Robert C Short

US Patent:

6618761, Sep 9, 2003

Filed:

Feb 26, 2002

Appl. No.:

10/082164

Inventors:

Edmund Colby Munger - Crownsville MD
Douglas Charles Schmidt - Severna Park MD
Robert Dunham Short - Leesburg VA
Victor Larson - Fairfax VA
Michael Williamson - South Riding VA

Assignee:

Science Applications International Corp. - San Diego CA

International Classification:

G06F 15173

US Classification:

709241, 709242, 370232, 370234, 370237

Abstract:

Methods and systems allowing a plurality of computer nodes to communicate using weighted transmission paths are provided. A load balancer distributes packets across weighted transmission paths according to transmission path quality, which is monitored and updated from time to time. As transmission quality on a specific transmission path decreases, the weight assigned to that transmission path is reduced. Similarly, weights may be increased if transmission quality improves. The weights assigned to various transmission paths may correspond to a relative number of packets to be transmitted on each respective transmission path. The transmission path for each packet can be selected based on the weights of the various transmission paths. Using weights based on transmission quality, transmission paths with higher transmission quality are used more often than transmission paths with lower transmission quality, resulting in more efficient communications.

US Patent:

7133930, Nov 7, 2006

Filed:

Mar 31, 2003

Appl. No.:

10/401551

Inventors:

Edmund Colby Munger - Crownsville MD, US
Vincent J. Sabio - Columbia MD, US
Robert Dunham Short - Leesburg VA, US
Virgil D. Gligor - Chevy Chase MD, US
Douglas Charles Schmidt - Severna Park MD, US

Assignee:

Science Applications International Corporation - San Diego CA

International Classification:

G06F 15/16
G06F 17/00

US Classification:

709245

Abstract:

A plurality of computer nodes communicates using seemingly random IP source and destination addresses and (optionally) a seemingly random discriminator field. Data packets matching criteria defined by a moving window of valid addresses are accepted for further processing, while those that do not meet the criteria are rejected. In addition to “hopping” of IP addresses and discriminator fields, hardware addresses such as Media Access Control addresses can be hopped. The hopped addresses are generated by random number generators having non-repeating sequence lengths that are easily determined a-priori, which can quickly jump ahead in sequence by an arbitrary number of random steps and which have the property that future random numbers are difficult to guess without knowing the random number generator's parameters. Synchronization techniques can be used to re-establish synchronization between sending and receiving nodes. These techniques include a self-synchronization technique in which a sync field is transmitted as part of each packet, and a “checkpoint” scheme by which transmitting and receiving nodes can advance to a known point in their hopping schemes.

US Patent:

20020161884, Oct 31, 2002

Filed:

Feb 26, 2002

Appl. No.:

10/082285

Inventors:

Edmund Munger - Crownsville MD, US
Douglas Schmidt - Severna Park MD, US
Robert Short - Leesburg VA, US
Victor Larson - Fairfax VA, US
Michael Williamson - South Riding VA, US

Assignee:

Science Applications International Corporation - San Diego CA

International Classification:

G06F015/173
G06F011/30
H04L009/00
H04L009/32
G06F012/14

US Classification:

709/224000, 713/200000

Abstract:

A plurality of computer nodes communicate using seemingly random Internet Protocol source and destination addresses. Data packets matching criteria defined by a moving window of valid addresses are accepted for further processing, while those that do not meet the criteria are quickly rejected. Improvements to the basic design include (1) a load balancer that distributes packets across different transmission paths according to transmission path quality; (2) a DNS proxy server that transparently creates a virtual private network in response to a domain name inquiry; (3) a large-to-small link bandwidth management feature that prevents denial-of-service attacks at system chokepoints; (4) a traffic limiter that regulates incoming packets by limiting the rate at which a transmitter can be synchronized with a receiver; and (5) a signaling synchronizer that allows a large number of nodes to communicate with a central node by partitioning the communication fiction between two separate entities.

US Patent:

20030037142, Feb 20, 2003

Filed:

Sep 30, 2002

Appl. No.:

10/259494

Inventors:

Edmund Munger - Crownsville MD, US
Douglas Schmidt - Severna Park MD, US
Robert Short - Leesburg VA, US
Victor Larson - Fairfax VA, US
Michael Williamson - South Riding VA, US

Assignee:

Science Applications International Corporation - San Diego CA

International Classification:

G06F015/173

US Classification:

709/225000

Abstract:

A plurality of computer nodes communicate using seemingly random Internet Protocol source and destination addresses. Data packets matching criteria defined by a moving window of valid addresses are accepted for further processing, while those that do not meet the criteria are quickly rejected. Improvements to the basic design include (1) a load balancer that distributes packets across different transmission paths according to transmission path quality; (2) a DNS proxy server that transparently creates a virtual private network in response to a domain name inquiry; (3) a large-to-small link bandwidth management feature that prevents denial-of-service attacks at system chokepoints; (4) a traffic limiter that regulates incoming packets by limiting the rate at which a transmitter can be synchronized with a receiver; and (5) a signaling synchronizer that allows a large number of nodes to communicate with a central node by partitioning the communication function between two separate entities.

US Patent:

20030167342, Sep 4, 2003

Filed:

Mar 31, 2003

Appl. No.:

10/401888

Inventors:

Edmund Munger - Crownsville MD, US
Douglas Schmidt - Severna Park MD, US
Robert Short - Leesburg VA, US
Victor Larson - Fairfax VA, US
Michael Williamson - South Riding VA, US

Assignee:

Science Applications International Corporation - San Diego CA

International Classification:

G06F015/173

US Classification:

709/238000

Abstract:

A plurality of computer nodes communicate using seemingly random Internet Protocol source and destination addresses. Data packets matching criteria defined by a moving window of valid addresses are accepted for further processing, while those that do not meet the criteria are quickly rejected. Improvements to the basic design include (1) a load balancer that distributes packets across different transmission paths according to transmission path quality; (2) a DNS proxy server that transparently creates a virtual private network in response to a domain name inquiry; (3) a large-to-small link bandwidth management feature that prevents denial-of-service attacks at system chokepoints; (4) a traffic limiter that regulates incoming packets by limiting the rate at which a transmitter can be synchronized with a receiver; and (5) a signaling synchronizer, that allows a large number of nodes to communicate with a central node by partitioning the communication function between two separate entities.

US Patent:

20060123134, Jun 8, 2006

Filed:

Dec 13, 2005

Appl. No.:

11/301022

Inventors:

Edmund Munger - Crownsville MD, US
Vincent Sabio - Columbia MD, US
Robert Short - Leesburg VA, US
Virgil Gligor - Chevy Chase MD, US
Douglas Schmidt - Severna Park MD, US

Assignee:

Science Applications International Corporation - San Diego CA

International Classification:

G06F 15/16
G06F 17/00

US Classification:

709245000, 726013000

Abstract:

A plurality of computer nodes communicates using seemingly random IP source and destination addresses and (optionally) a seemingly random discriminator field. Data packets matching criteria defined by a moving window of valid addresses are accepted for further processing, while those that do not meet the criteria are rejected. In addition to “hopping” of IP addresses and discriminator fields, hardware addresses such as Media Access Control addresses can be hopped. The hopped addresses are generated by random number generators having non-repeating sequence lengths that are easily determined a-priori, which can quickly jump ahead in sequence by an arbitrary number of random steps and which have the property that future random numbers are difficult to guess without knowing the random number generator's parameters. Synchronization techniques can be used to re-establish synchronization between sending and receiving nodes.

US Patent:

20080034201, Feb 7, 2008

Filed:

Aug 16, 2007

Appl. No.:

11/839937

Inventors:

Edmund Munger - Crownsville MD, US
Vincent Sabio - Columbia MD, US
Robert Short - Leesburg VA, US
Virgil Gligor - Chevy Chase MD, US

Assignee:

VirnetX, Inc. - Scotts Valley CA

International Classification:

H04L 9/00
G06F 15/16
H04K 1/00

US Classification:

713153000, 709228000, 713160000, 713162000, 726013000

Abstract:

A plurality of computer nodes communicates using seemingly random IP source and destination addresses and (optionally) a seemingly random discriminator field. Data packets matching criteria defined by a moving window of valid addresses are accepted for further processing, while those that do not meet the criteria are rejected. In addition to “hopping” of IP addresses and discriminator fields, hardware addresses such as Media Access Control addresses can be hopped. The hopped addresses are generated by random number generators having non-repeating sequence lengths that are easily determined a-priori, which can quickly jump ahead in sequence by an arbitrary number of random steps and which have the property that future random numbers are difficult to guess without knowing the random number generator's parameters. Synchronization techniques can be used to re-establish synchronization between sending and receiving nodes.

US Patent:

20080040791, Feb 14, 2008

Filed:

Aug 16, 2007

Appl. No.:

11/839969

Inventors:

Edmund Munger - Crownsville MD, US
Douglas Schmidt - Severna Park MD, US
Robert Short - Leesburg VA, US
Victor Larson - Fairfax VA, US
Michael Williamson - South Riding VA, US

Assignee:

VirnetX, Inc. - Scotts Valley CA

International Classification:

H04L 9/32

US Classification:

726014000

Abstract:

A plurality of computer nodes communicate using seemingly random Internet Protocol source and destination addresses. Data packets matching criteria defined by a moving window of valid addresses are accepted for further processing, while those that do not meet the criteria are quickly rejected. Improvements to the basic design include (1) a load balancer that distributes packets across different transmission paths according to transmission path quality; (2) a DNS proxy server that transparently creates a virtual private network in response to a domain name inquiry; (3) a large-to-small link bandwidth management feature that prevents denial-of-service attacks at system chokepoints; (4) a traffic limiter that regulates incoming packets by limiting the rate at which a transmitter can be synchronized with a receiver; and (5) a signaling synchronizer that allows a large number of nodes to communicate with a central node by partitioning the communication function between two separate entities.