Encapsulation of secure encrypted data in a deployable, secure communication system allowing benign, secure commercial transport

• US 20050060539A1
• Filed: 11/04/2003
• Published: 03/17/2005
• Est. Priority Date: 09/15/2003
• Status: Active Grant

• Current Assignee: TeleCommunication Systems Inc (Comtech Telecommunications Corporation)
• Original Assignee: TeleCommunication Systems Inc (Comtech Telecommunications Corporation)
• Inventors: Anspach, Steve
• Granted Patent: US 7,533,259 B2
• Time in Patent Office: Days
• US Class Current: 713/160
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

Sensitive, Type 1 KIV-encrypted data is encapsulated into IP packets in a remotely deployed, secure communication system. The IP packets are addressed to a matching IP encapsulator/decapsulator device over the public Internet or other IP protocol network, that then passes it to a similar Type 1 KIV device for decryption. Thus, sensitive, encrypted data is made to appear as if it were any other commercial network data, cloaking it in the vast and busy world of the Internet. The present invention is embodied in a system that provides secure Voice-Over-IP (VOIP), video and data network functionality in a single, small size deployable case, to a remote user. Most importantly, the embodiment allows for the routing of bulk encrypted (i.e., secure) data over a public network, e.g., the Internet.

Claims

1. A method of cloaking encrypted data, comprising:

encapsulating a serial data stream of encrypted data into IP packets; and

transmitting said IP packets of encrypted data on a public IP network.

2. The method of cloaking encrypted data according to claim 1, wherein:

said public network is an Internet.

3. The method of cloaking encrypted data according to claim 1, wherein:

said IP packets are transmitted via an ISDN router.

4. The method of cloaking encrypted data according to claim 1, wherein:

said IP packets are transmitted over a satellite terminal.

5. The method of cloaking encrypted data according to claim 1, further comprising:

encrypting data using a Type 1 encryption unit.

6. The method of cloaking encrypted data according to claim 5, wherein said Type 1 encryption unit comprises:

a KIV type encryption unit.

7. The method of cloaking encrypted data according to claim 6, wherein said Type 1 KIV-type encryption unit comprises:

a KIV-7 encryption unit.

8. The method of cloaking encrypted data according to claim 1, wherein said serial data stream of encrypted data comprises:

Voice over IP (VOIP) data.

9. The method of cloaking encrypted data according to claim 1, wherein:

said serial data stream is a synchronous serial data stream.

10. The method of cloaking encrypted data according to claim 9, wherein:

said synchronous serial data stream is an RS-530 data stream.

11. The method of cloaking encrypted data according to claim 1, further comprising:

combining data from two voice sources into said serial data stream before said encapsulation.

12. Apparatus for cloaking encrypted data in a deployable, secure communication terminal, comprising:

means for encapsulating a serial data stream of encrypted data into IP packets; and

means for transmitting said IP packets of encrypted data on a public IP network.

13. The apparatus for cloaking encrypted data in a deployable, secure communication terminal according to claim 12, wherein:

said public network is an Internet.

14. The apparatus for cloaking encrypted data in a deployable, secure communication terminal according to claim 12, wherein:

said IP packets are transmitted via an ISDN router.

15. The apparatus for cloaking encrypted data in a deployable, secure communication terminal according to claim 12, wherein:

said IP packets are transmitted over a satellite terminal.

16. The apparatus for cloaking encrypted data in a deployable, secure communication terminal according to claim 12, further comprising:

means for encrypting data using a Type 1 encryption unit.

17. The apparatus for cloaking encrypted data in a deployable, secure communication terminal according to claim 16, wherein said Type 1 encryption unit comprises:

a KIV type encryption unit.

18. The apparatus for cloaking encrypted data in a deployable, secure communication terminal according to claim 17, wherein said Type 1 KIV-type encryption unit comprises:

a KIV-7 encryption unit.

19. The apparatus for cloaking encrypted data in a deployable, secure communication terminal according to claim 12, wherein said serial data stream of encrypted data comprises:

Voice over IP (VOIP) data.

20. The apparatus for cloaking encrypted data in a deployable, secure communication terminal according to claim 12, wherein:

said serial data stream is a synchronous serial data stream.

21. The apparatus for cloaking encrypted data in a deployable, secure communication terminal according to claim 20, wherein:

said synchronous serial data stream is an RS-530 data stream.

22. The apparatus for cloaking encrypted data in a deployable, secure communication terminal according to claim 12, further comprising:

means for combining data from two voice sources into said serial data stream before said means for encapsulating encapsulates said serial data stream.

23. The apparatus for cloaking encrypted data in a deployable, secure communication terminal according to claim 22, wherein said means for combining data from two voice sources comprises:

a voice-enabled router.

24. A secure communications device, comprising:

means for encrypting a data stream into an encrypted data stream;

means for encapsulating said encrypted data stream for transmission to another secure communications device using IP protocol; and

means for routing said encapsulated, encrypted data stream over an Internet.

25. The secure communications device according to claim 24, wherein said means for routing comprises:

an Ethernet to ISDN router.

26. The secure communications device according to claim 24, wherein said means for encrypting comprises:

A KIV-7 encryption unit.

27. The secure communications device according to claim 24, wherein:

said means for encapsulating converts a RS-530 synchronous serial data stream into an IP data stream.