IP Library Granted Patent US 11,683,386
Granted Patent B2
US 11,683,386 · App. 17/688,373 · Granted Jun 20, 2023

Systems and methods for protecting an identity in network communications

Inventor: Barbara M. Hunt (McLean, VA)
Assignee: Conceal, Inc.
H04L67/34G06F9/5038H04L45/22H04L45/586H04L63/0407H04L67/10H04L49/70H04L63/1441
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,683,386
App. No.
17/688,373
Granted
Jun 20, 2023
Kind
B2
Abstract

In some embodiments, a method includes sending a first data unit, received from a source device, to a destination device via a first data unit path. The first data unit path includes (1) a first virtual machine and a second virtual machine that are included in a first network, and (2) a third virtual machine that is included in a second network. Furthermore, the first data unit path includes the first virtual machine, the second virtual machine, and the third virtual machine in a first order. The method includes sending a second data unit, received from the source device, to the destination device via a second data unit path from the source device to the destination device. The second data unit path includes each of the first virtual machine, the second virtual machine, and the third virtual machine in a second order different from the first order.

Claims (22)

1. A non-transitory processor-readable medium storing code representing instructions configured to be executed by a control cluster module to cause the control cluster module to:

instantiate a first virtual machine in a first commercial cloud;

instantiate a second virtual machine in a second commercial cloud;

instantiate a third virtual machine in a third commercial cloud, the third virtual machine being different from the first virtual machine, the third commercial cloud being different from the first commercial cloud;

instantiate a fourth virtual machine in a fourth commercial cloud, the fourth virtual machine being different from the second virtual machine, the fourth commercial cloud being different from the second commercial cloud;

define a first routing table for a first time period such that, during the first time period, a first plurality of data packets received from an origin during the first time period and addressed to a destination are routed via the first virtual machine and the third virtual machine;

define a second routing table for a second time period different from the first time period, such that a second plurality of data packets received from the origin during the second time period and addressed to the destination are routed via the destination via the second virtual machine and the fourth virtual machine.

2. The non-transitory processor-readable medium of claim 1 , wherein the first virtual machine and the third virtual machine node define a logical switch during the first time period.

3. The non-transitory processor-readable medium of claim 1 , wherein different identification information is provided to at least two of the first commercial cloud, the second commercial cloud, and the third commercial cloud to instantiate at least two of the first virtual machine, the second virtual machine, and the third virtual machine.

4. The non-transitory processor-readable medium of claim 1 , wherein, during the first time period, the first virtual machine receives each packet from the first plurality of packets from a gateway that connects the origin to the first commercial cloud via an IP browser session that traverses the internet.

5. The non-transitory processor-readable medium of claim 1 , wherein, during the first time period, the first virtual machine receives each packet from the first plurality of packets from a gateway that connects the origin to the first commercial cloud via a virtual private network that traverses the internet.

6. The non-transitory processor-readable medium of claim 1 , wherein, during the first time period, the third virtual machine routes each packet from the first plurality of packets through a gateway that connects the third commercial cloud to the destination via a virtual private network that traverses the internet.

7. The non-transitory processor-readable medium of claim 1 , wherein, during the first time period, the third virtual machine routes each packet from the first plurality of packets through a gateway that connects the third commercial cloud to the destination via an external network.

8. The non-transitory processor-readable medium of claim 7 , wherein the external network is not managed by the control cluster module.

9. The non-transitory processor-readable medium of claim 1 , the code further comprising instructions to cause the control cluster module to manage a gateway that bridges the first commercial cloud and the third commercial cloud during the first time period.

10. The non-transitory processor-readable medium of claim 1 , wherein, during the first time period, a gateway bridges the first commercial cloud and the third commercial cloud, the gateway routing the first plurality of packets to the third transport node using an internal IP address assigned by the cluster control module.

11. The non-transitory processor-readable medium of claim 1 , wherein, during the first time period, the first virtual machine tunnels each packet from the plurality of packets to the third virtual machine.

12. The non-transitory processor-readable medium of claim 1 , wherein, during the first time period, the first plurality of packets are routed from the third virtual machine and to the destination via a gateway at an interface of the third commercial cloud and the internet, the destination receiving at least one of identify information or location information associated with the gateway such that at least one of an identity or a location of the origin is protected.

13. The non-transitory processor-readable medium of claim 1 , wherein at least one of the first virtual machine or the third virtual machine includes an Open vSwitch.

14. The non-transitory processor-readable medium of claim 1 , the code further comprising instructions to cause the control cluster to define the second routing table to dynamically alter a path between the origin and the destination based on a perceived threat.

15. The non-transitory processor-readable medium of claim 1 , the code further comprising instructions to cause the control cluster to define the second routing table to dynamically alter a path between the origin and the destination on a predetermined schedule.

16. The non-transitory processor-readable medium of claim 1 , wherein at least one of the first routing table or the second routing table is defined in response to a request by an administrator of the control cluster module.

Assignments (5)
SECURITY INTEREST Recorded Oct 31, 2024
From: CONCEAL, INC.
To: WESTERN ALLIANCE BANK
Reel/Frame 069092/0485 →
SECURITY INTEREST Recorded Feb 16, 2023
From: CONCEAL, INC.
To: SIGNATURE BANK
Reel/Frame 062721/0242 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 1, 2022
From: HUNT, BARBARA M.
To: CUTTING EDGE CONSULTING ASSOCIATES, INC.
Reel/Frame 061608/0726 →
CHANGE OF NAME Recorded Nov 1, 2022
From: NETABSTRACTION, INC.
To: CONCEAL, INC.
Reel/Frame 061828/0373 →
CHANGE OF NAME Recorded Nov 1, 2022
From: CUTTING EDGE CONSULTING ASSOCIATES, INC.
To: NETABSTRACTION, INC.
Reel/Frame 061828/0396 →
Continuity (6)
Continuation 17063102 · Oct 5, 2020
Continuation 15858435 · Dec 29, 2017
Continuation 15237271 · Aug 15, 2016
Continuation 13961379 · Aug 7, 2013
Provisional Application 61732664 · Dec 3, 2012
Related Publication 20220368771A1 · Nov 17, 2022