Patent ID: 7774594

Claim:
A method for providing strong security in an insecure network comprising a plurality of nodes, comprising: creating a payload associated with a data packet for transmission by a sending node; when the payload is associated with a unicast data packet: encrypting the payload using a corresponding private key associated with the sending node to obtain a unicast encrypted payload; encrypting the unicast encrypted payload using a public key associated with a receiving node to obtain a double-encrypted payload; and transmitting the data packet comprising the double-encrypted payload to the receiving node over the insecure network, wherein the sending node and the receiving node are each one of the plurality nodes in the insecure network; and when the payload is not associated with the unicast data packet: encrypting the payload using a private key associated with the sending node to obtain a non-unicast encrypted payload; encapsulating the non-unicast encrypted payload via a network protocol stack to obtain the data packet; and transmitting the data packet comprising the non-unicast encrypted payload to the receiving node in the insecure network.