Network communication through a virtual domain

• US 8,370,457 B2
• Filed: 03/13/2007
• Issued: 02/05/2013
• Est. Priority Date: 04/04/2000
• Status: Expired due to Fees

• Current Assignee: DataCloud Technologies, LLC (IP Investments Group LLC)
• Original Assignee: Darmate Glassworks LLC (Intellectual Ventures LLC)
• Inventors: Campbell, Douglas A., Hamor, Alan B., Helton, Mike D.
• Primary Examiner(s): NGUYEN, VAN H
• Application Number:
  US11/717,911
• Publication Number:
  US 20070162590A1
• Time in Patent Office: 2,156 Days
• Field of Search: 709/201, 709/203, 709/204, 709/207, 709/219, 709/225, 709/245, 709/223, 709/227
• US Class Current: 709/219
• CPC Class Codes: H04L 2101/604 Address structures or formats
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 61/5053 Lease time; Renewal aspects
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

The present invention is an apparatus, system and method for communicating to a network through an ad hoc virtual domain. The present invention contains a deceiver, a controller, and a forwarder through which a client communicates through. The deceiver, controller, and forwarder collectively establish the domain in which the ad hoc virtual namespace will exist. This invention allows clients to interact over a network in a fashion that is anonymous and unique to the session which the client is engaging in.

Claims

1. A system comprising:

a processor; and

a non-transitory computer-readable storage medium storing computer executable components and communicatively coupled to the processor to facilitate operation of the computer executable components, the computer executable components, comprising;

a controller configured to associate a destination internet protocol (IP) address with a forwarder IP address, and further configured to indicate transmission of a first data request from a client IP address to the destination IP address is to be via the forwarder IP address based on a pre-defined combination of the client IP address and the destination IP address being within the first data request, wherein the forwarder IP address, the client IP address and the destination IP address are distinct.

2. The system of claim 1, wherein the computer-executable components further comprise a domain name system (DNS) server configured to receive a second data request containing a destination domain name from the client IP address, wherein the DNS server is further configured to provide a destination IP address based upon the destination domain name.

3. The system of claim 2, wherein the computer-executable components further comprise a deceiver configured to transmit the forwarder IP address to a client having the client IP address in response to receipt of the second data request, wherein the forwarder IP address replaces the destination IP address.

4. The system of claim 2, wherein the computer-executable components further comprise a forwarder having the forwarder IP address.

5. The system of claim 4, wherein the controller is configured to associate the forwarder IP address with the destination IP address contained in the second data request.

6. The system of claim 5, wherein a client creates the first data request including the client IP address and the forwarder IP address is received from a client device.

7. The system of claim 1, wherein the forwarder IP address is employed for a pre-determined amount of time-to-live (TTL) time.

8. The system of claim 7, wherein, in response to expiration of the pre-determined amount of TTL time, the controller is further configured to generate a new forwarder IP address for a pre-defined combination of client IP address and destination IP address, wherein the forwarder IP address, the client IP address and the destination IP address are distinct.

9. A method comprising:

establishing a forwarding internet protocol (IP) address for a pre-defined combination of a client IP address and a destination IP address;

identifying, in a data request received from the client IP address, the pre-defined combination; and

in response to the identifying of the pre-defined combination, forwarding the data request via the forwarding IP address to the destination IP address.

10. The method of claim 9, further comprising:

elapsing a time of a pre-determined duration between the establishing and the forwarding.

11. The method of claim 10, further comprising, in response to the elapsing of the time, re-establishing the forwarding IP address for the pre-defined combination of the client IP address and the destination IP address.

12. The method of claim 9, further comprising:

receiving data at the client IP address from the destination IP address, based upon the pre-defined combination, via the forwarding IP address.

13. The method of claim 9, further comprising:

associating a plurality of client IP addresses with the destination IP address.

14. The method of claim 9, wherein the establishing includes establishing the forwarding IP address for a pre-defined combination of an IP address of a client and a domain name.

15. The method of claim 14, further comprising requesting the destination IP address of the domain name.

16. The method of claim 15, further comprising receiving the forwarding IP address, where the forwarding IP address is masquerading as the destination IP address.

17. A non-transitory computer readable storage medium comprising computer-executable instructions that, in response to execution, cause a computing system to perform operations, comprising:

establishing a forwarding internet protocol (IP) address for a pre-defined combination of a client IP address and a destination IP address;

identifying, in a data request received from the client IP address, the pre-defined combination; and

in response to the identifying of the pre-defined combination, forwarding the data request via the forwarding IP address to the destination IP address.

18. The computer readable storage medium of claim 17, the operations further comprising:

elapsing a time of a pre-determined duration between the establishing and the forwarding.

19. The computer readable storage medium of claim 18, the operations further comprising, in response to the elapsing of the time, re-establishing the forwarding IP address for the pre-defined combination of client IP address and destination IP address.

20. The computer readable storage medium of claim 17, the operations further comprising:

receiving data at the client IP address from the destination IP address, based upon the pre-defined combination, via the forwarding IP address.

21. The computer readable storage medium of claim 17, the operations further comprising:

associating a plurality of client IP addresses with the destination IP address.

22. The computer readable storage medium of claim 17, wherein the establishing includes establishing the forwarding IP address for a pre-defined combination of an IP address of a client and a domain name.

23. The computer readable storage medium of claim 22, the operations further comprising requesting the destination IP address of the domain name.

24. The computer readable storage medium of claim 23, the operations further comprising receiving the forwarding IP address, where the forwarding IP address is masquerading as the destination IP address.