Distributed Network Interfaces For Application Cloaking And Spoofing
AssigneeNant Holdings IP, LLC
InventorThomas M. WITTENSCHLAEGER
Life of this patent
Estimating the term…
Abstract
Systems and methods associated with distributing an application's network interface over nodes of a networking fabric are presented. Nodes of the fabric can operate as interface modules, each taking on a role or responsibility for a portion of the application's network address including IP address, port assignments, or other portions of the network address. Interface modules of the networking nodes can then spoof or cloak the application to provide security against internal or external threats.
Claims20
A non-transitory computer readable medium configured to store instructions which, when executed by at least one processor, cause the at least one processor to perform a method including:
- configuring a networking fabric device to at least perform a first set of roles associated with a first layer of a communication stack, and to communicate with a second networking fabric device operating as part of the communication stack according to the first set of roles, wherein the networking fabric device is configured to interact with a networking fabric for facilitating communication between an application and a remote device, the networking fabric device including a network interface communicatively coupled with other networking fabric devices within a networking fabric;
- reconfiguring the networking fabric device to at least perform a second set of roles associated with a second, different layer of the communication stack, and to at least communicate with a third networking fabric device operating as part of the communication stack according to the second set of roles, wherein reconfiguring the networking fabric device includes reconfiguring the networking fabric device as a first interface module of the application which responds to at least a first portion of a network address of the application by updating incoming packets to transmit to the application through a first set of nodes within the networking fabric via the network interface in a manner where the first interface module is transparent to the remote device;
- and
- operating the networking fabric device as a network operations center (NOC) by, in response to a failure of a link between nodes within the networking fabric, instructing a plurality of nodes within the networking fabric to route packets over a different data exchange path, wherein rerouting via the different data exchange path occurs in less than an average latency period between the application and the remote device.
Dependencies are inferred from the claim text.