THELA TAURONOLULUUS 20170279769A1 IN NA MAALIM ( 19) United States (12 ) Patent Application Publication (10 ) Pub. No. : US 2017 /0279769 A1 Jachniuk ( 43) Pub . Date : Sep . 28 , 2017 ( 54 ) AUTOMATED CREATION AND USE OF VPN H04L 12 /46 (2006 .01 ) CONFIGURATION PROFILES H04L 29 / 08 (2006 . 01) (52 ) U . S . CI. ( 71) Applicant: Fortinet, Inc. , Sunnyvale , CA (US ) CPC . .. .. H04L 63 /0227 (2013 .01 ) ; H04L 12 /4641 ( 2013 .01 ) ; H04L 67130 ( 2013 .01 ) ; H04L ( 72 ) Inventor: Jonathan D . Jachniuk , 41/ 0806 ( 2013 .01 ) ; H04L 51 /04 ( 2013 . 01 ) ; Modi' in -Maccabim -Re ’ ut ( IL ) H04L 63 /0428 (2013 .01 ) ; H04L 63 / 06 ( 73) Assignee : Fortinet, Inc ., Sunnyvale , CA (US ) (2013 . 01 ) ; G06K 7 / 10722 ( 2013 .01 ) (57 ) ABSTRACT (21 ) Appl. No . : 15 /078 , 324 Systems and methods for automatically obtaining virtual private network (VPN ) connection profile data from a bar ( 22 ) Filed : Mar. 23 , 2016 code are provided . According to one embodiment, a client security application obtains a barcode , wherein the client Publication Classification security application is installed on a client machine and is (51 ) Int . CI. used for managing the security of the client machine. The H04L 29 / 06 ( 2006 . 01 ) client security application identifies a configuration profile GO6K 7 / 10 ( 2006 .01 ) of a virtual private network ( VPN ) that is encoded by the H04L 12 / 24 ( 2006 .01 ) barcode and creates the configuration profile of the VPN at H04L 12 /58 ( 2006 .01 ) the client machine . 100 Remote Remote Laptop 122 Mobile Device 123 Remote Branch Office PC 121 Client Security APP Client Security APP Network 124 Client Security APP VPN VPN VPN configuration Tunnel Tunnel VPN Tunnel VPN Internet Tunnel 130 VPN Tunnel www w w w w w w wwwwwwwwwwwwwww w wwwww wwwwwwwwwwwwwwwwwwwwwwwwwwwwwww Private Network 110 vvvvvvvvvvvvvvvvvvvvvvvvvvvvvv wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwing Network Appliance 111 VPN Gateway 111a . Local Server Local PC Local Laplop Local Mobile 112 113 114 Device 115 Patent Application Publication Sep . 28 , 2017 Sheet 1 of 6 US 2017 / 0279769 A1 - . BranchOffice Network 124 VPNconfiguration VPN Tunnel . IVY LocalMobile Device115 . * 123 * Remote MobileDevice ClientSecurityAPP * VPN =LocalLaptop 114 Tunnel * VPN * 130 Tunnel NetworkAppliance111VPNGateway111a FIG.1 Internet - Laptop122 - Remote ClientSecurityAPP VPN =LocalPC 113 Tunnel - ••••••••••• .••••• . -. LocalServer 112 PC121 PrivateNetwork110 Remote ClientSecurityAPP Tunnel 3 . 100 Patent Application Publication Sep . 28 , 2017 Sheet 2 of 6 US 2017 / 0279769 A1 Start 201 Add a new VPN profile 202 Obtain a barcode by a client security application 203 Decode the barcode 204 Decrypt text to get a VPN configuration profile 205 Create a VPN configuration profile on the client machine 206 00000000000000000000000000000000000000000000000000000000000000000 Launch the VPN connection Le s sinisisissa ( EndEnd ) FIG . 2 Patent Application Publication Sep . 28 , 2017 Sheet 3 of 6 US 2017 / 0279769 A1 WWWWWWWWWWWWWWWWWWWWWWWWWWWWY E & te decis c033eci Desata suectes eritis . comed FIG . 3 FIG . 4A FIG . 4B Patent Application Publication Sep . 28 , 2017 Sheet 4 of 6 US 2017 / 0279769 A1 Canecios se MESTO for p o stay vanwirt. com customixx porno Collection remos en los Saxx MER GRIEGOS 982 Onouts 80 o ovocate se FIG . 5 Patent Application Publication Sep . 28 , 2017 Sheet 5 of 6 US 2017 / 0279769 A1 DecryptionModule 603 VPNConnection Module 606 ClientSecurityApplication600 BarcodeDecoderBarcodeDecoder 602 VPNProfile Repository 605 FIG.6 BarcodeReceiverBarcodeReceiver 601 ProfileManagement Module 604 Patent Application Publication Sep . 28 , 2017 Sheet 6 of 6 US 2017 / 0279769 A1 MassStorageDevice 725 yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy Processor 705 Read-Only Memory 720 Bus730 FIG.7 Communication Port(s) 710 MainMemory 715 attittieddittotta donna 700 ExternalStorageDevice 740 US 2017 /0279769 A1 Sep . 28 , 2017 AUTOMATED CREATION AND USE OF VPN the figures of the accompanying drawings and in which like CONFIGURATION PROFILES reference numerals refer to similar elements and in which : 100091. FIG . 1 is a block diagram illustrating an exemplary COPYRIGHT NOTICE network architecture in which embodiments of the present invention may be employed . [0001 ] Contained herein is material that is subject to [0010 ] FIG . 2 is a flow diagram illustrating automated copyright protection . The copyright owner has no objection creation of a VPN configuration profile and launching of a to the facsimile reproduction of the patent disclosure by any VPN connection in accordance with an embodiment of the person as it appears in the Patent and Trademark Office present invention . patent files or records, but otherwise reserves all rights to the [0011 ] FIG . 3 illustrates a graphical user interface (GUI ) copyright whatsoever. Copyright©2016 , Fortinet, Inc . screen shot , which may be used to create a new VPN configuration profile at a client machine , in accordance with BACKGROUND an embodiment of the present invention . [ 0002] Field [0012 ] FIGS . 4A and 4B illustrate exemplary barcodes [ 0003 ] Embodiments of the present invention generally with encoded VPN configuration profiles in accordance with relate to the field of network security techniques . In particu embodiments of the present invention . lar , various embodiments relate to methods for establishing [ 0013 ] FIG . 5 illustrates a graphical user interface screen a virtual private network ( VPN ) connection by scanning a shot, which may be used to setup a new VPN configuration barcode . profile at a client machine , in accordance with an embodi [0004 ] Description of the Related Art ment of the present invention . [0005 ] Enterprise customers are now demanding cost [0014 ] FIG . 6 is a block diagram illustrating functional effective, outsourced connectivity and security services , units of a client security application in accordance with an such as Virtual Private Networks ( VPNs) . A VPN is a private embodiment of the present invention . network that takes advantage of a public telecommunication [0015 ) FIG . 7 is an exemplary computer system in which network ( e . g ., the Internet ) and maintains privacy through or with which embodiments of the present invention may be use of tunneling protocols and security procedures . Current utilized . VPN setup procedures are complicated , requiring network administrators as well as the end users to perform extensive DETAILED DESCRIPTION manual configurations on both peers of the VPN connection [0016 ] Systems and methods are described for automati before the VPN can be used . The parameters for setting up cally obtaining virtual private network ( VPN ) connection a VPN connection at the client side may include one or more profile data from a barcode . According to one embodiment, of: VPN type ( e . g . , Secure Sockets Layer (SSL ) - VPN or a client security application obtains a barcode , wherein the Internet Protocol Security ( IPsec ) VPN ) , connection name, client security application is installed on a client machine description , VPN gateway address , port number and user and is used for managing the security of the client machine . authentication information . One or more VPN configuration The client security application identifies a configuration profiles may be created at the client machine to store these profile of a virtual private network (VPN ) that is encoded by VPN parameters . The client user may select a VPN con the barcode and creates the configuration profile of the VPN figuration profile and launch a corresponding VPN connec at the client machine . tion . The procedure to configure a VPN can be complicated [0017 ] In the following description , numerous specific and fallible because many parameters are involved , shared details are set forth in order to provide a thorough under and must match on both sides of the connection . Therefore , standing of embodiments of the present invention . It will be there is a need for a simplified way to establish and manage apparent , however , to one skilled in the art that embodiments VPN connection profiles and launch VPN connections by of the present invention may be practiced without some of client devices . these specific details . In other instances , well -known struc tures and devices are shown in block diagram form . SUMMARY [0018 ] Embodiments of the present invention include vari [ 0006 ] Systems and methods are described for automati ous steps , which will be described below . The steps may be cally obtaining virtual private network ( VPN ) connection performed by hardware components or may be embodied in profile data from a barcode . According to one embodiment, machine -executable instructions, which may be used to a client security application obtains a barcode , wherein the cause a general- purpose or special- purpose processor pro client security application is installed on a client machine grammed with the instructions to perform the steps . Alter and is used for managing the security of the clientmachine . natively, the steps may be performed by a combination of The client security application identifies a configuration hardware , software , firmware and / or by human operators . profile of a virtual private network (VPN ) that is encoded by [00191 Embodiments of the present invention may be the barcode and creates the configuration profile of the VPN provided as a computer program product, which may at the client machine . include a machine - readable storage