Patent ID: 8650643

Claim:
A system, comprising: a memory configured to store a host table; a translator configured to restore predetermined portions of packet header information of a data packet, the packet header information including a network portion of a destination address routable over a wide area network and an encrypted host portion of the address identifying a destination host, the restoration including to: extract, from the packet header information, predetermined portions of packet header data including the encrypted host portion of the address, decrypt the extracted packet header data to determine a restored host portion of the restored address, and place the restored host portion of the address back into the packet header information of the data packet, preserving the network portion of the destination address of the packet header; a mapping device configured to map the restored address to the host table; a host resolution device configured to issue a request to the network to resolve the restored address when the restored address does not match an entry in the host table and to supplement the host table with the restored address upon receipt of a reply to the request that indicates that the restored address is valid; and an actuator configured to trigger a security device when the restored address does not match an entry in the host table.