Security Through Manipulation of Virtual Topography

Abstract

Methods and apparatus are disclosed for improving network security through the manipulation of the apparent topology of the network. Such manipulation is accomplished by assigning multiple identifiers to nodes, using different destination identifiers for packets being sent to the same destination, and using source identifiers that do not correspond to the identifiers of the node sending the packets.

1 . A method of transmitting a set of ordered packets or a stream from an originating source node to a destination node, the method comprising:
 addressing a first packet of the ordered set of packets with a first destination identifier that exclusively identifies the destination node;   addressing a second packet of the ordered set of packets with a second destination identifier—that exclusively identifies the destination node, but is different from the first destination identifier; and to   the source node sending the first and second packets to the destination node, whereby the packets are transmitted in a manner that increases security of the transmission.   
   
   
       2 . The method of  claim 1  wherein each of the set of ordered packets is an IP packet, and the provided identifiers are IP addresses. 
   
   
       3 . The method of  claim 2  further comprising:
 addressing a first packet of the ordered set of packets with a first source identifier; and   addressing a second packet of the ordered set of packets with a second source identifier exclusively assigned to the source node and that is different from the first source identifier.   
   
   
       4 . The method of  claim 3  wherein the first source identifiers does not identify the source node. 
   
   
       5 . A method of sending a set of ordered packets of a stream from an originating source node to a common destination node, the method comprising:
 addressing a first packet of the ordered set of packets with a first source identifier;   addressing a second packet of the ordered set of packets with a second source identifier that is different from the first source identifier; and   sending the first packet and the second packet from the source node to the destination node.   
   
   
       6 . The method of  claim 5  wherein each of the set of ordered packets is an IP packet, and the provided identifiers are IP addresses. 
   
   
       7 . The method of  claim 6  wherein at least some of the provided source identifiers do not identify the system. 
   
   
       8 . The method of  claim 7  wherein none of the provided source identifiers identify the system. 
   
   
       9 . The method of  claim 8  wherein the set of ordered packets include the contents of a single message or file subdivided for transmission via the set of ordered packets. 
   
   
       10 . The method of  claim 9  wherein each packet of the ordered set of packets comprises an identifier pair that includes both the source identifier and a destination identifier of the packet, and each packet of the set comprises a unique identifier pair. 
   
   
       11 . The method of  claim 10  further comprising sending at least some dummy packets which are not part of the set ordered packets while sending the set of ordered packets. 
   
   
       12 . The method of  claim 11  further comprising sending the dummy packets by providing the dummy packets with destination identifiers that do not identify any system. 
   
   
       13 - 14 . (canceled)