Network data obfuscation

A method comprising:

• initializing a first obfuscation driver included in an endpoint device connected to a first network, wherein the first obfuscation driver is in one of two states, an uninitialized state and an initialized state, and the initialized state has an active mode and a passive mode, and wherein the first obfuscation driver is operating in the active mode while the endpoint device is connected to a first obfuscation gateway with a secure connection, and wherein initializing the first obfuscation driver includes collaboratively generating a first unique machine identifier of the endpoint device by the first obfuscation driver and the first obfuscation gateway over the secure connection;
• establishing a first obfuscated communication session between the first obfuscation driver operating in the active mode, and the first obfuscation gateway;
• receiving, by the first obfuscation gateway, from the first obfuscation driver, a first obfuscated message of the first obfuscated communication session, wherein the first obfuscated message includes a first obfuscation seed and a first message payload, the first obfuscated message is received from the first endpoint device over the first network, and the first obfuscated message is received as a first plurality of message segments, the first plurality of message segments being reordered prior to transmission;
• receiving, from the first obfuscation driver, first de-obfuscation instructions associated with the first obfuscated message;
• de-obfuscating the first obfuscated message, including reordering the first plurality of message segments based on the first de-obfuscation instructions resulting in a first de-obfuscated message;
• forwarding the first de-obfuscated message to an application;
• receiving, from the application, a first response message including a second message payload;
• creating second de-obfuscation instructions associated with the first response message;
• generating a second obfuscation seed from at least part of the first obfuscation seed;
• sending the second obfuscation seed to the first obfuscation driver;
• receiving, from the first obfuscation driver, a third obfuscation seed;
• obfuscating the first response message by reordering a second plurality of message segments of the first response message based on the second de-obfuscation instructions resulting in a first obfuscated response message;
• sending, to the first obfuscation driver, the second de-obfuscation instructions and the first obfuscated response message, wherein the third obfuscation seed is included in the first obfuscated response message;
• receiving, from the first obfuscation driver, a second obfuscated message of the first obfuscated communication session, wherein the second obfuscated message includes a fourth obfuscation seed and a third message payload, the second obfuscated message is received from the first endpoint device over the first network, and the second obfuscated message is received as a third plurality of message segments, the third plurality of message segments being reordered prior to transmission;
• receiving, from the first obfuscation driver, third de-obfuscation instructions associated with the second obfuscated message;
• and
• de-obfuscating the second obfuscated message, including reordering the third plurality of message segments based on the third de-obfuscation instructions resulting in a second de-obfuscated message.

A computer-readable non-transitory storage medium storing executable instructions, which when executed by a computer system, cause the computer system to:

• initialize a first obfuscation driver included in an endpoint device connected to a first network, wherein the first obfuscation driver is in one of two states, an uninitialized state and an initialized state, and the initialized state has an active mode and a passive mode, and wherein the first obfuscation driver is operating in the active mode while the endpoint device is connected to a first obfuscation gateway with a secure connection, and wherein initializing the first obfuscation driver includes collaboratively generating a first unique machine identifier of the endpoint device by the first obfuscation driver and the first obfuscation gateway over the secure connection;
• establish a first obfuscated communication session between the first obfuscation driver operating in the active mode, and the first obfuscation gateway;
• receive, by the first obfuscation gateway, from the first obfuscation driver, a first obfuscated message of the first obfuscated communication session, wherein the first obfuscated message includes a first obfuscation seed and a first message payload, the first obfuscated message is received from the first endpoint device over the first network, and the first obfuscated message is received as a first plurality of message segments, the first plurality of message segments being reordered prior to transmission;
• receive, from the first obfuscation driver, first de-obfuscation instructions associated with the first obfuscated message;
• de-obfuscate the first obfuscated message, including reordering the first plurality of message segments based on the first de-obfuscation instructions resulting in a first de-obfuscated message;
• forward the first de-obfuscated message to an application;
• receive, from the application, a first response message including a second message payload;
• create second de-obfuscation instructions associated with the first response message;
• generate a second obfuscation seed from at least part of the first obfuscation seed;
• send the second obfuscation seed to the first obfuscation driver;
• receive, from the first obfuscation driver, a third obfuscation seed;
• obfuscate the first response message by reordering a second plurality of message segments of the first response message based on the second de-obfuscation instructions resulting in a first obfuscated response message;
• send, to the first obfuscation driver, the second de-obfuscation instructions and the first obfuscated response message, wherein the third obfuscation seed is included in the first obfuscated response message;
• receive, from the first obfuscation driver, a second obfuscated message of the first obfuscated communication session, wherein the second obfuscated message includes a fourth obfuscation seed and a third message payload, the second obfuscated message is received from the first endpoint device over the first network, and the second obfuscated message is received as a third plurality of message segments, the third plurality of message segments being reordered prior to transmission;
• receive, from the first obfuscation driver, third de-obfuscation instructions associated with the second obfuscated message;
• and
• de-obfuscate the second obfuscated message, including reordering the third plurality of message segments based on the third de-obfuscation instructions resulting in a second de-obfuscated message.