Raptor Systems, Inc.

Jeffrey A Kraemer

Alan Joseph Kirby

Ashok P Nadkarni

Roger H Levesque

David C Waterman

The invention features receiving encrypted network packets sent over a network at a network interface computer, and passing the encrypted network packets to a computer on an internal network. The invention also features receiving encrypted network packets at a first computer over a network from a second computer, examining a field in each network packet to determine which of a plurality of encryption algorithms was used to encrypt the network packet, and decrypting the network packet in accordance with the determined encryption algorithm. The invention further features receiving network packets sent over a network, determining which virtual tunnel each network packet was sent over, and routing each network packet to a destination computer in accordance with the determined virtual tunnel. The invention features encrypting network packets at a computer connected to an internal network, passing the encrypted network packet over the internal network to a public network interface computer, and passing the encrypted network packet over a public network connected to the network interface computer.

Transferring encrypted packets over a public network

The invention features a method for enabling computers to communicate using encrypted network packets. A configuration request is sent over a network from a first computer to a second computer, and tunnel record information is sent over the network from the second computer to the first computer. The tunnel record information is encrypted in accordance with a temporary configuration password. The invention also features a method for updating a tunnel record. A connection request is sent from a first computer to a second computer, and the first computer is authorized. A tunnel record corresponding to the connection request with the first computer's network address is then updated.

Key management for network communication

Back door packet communication between a workstation on a network and a device outside the network is identified by detecting packets that are associated with communication involving devices outside the network, and identifying packets, among those detected packets, that are being sent or received by a device that is not authorized for communication with devices outside the network.

Growing community of inventors

Northboro, MA, United States of America

Jeffrey A Kraemer