Encapsulated Data Packet Mixing for Network Eavesdropping Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Network communication monitoring poses a significant threat to privacy and security, as malicious probes can easily intercept and analyze data packets, highlighting the need for effective countermeasures to prevent eavesdropping.
Innovation Solution
A data sending method and apparatus that involves acquiring a target packet, adding an encapsulation header, encrypting the data, constructing a confusing packet with a different header, and sending a mixed packet, while a data receiving method and apparatus reverse this process to extract the original packet, using hierarchical encapsulation and decryption to ensure privacy and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data packets are sent in clear text for easy transmission, then transmission efficiency is improved, but network security deteriorates as malicious probes can easily intercept and analyze the data
Solution Approach 1:
The patent segments the data transmission process into multiple stages: original packet creation, encapsulation with additional headers, encryption of the encapsulated packet, and mixing with dummy packets. This multi-stage segmentation transforms clear text transmission into a secure encrypted process while maintaining transmission efficiency through systematic processing
Solution Approach 2:
The patent creates a composite packet structure by combining the original data packet with encapsulation headers, encryption layers, and dummy packets. This composite structure ensures that even if part of the transmission is intercepted, the complete original data cannot be easily reconstructed without the encryption key
2Object-affected harmful factors
If encryption and encapsulation are added to data packets for security, then network security is improved, but device complexity increases due to multiple processing steps
Solution Approach 1:
The patent applies preliminary action by pre-defining encapsulation header structures and encryption algorithms before actual data transmission. The sending terminal is pre-configured with the encapsulation format and encryption keys, allowing systematic processing without ad-hoc complexity during transmission
Solution Approach 2:
The patent introduces encapsulation headers as intermediary elements between the original data packet and the transmission medium. These headers serve as mediators that organize the encrypted data and provide structure, simplifying the overall processing by creating a standardized intermediate format
3Difficulty of detecting and measuring
If dummy packets are mixed with real data packets to confuse probes, then detection difficulty is improved, but loss of information increases due to the presence of redundant confusing packets
Solution Approach 1:
The patent creates dummy packets that are copies or simulations of real data packet structures, complete with valid encapsulation headers and encrypted content formats. These copies are indistinguishable from real packets to external probes, effectively increasing detection difficulty while the receiving terminal can identify real packets through pre-shared secrets or validation mechanisms
Data Source
AI summary
A data sending method and apparatus and a data receiving method and apparatus for resisting network communication monitoring, wherein the data sending method including: acquiring a target packet; adding an encapsulation header into the target packet and encrypting application data in the target packet to obtain a to-be-sent packet; constructing a confusing packet, the header of the confusing packet being different from the header of the to-be-sent packet at a preset position; and sending a mixed packet of the to-be-sent packet and the confusing packet. In the present disclosure, a communication source hides a data packet to confuses probes, adds an encapsulation header on the basis of the data packet, hides the data packet in a large number of similar packets in a network, and makes an encryption in combination with a mature encryption technology, thereby effectively resisting malicious network communication monitoring and preventing eavesdropping of network communications.