Abstract: A translator is provided for translating predetermined portions of packet header information including an address of a data packet according to a cipher algorithm keyed by a cipher key derived by a key exchanger. A mapping device is also provided for mapping the address to a host table stored in memory. If the address does not match an entry in the host table, a security device is triggered.

Abstract: A translator is provided for translating predetermined portions of packet header information including an address of a data packet according to a cipher algorithm keyed by a cipher key derived by a key exchanger. A mapping device is also provided for mapping the address to a host table stored in memory. If the address does not match an entry in the host table, a security device is triggered.

Abstract: A translator is provided for translating predetermined portions of packet header information including an address of a data packet according to a cipher algorithm keyed by a cipher key derived by a key exchanger. A mapping device is also provided for mapping the address to a host table stored in memory. If the address does not match an entry in the host table, a security device is triggered.

Abstract: A translator is provided for translating predetermined portions of packet header information including an address of a data packet according to a cipher algorithm keyed by a cipher key derived by a key exchanger. A mapping device is also provided for mapping the address to a host table stored in memory. If the address does not match an entry in the host table, a security device is triggered.

Abstract: A translator is provided for translating predetermined portions of packet header information including an address of a data packet according to a cipher algorithm keyed by a cipher key derived by a key exchanger. A mapping device is also provided for mapping the address to a host table stored in memory. If the address does not match an entry in the host table, a security device is triggered.

Abstract: A communication device is provided for a local enclave. The communication device processes packets to be transferred from the local enclave to a wide area network. The communication device intercepts packets originating from a host on the local enclave, the packets being destined for transmission over the wide area network, extracts predetermined portions from each packet header to form one or more blocks for translation, applies a predetermined encryption algorithm to translate the one or more blocks after masking; and reinserts bits from the translated block back into the packet header. The purpose of the invention is to obfuscate network machine identities to TCP/IP packets traversing the public Internet to prevent traffic mapping.

Abstract: A bastion host is provided for a local area network (LAN). The bastion host processes packets to be transferred from the LAN to a wide area network (WAN). The bastion host intercepts packets originating from a host on the LAN, the packets being destined for transmission over the WAN, extracts bits from predetermined fields from each packet header to form one or more blocks for translation, masks bits from the one or more blocks that vary rapidly packet to packet, applies a predetermined encryption algorithm to translate the one or more blocks after masking; and reinserts bits from the translated block back into the packet header.

Abstract: An apparatus and method are provided for adapting a link layer address of a network device. A first input/output 410 port is connected to receive data from a first network node 140. The first input/output port 410 has a link layer address and is configurable to one of a plurality of link layer addresses. A second input/output port 420 is connected to output the data to a second network node 160. The second input/output port 420 has a link layer address and is configurable to one of a plurality of link layer addresses. A processor adapts the link layer address of the first input/output port 410 to correspond to a link layer address of the second network node 160 and adapts the link layer address of the second input/output port 420 to correspond to a link layer address of the first network node 140.

Abstract: An apparatus and method are provided for adapting a link layer address of a network device. A first input/output 410 port is connected to receive data from a first network node 140. The first input/output port 410 has a link layer address and is configurable to one of a plurality of link layer addresses. A second input/output port 420 is connected to output the data to a second network node 160. The second input/output port 420 has a link layer address and is configurable to one of a plurality of link layer addresses. A processor adapts the link layer address of the first input/output port 410 to correspond to a link layer address of the second network node 160 and adapts the link layer address of the second input/output port 420 to correspond to a link layer address of the first network node 140.