Abstract: Transmitting data over a VPN connection includes receiving, at a VPN concentrator, from a VPN user device, an initiation request of a first connection, initialized to have an initial MSS, from the VPN user device to a target. The first connection is terminated at the VPN concentrator. A second connection is established across a VPN tunnel between the VPN concentrator and the VPN user device. A third connection is established between the VPN concentrator and the target. A first MSS for the second connection and a second MSS for the third connection are set. One of the first MSS or the second MSS are set to prevent packet fragmentation due to VPN-related encapsulation. First data packets are transmitted between the VPN concentrator and the VPN user device using the first MSS. Second data packets are transmitted between the VPN concentrator and the target using the second MSS.

Abstract: A request for an optimal virtual private network (VPN) server for a user device is received. The optimal VPN server is selected from a set of VPN servers. For each of the VPN servers, respective numerical weights are calculated based on respective conditions. A respective penalty score is calculated for each of the VPN servers based on the respective numerical weights. The optimal VPN server for the user device is identified based on the respective penalty scores. An internet protocol (IP) address of the optimal VPN server is transmitted to the user device.

Abstract: A request for a virtual private network (VPN) server that is an optimal VPN server for a user device is received. Respective penalty scores for VPN servers including the optimal VPN server are calculated. A respective penalty score of a VPN server is calculated based on whether the VPN server is in a same country as the user device and a proximity of the VPN server to an international Internet exchange hub. The optimal VPN is server is selected based on the respective penalty scores. An internet protocol (IP) address of the optimal VPN server is transmitted to the user device.

Abstract: The present embodiment relates to method and system for dynamically identifying the optimal servers from among a plurality of VPN servers. The method and system to score or rank the plurality of VPN servers through mathematical operations to produce a scored list of servers. The servers are dynamically scored based on several server conditions including but not limited to server location, server hub score, server creation time, server load, captcha rates and other like information. The method and system further calculate server penalty scores for a plurality of VPN servers and dynamically identifies optimal servers based on the least server penalty score. Further, the method and system provide means for the VPN service provider to direct their users to connect with the optimal servers consistently.

Abstract: An encrypted tunnel is established between a virtual private network (VPN) server and a VPN user device. A request to establish a connection with a target device is received from the VPN user device. The request uses initial connection parameters. The connection the converted into a first connection between the VPN user device and the VPN server and a second connection between the VPN server and the target device. The first connection uses first connection parameters and the second connection uses second connection parameters. At least one parameter of the first connection parameters or of the second connection parameters is different from a corresponding parameter of the initial connection parameters. First network packets received from the VPN user device according to the first connection parameters are converted into second network packets according to the second connection parameters. The second network packets are transmitted to the target device.

Abstract: Systems and methods for effectively managing security and privacy measures during a user's connectivity session with a VPN service are provided. The systems and methods use a computer program that introduces a double-NAT feature at the network layer and a temporary hash table containing the minimally necessary temporary data to link two NAT sessions together in a secure manner. The systems and methods avoid including the dynamic management of IP addresses or requiring each client to have an IP address assigned beforehand to avoid compromising the user's identity by hard linking the session traces with the client.

Abstract: A method and apparatus for establishing a trust relationship between users is disclosed. The apparatus includes at least two user devices containing the Application, a service provider server (SPS) comprising an application programming interface (API), a network communicably coupling the sender device, the receiver device and the SPS, and an out-of-band (OOB) channel, separate from the network, communicably coupling the sender device and the receiver device. The method includes obtaining a receiver's Public Key provided by an Application Programming Interface (API) on an service provider server, encrypting a verification message with the Receiver's Public key and the Sender's Private Key, sending the encrypted verification message from the Sender's device to the Receiver's device through the out-of-band channel, decrypting the encrypted verification message using Receiver's Private Key and Sender's Public Key, and communicating decrypted verification message via out-of-band channel.

Abstract: A method for improving VPN service transmission quality is disclosed where end-to-end TCP connections, occurring over a VPN tunnel, are terminated at the VPN concentrator and converted into multi-part TCP connections with MSS parameter set independently for each part of the connectivity. To facilitate the termination and multi-part connection management a packet processing software may be implemented as part of the VPN concentrator functionality or as an independent component.

Abstract: The present embodiment relates to method and system for dynamically identifying the optimal servers from among a plurality of VPN servers. The method and system to score or rank the plurality of VPN servers through mathematical operations to produce a scored list of servers. The servers are dynamically scored based on several server conditions including but not limited to server location, server hub score, server creation time, server load, and other like information. The method and system further calculate server penalty scores for a plurality of VPN servers and dynamically identifies optimal servers based on the least server penalty score. Further, the method and system provide means for the VPN service provider to direct their users to connect with the optimal servers consistently.

Abstract: A system and method for transferring media over a VPN connection are provided. The method includes receiving a first request for connection to a first target at a VPN server from a user device, upon which a domain name of the first target is resolved at the VPN server. A session identification (ID) string for the first request is generated, and the first request and the session ID string are sent from the VPN server to a proxy media server (PMS). A second request for connection to the first target or to a second target, different from the first target is received at the VPN server. The session ID string for the second request is determined or assigned or both, and the second request and the session ID string are sent from the VPN server to the PMS.

Abstract: A method for improving VPN service transmission quality is disclosed where end-to-end TCP connections, occurring over a VPN tunnel, are terminated at the VPN concentrator and converted into multi-part TCP connections with MSS parameter set independently for each part of the connectivity. To facilitate the termination and multi-part connection management a packet processing software may be implemented as part of the VPN concentrator functionality or as an independent component.

Abstract: A system and method of relaying all requests of a session through a single exit node or proxy server is provided. The method comprises several steps, such as relaying a request through a dedicated proxy media streaming server, hashing session identifier value and transmitting it across different protocols. The system assigns a unique identifier to a session. The unique identifier is inserted in various protocols and communicated to a proxy server provider. All subsequent requests are serviced through the same last-mile proxy server or exit node.