NAT66 IPv6 Obfuscation Using a Stateless 4-Bit Cipher

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing methods for protecting IP addresses in networks require complex encryption/decryption algorithms that are performance-intensive in the data path, and there is a need for robust yet optimized encryption/decryption solutions to obfuscate IP addresses, especially in Stateless Network Address privacy (SNAP) deployments.

Innovation Solution

A dynamic and stateless NAT66 encryption/decryption system using a 4-bit cipher and encryption/decryption flavor to obfuscate both source and destination IPv6 addresses concurrently, ensuring 100% reversibility and zero collisions, with the encryption process occurring in the packet processing path.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If complex encryption/decryption algorithms are used to protect IP addresses, then privacy protection is improved, but processing performance deteriorates

Engineering Contradiction:

Improveprivacy protectionVSAvoidprocessing performance

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent changes the parameter of encryption complexity by using a simplified 4-bit cipher instead of complex algorithms. This reduces the computational burden while still achieving the privacy protection goal, thus resolving the contradiction between security and performance

Inventive Principle:

Principle #35Parameter changes

Solution Approach 2:

The encryption process is segmented into discrete 4-bit operations rather than using a monolithic complex algorithm. This segmentation allows for more efficient processing while maintaining the essential privacy protection function

Inventive Principle:

Principle #1Segmentation

2Reliability

If IP address obfuscation is implemented, then privacy is improved, but network identity value deteriorates

Engineering Contradiction:

ImproveprivacyVSAvoidnetwork identity value

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent implements dynamic IP address obfuscation where the 4-bit cipher can change the appearance of IP addresses while maintaining reversibility. This dynamic transformation provides privacy protection while allowing legitimate network identification when needed, thus balancing privacy and identity value

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The encryption scheme includes a feedback mechanism where the 4-bit cipher is derived from or associated with the IP address transformation. This allows the system to maintain privacy while providing feedback for legitimate identification purposes, resolving the contradiction between privacy and network identity value

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS20250392579A1Method to achieve dynamic NAT66 encryption and decryption

Publication Date: 2025.12.25 CISCO TECHNOLOGY INC

AI summary

The disclosed technology addresses the need in the art for systems and methods of dynamic but stateless NAT encryption and decryption. The disclosed technology provides a robust encryption/decryption algorithm for concurrently obfuscating source and destination IPv6 addresses for SNAP deployments with 100% reversal and zero collisions, thereby providing protection to both the source and destination IPv6 simultaneously.