The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Apr. 23, 2019

Filed:

Dec. 02, 2014
Applicant:

Akamai Technologies, Inc., Cambridge, MA (US);

Inventors:

Brandon O. Williams, Revere, MA (US);

Martin K. Lohner, Cambridge, MA (US);

Kevin Harmon, Somerville, MA (US);

Jeffrey Bower, New York, NY (US);

Assignee:

Akamai Technologies, Inc., Cambridge, MA (US);

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); H04L 12/46 (2006.01);
U.S. Cl.
CPC ...
H04L 63/164 (2013.01); H04L 12/4633 (2013.01); H04L 63/0272 (2013.01); H04L 63/0471 (2013.01);
Abstract

A mechanism to facilitate a private network (VPN)-as-a-service, preferably within the context of an overlay IP routing mechanism implemented within an overlay network. A network-as-a-service customer operates endpoints that are desired to be connected to one another securely and privately using the overlay IP (OIP) routing mechanism. The overlay provides delivery of packets end-to-end between overlay network appliances positioned at the endpoints. During such delivery, the appliances are configured such that the data portion of each packet has a distinct encryption context from the encryption context of the TCP/IP portion of the packet. By establishing and maintaining these distinct encryption contexts, the overlay network can decrypt and access the TCP/IP flow. This enables the overlay network provider to apply one or more TCP optimizations. At the same time, the separate encryption contexts ensure the data portion of each packet is never available in the clear at any point during transport.


Find Patent Forward Citations

Loading…