Disposable Proxy Rotation for Source IP Obscuration

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

On-demand networks can become strongly correlated with specific network addresses, leading to undesirable outcomes such as denial of access by third parties using blacklists or other tactics, which can affect both personal privacy and corporate or national operations.

Innovation Solution

A system utilizing a proxy manager to provide disposable network proxies with time and use constraints, allowing source network devices to connect through a rotating pool of disposable proxies, thereby obscuring their IP addresses from destination devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a single network address is used for on-demand networks, then network simplicity is maintained, but correlation with source devices increases leading to denial of access

Engineering Contradiction:
Improvenetwork address flexibilityVSAvoidproxy system complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent employs disposable proxies that are created, used, and discarded for each network transaction. These short-lived proxies assume the identity of the source device temporarily, perform the network operation, and then are disposed of. This eliminates permanent associations between network addresses and source devices, preventing blacklisting while maintaining operational simplicity through automated proxy rotation.

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

Solution Approach 2:

The patent introduces an intermediary proxy layer between the source device and the network destination. This intermediary assumes the source device's identity when establishing network connections, allowing the actual source to remain hidden. The intermediary handles all network communications, masking the true source while enabling flexible address assignment to prevent correlations.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Loss of information

If disposable proxies are rotated continuously, then source IP address obscuration is improved, but system complexity increases

Engineering Contradiction:
Improvesource IP address visibilityVSAvoidproxy management complexity
Core Design Contradiction:
Loss of informationVSDevice complexity

Solution Approach 1:

The patent implements self-service proxy management where the system automatically handles proxy creation, selection, and disposal without manual intervention. The proxy manager autonomously rotates proxies based on predefined policies, monitors their usage states, and manages the entire lifecycle. This automation eliminates the need for complex manual proxy management while maintaining continuous IP obscuration.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent incorporates feedback mechanisms where the system monitors proxy usage states and adjusts proxy selection accordingly. Usage information feeds back into the proxy management decision-making process, allowing dynamic adaptation to network conditions. This feedback loop enables intelligent proxy rotation that maintains obscuration effectiveness while optimizing system performance.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS12556520B1Obscuring connections between source and destination devices via a pool of disposable proxies
Publication Date: 2026.02.17 CYBER IP HLDG LLC
  • US12556520B1 patent drawing
  • US12556520B1 patent drawing
  • US12556520B1 patent drawing

AI summary

A system for obscuring a source IP address of a source network device from a destination network device comprises a proxy manager and first and second disposable network proxies. Credentials for a plurality of disposable network proxies are provided to the source network device. A proxy disposal trigger is generated for each disposable network proxy in the plurality of disposable network proxies based on usage of the disposable network proxy. A connection request comprising the credentials and a destination IP address of the destination network device is received from the source network device. First traffic from the source network device to the destination network device is forwarded over a first connection with the destination network device that uses an IP address of the disposable network proxy. Second traffic from the destination network device to the source network device is forwarded over a second network connection with the source network device.