Multi-wrapped virtual private network

摘要

The invention includes a system for transmitting multi-wrapped VPN enabled-data across a communication network from a device to another destination device within a remote protected network. The device comprises a software stack, hardware layer, application-layer VPN software, link-layer VPN software, and user-based application software. Next, the device is coupled to a communication network. Next, the system includes a link-layer VPN aggregator and an application-layer VPN aggregator. Finally, the system includes a protected network that includes the destination device. The invention includes embodiments for configuring a device to transmit multi-wrapped VPN enabled-data and processes for transmitting multi-wrapped VPN enabled-data across a communication network from a device to another destination device within a remote protected network. Finally, the invention includes inverse processes so the destination device can transmit data back through the communication network and to the device.

主权项

1. A method for transmitting a data set across a communication network from a first device to a remote protected network comprising:
transmitting the data set derived from a user-based software application installed in the first device to an application-layer VPN program; encrypting the data set with an application-layer VPN program to produce an encrypted data set; sending the encrypted data set to a local network interface; capturing the encrypted data set transmitted to the local network interface with a link-layer VPN program; encrypting the encrypted data set again with the link-layer VPN program before the encrypted data set leaves the device yielding a multi-encrypted data set; sending the multi-encrypted data set across the communication network; receiving the multi-encrypted data set with a link-layer VPN aggregator device which is coupled to the communication network and inversing the encryption performed by the link-layer VPN program to yield the encrypted data set; using the link-layer VPN aggregator device to send the encrypted data set to an application-layer VPN aggregator device; receiving the encrypted data set with the application-layer VPN aggregator device and inversing the encryption performed by the application-layer VPN program to yield the data set; and sending the data set to a destination device via the remote private network.