# US 12,192,181 B2 · Systems and methods for encrypting and transmitting data packets using a unicast address > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,192,181 B2 - Document ID: US12192181B2 - Status: Granted - Kind: B2 - Application number: 18/117,768 - Filed: 2023-03-06 - Published: 2024-04-04 - Granted: 2025-01-07 - Earliest claimed: 2018-05-09 - Assignees: Architecture Technology Corporation - Applicants: Architecture Technology Corporation - Inventors: Timothy Hartley; Deborah Charan; Ranga S. Ramanujan - Web page: https://patentgrep.com/patent/US12192181B2 ## CPC - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - G06F 21/602: {Providing cryptographic facilities or services} - H04L 45/74: Address processing for routing - H04L 47/2441: relying on flow classification, e.g. using integrated services [IntServ] - H04L 49/201: Multicast operation; Broadcast operation - H04L 63/0272: {Virtual private networks} - H04L 69/22: Parsing or analysis of headers - H04W 4/06: Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services - H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] - H04L 45/16: Multipoint routing - H04L 69/04: Protocols for data compression, e.g. ROHC - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Disclosed herein are embodiments of systems, methods, and products comprising a computing device, which provides Efficient Data-In-Transit Protection Techniques for Handheld Devices (EDITH) to protect data-in-transit. An end user device (EUD) may generate a multicast data packet. The EDITH module of the EUD encapsulates the data packet in a GRE packet and directs the GRE packet to a unicast destination address of an EDITH Multicast Router included in an infrastructure. The EDITH module on the EUD double compresses and double encrypts the GRE packet. The EDITH module on the infrastructure decrypts and decompresses the double compressed and double encrypted GRE packet to recreate the GRE packet. The EDITH module on the infrastructure decapsulates the GRE packet to derive the original multicast data packet, and distributes the original multicast data packet to the multiple group member based on the multicast destination address included in the original multicast data packet. ## Claims ### Claim 1 A computer implemented method comprising: generating, by a first computer, a data packet containing a group destination address; encrypting, by the first computer executing inner encryption software, the data packet with an inner layer key, the inner encryption software corresponding to first encryption software of a router device having a unicast address; encrypting, by the first computer executing outer encryption software, the data packet with an outer layer key, the outer encryption software corresponding to second encryption software of the router device having the unicast address; and transmitting, by the first computer using the unicast destination address associated with the router device, the data packet to one or more target computers associated with the group destination address. ### Claim 2 (depends on 1) The method according to claim 1, further comprising appending, by the first computer, the unicast destination address associated with the router device to the data packet. ### Claim 3 (depends on 1) The method according to claim 1, further comprising executing, by the first computer, a software application configured to produce data for one or more data packets, wherein the first computer generates the data packet based upon the data produced by executing the software application. ### Claim 4 (depends on 1) The method according to claim 1, further comprising transmitting, by the first computer, at least one data packet of a plurality of data packets of a packet flow having uncompressed header data to the one or more target computers. ### Claim 5 (depends on 1) The method according to claim 1, further comprising removing, by the first computer and from the data packet, one or more header fields consistent over a packet flow of a plurality of data packets. ### Claim 6 (depends on 1) The method according to claim 1, further comprising re-encoding, by the first computer, one or more header fields of the data packet to reduce one or more field sizes, the one or more header fields inconsistent over a packet flow of a plurality of data packets. ### Claim 7 (depends on 1) The method according to claim 1, wherein the inner layer key used by the first computer for the inner encryption software corresponds to a second inner layer key of the router device. ### Claim 8 (depends on 1) The method according to claim 1, wherein the outer layer key used by the first computer for the outer encryption software corresponds to a second outer layer cryptographic key of the router device. ### Claim 9 (depends on 1) The method according to claim 1, wherein the router device is a multicast router. ### Claim 10 (depends on 1) The method according to claim 1, wherein the first computer is a mobile device configured for network communication via an ad hoc network. ### Claim 11 A system comprising: a first computer comprising a corresponding processor configured to execute computer instructions stored in non-transitory machine-readable memory; the first computer configured to: generate a data packet containing a group destination address; encrypt, executing inner encryption software, the data packet with an inner layer key, the inner encryption software corresponding to first encryption software of a router device having a unicast address; encrypt, executing outer encryption software, the data packet with an outer layer key, the outer encryption software corresponding to second encryption software of the router device having the unicast address; and transmit, using the unicast destination address associated with the router device, the data packet to one or more target computers associated with the group destination address. ### Claim 12 (depends on 11) The system according to claim 11, wherein the first computer is further configured to append the unicast destination address associated with the router device to the data packet. ### Claim 13 (depends on 11) The system according to claim 11, wherein the first computer is further configured to execute a software application configured to produce data for one or more data packets, wherein the first computer generates the data packet based upon the data produced by executing the software application. ### Claim 14 (depends on 11) The system according to claim 11, wherein the first computer is further configured to transmit at least one data packet of a plurality of data packets of a packet flow having uncompressed header data to the one or more target computers. ### Claim 15 (depends on 11) The system according to claim 11, wherein the first computer is configured to remove, from the data packet, one or more header fields consistent over a packet flow of a plurality of data packets. ### Claim 16 (depends on 11) The system according to claim 11, wherein the first computer is configured to re-encode one or more header fields of the data packet to reduce one or more field sizes, the one or more header fields inconsistent over a packet flow of a plurality of data packets. ### Claim 17 (depends on 11) The system according to claim 11, wherein the inner layer key used by the first computer for the inner encryption software corresponds to a second inner layer cryptographic key of the router device. ### Claim 18 (depends on 11) The system according to claim 11, wherein the outer layer key used by the first computer for the outer encryption software corresponds to a second outer layer cryptographic key of the router device. ### Claim 19 (depends on 11) The system according to claim 11, wherein the router device is a multicast router. ### Claim 20 (depends on 11) The system according to claim 11, wherein the first computer is a mobile device configured for network communication via an ad hoc network.