Packet Header Obfuscation for Secure Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems are vulnerable to content leakage as malicious third parties can identify and intercept packets by analyzing unencrypted headers, even if the payloads are encrypted, due to the lack of encryption for packet headers.
Innovation Solution
A communication system that modifies packet headers with fictitious destination addresses and inserts original destination information into payloads, using a processor to manage and forward packets in a way that makes it difficult for third parties to identify flows, by varying fictitious destination addresses and inserting dummy packets.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If packet headers are not encrypted to maintain routing functionality, then network communication can proceed normally, but malicious third parties can identify and intercept packets by analyzing header information
Solution Approach 1:
The packet is segmented into header and payload parts, with the header containing fictitious routing information and the payload containing the actual communication data. This segmentation allows the header to be treated differently from the payload, enabling encryption of the payload while using dummy data in the header to prevent traffic analysis.
Solution Approach 2:
Fictitious destination address information acts as an intermediary between the actual destination and the packet routing system. The relay apparatus uses this intermediary information to forward packets without exposing the real destination, thereby protecting communication privacy while maintaining routing functionality.
2Productivity
If all packets in a flow use the same destination address in headers for consistent routing, then relay apparatus can efficiently forward packets, but third parties can easily identify and collect all packets belonging to the same communication flow
Solution Approach 1:
The destination address information in packet headers is made dynamic rather than static. Each packet or packet group uses different fictitious destination addresses, making it difficult for third parties to identify flows. The relay apparatus efficiently handles this dynamic information by extracting it from the payload and using it for forwarding decisions.
Solution Approach 2:
The destination address parameter in packet headers is changed for each packet or packet group using encryption or hashing functions. This parameter change prevents traffic analysis while the relay apparatus can still efficiently route packets by processing the changed parameter values.
3Reliability
If original destination information is kept in packet headers for accurate delivery, then packets can be delivered to the correct destination, but the communication content can be analyzed by monitoring header information
Solution Approach 1:
Instead of placing the original destination information directly in the packet header as conventionally done, the invention inverts the approach by placing fictitious destination information in the header and the original destination information in the payload. This inversion protects the communication content while maintaining delivery accuracy.
Solution Approach 2:
The original destination information is nested within the payload section of the packet, rather than being exposed in the header. This nesting structure allows the header to contain only fictitious routing information while the real destination data is hidden inside the encrypted or protected payload.
Data Source
AI summary
A transmission apparatus transmits a plurality of second packets obtained from a plurality of first packets, wherein each of the plurality of first packets includes a header including a first field, and a payload, and includes first information stored in the first field, and wherein each of the plurality of second packets includes second information in the first field instead of the first information, and includes the first information inserted in the payload. A reception apparatus receives the plurality of second packets, deletes the first information from the payload of the received second packet and obtains data included in the payload of the received packet when third information stored in a memory is stored in the second field of a packet received by the reception unit.