Method and apparatus for dynamic mapping

• US 7,757,272 B1
• Filed: 06/14/2000
• Issued: 07/13/2010
• Est. Priority Date: 06/14/2000
• Status: Active Grant

• Current Assignee: Level 3 Communications LLC (Lumen Technologies, Inc.), Raytheon BBN Technlogies Corp. (Rtx Corporation), Verizon Corporate Services Group Incorporated (Verizon Communications Inc.)
• Original Assignee: Level 3 Communications LLC (Lumen Technologies, Inc.), BBN Technologies (Rtx Corporation), Verizon Corporate Services Group Incorporated (Verizon Communications Inc.)
• Inventors: Dean, Michael Anthony
• Primary Examiner(s): Vu, Kimyen
• Assistant Examiner(s): TRUVAN, LEYNNA THANH
• Application Number:
  US09/594,100
• Time in Patent Office: 3,681 Days
• Field of Search: 713/153, 713/154, 713/160, 713/162, 713/178, 713/182, 713/185, 713200-201, 713/190, 370351-356, 370/389, 370/392, 370/397, 709/238, 709/203, 709224-225, 709/223, 380/257, 380/37, 380/42, 380 28- 30, 711/108, 711/200, 711/202, 711/207, 711/211, 711/163, 711205-206, 705/58, 726 2- 3, 726/27, 726/30, 726/13
• US Class Current: 726/2
• CPC Class Codes: H04L 61/2525 Translation at a client
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06

Abstract

A system for mapping and translating address information in a network is provided. The system includes a client-side address translator (120) and a server-side address translator (140). The client-side address translator (120) is configured to receive a data packet from a client (110). The data packet includes a first destination address representing the real destination address. The client-side address translator (120) maps the first destination address to another address using a mapping algorithm and transmits the data packet with the via the network (160). The server-side address translator (140) receives the data packet, translates the mapped address information back to the real destination address and forwards the data packet using the real destination address.

Claims

1. In a network including at least one server for communicating with at least one client, a method comprising:

receiving in a first address translator a data packet from a client, the data packet including a first destination address;

changing the first destination address to a second destination address in the first address translator;

transmitting the data packet with the second destination address from the first address translator to a second address translator via the network;

receiving in the second address translator the data packet with the second destination address transmitted via the network;

translating the second destination address back to the first destination address in the second address translator; and

forwarding the data packet from the second address translator to the server using the first destination address.

2. The method of claim 1, further comprising:

encrypting the second destination address before transmitting the data packet.

3. The method of claim 2, further comprising:

decrypting the second destination address before translating the second destination address.

4. The method of claim 1, wherein the changing includes:

mapping the first destination address to the second destination address using a mapping algorithm.

5. The method of claim 1, wherein the first destination address includes first port information associated with a port on the server and the changing includes:

mapping the first port information to second port information.

6. The method of claim 5, wherein the translating includes:

translating the second port information back to the first port information.

7. The method of claim 1, further comprising:

determining whether the first destination address is included in a set of predetermined addresses before changing the first destination address.

8. The method of claim 7, further comprising

determining whether the second destination address is included in a set of predetermined addresses before translating the second destination address.

9. The method of claim 1, further comprising:

determining whether to change the first destination address based on a current time and whether the first destination address is in a set of predetermined addresses.

10. The method of claim 9, further comprising:

determining whether to translate the second destination address based on the time and whether the second destination address is in a set of predetermined address.

11. A system for mapping destination information, comprising:

a memory configured to store a mapping algorithm; and

a processor configured to;

receive in a first address translator a data packet including a first destination address, the first destination address representing a real destination address,

change the first destination address to a second destination address in the first address translator using the mapping algorithm,

transmit the data packet including the second destination address to a second address translator;

receive in the second address translator the data packet including the second destination address;

translate the second destination address back to the first destination address in the second address translator; and

forward the data packet from the second address translator to the real destination using the first destination address.

12. The system of claim 11, wherein the processor is further configured to:

encrypt the second destination address before transmitting the data packet.

13. The system of claim 11, wherein the data packet includes first port information associated with a server, wherein the processor is further configured to:

map the first port information to second port information using the mapping algorithm.

14. The system of claim 11, wherein the processor is further configured to:

determine whether the first destination address is included in a set of predetermined addresses before changing the first destination address.

15. The system of claim 11, wherein the processor is further configured to:

determine whether to change the first destination address based on a current time and whether the first destination address is in a set of predetermined addresses.

16. A computer-readable medium having stored thereon a plurality of sequences of instructions, said instructions including sequences of instructions which, when executed by a processor, cause said processor to perform the steps of:

receiving in a first address translator a data packet including a first destination address, the first destination address representing a real destination address;

changing the first destination address to a second destination address in the first address translator using a mapping algorithm;

transmitting the data packet including the second destination address from the first address translator to a second address translator;

receiving in the second address translator the data packet including the second destination address;

translating the second destination address back to the first destination address in the second address translator; and

forwarding the data packet from the second address translator to the real destination using the first destination address.

17. The computer-readable medium of claim 16, including instructions for causing said processor to perform the further step of:

encrypting the second destination address before transmitting the data packet.

18. The computer-readable medium of claim 16, wherein the first destination address includes first port information associated with a port on a server and the changing includes:

mapping the first port information to second port information.

19. The computer-readable medium of claim 16, including instructions for causing said processor to perform the further step of:

determining whether the first destination address is included in a set of predetermined addresses before changing the first destination address.

20. The computer-readable medium of claim 16, including instructions for causing said processor to perform the further step of:

determining whether to change the first destination address based on the time and whether the first destination address is in a set of predetermined addresses.

21. A system for mapping destination information, comprising:

a memory configured to store a translation algorithm; and

a processor configured to;

receive in a second address translator from a first address translator a data packet including a first destination address, the first destination address representing mapped destination address information,

translate in the second address translator the first destination address to a second destination address using the translation algorithm, the second destination address representing a real destination address, and

forward the data packet from the second address translator using the second destination address.

22. The system of claim 21, the mapped destination address information being encrypted, wherein the processor is further configured to:

decrypt the mapped destination address information concurrently with the translating.

23. The system of claim 21, wherein the first destination address includes first port information representing mapped port information, wherein the processor is configured to:

translate the first port information to second port information, the second port information representing real port information.

24. The system of claim 21, wherein the processor is further configured to:

determine whether the first destination address is included in a set of predetermined addresses before translating the first destination address.

25. The system of claim 21, wherein the processor is further configured to:

determine whether to translate the first destination address based on a current time and whether the first destination address is in a set of predetermined addresses.

26. A computer-readable medium having stored thereon a plurality of sequences of instructions, said instructions including sequences of instructions which, when executed by a processor, cause said processor to perform the steps of:

receiving from a first address translator into a second address translator a data packet including a first destination address, the first destination address representing a mapped destination address;

translating the first destination address to a second destination address in the second address translator using a translation algorithm, the second destination address representing a real destination address; and

forwarding the data packet from the second address translator using the second destination address.

27. The computer-readable medium of claim 26, wherein the data packet comprises encrypted information, the computer-readable medium including instructions for causing said processor to perform the further step of:

decrypting the encrypted information before translating the data packet.

28. The computer-readable medium of claim 26, wherein the first destination address includes first port information representing mapped port information, wherein the translating includes:

translating the first port information to second port information, the second port information representing real port information.

29. The computer-readable medium of claim 26, including instructions for causing said processor to perform the further step of:

determining whether the first destination address is included in a set of predetermined addresses before translating the first destination address.

30. The computer-readable medium of claim 26, including instructions for causing said processor to perform the further step of:

determining whether to translate the first destination address based on a current time and whether the first destination address is in a set of predetermined addresses.

31. A system for mapping and translating destination information in a network including at least one server for communicating with a plurality of client workstations, comprising:

means for receiving from one of the client workstations a data packet including a first destination address;

means for changing the first destination address to a second destination address in a first address translator;

means for transmitting the data packet with the second destination address from the first address translator to a second address translator via the network;

means for receiving in the second address translator the data packet with the second destination address transmitted via the network;

means for translating the second destination address back to the first destination address in the second address translator; and

means for forwarding the data packet from the second address translator to the server using the first destination address.

32. In a network including at least one client and at least one server, a system comprising:

a first address translator configured to;

receive a data packet from a client, the data packet including a first destination address wherein the first destination address represents a real destination address,

change the first destination address to a second destination address, and

transmit the data packet with the second destination address via the network to a second address translator; and

the second address translator configured to;

receive the data packet with the second destination address transmitted via the network,

translate the second destination address back to the first destination address, and

forward the data packet to the server using the first destination address.

33. The system of claim 32 further comprising:

the second address translator further configured to;

receive a reply data packet from the server, the reply data packet including a third destination address wherein the third destination address represents a real destination address,

change the third destination address to a fourth destination address, and

transmit the reply data packet with the fourth destination address via the network; and

the first address translator further configured to;

receive the reply data packet transmitted via the network,

translate the fourth destination address back to the third destination address, and

forward the reply data packet to the client using the third destination address.