Seamless location aware network connectivity

Patent metadata

Field	Value
Publication number	US-10116580-B2
Application number	US-16304608-A
Country	US
Kind code	B2
Filing date	Jun 27, 2008
Priority date	Jun 27, 2008
Publication date	Oct 30, 2018
Grant date	Oct 30, 2018

Abstract

Described is a technology by which a seamless automatic connection to an (e.g., corporate) network is made for a client device. Upon detecting a need for a connection to a network, such as by intercepting a communication directed towards a network destination, a list of available connection methods is automatically obtained based on the device's current location data (e.g., LAN or remote) and policy information. An available connection method from the list is selected, e.g., in order, and an attempt is made to establish a connection via that connection method. If the attempt fails, another attempt is made with a different connection method, and so on, until a connection method succeeds. Additional seamlessness from the user's perspective is provided via a credentials vault, by which stored credentials may be retrieved and used in association with the access method being attempted.

First claim

What is claimed is:

1. A method performed on a computing device that includes at least one processor and memory, the method comprising:
intercepting, by the computing device from a client endpoint device of a user, an outgoing communication directed to a destination network;
determining, by the computing device based on a location of the client endpoint device and on a location of the destination network, access methods that are each configured for establishing a connection between the client endpoint device and the destination network on behalf of the user;
establishing, by the computing device via a first of the access methods, the connection between the client endpoint device and the destination network on behalf of the user; and
verifying, by the computing device, the connection between the client endpoint device and the destination network.

2. The method of claim 1 where one of the access methods is based on Local Area Network (“LAN”) functionality.

3. The method of claim 1 where the determining is further based on policy associated with the destination network.

4. The method of claim 1 where one of the access methods is based on Internet Protocol Security (“IPSec”) functionality.

5. The method of claim 1 further comprising indicating, in response to the verifying, connectivity via the access method used in the establishing.

6. The method of claim 1 where one of the access methods is based on Terminal Services (“TS”) functionality.

7. The method of claim 1 where one of the access methods is based on Virtual Private Network (“VPN”) functionality.

8. At least one computer storage device comprising computer-executable instructions that, based on by a computing device that includes at least one processor and memory, configure the computing device to perform actions comprising:
intercepting, by the computing device from a client endpoint device of a user, an outgoing communication directed to a destination network;
determining, by the computing device based on a location of the client endpoint device and on a location of the destination network, access methods that are each configured to establish a connection between the client endpoint device and the destination network on behalf of the user;
establishing, by the computing device via a first of the access methods, the connection between the client endpoint device and the destination network on behalf of the user; and
verifying, by the computing device in response to the attempting succeeding or, the connection between the client endpoint device and the destination network.

9. The at least one computer storage device of claim 8 where one of the access methods is based on Local Area Network (“LAN”) functionality.

10. The at least one computer storage device of claim 8 where the determining is further based on policy associated with the destination network.

11. The at least one computer storage device of claim 8 where one of the access methods is based on Internet Protocol Security (“IPSec”) functionality.

12. The at least one computer storage device of claim 8 , the actions further comprising indicating, in response to the verifying, connectivity via the access method used in the establishing.

13. The at least one computer storage device of claim 8 where one of the access methods is based on Terminal Services (“TS”) functionality.

14. The at least one computer storage device of claim 8 where one of the access methods is based on Virtual Private Network (“VPN”) functionality.

15. A computing device comprising:
at least one processor;
memory coupled to the at least ne processor;
a communication interceptor mechanism implemented at least in part by the at least one processor and configured to intercept, from a client endpoint device of a user, an outgoing communication directed to a destination network;
a policy advisor implemented at least in part by the at least one processor and configured to determine obtaining, based on a location of the client endpoint device and on a location of the destination network, access methods that are each configured to establish a connection between the client endpoint device and the destination network on behalf of the user;
a connectivity establisher mechanism implemented at least in part by the at least one processor and configured to establish, via a first of the access methods, the connection between the client endpoint device and the destination network on behalf of the user; and
the connectivity establisher mechanism further configured to verify the connection between the client endpoint device and the destination network.

16. The computing device of claim 15 where one of the access methods is based on Local Area Network (“LAN”) functionality.

17. The computing device of claim 15 where the access methods are determined based on policy associated with the destination network.

18. The computing device of claim 15 where one of the access methods is based on Internet Protocol Security (“IPSec”) functionality.

19. The computing device of claim 15 , the actions further comprising indicating, in response to the verifying, connectivity via the access method used to establish the connection.

20. The computing device of claim 15 where one of the access methods is based on Terminal Services (“TS”) functionality or on Virtual Private Network (“VPN”) functionality.

Assignees

• Itshaki Ehud Mordechai
• Nice Nir
• Neystadt Eugene John
• Ben Yochanan Noam Gershon
• Microsoft Technology Licensing Llc

Inventors

• Itshaki Ehud Mordechai
• Nice Nir
• Neystadt Eugene John
• Ben-Yochanan Noam Gershon

Classifications

• H04W76/10

  Connection setup · CPC title

• H04L47/70 Primary

  Admission control; Resource allocation · CPC title