Method and apparatus for preventing network traffic analysis

A method for preventing network data packet switching traffic analysis by generating and transmitting false packets along with a true packet to hide actual message traffic flow, comprising the steps of:

• a. inserting an extension header having a plurality of fields in a hierarchy of Internet protocol headers controlling passage of the false packets and the true packet through a network;
• b. at a sending host computer, filling said fields with values designating the size of said extension header (0), a message packet type (A), a maximum number (X) of false packets to be generated (B), a minimum number of hops that the false packets will traverse (C), a minimum (D) and maximum (E) and baseline (F) false packet body size, a source address (G) for the true packet, whether re-encryption is permitted (H), a false packet generation probability (I), a decay rate for the false packet generation probability (J), a total number of re-encryptions performed (M), and a decryption key pointer value (N);
• c. generating at the sending host computer a plurality of false packets for each true packet;
• d. transmitting the false packets and the true packet containing said Internet protocol headers and said extension header over said network;
• e. at an intermediate and recipient host computer, decrypting the extension header and determining whether the packet is true or false;
• f. if false, determining from the false packet generation probability whether to generate a new false packet;
• g. changing the false packet generation probability using the decay rate for the false packet generation probability;
• h. decrementing X and filling said fields with values designating the new false packet;
• i. transmitting the new false packet containing the extension header to a subsequent host computer;
• and
• j. repeating steps h. and i. until X=0.

A method for preventing network data packet switching traffic analysis by generating and transmitting false packets along with a true packet to hide actual message traffic flow, comprising the steps of:

• a. inserting an extension header having a plurality of fields in a hierarchy of internet protocol headers controlling passage of the false packets and the true packet through a network;
• b. at a sending host computer, filling said fields with values designating the size of said extension header (0), a message packet as true or false (A), a maximum number (X) of false packets to be generated (B), a minimum number of hops that the false packets will traverse (C), a minimum (D) and maximum (E) and baseline (F) false packet body size, an address (G) for the true packet, whether re-encryption is permitted (H), a false packet generation probability (I) a decay rate for the false packet generation probability (J), a total number of re-encryptions performed (M), and a decryption key pointer value (N);
• c. generating at the sending host computer a plurality of false packets for each true packet;
• and
• d. transmitting the false packets and the true packet containing said Internet protocol headers and said extension header over said network to at least one intermediate and a recipient host computer.