Extending a local area network securely

Patent metadata

Field	Value
Publication number	US-11652694-B2
Application number	US-202117391725-A
Country	US
Kind code	B2
Filing date	Aug 2, 2021
Priority date	Aug 2, 2021
Publication date	May 16, 2023
Grant date	May 16, 2023

Abstract

A first router obtains a first network address of a first local area network (LAN) implemented by a second router and a first subnet mask associated with the first LAN. The first router causes the establishment of a secure communications channel with the second router. The first router determines that a computing device seeks to join the first LAN. The first router obtains an internet protocol (IP) address that has a same network address as the first network address and sends, to the computing device, the IP address and the first subnet mask for use by the computing device.

First claim

What is claimed is:

1. A method comprising:
obtaining, by a first router, an address of a second router that implements a first local area network (LAN);
causing, by the first router, the establishment of a secure communications channel with the second router by using the address of the second router;
determining, by the first router, that a computing device seeks to join the first LAN;
obtaining, by the first router, an internet protocol (IP) address and a first subnet mask wherein the first subnet mask as applied to the IP address yields a same network address as a first network address of the first LAN; and
sending, by the first router to the computing device, the IP address and the first subnet mask associated with the first LAN for use by the computing device.

2. The method of claim 1 further comprising:
prior to obtaining the IP address, receiving, by the first router from the computing device, a Dynamic Host Configuration Protocol (DHCP) request message; and wherein sending the IP address and the first subnet mask for use by the computing device further comprises sending a DHCP acknowledgement message that includes the IP address and the first subnet mask.

3. The method of claim 1 further comprising sending, by the first router to the second router, a message indicating that the computing device is joining the first LAN.

4. The method of claim 1 wherein obtaining, by the first router, the address of the second router further comprises:
requesting, from a server computing device that is on a different network than the first LAN, configuration information associated with the first LAN, the configuration information including the address of the second router; and
receiving, from the server computing device, the configuration information.

5. The method of claim 1 further comprising:
receiving, by the first router from the computing device, an address resolution protocol (ARP) request message requesting a link layer address associated with an identified IP address;
sending, by the first router to the second router via the secure communications channel, the ARP request message;
receiving, by the first router from the second router via the secure communications channel, an ARP reply message that contains the link layer address of a computing device connected to the first LAN; and
sending the ARP reply message to the computing device.

6. The method of claim 1 further comprising:
prior to establishing the secure communications channel with the second router, connecting, by the first router, to a second LAN that has a second network address that is defined by a second subnet mask, the second network address being different from the first network address.

7. The method of claim 6 further comprising:
prior to determining that the computing device seeks to join the first LAN, determining, by the first router, a Service Set Identifier (SSID) of the first LAN and a password associated with the first LAN;
wirelessly broadcasting, by the first router, the SSID; and
wherein determining that the computing device seeks to join the first LAN comprises receiving, by the first router from the computing device, a wireless request to join the SSID.

8. The method of claim 7 wherein determining, by the first router, the SSID of the first LAN and the password associated with the first LAN comprises requesting, from a server computing device that is on a different network than the first LAN, configuration information associated with the first LAN, the configuration information including the SSID of the first LAN and the password associated with the first LAN.

9. The method of claim 1 further comprising:
requesting, by the first router from a server computing device that is on a different network than the first LAN, configuration information associated with the first LAN, the configuration information including firewall rules that prohibit accessing a particular web address;
receiving, from the server computing device, the configuration information;
receiving, by the first router from the computing device, a request to access the particular web address;
accessing, by the first router, the firewall rules; and
based on the firewall rules, rejecting the request.

10. The method of claim 1 wherein the first router is connected to a second network that is a different network from the first LAN.

11. The method of claim 1 further comprising:
receiving, by the first router from the computing device, a media access control (MAC) broadcast message; and
sending, by the first router to the second router, the MAC broadcast message.

12. The method of claim 1 wherein the first router communicates with the second router via an intermediate network that is different from the first LAN.

13. The method of claim 1 further comprising requesting, by the first router from a server computing device, LAN configuration information that identifies the second router and an IP address of the second router.

14. The method of claim 13 further comprising:
receiving, by the first router via user input, authentication information comprising a user identifier and a password;
authenticating, by the first router with the server computing device, a user using the user identifier and the password; and
subsequently requesting, by the first router from the server computing device, the LAN configuration information that identifies the second router and the IP address of the second router.

15. The method of claim 1 further comprising:
receiving, by the first router from the second router, a message indicating a new computing device has joined the first LAN, the message including a MAC address of the new computing device and an IP address of the new computing device; and
updating, by the first router, configuration information to include the MAC address of the new computing device and the IP address of the new computing device.

16. The method of claim 1 further comprising:
receiving, by the first router from the computing device, a first message destined for a destination computing device that is connected to the first LAN, the first message identifying a MAC address of the destination computing device; and
sending, by the first router to the second router via the secure communications channel, the first message.

17. The method of claim 16 further comprising:
receiving, by the first router from the computing device, a second message destined for the destination computing device, the second message identifying a MAC address of the first router and an IP address that is not on the first LAN;
sending, by the first router to a third router that is not on the first LAN, the second message for subsequent routing to the destination computing device.

18. A router comprising:
a memory; and
a processor device coupled to the memory to:
obtain an address of a second router that implements a first local area network (LAN);
cause the establishment of a secure communications channel with the second router by using the address of the second router;
determine that a computing device seeks to join the first LAN;
obtain an internet protocol (IP) address and a first subnet mask wherein the first subnet mask as applied to the IP address yields a same network address as a first network address of the first LAN; and
send, to the computing device, the IP address and a first subnet mask associated with the first LAN for use by the computing device.

19. The router of claim 18 wherein to obtain the address of the second router, the processor device is

Assignees

• Charter Communications Operating Llc

Inventors

• Wright Ethan
• Labbee Micah

Classifications

• H04L41/12 Primary

  Discovery or management of network topologies · CPC title

• H04L2101/622

  Layer-2 addresses, e.g. medium access control [MAC] addresses · CPC title

• H04L61/5014

  using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP] · CPC title

• H04L41/0895

  Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements · CPC title

• H04L61/103

  across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP] · CPC title