A VIRTUAL PRIVATE NETWORK CLIENT COMPUTER WITH TRAFFIC FILTER

Patentradars sammanfattning

Sectra-Communications AB discloses a VPN client computer in which a traffic filter is inserted as a device driver at the lowest possible layer of the network stack (e.g., the data-link/MAC layer, immediately above the Miniport Adapter), ensuring every inbound and outbound packet passes through it regardless of routing rules or firewall configuration. The filter enforces that outgoing packets originate from the VPN client software and are addressed to the VPN server, while incoming packets are accepted only from the VPN server or are known access-network establishment packets (ARP, DHCP, ICMPv6, etc.). Crucially, the filter also rewrites permitted pass-through packets to strip any data unnecessary for their declared purpose, blocking piggybacking and tunneling attacks such as TunnelVision/Tunnelv1. The filter is mandatory before OS boot, monitored at runtime, and communicates with the VPN client software via APIs to receive server IP addresses and port numbers dynamically.

AI-genererad och redaktionellt processad.