Camouflage of network traffic to resist attack
AssigneeThe Charles Stark Draper Laboratory, Inc.
InventorsLi Shu, William Weinstein
Life of this patent
Estimating the term…
Abstract
An apparatus for transmitting a file with enhanced transmission security through a network includes a file-splitting processor that splits the file into a plurality of message segments and addresses the plurality of message segments to a plurality of addresses assigned to a receiving host. The apparatus includes a message segment transmitter for transmitting the plurality of message segments to the receiving host.
Claims32
An apparatus for transmitting a file through a network, the apparatus comprising:
- a file-splitting processor for splitting a file into a plurality of message segments and assigning one of a plurality of final different destination addresses to each segment, each of the plurality of final different destination addresses being assigned to a single receiving host;
- and
- a message segment transmitter for transmitting the plurality of message segments to the receiving host using the plurality of final different destination addresses.
An apparatus for transmitting a file through a network, the apparatus comprising:
- a file-splitting processor for splitting the file into a plurality of message segments and assigning one of a plurality of different initial source addresses to each message segment of the plurality of message segments, each initial source address being assigned to a single source host, thereby disguising the origin of the file;
- and
- a message segment transmitter for transmitting the plurality of message segments to a receiving host.
A method for securely transmitting a file through a network, the method comprising:
- (a) at a source host, splitting the file into a plurality of message segments;
- (b) addressing, at the source host, each message segment of the plurality of message segments using one of a plurality of different final destination addresses, each of the different final destination addresses being assigned to a single receiving host;
- and
- (c) transmitting the plurality of message segments to the receiving host with the plurality of different final destination addresses.
A method of securely transmitting a file through a network, the method comprising:
- (a) splitting the file into a plurality of message segments at a source host;
- (b) at the source host, assigning one initial source address of a plurality of different initial source addresses to each message segment of the plurality of message segments, each of the different initial source addresses being assigned to the source host, thereby disguising the origin of the file;
- and
- (c) transmitting the plurality of message segments.
A method for securely transmitting a file through a network, the method comprising:
- (a) splitting the file into a plurality of message segments, each message segment comprising:
- (i) one of a plurality of different final destination specifiers, each of the final destination specifiers being attributed to a single final destination host;
- (ii) encrypted protocol information;
- and
- (iii) encrypted message data;
- (b) receiving a message segment at a receiving host;
- (c) decrypting the message data to determine the final destination host;
- (d) encrypting the message data in accordance with an encryption protocol accessible to the final destination host;
- (e) transmitting the encrypted message segment to the final destination host;
- and
- (f) repeating steps (a)–(e) for other message segments, thereby facilitating recovery of the message by the final destination host.
Dependencies are inferred from the claim text.