順道VPN 是基於開源及完全去中心化的西蒂姆(Citum)開發的 突破網絡審查（陸：翻墻、科學上網）的VPN工具。它把坊間流行的VPN系統作出了比較重大的改良和升級，幫助用戶克服了重大應用技術疼點。數碼證書被認為比密碼身份驗證更安全，因為數碼證書消除了任何形式的、用戶憑據重置策略的必要性。 順道VPN 用戶以安全數碼證書（“通行證書”） 間接地通過西蒂姆(Citum)的去中心化網絡節點 獲取用戶身份認證 ，而不是使用用戶名及密碼組合在VPN服務器上直接進行認證。
注：西蒂姆(Citium)客戶端App和其內置的即時聊天工具(CIM) 對所有人開源及永久免費使用。
LubeVPN is a VPN Internet censorship circumvention application built on an open-source and fully decentralized technology: Citium. It is a radical departure and upgrade from all the popular VPN systems in the open marketspace, resolving a major technical pain point. Digital certificates is regarded as a more secure regime than password authentication because certificates eliminate the necessity of any sort of credential reset policy. LubeVPN users authenticate indirectly through Citium decentralized network of nodes using their secure digital certificates (“CERT”) instead of directly through the VPN servers using username/password combinations.
Note: Citium Client app and its Instant Messenger (CIM) is open-source and permanently free-to-use for everyone.
免費試用
FREE TRIAL
前提是，您必須經由現有 順道VPN用戶推薦才可獲取免費試用。如果不認識，請您通過西蒂姆(Citium)客戶端App的內置的在線客服 聯絡我們。您可以按以下路徑找到在線客服： > > >
Foremost, you need to know someone who’s already using LubeVPN to refer you in order to get the FREE TRIAL. If you do not know anyone, please contact our LIVE HELP . You can find in the Citium Client app by navigating as follows: > > >
申辦流程
Requisition
找一名持有有效的（即，未逾期的） 順道VPN《通行證書》 的好友，例如 Alice。通過頻外密鑰驗證（OOBA）添加她成爲 Citium 即時聊天應用（CIM） 中的聯絡人。于「通行證書」版面 複製您的《通行證書》 詳情到設備的剪贴板。在你與 Alice 的聊天對話框中黏貼、發送該詳情給她，然後等待她簽署 它。Alice 簽署完畢後，你會在對話框中收到一個互動信息按鈕。您按下該按鈕後即可完成導入 該已被簽署的《通行證書》 到設備內。在「設定」版面 ，撥熄再撥亮 順道VPN的切換鍵去認證 已簽署的證書 。如果認證成功，切換鍵將會轉成綠色 。
- > 加一位 CIM 聯絡人
- 必須持有有效通行證書 †
- 通過頻外密鑰驗證添加
- > > 複製通行證書
- > 黏貼發送 給
- 等 簽署 您的
- 導入 已被簽署通行證書
- > > 認證 您的
- 成功 ；順道VPN 啟用
- 失敗 ；模擬網絡 啟用
† 順道VPN用戶使用安全數字證書（“通行證書”） 來訪問VPN服務，而不是用戶名/密碼組合。所有有效的《通行證書》 都是源自用戶 自我生成的、未被簽署的通行證書 。有效通行證書 是已簽署的和未過期的《通行證書》。它好比一張入場券能授權持有人使用 順道VPN服務。有效通行證書 更可以 讓持有者簽署 其西蒂姆即時聊天工具上其他聯絡人的、未被簽署的通行證書 。有效通行證書 有兩種：被簽署了的、未過期的免費的通行證書 和 付費了的通行證書 。一張被簽署但免費的通行證書 能授權其持有人訪問 順道VPN的免費試用服務。付費續時的通行證書 持有者不單享受更高級的 順道VPN服務，每當受薦人續時後，他更 能賺取可兌換的積分。詳情請參閱推薦人計劃。
Find a friend (e.g. Alice) who holds a valid (i.e. unexpired) LubeVPN CERT. Add Alice as your new Contact in your Citium Instant Messenger (CIM) via out-of-band (OOB) authentication. Go to the Certificate page to copy your CERT , paste and send the details via the dialogue box between you and Alice and wait for her to sign it. Once Alice signs it, you will receive an interactive message button in the dialogue box. You press the button to import the signed CERT to your device. In General Settings , turn off and on the LubeVPN toggle switch to validate the signed CERT . Toggle switch turns to green if validation succeeds.
- Install & open Citium Client
- > Add a CIM Contact
- must holds a valid CERT †
- Add via OOB authentication.
- > > Copy CERT
- > Paste & send to
- Wait for to sign your
- Import signed CERT
- > > Validate your
- Success ; VPN Starts!
- Fail ; Simulated Net Only.
† LubeVPN users use secure digital certificates (“CERTs”) to access VPN service instead of username/password combinations. All valid CERT is originated from self-generating unsigned CERT . A valid CERT is a signed & unexpired CERT , functioning as a ticket/pass, authorizes its holder to access LubeVPN service. A valid CERT also enables its holder to sign the unsigned CERTs held by his/her Citium Instant Messenger (CIM) Contacts. There are two kinds of valid CERT in LubeVPN: signed free CERT & paid CERT . A signed but free CERT authorizes its holder to access a FREE TRIAL of LubeVPN. A holder of paid CERT not only enjoys a higher level of LubeVPN service, but also earns redeemable points whenever the referred users renew their CERTs . Please read the Referral Program for more information.
繞過萬里網審
Censorship Circumvention
順道VPN是基於西蒂姆(Citum)建立的。西蒂姆的去中心化網絡身份及數據混淆技術能讓 順道VPN的用戶匿名地、自由自在地上網。除此之外， 順道VPN能繞過最嚴峻的網絡審查（甚至是其他VPN服務商無法繞過的），所以其用戶能順暢無阻地讀取和瀏覽任何全世界任何一個受到互聯網審查封禁的網站。
LubeVPN is built on Citium. Citium’s decentralized network identity and data obfuscation technology enables LubeVPN users to surf the Internet anonymously and freely. Moreover, LubeVPN can circumvent the strictest Internet censorship that most other VPN service providers cannot circumvent so that users can access and surf any blocked content smoothly.
傳統VPN技術疼點
Technical Pain Point
一方面，世界各地的監管部門利用互聯網審查系統來控制和壓制互聯網內容；另一方面，網民千方百計地設法規避，例用VPN軟件服務去訪問封禁了的網域和IP地址。這些VPN軟件服務有時候能奏效，但絕大多數都不起作用，因為監管部門一直在升級他們的審查技術。個別審查機制的技術領先程度已經超出了一般人的想象，不止限制用戶訪問敏感的網絡域名和IP地址，更會使用機器學習算法來分析互聯網訊息交互數據，鎖定VPN的訊息交互特征以阻止其用戶訪問服務。那些還在用老套的「用戶名/密碼」組合去作為身份驗證機制的VPN服務，在這些侵擾性審查機制面前顯得不堪一擊、格外脆弱。
所有的VPN服務提供商在授權訪問之前，都必須對用戶的訪問權限進行認證。傳統的VPN服務提供商通過用戶端客戶端與VPN服務器端之間的通信（即「雙向握手」）對用戶進行身份驗證的時候會彰顯訊息交互特征。那些越是流行的VPN服務，就越是容易被審查機制偵查到特征，因為流行的VPN服務在互聯網上每日發生成千上萬的雙向握手特征太過顯著。事實上，大多數馳名的VPN品牌都都無法規避越來越嚴峻的網絡審查制度。
On the one hand, regulators use Internet censorship systems to control and suppress Internet contents. On the other hand, Internet surfers use software, such as VPN, to circumvent the suppression so that they can access suppressed web domains and IP addresses. Some can succeed but most fail because regulators are always upgrading their censorship mechanism. The extent of Internet censorship of some regulators has gone beyond just limiting user access to sensitive web domains and IP addresses. Their censorship mechanisms have even started to use machine learning algorithms to analyze Internet traffic data in order to block VPN service access. VPN services that are still using username/password combination as authentication regime are exceptionally vulnerable to this kind of obtrusive Internet censorship.
All VPN service providers have to authenticate their users’ access rights before authorizing access. Conventional VPN service providers authenticate their users through user-side client to VPN-side server communication (i.e. two-way handshake ), which exhibit easily detectable traffic patterns. In fact, the more popular a VPN service becomes, the more susceptible it is to suppression because its tens of thousands of two-way handshake that happens on the Internet are simply too conspicuous. Hence, most of the popular VPN brands fail to circumvent network censorship that’s getting more and more stringent.
去中心化的解决方案
Decentralized Solution
相比之下， 順道VPN 的用戶不使用傳統的、與VPN服務器的雙向握手 進行認證，而是通西蒂姆(Citum)的分佈式網絡節點 進行認證 。與傳統的雙向握手不同， 順道VPN 通過西蒂姆(Citum)的隨機節點 進行多向握手 進行認證 。用戶只可以通過西蒂姆(Citum)網絡節點 間接地與VPN服務器接觸，直到VPN訪問被授權為止，不產生明顯訊息交互特征。事實上，西蒂姆(Citum)客戶端App應用越是流行（即，節點 越多），用戶認證過程中產生的多向握手 與普通的互聯網數據就越無法被區分。因此，使用 順道VPN的互聯網用戶可以規避即便是最嚴酷的審查技術。
In contrast, LubeVPN users do not use conventional two-way handshake to communicate with VPN servers. Instead, the users communicate indirectly with VPN servers through the decentralized Citium network of nodes . Authentication on LubeVPN is more like a multi-way handshake through randomized nodes of Citium. Users engage indirectly with VPN servers through other user nodes of Citium until VPN access is authorized. The process shows no significant traffic patterns. In fact, the more popular Citium Client app becomes (i.e. more nodes ), the more indistinguishable the multi-way handshaking traffic is from regular Internet traffic. Hence, Internet surfers that use LubeVPN can circumvent even the most stringent censorship system.
開天闢地的技術
Ground-Breaking Tech
順道VPN從芸芸最強的加密算法中選擇了合適的算法作為用戶的數據傳輸，可以在特別敏感的社政管理地區繞過萬里的網絡重圍，全自動地幫你選擇最佳服務器，恍如無間地高速通向所有境外受限內容，更可以避免網絡提供商（ISP）的網速限制。 順道VPN整個服務流程百分百完全匿名，絕對不記錄任何用戶個人隱私信息，過程中絕不收取用戶實名電郵或身份證明。用戶只可以通過安全數字證書（“通行證書”） 申辦和激活服務。
LubeVPN utilizes some of the strongest encryption algorithms to transport user data. It automatically chooses the best server that can circumvent blocking, bypass restrictive censorship, and avert ISP bandwidth speed throttling. LubeVPN respects the total privacy of all existing and even prospective users. No private information is ever asked, not to mention recorded. Prospective customers do not need to provide email, name or any kind of identification to use the service. Users can only apply and activate LubeVPN service through secure digital certificates (“CERTs”) .
用戶資訊安全
User InfoSec
傳統用戶管理系統依賴中央化服務器的關系型數據庫記錄用戶註冊、推薦人與受薦人之間的關系，安全和匿名程度都比較低。反觀， 順道VPN的用戶登記和推薦系統是通過數字簽名和數字證書以P2P的形式來綁定的。更具體來說， 順道VPN不單不記錄任何用戶信息，就連推薦系統都用了推薦人的獨特數字簽名和受薦人持有的簽名數字證書（即，已簽署的《免費通行證書》來安全地、隐蔽地綁定彼此的關系， 不會被記錄在任何第三方關係型數據庫上，有效地防範用戶個人數據洩露與關聯性信息分析於未然。
Traditional user management systems rely on relational databases on centralized servers to record user registrations and the referral relationships. That regime is prone to security and privacy breach. In contrast, LubeVPN’s referral relationships are recorded by securely and privately binding digital signatures and their signed certificates in a peer-to-peer fashion. More specifically, LubeVPN does not ask for or record any user information. A referral relationship in LubeVPN is securely bound based on the unique digital signature of the referrer and the signed digital certificate (i.e. signed CERT ) held by the referred user, not recorded in any third-party party relational database, effectively preempting user data breach and link analysis.
不寫Log政策
No Log Policy
順道VPN不記錄任何接來自用戶的網絡接駁來源的信息。 順道VPN從技術設計上來說，在本質機制上不能記錄也 不會記錄任何用戶個人信息。 順道VPN僅記錄數據使用量，用以確保服務質量，及預防服務被濫用。 順道VPN的用戶可以安心地使用 順道VPN，因為每張加密安全證書只可同時用於一台終端， 順道VPN是 不允超過一台終端同時使用一張證書 的。
Lube VPN does not record network routing information, such as originating IP and device. LubeVPN is also technically designed so that it is inherently incapable to record and will not record any user information such as name, phone or ID. LubeVPN only records VPN traffic volume usage to ensure quality of service and to prevent service misuse. Users can feel secure because the usage is exclusively allowed to be accessed on a one-on-one basis: one (1) LubeVPN cryptographically secure certificate can only be used on one (1) device at the same time. Simultaneous access of one certificate on multiple devices is prohibited.
簽署 和 認證
Signing & Validation
順道VPN是不會任意地接受任何一個《免費通行證書》的認證請求的，而是僅限於由持有有效的（未過期的）通行證書的簽署者簽署過的《免費通行證書》。簡單來說，只有被現有 順道VPN用戶簽署過的《免費通行證書》， 順道VPN才會接受其請求 去認證它。認證通過後，持有該《免費通行證書》的受薦人才能獲得授權訪問 順道VPN的VPN服務。
LubeVPN will not accept validation requests from any CERT unless it is signed by one who holds a valid (i.e. unexpired) CERT . Simply put, LubeVPN only validates CERTs signed by existing users. Once a validation succeeds, the holder of the valid CERT is authorized to access LubeVPN service.
溫馨提醒: 每一個持有已簽署的《通行證書》的持有者都有責任不丟失自己的《通行證書》 。尤其要小心，不要不小心清除了存儲《通行證書》的 Citium 客戶端 app 的數據，因為已簽署的《通行證書》是唯一的能證明推薦人與受薦人關系的證據。用戶不論任何原因遺失《通行證書》，如卸載並重裝 Citium 客戶端 app，遺失或更換手機，平板或電腦而未預先備份《通行證書》，用戶將永久地無法重新登入、亦同時失去該《通行證書》的存取及使用權，並且會永久失去《通行證書》關聯的 Citium 即時通訊工具的通訊帳戶、聯絡人列表、對話紀錄及所有通訊存儲內的多媒體資料和其使用權。而 順道VPN的客服、代理及管理員於任何情況下均無法協助用戶重新登入、存取及使用該《通行證書》，這也是我們安保設計的精妙之處。
GENTLE REMINDER: Every holder of the signed CERTs is responsible for not losing one’s own signed CERT. Be careful not to accidentally clear the data of the Citium Client app that stores the signed CERT because it is the only evidence to prove the user registration status, as well as the referral relationship between its user and its signer. If a user loses the signed CERT for any reason (e.g. uninstalls and reinstalls the Citium Client App; loses or replaces the mobile phone, tablet or computer; fails to back up the CERT in advance), the user will no longer be able to log back in, permanently lose access access to service, including everything related to Citium Instant Messenger, such as Contacts list, its chat history and its multimedia contents. LubeVPN’s customer service representatives, partnership agents and administrators are under no circumstances able to assist the user to log in, access and use the CERT again, which is the beauty of our security design.
在以下辦公時間內，您可以通過西蒂姆(Citum)客户端 App 内的在線客服 與 順道VPN客戶服務代表溝通；而在辦公時間外，請您留言，我們將在辦公時間內回復您：
- GMT+8，中國時間、上海、香港、臺北
- 星期一至六，14時15分 至 16時45分
- GMT-7，太平洋夏令时間、洛杉磯、溫哥華
- 星期一至五，10時15分 至 11時45分
順道VPN 團隊深感抱歉，因為目前辦公時間比較短。我們將在日後逐漸延長在線客服辦公時間。
如何在西蒂姆(Citum)客戶端App內找到 順道VPN「在線客服」？
> > >
During service hour, you can securely and anonymously communicate with LubeVPN representatives through in-app LIVE CHAT on Citium Client App. During non-office hour, please leave us a message and we’ll get back to you during office hours:
- GMT+8, CT, Shanghai, Hong Kong, Taipei
- Monday to Saturday: 14:15 to 16:45
- GMT-7, PDT, Los Angeles, Vancouver
- Monday to Friday: 10:15 to 11:45
We apologize that the office hour is limited for the time being. We will try to expand our service hour in the future.
How to reach the LIVE CHAT in the Citium Client?
> > >