# US 11,310,273 B2 · Secure network aggregation protocol > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,310,273 B2 - Document ID: US11310273B2 - Status: Granted - Kind: B2 - Application number: 16/750,136 - Filed: 2020-01-23 - Published: 2021-07-29 - Granted: 2022-04-19 - Earliest claimed: 2020-01-23 - Assignees: Rockwell Collins, Inc. - Applicants: Rockwell Collins, Inc. - Inventors: Ian P. DiFranco - Web page: https://patentgrep.com/patent/US11310273B2 ## CPC - H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)} - G06F 8/61: Installation - G06F 8/70: Software maintenance or management - G06F 9/455: Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines - G06F 9/5061: {Partitioning or combining of resources} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A system and architecture for containing unique protocols to establish multiple layers of secure communication within a network. Secure data is aggregated, and containers are assigned specific communication ports to maintain distinct, secure communication channels over a single network connection. Each security level is defined by a tenant; each tenant is assigned a unique range of ports for use over the network. ## Claims ### Claim 1 A computer apparatus comprising: at least one network interface device; and at least one host processor in data communication with a memory storing processor executable code for configuring the at least one host processor to: instantiate a data manager process thread; instantiate a dynamic sub-carrier process thread; and instantiate at least one application configured to provide data to a plurality of users at a plurality of classification levels, where: the data manager process thread is configured to: receive a data packet from the at least one application, the data packet associated with one of the plurality of classification levels; identify the associated classification level of data packet; create a container data structure to contain the data packet, the container data structure including a flag indicating the associated classification level; and set the flag of the container data structure to the classification level; and the dynamic sub-carrier process thread is configured to: identify a flag of every outbound container data structure; and route the outbound container data structure to a port range specific to the flagged classification level. ### Claim 2 (depends on 1) The computer apparatus of claim 1, wherein the at least one host processor is further configured to instantiate a data shard networking element. ### Claim 3 (depends on 1) The computer apparatus of claim 1, further comprising a datalink connection to a remote-control adapter. ### Claim 4 (depends on 3) The computer apparatus of claim 3, wherein the remote-control adapter is in data communication with the data manager process thread. ### Claim 5 (depends on 1) The computer apparatus of claim 1, wherein the data manager process thread is further configured to: receive a definition of one or more tenants at startup; and define a port range for each of the one or more tenants. ### Claim 6 (depends on 5) The computer apparatus of claim 5, wherein the definition of each tenant comprises a unique security certificate. ### Claim 7 (depends on 5) The computer apparatus of claim 5, wherein the data manager process thread is further configured to: instantiate a master tenant; and transfer all port definitions to the master tenant. ### Claim 8 A network system comprising: a plurality of network node devices, each of the plurality of network node devices comprising: at least one network interface devices; and at least one host processor in data communication with a memory storing processor executable code for configuring the at least one host processor to: instantiate a data manager process thread; instantiate a dynamic sub-carrier process thread; and instantiate at least one application configured to provide data to a plurality of users at a plurality of classification levels, where: the data manager process thread is configured to: receive a data packet from the at least one application, the data packet associated with one of the plurality of classification levels; identify the associated classification level of data packet create a container data structure to contain the data packet, the container data structure including a flag indicating the associated classification level; and set the flag of the container data structure to the classification level; and the dynamic sub-carrier process thread is configured to: identify a flag of every outbound container data structure; and route the outbound container data structure to a port range specific to the flagged classification level. ### Claim 9 (depends on 8) The system of claim 8, wherein the at least one host processor is further configured to instantiate a data shard networking element. ### Claim 10 (depends on 8) The system of claim 8, further comprising a datalink connection to a remote-control adapter. ### Claim 11 (depends on 10) The system of claim 10, wherein the remote-control adapter is in data communication with the data manager process thread. ### Claim 12 (depends on 8) The system of claim 8, wherein the data manager process thread is further configured to: receive a definition of one or more tenants at startup; and define a port range for each of the one or more tenants. ### Claim 13 (depends on 12) The system of claim 12, wherein the definition of each tenant comprises a unique security certificate. ### Claim 14 (depends on 12) The system of claim 12, wherein the data manager process thread is further configured to: instantiate a master tenant; and transfer all port definitions to the master tenant. ### Claim 15 (depends on 12) The system of claim 12, wherein the dynamic sub-carrier module is further configured to share tenant port range definitions with other dynamic sub-carrier process threads on the network.