Dynamic VPN Profile Binding for Application-Specific Routing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Managing VPN connectivity for multiple and dynamic data communications is challenging, particularly for users who need to access regionally restricted content or sensitive enterprise data, as existing solutions do not effectively handle geographic location-based VPN associations and security requirements.

Innovation Solution

A computing device is configured to associate multiple packages of code with respective VPNs through configuration data, allowing users to select VPNs based on geographic location or purpose, and establish secure VPN tunnels for data communication, enabling seamless access to regionally restricted content and secure data transmission.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a user manually configures VPN connections for each application, then security and access control are improved, but device complexity and user burden increase

Engineering Contradiction:
ImproveVPN connection securityVSAvoidVPN management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments VPN configuration management by creating separate VPN profiles that can be independently configured and assigned to specific applications. Each application can be associated with a specific VPN profile, allowing granular control over which applications use which VPN connections without requiring manual per-connection configuration by the user.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system automatically manages VPN connection establishment and switching based on application selection. When an application is launched, the system automatically selects and establishes the appropriate VPN connection based on pre-configured associations, eliminating the need for users to manually manage VPN connections for each application.

Inventive Principle:
Principle #25Self-service

2Adaptability or versatility

If multiple VPN connections are maintained simultaneously for different applications, then access to regionally restricted content is improved, but network resource consumption increases

Engineering Contradiction:
ImproveAccess to regionally restricted contentVSAvoidNetwork resource consumption
Core Design Contradiction:
Adaptability or versatilityVSUse of energy by moving object

Solution Approach 1:

The VPN connection configuration is made dynamic rather than static. The system automatically switches between different VPN connections based on which application is currently active, rather than maintaining all VPN connections simultaneously. This dynamic switching allows access to multiple regionally restricted services while consuming network resources only when needed.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

A single VPN management system provides universal access to multiple regionally restricted services by maintaining a pool of VPN connections that can be dynamically allocated to different applications as needed, rather than requiring dedicated VPN connections for each service.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Ease of operation

If automatic VPN connection establishment is implemented, then ease of operation is improved, but loss of user control over VPN selection increases

Engineering Contradiction:
ImproveVPN connection establishmentVSAvoidUser control over VPN selection
Core Design Contradiction:
Ease of operationVSLoss of information

Solution Approach 1:

The system performs preliminary configuration by allowing users to pre-associate applications with VPN profiles before actual use. During this setup phase, users explicitly define which applications should use which VPN connections. Once configured, the automatic selection process follows user-defined preferences, maintaining user control while enabling seamless operation.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10868696B2Managing VPN connectivity for data communications
Publication Date: 2020.12.15 MALIKIE INNOVATIONS LTD
  • US10868696B2 patent drawing
  • US10868696B2 patent drawing
  • US10868696B2 patent drawing

AI summary

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for managing virtual private network (VPN) connectivity for data communications are disclosed. In one aspect, a method includes storing, in a computer-readable medium of a computing device, packages of code and configuration data that associate the packages of code with respective virtual private networks (VPNs), the configuration data associating at least one of the packages of code with at least two of the VPNs, and, in response to a request to execute application code included in a first package of code, identifying, based on the configuration data, a first VPN associated with the first package of code and binding a communication interface of the first package of code to a connection with the first VPN.