Back to results
US 2003/0149783 A1Published application
Address hopping of packet-based communications
AssigneeCisco Technology, Inc.
InventorDavid W. McDaniel
Life of this patent
Estimating the term…
Abstract
A communication system includes translation modules that provide address hopping to secure packet-based communications. A transmitting translation module modifies source and/or destination addresses of communicated packets and a receiving translation module resolves each modified source and/or destination address into the original source and destination addresses for the packets.
Claims27
A method for securing packet-based communications comprising:
- receiving a stream comprising a plurality of packets, all of the packets having an original destination address and an original source address;
- and
- for each of the packets, changing the original destination address to a selected one of a plurality of modified destination addresses assigned to a remote device, wherein each of the selected modified destination addresses is resolvable by the remote device to the original destination address.
A method for securing packet-based communications comprising:
- negotiating translation parameters for a communication stream with a remote device, the translation parameters comprising an original destination address, a plurality of available destination addresses, and an algorithm;
- determining a modified destination address from among the available destination addresses according to the algorithm;
- receiving a packet having the modified destination address;
- and
- changing the packet to have the original destination address.
2 more elements
A translation module comprising:
- a first interface operable to receive a stream comprising a plurality of packets, all of the packets having an original destination address and an original source address;
- a controller operable, for each of the packets, to change the original destination address to a selected one of a plurality of modified destination addresses assigned to a remote device, wherein each of the selected modified destination addresses is resolvable by the remote device to the original destination address;
- and
- a second interface operable to transmit the changed packets for receipt by the remote device.
1 more element
Logic for securing packet-based communications, the logic encoded in a medium and operable when executed to:
- receive a stream comprising a plurality of packets, all of the packets having an original destination address and an original source address;
- and
- for each of the packets, change the original destination address to a selected one of a plurality of modified destination addresses assigned to a remote device, wherein each of the selected modified destination addresses is resolvable by the remote device to the original destination address.
A translation module comprising:
- means for receiving a stream comprising a plurality of packets, all of the packets having an original destination address and an original source address;
- and
- means for for each of the packets, changing the original destination address to a selected one of a plurality of modified destination addresses assigned to a remote device, wherein each of the selected modified destination addresses is resolvable by the remote device to the original destination address.
A method for securing packet-based communications comprising:
- detecting initiation of a communication stream, the communication stream comprising a plurality of packets, all of the packets having an original destination address and an original source address;
- identifying a remote device based upon the original destination address;
- negotiating translation parameters for the communication stream with the remote device, the translation parameters comprising an algorithm dictating how to select from among a plurality of modified destination addresses;
- receiving the packets;
- and
- for each of the packets, selecting one of the modified destination addresses according to the algorithm and changing the original destination address to the selected modified destination address, wherein each of the selected modified destination addresses is resolvable by the remote device to the original destination address and wherein, except for a first one of the packets, each of the packets is changed to a different one of the modified destination addresses than a preceding one of the packets.
3 more elements
Dependencies are inferred from the claim text.