Data transmission systems

• US 20050120208A1
• Filed: 07/23/2004
• Published: 06/02/2005
• Est. Priority Date: 01/25/2002
• Status: Abandoned Application

• Current Assignee: Actix Limited (Amdocs Ltd.)
• Original Assignee: Actix Limited (Amdocs Ltd.)
• Inventors: Albert Dobson, Robert William
• Application Number:
  US10/897,996
• Publication Number:
  US 20050120208A1
• Time in Patent Office: Days
• US Class Current: 713/160
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 43/50 Testing arrangements
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 24/00 Supervisory, monitoring or testing arrangements
• CPC Class Codes: H04W 24/08 Testing, supervising or monitoring using real traffic

Abstract

A method of sending data over an encrypted packet data communications network, in particular a digital mobile phone network such as a GPRS or 3G network, such that the sent data is readable without decrypting the encrypted packets, the method comprising, coding the data for sending as symbols selected from a set of symbols, each symbol of the set comprising at least one complete packet for encryption; and sending each said symbol over the packet data communications network. Corresponding methods of identifying packets carrying the sent data of recovering the data, and software and test equipment for implementing the methods are also described. The methods facilitate testing of a digital mobile phone network when traffic within the network is encrypted as the sent data may be recovered from a signal tapped at a point within the network without decrypting the data.

Claims

1. A method of sending data over an encrypted packet data communications network such that the sent data is readable without decrypting the encrypted packets, the method comprising:

coding the data for sending as symbols selected from a set of symbols, each symbol of the set comprising at least one complete packet for encryption; and

sending each said symbol over the packet data communications network.

2. A method as claimed in claim 1 wherein each said symbol represents only one bit of the data for sending, and wherein the set of symbols comprises two symbols, a first symbol representing a first logic level and comprising at least one first packet, and a second symbol representing a second logic level comprising at least one second packet distinguishable from the first packet.

3. A method as claimed in claim 2 wherein said first symbol comprises a first plurality of said first packets and said second symbol comprises a second plurality of said second packets.

4. A method as claimed in claim 1 wherein each said symbol represents a plurality, n, of bits of the data for sending, and wherein the set of symbols comprises 2ⁿ mutually distinguishable symbols.

5. A method as claimed in claim 4 and wherein said set of 2ⁿ mutually distinguishable symbols comprises 2ⁿ mutually distinguishable packets.

6. A method as claimed in claim 1, wherein each said symbol represents only one bit of the data for sending, and wherein the set of symbols comprises two symbols, a first symbol representing a first logic level and comprising a first plurality of first packets and a separator packet and a second symbol representing a second logic level and comprising a second plurality of said first packets.

7. A method as claimed in claim 1 further comprising sending a header comprising a pattern of repeated packets.

10. A method as claimed in claim 1 wherein the encrypted packet data communication network comprises part of a digital mobile communications network.

11. A method as claimed in claim 10 wherein the encrypted packet data communication network comprises part of a 3G digital mobile phone network.

20. A carrier carrying processor control code to, when running, implement the method of claim 1.

27. Communications equipment including the carrier of claim 20.

8. A method of recovering data, the method comprising:

receiving a stream of encrypted data packets from the packet data communications network;

identifying successive symbols within the stream of packets, each symbol comprising at least one complete encrypted packet and representing at least one bit of the data to be recovered; and

decoding said symbols to recover said data.

9. A method as claimed in claim 8 further comprising:

detecting a header comprising a pattern of repeated packets to identify said stream of encrypted data packets.

12. A method as claimed in claim 8 wherein the encrypted packet data communication network comprises part of a digital mobile communications network.

13. A method as claimed in claim 12 wherein the encrypted packet data communication network comprises part of a 3G digital mobile phone network.

21. A carrier carrying processor control code, when running, implement the method of claim 8.

28. Communications equipment including the carrier of claim 21.

14. A method of identifying packets carrying data for a data communication session from encrypted packets carrying data for a plurality of data communication sessions, the method comprising:

locating a header pattern of encrypted packets, the header pattern comprising a pattern of encrypted packets in which multiple encrypted packets carry substantially the same encrypted data; and

identifying other encrypted packets within the same data communications session as the header.

15. A method as claimed in claim 14 wherein said data communication session carries data sent by a method comprising coding data for sending as symbols, each symbol of the set comprising at least one complete packet for encryption, and sending each said symbol over a packet data communications network;

and wherein said locating and identifying identifies a candidate data communication session, and wherein the method further comprises attempting to decode data from the candidate session to confirm that said other encrypted packets belong to said data communication session.

16. A method as claimed in claim 14 wherein said data communication session has at least one associated routing identifier, and wherein said identifying identifies encrypted packets sharing a said routing identifier with the header pattern.

17. A method as claimed in claim 16 wherein said data communication sessions comprise communication sessions with mobile devices using a GPRS-based packet data network, wherein said encrypted packets are carried by said GPRS-based network, and wherein said routing identifier comprises a temporary logical link identifier for use in routing by said GPRS-based network.

18. A method as claimed in claim 14 wherein said data communication sessions comprise communication sessions with mobile devices coupled to a digital mobile phone network.

22. A carrier carrying processor control code, when running, implement the method of claim 14.

29. Communications equipment including the carrier of claim 22.

19. A method of testing a digital mobile phone network, the network comprising:

a communications network infrastructure, the infrastructure having a plurality of elements, including a plurality of radio communications base stations, and having interfaces between said elements; and

a plurality of mobile communications devices for radio communications with said base stations;

communications between a said mobile communications devices and said base stations, and signals on interfaces within the network infrastructure, comprising encrypted packet data traffic and signalling data;

the method comprising;

creating test traffic between a test one of said mobile communications devices and said communications network infrastructure;

measuring at least one parameter associated with said traffic to provide measurement data;

sending said measurement data over the network using a method comprising coding data for sending as symbols, each symbol of the set comprising at least one complete packet for encryption, and sending each said symbol over and packet data communications network; and

recovering said measurement data from within the network using a method comprising receiving a stream of encrypted data packets from the packet data communications network, identifying successive symbols within the stream of packets, each symbol comprising at least one complete encrypted packet and representing at least one bit of the data to be recovered, and decoding said symbols to recover said data.

23. A carrier carrying processor control code, when running, implement the method of claim 19.

30. Communications equipment including the carrier of claim 23.

24. A carrier medium carrying computer readable code for controlling a computer coupled to a mobile communications device to test a digital mobile phone network carrying encrypted traffic, the code comprising computer code for:

a mobile communications device driver having a traffic input for driving packet data traffic to said mobile communications device and a traffic output for outputting traffic received from said mobile communications device;

a test traffic supply to supply test traffic;

a traffic parameter measurer configured to receive an input from said device driver traffic output and to provide traffic parameter measurement data representing a measured traffic parameter, and

a coder configured to encode said measurement data as symbols selected from a set of symbols, each symbol of the set comprising at least one complete packet for encryption and to provide an output to said device driver,

whereby, in operation, the computer outputs said traffic parameter measurement data, representing a measured parameter of traffic received from said digital mobile phone network via said mobile communication device, as a response to said test traffic.

31. Communications equipment including the carrier of claim 24.

25. A carrier medium carrying computer readable code for controlling a computer to test a digital mobile phone network, the network comprising:

a communications network infrastructure, the infrastructure having a plurality of elements, including a plurality of radio communications base stations, and having interfaces between said elements; and

a plurality of mobile communications devices for radio communications with said base stations;

communications between a said mobile communications devices and said base stations, and signals on interfaces within the network infrastructure, comprising encrypted packet data traffic and signalling data;

the code comprising computer code for providing;

an input to receive encrypted packet data collected at a test one of said interfaces, said received data comprising traffic and signalling data for mobile communications devices using said network;

a demultiplexer to identify test traffic and associated signalling data for a test one of said mobile communications devices in said received data by locating a header pattern within the encrypted packet data, the header pattern comprising a pattern of encrypted packets in which multiple encrypted packets carry substantially the same encrypted data; and

a decoder to decode measurement data representing at least one measured parameter associated with said test traffic embedded in said test traffic.

26. A carrier medium as claimed in claim 25 wherein the decoder is configured to identify symbols within the encrypted packet data, each comprising at least one complete encrypted packet and representing at least one bit of the data to be received, and to decode said symbols to recover said data.

32. Communications equipment including the carrier of claim 25.