# US 12,192,185 B2 · Data transmission method, communication processing method, device, and communication processing program > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,192,185 B2 - Document ID: US12192185B2 - Status: Granted - Kind: B2 - Application number: 18/423,195 - Filed: 2024-01-25 - Published: 2024-07-18 - Granted: 2025-01-07 - Earliest claimed: 2024-01-25 - Assignees: connectFree Corporation - Applicants: connectFree Corporation - Inventors: Kristopher Andrew Tate - Web page: https://patentgrep.com/patent/US12192185B2 ## CPC - H04L 12/2801: {Broadband local area networks} - H04L 63/0478: {applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key (cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14)} - H04L 9/0643: {Hash functions, e.g. MD5, SHA, HMAC or f9 MAC} - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]} - H04L 12/2803: {Home automation networks} - H04L 45/74: Address processing for routing - H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)} - H04L 63/0471: {applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70) - H04W 12/069: using certificates or pre-shared keys - H04L 61/5007: Internet protocol [IP] addresses - H04L 61/5092: by self-assignment, e.g. picking addresses at random and testing if they are already in use - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A data transmission method includes a step in which a first device generates a first encrypted packet by encrypting a packet addressed to a second device with an associated first encryption key. A device to be a transmission destination of the first encrypted packet is determined. A second encrypted packet is generated by encrypting the first encrypted packet with an associated second encryption key, and the second encrypted packet is transmitted to the determined device. The method includes determining another device and executing the transmission step if the decrypted first encrypted packet is not addressed to the device itself in the determination regarding whether or not the decrypted first encrypted packet is addressed to the device itself and of further decrypting the first encrypted packet if the decrypted first encrypted packet is addressed to the device itself. ## Claims ### Claim 1 A communication method in a network including a plurality of devices, the communication method comprising: establishing an end-to-end session between a first device and a second device; encrypting, at the first device, a packet addressed to the second device with a first encryption key associated with the end-to-end session to generate a first encrypted packet; when direct communication between the first device and the second device is possible, transmitting the first encrypted packet from the first device to the second device; and when the direct communication between the first device and the second device is impossible: establishing, at the first device, a first adjacent node session with a third device, encrypting the first encrypted packet with a second encryption key associated with the first adjacent node session to generate a second encrypted packet, and transmitting the second encrypted packet from the first device to the third device. ### Claim 2 (depends on 1) The communication method according to claim 1, further comprising decrypting, at the second device, the first encrypted packet with the first encryption key into the first encrypted packet. ### Claim 3 (depends on 1) The communication method according to claim 1, further comprising: establishing, at the third device, a second adjacent node session with a fourth device; decrypting, at the third device, the second encrypted packet with the second encryption key into the first encrypted packet; encrypting, at the third device, the first encrypted packet with a third encryption key associated with the second adjacent node session to generate a third encrypted packet; and transmitting the third encrypted packet from the third device to the fourth device. ### Claim 4 (depends on 3) The communication method according to claim 3, further comprising: when the fourth device is the second device to which the packet is addressed, decrypting, at the second device, the third encrypted packet with the third encryption key into the first encrypted packet; decrypting, at the second device, the first encrypted packet with the first encryption key into the packet. ### Claim 5 (depends on 3) The communication method according to claim 3, further comprising: when the fourth device is not the second device to which the packet is addressed, establishing, at the fourth device, a third adjacent node session with a fifth device, encrypting, at the fourth device, the third encrypted packet with a fourth encryption key associated with the third adjacent node session to generate a fourth encrypted packet, and transmitting the fourth encrypted packet from the fourth device to the fifth device. ### Claim 6 (depends on 1) The communication method according claim 1, further comprising providing, at the second device, the packet to an application to be executed. ### Claim 7 (depends on 1) The communication method according to claim 1, further comprising: determining, at each device of the plurality of devices, a whole network address of the device, using an entirety or part of a hash value calculated by inputting a public key of the device to a hash function; and determining, at any device of the plurality of devices, a whole network address of another device, using an entirety or part of a hash value calculated by inputting a public key received from the another device to the hash function. ### Claim 8 (depends on 1) The communication method according to claim 1, further comprising: holding, at each device of the plurality of devices, an end-to-end session management table indicating a network address of another device with which an end-to-end session may be established by the each device; and holding, at each device of the plurality of devices, an adjacent node session management table indicting a network address of another device with which an adjacent node session may be established by the each device. ### Claim 9 A device, comprising: a network interface for connecting to a network including a plurality of devices; one or more processors; and one or more memories to store instructions that, when executed by the one or more processors, cause the one or more processors to perform: establishing an end-to-end session with a first device, encrypting a packet addressed to the first device with a first encryption key associated with the end-to-end session to generate a first encrypted packet, when direct communication with the first device is possible, transmitting the first encrypted packet to the first device, and when direct communication with the first device is impossible, establishing a first adjacent node session with a second device, encrypting the first encrypted packet with a second encryption key associated with the first adjacent node session to generate a second encrypted packet, and transmitting the second encrypted packet to the second device. ### Claim 10 (depends on 9) The device according to claim 9, wherein the one or more processors, responsive to executing the instructions, decrypt a third encrypted packet with a third encryption key associated with a second adjacent node session. ### Claim 11 (depends on 10) The device according to claim 10, wherein the one or more processors, responsive to executing the instructions, determine whether the decrypted packet is addressed to the device. ### Claim 12 (depends on 11) The device according to claim 11, wherein the one or more processors, responsive to executing the instructions, when the decrypted packet is not addressed to the device: establish a third adjacent node session with a third device, encrypt the decrypted packet with a fourth encryption key associated with the third adjacent node session to generate a fourth encrypted packet, transmit the fourth encrypted packet to the third device. ### Claim 13 A non-transitory computer-readable storage medium having instructions stored thereon which, when executed by one or more processors coupled to a network interface for connecting to a network including a plurality of devices, cause the one or more processors to perform: establishing an end-to-end session with a first device, encrypting a packet addressed to the first device with a first encryption key associated with the end-to-end session to generate a first encrypted packet, when direct communication with the first device is possible, transmitting the first encrypted packet to the first device, and when direct communication with the first device is impossible, establishing a first adjacent node session with a second device, encrypting the first encrypted packet with a second encryption key associated with the first adjacent node session to generate a second encrypted packet, and transmitting the second encrypted packet to the second device. ### Claim 14 (depends on 13) The non-transitory computer-readable storage medium according to claim 13, wherein the one or more processors, responsive to executing the instructions, decrypt a third encrypted packet with a third encryption key associated with a second adjacent node session. ### Claim 15 (depends on 14) The non-transitory computer-readable storage medium according to claim 14, wherein the instructions further cause the one or more processors to perform determining whether the decrypted packet is addressed to a device of the one or more processors. ### Claim 16 (depends on 15) The non-transitory computer-readable storage medium according to claim 15, wherein the instructions further cause the one or more processors to perform: when the decrypted packet is not addressed to the device of the one or more processors, establishing a third adjacent node session with a third device, encrypting the decrypted packet with a fourth encryption key associated with the third adjacent node session to generate a fourth encrypted packet, transmitting the fourth encrypted packet to the third device.