Automatic VPN Client Initialization on Unsecure Wireless Networks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Public wireless networks are often unsecure, posing risks to privacy and security as sensitive information can be intercepted and maliciously attacked, especially when users engage in online activities like commerce or banking without awareness of automatic information transfers.

Innovation Solution

A method and system for automatically establishing a Virtual Private Network (VPN) on a mobile device by detecting unsecure wireless connections, probing for VPN server accessibility, initializing and terminating a VPN client as needed, and routing network traffic through the VPN link to ensure secure data transfer.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a VPN client is continuously executed to secure network traffic over unsecure wireless networks, then security and integrity of data are improved, but power consumption increases and battery life decreases

Engineering Contradiction:
Improvesecurity and integrity of dataVSAvoidpower consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The VPN client is implemented with dynamic execution characteristics - it automatically starts when an unsecure wireless network is detected and automatically stops when a secure network is detected or connection is lost. This dynamic on-demand execution mode maintains security reliability when needed while minimizing power consumption during normal operation.

Inventive Principle:
Principle #15Dynamics

2Use of energy by moving object

If a VPN client is manually initialized and terminated by users, then power consumption is reduced, but user convenience and ease of operation deteriorate

Engineering Contradiction:
Improvepower consumptionVSAvoiduser convenience
Core Design Contradiction:
Use of energy by moving objectVSEase of operation

Solution Approach 1:

The system implements automatic detection of wireless network security status and self-managed VPN client initialization and termination. The mobile device autonomously monitors network conditions, determines when VPN protection is needed, and executes the VPN client without requiring user intervention. This self-service approach simultaneously achieves power savings and maintains user convenience.

Inventive Principle:
Principle #25Self-service

3Ease of operation

If the VPN client is automatically initialized based on network detection, then ease of operation is improved, but device complexity increases

Engineering Contradiction:
Improveautomatic VPN establishmentVSAvoidsystem complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The automatic VPN establishment functionality is integrated into the existing wireless network management stack of the mobile device. The system merges network detection capabilities with VPN client management, utilizing existing network monitoring mechanisms and combining them with automated VPN initialization logic. This integration approach provides automatic operation while minimizing the increase in overall system complexity.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS10440762B2Automatic establishment of a VPN connection over unsecure wireless connection
Publication Date: 2019.10.08 CHECK POINT SOFTWARE TECH LTD
  • US10440762B2 patent drawing
  • US10440762B2 patent drawing

AI summary

System and method for automatically establishing a Virtual Private Network (VPN) link between a mobile device and a VPN server over an unsecure wireless network, comprising, at the mobile device, detecting an attempt to establish a wireless connection to the internet via an unsecure wireless network, probing the unsecure wireless network to determine accessibility over the unsecure wireless network to a VPN server, automatically initializing, based on the determination, a VPN client, the VPN client executed to establishes a VPN link between the mobile device and the VPN server over the unsecure wireless network, directing network traffic of the mobile device through the VPN link and automatically terminating the VPN client when the mobile device disconnects from the unsecure wireless network.