Raytheon Bbn Technologies Corp.

Verizon Corporate Services Group Inc.

Verizon Patent and Licensing Inc.

Bbnt Solutions Llc.

Verizon Corporation Services Group Inc.

Matthew Aloysius Brannigan

Russell Andrew Fink

Shelby Alana Evans

Aswin Morgan Almeida

Shelley Anne Ferguson

A translator is provided for translating predetermined portions of packet header information including an address of a data packet according to a cipher algorithm keyed by a cipher key derived by a key exchanger. A mapping device is also provided for mapping the address to a host table stored in memory. If the address does not match an entry in the host table, a security device is triggered.

Method and apparatus for providing adaptive self-synchronized dynamic address translation as an intrusion detection sensor

A communication device is provided for a local enclave. The communication device processes packets to be transferred from the local enclave to a wide area network. The communication device intercepts packets originating from a host on the local enclave, the packets being destined for transmission over the wide area network, extracts predetermined portions from each packet header to form one or more blocks for translation, applies a predetermined encryption algorithm to translate the one or more blocks after masking; and reinserts bits from the translated block back into the packet header. The purpose of the invention is to obfuscate network machine identities to TCP/IP packets traversing the public Internet to prevent traffic mapping.

Method and apparatus for providing adaptive self-synchronized dynamic address translation

A bastion host is provided for a local area network (LAN). The bastion host processes packets to be transferred from the LAN to a wide area network (WAN). The bastion host intercepts packets originating from a host on the LAN, the packets being destined for transmission over the WAN, extracts bits from predetermined fields from each packet header to form one or more blocks for translation, masks bits from the one or more blocks that vary rapidly packet to packet, applies a predetermined encryption algorithm to translate the one or more blocks after masking; and reinserts bits from the translated block back into the packet header.

Sliding scale adaptive self-synchronized dynamic address translation

An apparatus and method are provided for adapting a link layer address of a network device. A first input/output port is connected to receive data from a first network node The first input/output port has a link layer address and is configurable to one of a plurality of link layer addresses. A second input/output port is connected to output the data to a second network node The second input/output port has a link layer address and is configurable to one of a plurality of link layer addresses. A processor adapts the link layer address of the first input/output port to correspond to a link layer address of the second network node and adapts the link layer address of the second input/output port to correspond to a link layer address of the first network node

Growing community of inventors

Columbia, MD, United States of America

Matthew Aloysius Brannigan