Bridge for communicating with a dynamic computer network
AssigneeHarris Corporation
InventorWayne Smith
Life of this patent
Estimating the term…
Abstract
Method for communicating data in a computer network involves dynamically modifying at a first location in the computer network a plurality of true values. The true values correctly represent the plurality of identify parameters. These true values are transformed to false values, which incorrectly represent the identity parameters. Subsequently, the identity parameters are modified at a second location to transform the false values back to the true values. The position of the first and/or second locations varies dynamically as part of this process. A bridge transforms identity parameter values when communicating outside the network. Dynamic modification of the identity parameters occurs in accordance with a mission plan that can be modified without interrupting communication of data in the network.
Claims25
A method for communicating data from a first computing device included in a first computer network, to a second computing device included in a second computer network, comprising:
- transmitting a data communication on said first computer network, said data communication including a first plurality of identity parameters which specify true values associated with at least one of said first and second computing devices;
- dynamically modifying a first set of said first plurality of identity parameters at a first location in said first computer network, to transform said first set to specify false information before re-transmitting said data communication to a bridge location, said false information specifying identity parameter data which is observable by an adversary monitoring said network, but specifying incorrect information with respect to at least one of said first and second computing devices;
- dynamically modifying said first set at said bridge location to transform said first set to specify true information;
- after transforming said first set to specify true information at said bridge location, transmitting said data communication from said bridge location to said second computer network;
- detecting a trigger event for causing a dynamic variation in a position of said first location within the first computer network:
- and
- in response to detection of the trigger event, dynamically varying a position of said first location within the first computer network by using a pseudorandom function so as to vary a distance vector between said first location and said bridge location, where a seed value for the pseudorandom function comprises an occurrence time of the trigger event.
A bridge for communicating data between a first computing device included in a first computer network and a second computing device included in a second computer network, where the data includes a plurality of identity parameters values which are used to convey information concerning at least one of the first computing device and the second computing device, comprising:
- at least one computer processing device configured to:
- selectively perform a first transformation in which a first set of identity parameter values in a first data communication from said first computing device to said second computing device, are transformed from values that are false to values that are true, said false values specifying identity parameter data which is observable by an adversary monitoring said network, but specifying incorrect information with respect to at least one of said first and second computing devices;
- dynamically determine at least one characteristic of said first transformation in coordination with a plurality of modules in said first computer network:
- and
- detect a first trigger event for causing a dynamic variation in a position of said first location within the first computer network:
- wherein said at least one characteristic is determined in accordance with a first mission plan associated with said first computer network and said mission plan further specifies dynamically varying locations within said first network where said first set of identity parameters are converted from values that are true to values that are false by using a pseudorandom function so as to vary a distance vector between said first computing device and said second computing device, where a seed value for the pseudorandom function comprises an occurrence time of the first trigger event.
Dependencies are inferred from the claim text.