Patent ID: 6917974

Claim:
A system for preventing analysis and monitoring of network traffic between network host computers wherein false packets are generated and transmitted along with a true packet to hide actual message traffic flow, said system comprising: an extension header positioned in a hierarchy of Internet protocol headers controlling passage of the false packets and the true packet through a network, said extension header having a plurality of fields; a sending host computer having means for filling said fields with values designating the size of said extension header, a message packet type, a maximum number (X) of false packets to be generated, a minimum number of hops that the false packets will traverse, a minimum and maximum and baseline false packet body size, a source address for the true packet, whether re-encryption is permitted, a false packet generation probability, a decay rate for the false packet generation probability, a total number of re-encryptions performed, and a decryption key pointer value; means for generating at the sending host computer a plurality of false packets for each true packet; and means for transmitting the false packets and the true packet containing said Internet protocol headers and said extension header over said network to at least one intermediate host computer and a recipient host computer.