US 7,490,151 B2
Establishment of a secure communication link based on a domain name service (DNS) requestGeneral
US 7,490,151 B2
Establishment of a secure communication link based on a domain name service (DNS) request
Tech Center:
2100 Computer Architecture and Software
Examiner:
Krisna Lim
Art Unit:
2153 Data Bases & File Management
Agent:
Inventors:
Edmund Colby Munger; Robert Dunham Short; Victor Larson; Michael Williamson
Assignee:
Priority:
10/30/98
Filed:
09/30/02
Granted:
02/10/09
Expiration:
01/25/21
Abstract
A plurality of computer nodes communicate using seemingly random Internet Protocol source and destination addresses. Data packets matching criteria defined by a moving window of valid addresses are accepted for further processing, while those that do not meet the criteria are quickly rejected. Improvements to the basic design include (1) a load balancer that distributes packets across different transmission paths according to transmission path quality; (2) a DNS proxy server that transparently creates a virtual private network in response to a domain name inquiry; (3) a large-to-small link bandwidth management feature that prevents denial-of-service attacks at system chokepoints; (4) a traffic limiter that regulates incoming packets by limiting the rate at which a transmitter can be synchronized with a receiver; and (5) a signaling synchronizer that allows a large number of nodes to communicate with a central node by partitioning the communication function between two separate entities.
Cooperative Patent Classification (CPC)
H04H04L2101/604H04L