Patent ID: 8595818

Claim:
A method for transmitting data from a client computing device in a restricted network to a covert destination using decoy routing, comprising: receiving, by a decoy router, a packet of data addressed to a decoy destination but intended for a covert destination; determining, by the decoy router, based at least in part on a message within the packet, that the packet is intended for a covert destination; directing, by the decoy router, the packet to a decoy proxy; establishing, by the decoy proxy, a communication channel with the client computing device over which communications between the decoy proxy and the client computing device appear to other devices on the network to be communications between the client computing device and the decoy destination; receiving, by the decoy proxy, a second packet of data from the client computing device addressed to the decoy destination; forwarding, by the decoy proxy, the second packet to the covert destination.