Secure data routing and randomization
AssigneeScatr Corp
InventorJohn P. Keyerleber
Life of this patent
Estimating the term…
Abstract
A networked device creates a plurality of concurrent communication channels within a VPN tunnel between two networks, each channel being identifiable only by a set of IP addresses that are anonymized from the actual IP address of the communication endpoints. Traffic sent from the first network to the second may take any of a plurality of channels, with a randomized channel assignment on a per packet basis. By these means, the endpoints of communication are obfuscated. Further, transmitted data is spread apart or scattered across multiple channels, therefore, an eavesdropper would not have access to the entirety of a data communication.
Claims20
A system for secure data transmission comprising:
- a first network device operatively coupled to a first private network and one or more public networks, the first network device comprising at least one processor configured to execute instructions to perform steps comprising:
- establishing, in coordination with a second network device, a plurality of logical communication channels between the first network device and the second network device, each logical communication channel being associated with a respective one of a plurality of IP addresses at the first network device and a respective one of a plurality of IP addresses at the second network device, wherein the plurality of IP addresses at the first network device differ from an actual IP address of the first private network and the plurality of IP addresses at the second network device differ from an actual IP address of the second private network;
- receiving a plurality of data packets from the first private network;
- randomly assigning, for each data packet of the plurality of data packets, a respective logical communication channel of the plurality of logical communication channels;
- and
- transmitting each data packet to the second network device via its respectively assigned logical communication channel;
- and
- the second network device operatively coupled to a second private network and the one or more public networks, the second network device comprising at least one processor configured to execute instructions to perform steps comprising:
- receiving data packets arriving via any of the plurality of logical communication channels without regard to which logical communication channel each data packet traversed;
- aggregating the received data packets from across the plurality of logical communication channels;
- and
- reconstructing from the aggregated data packets an original communication and delivering the reconstructed communication to an intended recipient on the second private network.
A network device operatively coupled to a first private network and one or more public networks, the network device comprising at least one processor configured to execute instructions to perform steps comprising:
- establishing a plurality of logical communication channels to a remote network device, each logical communication channel corresponding to a unique transmission route to a destination via the one or more public networks, each logical communication channel being associated with a respective gateway of a plurality of gateways of the network device;
- receiving a plurality of data packets from the first private network, each data packet having a packet size;
- randomly assigning, for each data packet of the plurality of data packets, a respective logical communication channel of the plurality of logical communication channels;
- adjusting one or more parameters of at least one data packet assigned to a gateway of a plurality of gateways of the network device to modify the number of outgoing packets transmitted via that gateway relative to the number of data packets received from the first private network;
- and
- transmitting all outgoing packets, including any packets resulting from the parameter adjustment, over the one or more public networks via the respective gateways such that the number of packets observable on the one or more public networks differs from the number of data packets received from the first private network, wherein the remote network device is configured to reconstruct the original data packets from the received outgoing packets prior to delivery to an intended recipient.
A network device operatively coupled to a first private network and one or more public networks, the network device comprising at least one processor configured to execute instructions to perform steps comprising:
- establishing a plurality of logical communication channels to a remote network device, each logical communication channel corresponding to a unique transmission route to a destination via the one or more public networks, each logical communication channel being associated with a respective IP address at the network device, wherein the IP addresses associated with the logical communication channels differ from an actual IP address of the first private network;
- receiving, from the first private network, a plurality of data packets in a first order;
- randomly assigning, for each data packet of the plurality of data packets, a respective logical communication channel of the plurality of logical communication channels;
- randomizing a transmission order of the plurality of data packets such that the plurality of data packets are transmitted in an order different from the order in which they were received from the first private network;
- and
- transmitting each data packet via its respectively assigned logical communication channel in the randomized transmission order, wherein the remote network device is configured to reconstruct an original communication from the received data packets notwithstanding the randomized transmission order.
Dependencies are inferred from the claim text.