MUMBAI, India, June 30 -- Intellectual Property India has published a patent application (202641054630 A) filed by Ms. Sabitha K; Mr. Vishnukumar S; Mr Sreeman S; and Mr. Tharun B S on April 29, 2026, for Temporalportmutation Protocol (tpmp).
Inventors include Ms. Sabitha K; Mr. Vishnukumar S; Mr Sreeman S; and Mr. Tharun B S.
The application for the patent was published on June 26, 2026, under issue no. 26/2026.
Abstract: ABSTRACT OF THE INVENTION Modern networked services face a persistent and pervasive threat:automated port-scanning tools such as Nmap and Masscan can enumerate all open service ports on any host within sixty seconds, exposingattacksurfacestoadversariesworldwide.Existingmitigations— firewalls, fail2ban, andport knocking— arestatic, reactive, or subject toreplay attacks.Th is project presentsthe Temporal Port Mutation Protocol (TPMP), a novel cryptographic port-hopping framework that eliminates fixed port visibility at the transport layer, enabling genuinelyzero-trust network access TPMP derives a time-bounded listening port by computingHMAC-SHA256 over a256-bit shared secret and a TOTP-style time-window counter (RFC6238), placing the result within the IANA ephemeral range (49152-65535).Both server and authorized client independently compute the same port every30 seconds without any negotiation packet — there is nothing to intercept.The protocol incorporates Elliptic Curve Diffie-Hellman (ECDH)key exchange over P-256 with HKDF key derivation for secure initial secret establishment, TLS1.3 for all session-layer communication, a NTP-inspired clock-drift compensation algorithm totolerate realistic clock skew, and a cryptographically authenticated session migration mechanism(SESSION_RESUMEwithHMAC-boundMAC)thatpreservesestablishedTCP sessions across port rotations without interruption. The reference implementation is written in Python3.10+ and comprises six core modules:aport calculation engine, key exchange module, clock-drift estimator, session manager, iptables firewall manager, and full server and client implementations. The system is validated by 58unit testsand20 integration tests exercising live TLS sockets and real port-rotation cycles. Experimental evaluation demonstrates complete resistance to port-scanning within a single 30-secondwindow,100% rejection of forged SESSION_RESUME packets, sustained delivery of50 concurrent messages across port rotations with zero message loss, and successful simultaneous management of8 concurrent authenticated sessions.The protocol’s patent-worthy contributions— TOTP-style port derivation, authenticated session migration, and NTP- style drift compensation for port agreement — represent a significant advance over the prior art in Moving Target Defence ABSTRACT The proliferation o f automated port-scanning tools such as Nmap and Masscan has rendered static listening-port configurations a critical and pervasive attack surface for networked services. This paper introduces the Temporal Port Mutation Protocol (TPMP), a novel cryptographic port-hopping framework that eliminates the concept o f a fixed network attack surface at the transport layer. TPMP derives a time-bounded listening port by computing HMAC-SHA256 over a shared secret and a TOTP-style time-window counter, placing the resultant port within the IAN A ephemeral range (49152-65535). Both the server and an authorised client independently compute the identical port without any network negotiation, as both possess the shared secret and access to a synchronised clock. The protocol incorporates Elliptic Curve Diffie-Hellman (ECDH) key exchange over P-256 followed by HKDF key derivation fo r initial secret establishment, TLS 1.3 for all session-layer communication, a NTP-inspired clock-drift compensation algorithm, and a cryptographically authenticated sessionmigration mechanism (SESSION RESUME) that allows established TCP sessions to survive port rotations without interruption. A full reference implementation in Python is provided, comprising 58 unit tests, 20 integration tests exercising live TLS sockets and a live port-rotation cycle, and a real-time terminal dashboard. Empirical evaluation demonstrates that the protocol renders ephemeral-range port scanning computationally infeasible within a single rotation window, rejects forged session-resume packets with 100% accuracy, and sustains 50 concurrent messages and eight simultaneous client sessions across port rotations without message loss. Keyword:: Port hopping, Moving Target Defence, TOTP, HMAC-SHA256, ECDH, HKDF, TLS 1.3, Zero- Trust Networking, Network Security, Firewall, Session Migration, Clock Drift Compensation.
Disclaimer: Curated by HT Syndication.
