# US 12,003,484 B2 · Systems and methods for preventing data leaks over RTP or SIP > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,003,484 B2 - Document ID: US12003484B2 - Status: Granted - Kind: B2 - Application number: 17/859,162 - Filed: 2022-07-07 - Published: 2024-01-11 - Granted: 2024-06-04 - Earliest claimed: 2022-07-07 - Assignees: Fortinet, Inc. - Applicants: Fortinet, Inc. - Inventors: Jochen Pretli - Web page: https://patentgrep.com/patent/US12003484B2 ## CPC - H04L 63/0245: {Filtering by information in the payload} - H04L 61/2564: {for a higher-layer protocol, e.g. for session initiation protocol [SIP]} - H04L 63/0421: {Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems, devices, and methods are discussed for avoiding data thefts in real-time transactions. ## Claims ### Claim 1 A method comprising: receiving, by a processing resource, a data transfer packet including a data payload; determining, by the processing resource, that the data transfer packet is a real-time data transfer packet; based at least in part on the data transfer packet being a real time data transfer packet, providing, by the processing resource, the data payload to a conversion circuit, converting the data payload by the conversion circuit from a digital domain to an analog domain, and then from the analog domain to the digital domain to yield a modified data payload, and receiving, by the processing resource, the modified data payload; and forwarding, by the processing resource, the data transfer packet including the modified data payload in place of the data payload. ### Claim 2 (depends on 1) The method of claim 1, wherein the real-time data transfer packet is a real-time transfer protocol packet. ### Claim 3 (depends on 1) The method of claim 1, wherein the real-time data transfer packet is session initiated transfer protocol packet. ### Claim 4 (depends on 1) The method of claim 1, wherein the method further comprises: scanning, by the processing resource, the data payload for an expected data type pattern; identifying, by the processing resource, a portion of the data payload as not matching the expected data type pattern; and obscuring, by the processing resource, the identified portion of the data payload to yield and obscure data set; and wherein the modified data payload includes the obscure data set in place of the identified portion of the data payload. ### Claim 5 (depends on 4) The method of claim 4, wherein obscuring the identified portion includes replacing the identified portion with a random pattern. ### Claim 6 (depends on 4) The method of claim 4, wherein obscuring the identified portion includes replacing the identified portion with a fixed pattern. ### Claim 7 (depends on 1) The method of claim 1, wherein the conversion of the data payload is done using a process that is compatible with at least a portion of the data payload. ### Claim 8 (depends on 7) The method of claim 7, wherein the portion of the data payload is a first portion of the data payload, and wherein the process is incompatible with a second portion of the data payload. ### Claim 9 A system for reducing the possibility of data theft via a real-time transfer, the system comprising: a processing resource; a non-transitory computer-readable medium, coupled to the processing resource, having stored therein instructions that when executed by the processing resource cause the processing resource to: receive a data transfer packet including a data payload; determine that the data transfer packet is a real-time data transfer packet; based at least in part on the data transfer packet being a real time data transfer packet, provide the data payload to a conversion circuit, wherein the conversion circuit is to convert the data payload from a digital domain to an analog domain, and then from the analog domain to the digital domain to yield a modified data payload, and receive the modified data payload from the conversion circuit; and forward the data transfer packet including the modified data payload in place of the data payload. ### Claim 10 (depends on 9) The system of claim 9, wherein the instructions that when executed by the processing resource cause the processing resource to: real-time data transfer packet is a real-time transfer protocol packet. ### Claim 11 (depends on 9) The system of claim 9, wherein the real-time data transfer packet is session initiated transfer protocol packet. ### Claim 12 (depends on 9) The system of claim 9, wherein the computer-readable medium further has instructions stored therein that when executed by the processing resource cause the processing resource to: scan the data payload for an expected data type pattern; identify a portion of the data payload as not matching the expected data type pattern; and obscure the identified portion of the data payload to yield and obscure data set; and wherein the modified data payload includes the obscure data set in place of the identified portion of the data payload. ### Claim 13 (depends on 12) The system of claim 12, wherein obscuring the identified portion includes replacing the identified portion with a random pattern. ### Claim 14 (depends on 12) The method of claim 12, wherein obscuring the identified portion includes replacing the identified portion with a fixed pattern. ### Claim 15 (depends on 9) The system of claim 9, wherein the conversion of the data payload is done using a process that is compatible with at least a portion of the data payload. ### Claim 16 (depends on 15) The system of claim 15, wherein the portion of the data payload is a first portion of the data payload, and wherein the process is incompatible with a second portion of the data payload. ### Claim 17 A non-transitory computer-readable storage medium embodying a set of instructions, which when executed by a processing resource, causes the processing resource to: receive a data transfer packet including a data payload; determine that the data transfer packet is a real-time data transfer packet; based at least in part on the data transfer packet being a real time data transfer packet, provide the data payload to a conversion circuit, wherein the conversion circuit is to convert the data payload from a digital domain to an analog domain, and then from the analog domain to the digital domain to yield a modified data payload, and receive the modified data payload from the conversion circuit; and forward the data transfer packet including the modified data payload in place of the data payload. ### Claim 18 (depends on 17) The non-transitory computer-readable storage medium of claim 17, wherein the non-transitory computer-readable storage medium further has instructions stored therein that when executed by the processing resource cause the processing resource to: scan the data payload for an expected data type pattern; identify a portion of the data payload as not matching the expected data type pattern; and obscure the identified portion of the data payload to yield and obscure data set; and wherein the modified data payload includes the obscure data set in place of the identified portion of the data payload.