Port Hopping Module for Application Communication Anonymization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication security methods, such as TLS and VPN, expose technical identifiers like IP addresses and logical ports, making it possible to infer communication details, which can lead to intelligence gathering and traffic interception.
Innovation Solution
A method that dynamically changes the logical ports of communicating applications using a port hopping mechanism, where a port skipping module substitutes real logical ports with virtual ones at the transport layer, ensuring that only virtual identifiers are transmitted, and reversibly replacing them upon receipt.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If tunneling methods (IPSec, VPN) are used to secure traffic, then encryption security is improved, but traffic becomes suspicious and attracts interception attempts
Solution Approach 1:
The patent applies parameter changes by dynamically modifying transport layer identifiers (source port, destination port, source IP, destination IP) in real-time during communication. This creates continuously changing parameters that prevent statistical analysis and make traffic pattern recognition impossible, thereby eliminating traffic suspicion while maintaining encryption security
Solution Approach 2:
The system implements dynamics through continuous, real-time modification of transport layer identifiers during active communication sessions. The identifiers are not static but dynamically change according to predetermined algorithms, making the traffic appear as normal, varied communication patterns rather than suspicious encrypted tunneling traffic
2Ease of operation
If technical identifiers (IP addresses, logical ports) are exposed for proper routing, then network routing functionality is ensured, but communication characterization and intelligence gathering become possible
Solution Approach 1:
The patent segments the identification function into two layers: transport layer identifiers are used for routing (functional need) while application layer identifiers provide anonymity (privacy need). The transport layer identifiers are dynamically changed and do not reveal true communication endpoints, separating the routing function from the identification function
Solution Approach 2:
The system introduces an intermediary mechanism where transport layer identifiers act as mediators between the routing requirement and anonymity requirement. These identifiers facilitate network routing while simultaneously hiding the true communication endpoints through dynamic modification and algorithmic transformation
3Loss of information
If port hopping is implemented to anonymize logical ports, then communication anonymity is improved, but device complexity increases
Solution Approach 1:
The port hopping mechanism is implemented as a self-service system where the modification and restoration of logical ports is automatically performed by the communicating devices themselves using shared algorithms and keys. No external port translation server or intermediary device is required, reducing overall system complexity while maintaining anonymity
Solution Approach 2:
The port hopping mechanism serves multiple functions simultaneously: it provides logical port anonymity, enables dynamic identifier modification, and works with existing transport layer protocols. This multi-functionality reduces the need for separate specialized systems, thereby limiting the increase in device complexity
Data Source
Figure 1
Figure 2
AI summary
This method (300) of anonymizing communication between a source application (114) and a destination application (214) comprises the steps of: creation (600), for the source application, of a message, said message incorporating at least one real logical port (PLRs, PLRd) of the source application or the destination application; interception (410), by a port hopping module on the source application side (124), of the message; substitution of the real logical port by a virtual logical port (PLVs, PLVd), to create an anonymized message; transmission (730) of the anonymized message over a network (2) to the destination application; reception (750), by a port hopping module on the destination application side (224), of the anonymized message; inverse substitution of the virtual logical port by the real logical port; and, communication (770) of the message to the destination application.