System and method employing an agile network protocol for secure communications using secure domain names

Abstract

A system for connecting a first network device and a second network device includes one or more servers. The servers are configured to: (a) receive, from the first network device, a request to look up a network address of the second network device based on an identifier associated with the second network device; (b) determine, in response to the request, whether the second network device is available for a secure communications service; and (c) initiate a virtual private network communication link between the first network device and the second network device based on a determination that the second network device is available for the secure communications service, wherein the secure communications service uses the virtual private network communication link.

What is claimed is: 
     
         1 . A method for connecting a first network device to a second network device over a network, the method comprising:
 receiving, from the first network device, a request to resolve a network address of the second network device, the request including a name associated with the second network device that corresponds to the network address;   evaluating the request to resolve a network address of the second device, the evaluating including confirming that the name associated with the second network device is registered with a name service that facilitates resolving the name and facilitates establishing an encrypted communication link between the first network device and the second network device over the network;   determining whether the second network device is available to establish an encrypted communication link; and   if the second device is registered and available to establish an encrypted communication link, automatically establishing, the encrypted communication link between the first network device and the second network device over the network, the establishing including returning a resource for the encrypted communication link to at least one of the first network device or the second network device;   wherein the first network device is a user device,   wherein the encrypted communication link enables the first network device to directly communicate with the second network device over the network.   
     
     
         2 . The method of  claim 1 , further comprising returning the resolved network address to the first network device. 
     
     
         3 . The method of  claim 1 , further comprising using an application program of the first network device to communicate data over the encrypted communication link between the first network device and the second network device. 
     
     
         4 . The method of  claim 3 , wherein:
 the application program comprises one or more of a telephony application or a video conferencing application;   the data includes at least one of video data or audio data; and   the at least one of video data or audio data is encrypted over the encrypted communication link.   
     
     
         5 . The method of  claim 3 , wherein the application program comprises a messaging application program of the first network device to communicate data over the encrypted communication link between the first network device and the second network device. 
     
     
         6 . The method of  claim 4 , wherein the application program uses modulation. 
     
     
         7 . The method of  claim 1 , wherein at least the first network device and the second network device communicate in an encrypted communication link over a single session. 
     
     
         8 . The method of  claim 1 , wherein at least the first network device and the second network device communicate in an encrypted communication link over multiple sessions. 
     
     
         9 . The method of  claim 1 , wherein the receiving the request to resolve a network address occurs within another network device that is separate from the first network device. 
     
     
         10 . The method of  claim 1 , further comprising:
 determining whether software for the encrypted communication link is installed; and   if the software is not installed:
 accessing a network address for downloading the software; 
 downloading the software; and 
 installing the software. 
   
     
     
         11 . The method of  claim 1 , further comprising further evaluating the request to resolve a network address of the second device to confirm that a user associated with the first network device is registered with the name service as a user for whom encrypted communication services are defined. 
     
     
         12 . The method of  claim 1 , wherein the name is a domain name. 
     
     
         13 . The method of  claim 1 , wherein the encrypted communication link further provides at least one of: (1) anonymity for at least one of the first network device or the second network device; or (2) a tunnel between the first network device and the second network device. 
     
     
         14 . The method of  claim 13 , wherein the tunnel is based on a network address hopping regime that is used to pseudo-randomly change network addresses in packets transmitted between the first network device and the second network device over the network. 
     
     
         15 . The method of  claim 1 , wherein the encrypted communication link enables the first network device to address the second network device over the network. 
     
     
         16 . The method of  claim 1 , wherein establishing an encrypted communication link between the first network device and the second network device over the network avoids returning the IP address of the second network device to the first network device. 
     
     
         17 . A system for connecting a first network device to a second network device over a network, the system including one or more servers configured to:
 receive, from the first network device, a request to resolve a network address of the second network device, the request including a name associated with the second network device that corresponds to the network address;   evaluate the request to resolve a network address of the second device, the evaluating including confirming that the name associated with the second network device is registered with a name service that facilitates resolving the name and facilitates establishing an encrypted communication link between the first network device and the second network device over the network;   determine whether the second network device is available to establish an encrypted communication link; and   if the second device is registered and available to establish an encrypted communication link, automatically provision the first network device and the second network device to establish the encrypted communication link between the first network device and the second network device over the network, the establishing including returning a resource for the encrypted communication link to at least one of the first network device or the second network device;   wherein the first network device is a user device,   wherein the encrypted communication link enables the first network device to directly communicate with the second network device over the network.   
     
     
         18 . The system of  claim 17 , wherein the one or more servers are further configured to provision the first network device and the second network device to use an application program of the first network device to communicate data over the encrypted communication link between the first network device and the second network device. 
     
     
         19 . The system of  claim 17 , wherein:
 the application program comprises one or more of a telephony application or a video conferencing application;   the data includes at least one of video data or audio data; and   the at least one of video data or audio data is encrypted over the encrypted communication link.   
     
     
         20 . The system of  claim 17 , wherein the one or more servers are further configured to evaluate the request to resolve a network address of the second device to confirm that a user associated with the first network device is registered with the name service as a user for whom encrypted communication services are defined.