servers, configure themselves based on a configuration supplied over the secure management tunnel and comprising the ranked list of peer access point servers and tunnel configuration information, and
join the virtual network by establishing one or more tunnels, over the top of the one or more underlying packet networks, to one or more of the peer access point servers from the configuration.