Secure communications method

• US 20030167314A1
• Filed: 03/10/2003
• Published: 09/04/2003
• Est. Priority Date: 06/19/2000
• Status: Abandoned Application

• Current Assignee: Amino Holdings Ltd. (Amino Technologies PLC)
• Original Assignee: Amino Holdings Ltd. (Amino Technologies PLC)
• Inventors: Ashman, Helen, Gilbert, Martyn
• Application Number:
  US10/312,135
• Publication Number:
  US 20030167314A1
• Time in Patent Office: Days
• US Class Current: 709/217
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 69/14 Multichannel or multilink protocols
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A secure communications method comprises the steps of: fragmenting a digital message into a series of fragments, at least some of the fragments being smaller or larger than the smallest base unit of data used by the communications network: carrying out a reversible operation on the fragment stream, sending the fragment stream through at least one digital communication network; and reversing the operation carried out on the fragment stream to reproduce the digital message. The use of some fragments smaller or larger than the smallest base unit of data used by the network ensures that some of the fragments are non-symbolic. That is, the fragments do not correspond to symbols, symbols being the smallest unit of data used by communications network. Thus, frequency analysis attacks are thwarted.

Claims

1. A secure communications method comprising the steps of:

fragmenting a digital message into a series of fragments, at least some of the fragments being smaller or larger than the smallest base unit of data used by the communications network;

carrying out a reversible operation on the fragment stream,

sending the fragment stream through at least one digital communication network; and

reversing the operation carried out on the fragment stream to reproduce the digital message.

2. A method according to claim 1 in which the length of the fragments is varied.

3. A method according to claim 1 or claim 2, in which the reversible operation includes changing the order of the fragments.

4. A method according to any preceding claim, in which the reversible operation includes encrypting the fragments.

5. A method according to any preceding claim, in which the reversible operation includes dividing the fragments into a plurality of fragment streams;

forming a plurality of partial messages, each incorporating a fragment stream; and

recombining the fragment streams from the partial message.

6. A method according to claim 5 in which the plurality of partial messages are sent from a message originator to a message receiver, the message receiver has at least two network addresses and at least one of the plurality of partial messages is sent to each of the network addresses.

7. A method according to claim 5 or claim 6, in which the plurality of partial messages are sent from a message originator to a message receiver, at least one of the message originator and the message receiver is connected to at least two network service providers and at least one of the plurality of partial messages is sent through each service provider.

8. A method according to claim 7, in which the message originator and message receiver are both connected to at least two respective service providers and at least one of the plurality of partial messages is sent through each service provider.

9. A method according to any one of claims 5 to 8, in which the plurality of partial messages are sent from a message originator to a message receiver, at least one of the message originator and the message receiver is connected to at least two digital communications networks and at least one of the plurality of partial messages is sent through each network.

10. A method according to claim 9, in which the message originator and the message receiver are both connected to at least two digital communications networks and at least one of the plurality of partial messages is sent through each network.

11. A method according to any one of claims 5 to 10, in which the plurality of partial messages are sent from a message originator to a message receiver and at least one of the plurality of partial messages is sent from the message originator to a node and then resent from the node to the message receiver.

12. A method according to any preceding claim in which the, or one digital communications network is the Internet.

13. A method according to claim 6 in which different numbers of partial messages are sent to different ones of the network addresses.

14. A method according to claim 7 or claim 8 in which different numbers of partial messages are sent through different ones of the service providers.

15. A method according to claim 9 or claim 10 in which different numbers of partial messages are sent through different ones of the networks.

16. A method according to any preceding claim in which the reversible operation includes encrypting the fragments using a stream cipher.

17. A method according to any one of claims 5 to 16 in which the reversible operation includes encrypting at least one fragment stream using a block cipher.

18. A method according to claim 4 when dependent on claim 3, in which the reversible operation includes;

changing the order of the fragments;

encrypting the fragments using a block cipher;

dividing the fragments into a plurality of partial messages; and

recombining the partial messages.

19. Apparatus arranged to carry out the secure communications method of any preceding claim.