System and method for electronic secure obfuscation network
Described are a secure obfuscation network (SON) and ingress nodes, transit nodes and egress nodes used in such a network. Also described is a method for implementing such a network.
1. A device comprising:
an ingress node comprising:
a tunnel circuit builder module for building a tunnel circuit from the ingress node to an egress node,
an ingressing user data redirection module for redirecting traffic from a client node to the tunnel circuit and for encrypting traffic to thereby form encrypted traffic,
a send/receive module for sending traffic to and receiving traffic from the tunnel circuit,
a private portion for allowing high bandwidth secure private traffic to be received and transmitted by the node on a private pathway through the ingress node, and
a public portion for allowing low bandwidth secure public traffic to be received and transmitted by the node on a plurality of public pathways through the ingress node,
wherein the tunnel circuit comprises a random route path through a plurality of randomly selected public-private transit nodes.
2. The device of claim 1 , wherein the traffic is encrypted by the ingressing user data redirection module by the using public keys from each of the public-private transit nodes.
3. The device of claim 1 , wherein the ingress node is part of a client device comprising the client node.
4. The device of claim 1 , wherein the device comprises the tunnel circuit.
5. The device of claim 1 , wherein the device comprises the egress node and wherein the egress node comprises:
an egress tunnel builder module for building an egress tunnel from a client node to a server node,
an egressing tunnel traffic redirection module for redirecting the encrypted traffic from the tunnel circuit to the egress tunnel and for decrypting the encrypted traffic from the tunnel circuit to thereby form decrypted traffic, and
a send/receive module for sending the decrypted traffic from the client node to the server node through the egress tunnel.
6. A method comprising the following steps:
(a) forming a tunnel circuit from an ingress node to an egress node for traffic from a client node connected to the ingress node,
(b) forming an egress tunnel from the egress node to a server for the traffic, and
(c) transmitting the traffic from the client node to the egress node,
wherein the tunnel circuit comprises a random route path through a plurality of randomly selected public-private transit nodes,
wherein the egress tunnel is an inner tunnel of a double tunnel,
wherein the tunnel circuit is an outer tunnel of the double tunnel, and
wherein the ingress node includes a private portion for allowing high bandwidth secure private traffic to be received and transmitted by the ingress node on a private pathway through the node and a public portion for allowing low bandwidth secure public traffic to be received and transmitted by the ingress node on a plurality of public pathways through the ingress node.
7. The method of claim 6 , wherein the method comprises the following steps:
(d) encrypting the traffic prior to the traffic entering the tunnel circuit, and
(e) encrypting the traffic prior to the traffic entering the egress tunnel.
8. The method of claim 7 , wherein the traffic in step (d) is encrypted using public keys from each of the public-private transit nodes.
9. The method of claim 8 , wherein the traffic in step (e) is encrypted using public keys from each of the public-private transit nodes.