IP Library › Granted Patent US 12,177,196
Granted Patent B2
US 12,177,196 · App. 17/546,931 · Granted Dec 24, 2024

Distributed trust-based communication

Inventor: Karolis Kaciulis (Kaisiadorys, LT)
Assignee: Netflow, UAB
H04L63/0442H04L9/0631H04L9/0841H04L9/302H04L9/3066H04L63/0272H04L63/0428H04L63/123
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,177,196
App. No.
17/546,931
Granted
Dec 24, 2024
Kind
B2
Abstract

A computer generates a first encrypted message by encrypting an unencrypted message for decryption at a receiving device. The computer couples the first encrypted message with addressing data associated with the receiving device to generate a coupled message. The computer generates a second encrypted message by encrypting the coupled message for decryption at a data transmission service. The computer transmits the second encrypted message via the data transmission service to enable the receiving device to read the unencrypted message.

Claims (53)

1. A method comprising:

generating a first encrypted message by encrypting an input message for transmission by a first virtual private network (VPN);

coupling the first encrypted message with addressing information associated with the first VPN to generate a coupled message;

generating a second encrypted message by encrypting the coupled message for decryption by a second VPN; and

transmitting the second encrypted message via the second VPN to enable transmission of the input message to a destination machine by the first VPN, wherein transmitting the second encrypted message via the second VPN causes the second VPN to perform first operations comprising:

decrypting the second encrypted message to access the coupled message; and

forwarding the first encrypted message, from within the coupled message, to the first VPN, wherein forwarding the first encrypted message to the first VPN causes the first VPN to perform second operations comprising:

decrypting the first encrypted message to access the input message; and

transmitting the input message to the destination machine.

2. The method of claim 1 , wherein generating the first encrypted message comprises:

encrypting the input message with public data of the first VPN.

3. The method of claim 1 , wherein generating the second encrypted message comprises:

encrypting the coupled message with public data of the second VPN.

4. The method of claim 1 , wherein forwarding the first encrypted message to the first VPN further causes the first VPN to perform operations comprising:

receiving a response message in response to the input message; and

providing the response message to the second VPN for provisioning to a computing machine that generated the first encrypted message via the second VPN.

5. The method of claim 1 , wherein the first VPN is not notified of an identity of a computing machine that generated the first encrypted message by the second VPN.

6. The method of claim 1 , wherein generating the first encrypted message by encrypting the input message for transmission by the first VPN comprises:

generating the first encrypted message by encrypting the input message for transmission via an Internet Protocol by the first VPN.

7. The method of claim 1 , wherein the first encrypted message or the second encrypted message is encrypted using at least one of: Diffie Hellman Encryption, Elliptic Curve Diffie Hellman (ECDH) encryption, Advanced Encryption Software (AES), or Rivest-Shamir-Adleman (RSA) Encryption.

8. A system comprising:

non-transitory memory storing instructions; and

one or more processors that executes the instructions to:

generate a first encrypted message by encrypting an input message for transmission by a first virtual private network (VPN);

couple the first encrypted message with addressing information associated with the first VPN to generate a coupled message;

generate a second encrypted message by encrypting the coupled message for decryption by a second VPN; and

transmit the second encrypted message via the second VPN to enable transmission of the input message to a destination machine by the first VPN, wherein transmitting the second encrypted message via the second VPN causes the second VPN to perform first operations comprising:

decrypting the second encrypted message to access the coupled message; and

forwarding the first encrypted message, from within the coupled message, to the first VPN, wherein forwarding the first encrypted message to the first VPN causes the first VPN to perform second operations comprising:

decrypting the first encrypted message to access the input message; and

transmitting the input message to the destination machine.

9. The system of claim 8 , wherein generating the first encrypted message comprises:

encrypting the input message with public data of the first VPN.

10. The system of claim 8 , wherein generating the second encrypted message comprises:

encrypting the coupled message with public data of the second VPN.

11. The system of claim 8 , wherein forwarding the first encrypted message to the first VPN further causes the first VPN to perform operations comprising:

receiving a response message in response to the input message; and

providing the response message to the second VPN for provisioning to a computing machine that generated the first encrypted message via the second VPN.

12. The system of claim 8 , wherein the first VPN is not notified of an identity of a computing machine that generated the first encrypted message by the second VPN.

13. The system of claim 8 , wherein generating the first encrypted message by encrypting the input message for transmission by the first VPN comprises:

generating the first encrypted message by encrypting the input message for transmission via an Internet Protocol by the first VPN.

14. The system of claim 8 , wherein the first encrypted message or the second encrypted message is encrypted using at least one of: Diffie Hellman Encryption, Elliptic Curve Diffie Hellman (ECDH) encryption, Advanced Encryption Software (AES), or Rivest-Shamir-Adleman (RSA) Encryption.

15. At least one non-transitory computer readable medium storing instructions that, when executed by at least one computer, cause the at least one computer to:

generate a first encrypted message by encrypting an input message for transmission by a first virtual private network (VPN);

couple the first encrypted message with addressing information associated with the first VPN to generate a coupled message;

generate a second encrypted message by encrypting the coupled message for decryption by a second VPN; and

transmit the second encrypted message via the second VPN to enable transmission of the input message to a destination machine by the first VPN, wherein transmitting the second encrypted message via the second VPN causes the second VPN to perform first operations comprising:

decrypting the second encrypted message to access the coupled message; and

forwarding the first encrypted message, from within the coupled message, to the first VPN, wherein forwarding the first encrypted message to the first VPN causes the first VPN to perform second operations comprising:

decrypting the first encrypted message to access the input message; and

transmitting the input message to the destination machine.

16. The at least one computer readable medium of claim 15 , wherein generating the first encrypted message comprises:

encrypting the input message with public data of the first VPN.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 16, 2022
From: KACIULIS, KAROLIS
To: NETFLOW, UAB
Reel/Frame 061794/0119 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 10, 2021
From: KACIULIS, KAROLIS
To: NETFLOW, UAB
Reel/Frame 058358/0107 →
Continuity (1)
Related Publication 20230188510A1 · Jun 15, 2023