Covert Network Message Encoding via Path Selection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network communication systems lack effective methods to securely communicate data over networks, particularly in preventing interception by actors with access to network communications.
Innovation Solution
The method involves encoding a message based on one or more network paths and sending a sequence of packets, where each packet includes a payload addressed to the destination device over the specified network paths. This encoding is done using various number systems such as binary or hexadecimal, and the sequence of packets and network paths signals the encoded message to the destination device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional network communication methods are used to transmit data, then communication efficiency is maintained, but security against interception is compromised
Solution Approach 1:
The patent segments the message into multiple individual packets for transmission. Each packet contains only a portion of the original message, making it impossible for interceptors to reconstruct the complete message from any single packet. The message is divided into segments that are distributed across multiple packets, thereby enhancing security while maintaining communication functionality.
Solution Approach 2:
The patent implements nested encoding by placing encoded message segments within packet payloads. Each packet contains an encoded portion of the message embedded in its payload field, creating a nested structure where the actual message is hidden within the packet data. This nesting approach allows the message to be concealed within standard packet formats, improving security without requiring separate communication channels.
2Reliability
If message data is directly included in packet payloads, then communication simplicity is maintained, but interception and analysis of data becomes possible
Solution Approach 1:
The patent applies preliminary encoding to the message before segmentation and packetization. The original message is first encoded using an encoding scheme (such as binary representation), then divided into segments. This preliminary encoding action ensures that even if packets are intercepted, the encoded segments cannot be easily decoded without the proper key or algorithm, thereby protecting data while maintaining operational simplicity at the application layer.
Solution Approach 2:
The patent introduces an encoding intermediary layer between the message and packet payload. Instead of directly placing plaintext message segments in packet payloads, the message is first transformed through an encoding intermediary process. This intermediary encoding layer protects the message content while allowing standard packet transmission protocols to remain unchanged, balancing security with operational simplicity.
3Object-affected harmful factors
If encoding and path selection methods are used to secure communication, then interception resistance is improved, but communication system complexity increases
Solution Approach 1:
The patent segments both the message and the transmission paths. The message is divided into multiple segments distributed across different packets, and these packets are routed through different network paths. This dual segmentation approach ensures that even if one path is compromised, other segments remain secure on alternative paths, improving interception resistance while using standard routing mechanisms.
Solution Approach 2:
The patent adds the dimension of path selection diversity to the encoding process. Instead of only encoding the message content, the system also varies the transmission paths as an additional dimension of security. Packets containing encoded message segments are routed through different network paths, creating a multi-dimensional security approach that combines encoding with path diversity to resist interception.
Data Source
AI summary
A method of transmitting a covert message over a network from an origin device to a destination device includes using selection a plurality of network paths, network channels, and network tunnels to signal to the destination device symbols. Sequences of the symbols are interpreted by the destination device as values in an n-based number system. The values are decoded by the destination device to obtain the covert message. Some preferred implementations use a binary number system and some use a hexadecimal number system. Some utilize network path selection and incorporate network watermarks, by which the network path that was selected for each received packet is determined. Network paths preferably are differentiated from one another by redirects that are storage servers in an overlay network. Network communications can be opened between the origin device and destination device for continuously communicating packets without signaling symbols when no covert message is being transmitted.