Apparatus, system, and method for communicating to a network through a virtual domain providing anonymity to a client communicating on the network

• US 7,209,959 B1
• Filed: 04/04/2000
• Issued: 04/24/2007
• Est. Priority Date: 04/04/2000
• Status: Expired due to Term

• Current Assignee: DataCloud Technologies, LLC (IP Investments Group LLC)
• Original Assignee: Wk Networks, Inc.
• Inventors: Helton, Mike D., Hamor, Alan B., Campbell, Douglas A.
• Primary Examiner(s): NGUYEN, VAN H
• Application Number:
  US09/542,858
• Time in Patent Office: 2,576 Days
• Field of Search: 709/219, 709/203, 709/227, 709/228, 709/229, 713/200, 713/201
• US Class Current: 709/219
• CPC Class Codes: H04L 2101/604 Address structures or formats
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 61/5053 Lease time; Renewal aspects
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

The present invention is an apparatus, system and method for communicating to a network through an ad hoc virtual domain. The present invention contains a deceiver, a controller, and a forwarder through which a client communicates through. The deceiver, controller, and forwarder collectively establish the domain in which the ad hoc virtual namespace will exist. This invention allows clients to interact over a network in a fashion that is anonymous and unique to the session which the client is engaging in.

Claims

1. A method comprising:

in response to a request by a client to initiate communication with a destination website;

setting up a forwarding session between the client and a destination server corresponding to the destination website, the forwarding session employing a forwarder disposed between the client and the destination server to forward packets sent from the client to the destination server and to forward packets sent from the destination server to the client;

employing the forwarder to transfer packets between the client and the destination server during the forwarding session, wherein the forwarding session is set up and implemented such that neither the client or the destination server is aware of the employment of the forwarder;

employing a controller configured to communicate with the forwarder and a domain name server, wherein the controller queries the domain name server to resolve the name of the destination website associated with the destination server and initiates communication with the forwarder in response to an answer from the domain name server to resolve the name of the destination website associated with the destination server;

employing a deceiver configured to communicate with the controller and the client, wherein the deceiver receives the request by the client to initiate communication with the destination website and initiates the controller to query the domain name server to resolve the name of the destination website associated with the destination server; and

in response to the controller receiving the answer from the domain name server and initiating communication with the forwarder, initiating the forwarding session.

2. The method of claim 1, wherein the forwarder is unaware of an identity of the client outside of the session.

3. The method of claim 1, wherein the forwarder is unaware of an identity of a user or alias of a user of the client during the forwarding session.

4. The method of claim 1, wherein the forwarding session exists for a limited period of time.

5. The method of claim 4, wherein the data from the forwarding session exists on a time to live basis.

6. The method of claim 4, wherein data concerning the forwarding session is discarded from the forwarder at the completion of the forwarding session.

7. The method of claim 1, wherein the client is unaware that it is in communication with the forwarder in place of the destination server.

8. The method of claim 1, wherein the destination server is unaware that it is in communication with the forwarder in place of the client.

9. The method of claim 1, wherein a verification request from the forwarder is transmitted to the controller and confirmed before the forwarder transfers packets between itself and the destination server.

10. The method of claim 1, wherein the request by the client to initiate communication with the destination website includes a request to resolve an IP address of a website server that the client is intending to reach.

11. The method of claim 10, wherein the controller stores an IP address that represents the origin of the client.

12. The method of claim 10, wherein the controller stores an IP address of the website server that the client is intending to reach.

13. The method of claim 10, wherein the controller stores an IP address that represents the location of the forwarder.

14. The method of claim 10, wherein the controller stores a time-to-live function for the forwarding session.

15. The method of claim 10, wherein the controller stores an IP address of the website server that the client is intending to reach and an IP address that represents the location of the forwarder, further comprising:

interchanging the IP address of the website server with the IP address of the forwarder.

16. A computer system comprising:

a forwarder configured to transmit and receive data;

said forwarder configured to communicate with at least a client and at least a destination server corresponding to a destination website with which the client has requested to initiate communication;

said forwarder configured for employment between the client and the destination server to forward packets sent from the client to the destination server and to forward packets sent from the destination server to the client;

said forwarder configured to transfer packets between the client and the destination server, wherein the client and the destination server are unaware of the employment of said forwarder;

said forwarder configured to communicate with at least a controller;

said controller configured to communicate with at least a deceiver, said deceiver configured to communicate with the client, wherein the deceiver receives the request by the client to initiate communication with the destination website and initiates the controller to query a domain name server to resolve the name of the destination website associated with the destination server;

said controller configured to communicate with said domain name server to resolve the name of said destination website and initiate communication with the forwarder in response to the resolution of the name of the destination website associated with the destination server;

said controller configured to store communication data for locating at least said deceiver, said domain name server, and said forwarder; and

said controller configured to initiate the forwarder to forward packets between the destination server and the client in response to the resolution of the name of the destination website associated with the destination server.

17. The computer system according to claim 16, wherein said forwarder is configured to transmit verification data to said controller.

18. The computer system according to claim 16, wherein said controller sends destination instructions to said domain name server, receives data including resolved a website name associated with said destination instructions.

19. The computer system according to claim 18, wherein said controller establishes communication with said forwarder upon receiving data from said domain name server.

20. The computer system according to claim 18, wherein said destination instructions include data comprising an IP address of a destination website that said client is intending to communicate with.

21. The computer system according to claim 16, wherein said controller stores IP addresses for at least said deceiver, said domain name server, and said forwarder.

22. The computer system according to claim 16, wherein said controller receives destination instruction from the deceiver and transmits the destination instruction to the domain name server.

23. The computer system according to claim 16, wherein said deceiver causes said client to communicate with said forwarder, instead of an intended destination server.

24. The computer system according to claim 16, wherein said forwarder communicates data with said destination server corresponding to data communicated between said forwarder and said client.

25. The computer system according to claim 16, wherein said controller correlates communication of said forwarder with at least said client and said destination server.

26. The computer system according to claim 16, wherein said controller determines and stores an association of name to IP address for said client.