Scatter Routing in Windows to Mask IP Addresses and Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transmission methods are vulnerable to unauthorized access and eavesdropping, as encryption can be cracked with improved computing resources, and conventional VPNs reveal identifiable IP addresses, allowing unauthorized users to derive information about data transmissions.
Innovation Solution
A scatter network device with a scattering application that monitors data types and services them through dual or single threads, encrypts data to appear as random noise, and uses out-of-band key exchanges to obscure IP addresses, ensuring secure communication via multiple logical channels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional VPN encryption is used to secure data transmission, then data confidentiality is improved, but IP addresses remain identifiable allowing eavesdroppers to derive transmission information
Solution Approach 1:
The patent introduces scatter network devices as intermediary components between the sender and receiver. These devices perform scatter routing that randomizes the path of data packets through multiple intermediate nodes, preventing direct observation of source and destination IP addresses. The intermediary devices mask the original IP addresses while forwarding encrypted data, thus protecting both confidentiality and obscuring identifying information.
Solution Approach 2:
The patent segments the data transmission path into multiple independent routes through different scatter routing nodes. Instead of a single direct path, data is divided and transmitted through multiple scattered paths, making it difficult for eavesdroppers to reconstruct the complete transmission information including IP addresses. This segmentation breaks the direct visibility chain between source and destination.
2Reliability
If encryption algorithms are strengthened to prevent cracking, then security against unauthorized decryption is improved, but computational resources and processing time increase
Solution Approach 1:
The patent performs preliminary encryption and scattering routing setup before actual data transmission. Key exchange and routing configuration are established in advance, so that during data transmission, the system only needs to apply pre-configured encryption keys and follow pre-determined scatter paths. This reduces real-time computational overhead while maintaining strong encryption security.
Solution Approach 2:
The scatter network devices autonomously manage their own routing decisions and encryption key applications without requiring continuous centralized coordination. Each device independently applies local encryption keys and makes routing decisions based on pre-configured parameters, reducing the overall computational burden on the network while maintaining security.
3Reliability
If scatter routing with multiple paths is implemented to obscure transmission routes, then eavesdropping detection is improved, but device complexity and routing overhead increase
Solution Approach 1:
The scatter routing system periodically changes the active paths and routing parameters rather than maintaining fixed complex routes. This periodic reconfiguration allows the system to use simpler routing tables that are updated at intervals, reducing the complexity of maintaining large static routing databases while still providing multiple path options for detecting eavesdropping attempts.
Data Source
AI summary
In some examples, a scatter network device includes a non-transitory memory, at least one processor, and a scattering application stored in the non-transitory memory. When executed by the at least one processor, the scattering application monitors a socket for the presence of data, responsive to detecting data at the socket, determines a type of the data, responsive to determining the type of the data, services the data, responsive to not detecting data at the socket, monitors for network tunnel (TUN) data, and responsive to detecting TUN data, services the TUN data.