Modular cryptographic device providing multi-mode wireless lan operation features and related methods

• US 20050216751A1
• Filed: 03/23/2004
• Published: 09/29/2005
• Est. Priority Date: 03/23/2004
• Status: Active Grant

• Current Assignee: Harris Global Communications, Inc. (L3Harris Technologies, Inc.)
• Original Assignee: Harris Corporation (L3Harris Technologies, Inc.)
• Inventors: Dellmo, Russell Wayne, Yancy, Bruce Wayne, Petkus, Eric Edmond
• Granted Patent: US 9,003,199 B2
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: H04L 63/0485 Networking architectures for enhanced packet encryption processing, e.g. offloading of IPsec packet processing or efficient security association look-up
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic

Abstract

A cryptographic device may include a cryptographic module and a communications module removably coupled thereto. The cryptographic module may include a first housing, a user Local Area Network (LAN) interface carried by the first housing, and a cryptographic processor carried by the first housing and coupled to the user LAN interface. The communications module may include a second housing and a network wireless LAN interface carried by the second housing. The network wireless LAN interface may be coupled to the cryptographic processor, and it may be switchable between wireless LAN modes.

Claims

1. A cryptographic device comprising:

a cryptographic module and a communications module removably coupled thereto;

said cryptographic module comprising

a first housing,

a user Local Area Network (LAN) interface carried by said first housing, and

a cryptographic processor carried by said first housing and coupled to said user LAN interface;

said communications module comprising

a second housing, and

a network wireless LAN interface carried by said second housing, coupled to said cryptographic processor and switchable between wireless LAN modes.

2. The cryptographic device of claim 1 wherein said network wireless LAN interface circuit is switchable to one of an access point (AP) mode, an infrastructure mode, and an ad-hoc mode.

3. The cryptographic device of claim 1 wherein said cryptographic module further comprises a first connector carried by said first housing and coupled to said cryptographic processor;

wherein said communications module further comprises a second connector carried by said second housing and connected to said network wireless LAN interface, said second connector being removably mateable with said first connector of said cryptographic module.

4. The cryptographic device of claim 1 wherein said user LAN interface comprises an Ethernet interface.

5. The cryptographic device of claim 1 further comprising a power circuit carried by said first housing and powering said cryptographic processor, said user LAN interface, and said network LAN interface.

6. The cryptographic device of claim 1 wherein said cryptographic processor implements an encryption algorithm to provide a predetermined security level.

7. The cryptographic device of claim 1 wherein said cryptographic processor comprises:

a host network processor coupled to said user LAN interface; and

a cryptography circuit coupled to said host network processor.

8. The cryptographic device of claim 7 wherein said cryptographic processor further comprises:

an encrypted data buffer circuit coupled between said user LAN interface and said cryptography circuit; and

an unencrypted data buffer circuit coupled between said cryptography circuit and said network LAN interface.

9. The cryptographic device of claim 1 wherein said cryptographic module further comprises a tamper circuit for disabling said cryptographic processor based upon tampering with said first housing.

10. The cryptographic device of claim 9 wherein said tamper circuit comprises at least one conductor substantially surrounding said cryptographic processor, and wherein said cryptographic processor is disabled based upon a break in said at least one conductor.

11. A cryptographic device comprising:

a cryptographic module and a communications module removably coupled thereto;

said cryptographic module comprising

a first housing,

a user Local Area Network (LAN) interface carried by said first housing, and

a cryptographic processor carried by said first housing and coupled to said user LAN interface;

said communications module comprising a second housing and a network wireless LAN interface carried by said second housing;

said communications module comprising a predetermined one from among a plurality of interchangeable communications modules, and said network wireless LAN interfaces of said plurality of interchangeable communications modules each operating using a different wireless LAN mode.

12. The cryptographic device of claim 11 wherein the different wireless LAN modes comprise an access point (AP) mode, an infrastructure mode, and an ad-hoc mode.

13. The cryptographic device of claim 11 wherein said cryptographic module further comprises a first connector carried by said first housing and coupled to said cryptographic processor;

wherein said communications module further comprises a second connector carried by said second housing and connected to said network wireless LAN interface, said second connector being removably mateable with said first connector of said cryptographic module.

14. The cryptographic device of claim 11 wherein said user LAN interface comprises an Ethernet interface.

15. The cryptographic device of claim 11 further comprising a power circuit carried by said first housing and powering said cryptographic processor, said user LAN interface, and said network LAN interface.

16. The cryptographic device of claim 11 wherein said cryptographic processor implements an encryption algorithm to provide a predetermined security level.

17. The cryptographic device of claim 11 wherein said cryptographic processor comprises:

a host network processor coupled to said user LAN interface; and

a cryptography circuit coupled to said host network processor.

18. The cryptographic device of claim 17 wherein said cryptographic processor further comprises:

an encrypted data buffer circuit coupled between said user LAN interface and said cryptography circuit; and

an unencrypted data buffer circuit coupled between said cryptography circuit and said network LAN interface.

19. The cryptographic device of claim 11 wherein said cryptographic module further comprises a tamper circuit for disabling said cryptographic processor based upon tampering with said first housing.

20. The cryptographic device of claim 19 wherein said tamper circuit comprises at least one conductor substantially surrounding said cryptographic processor, and wherein said cryptographic processor is disabled based upon a break in said at least one conductor.

21. A communications method comprising:

coupling a cryptographic module to a Local Area Network (LAN) device, the cryptographic module comprising a first housing, a user LAN interface carried by the first housing, a cryptographic processor carried by the first housing and coupled to the user LAN interface;

providing a communications module comprising a second housing and a network wireless LAN interface carried by the second housing and removably coupled to the cryptographic module; and

switching the network wireless LAN interface between wireless LAN modes, and using the network wireless LAN to communicate with a wireless LAN.

22. The method of claim 21 wherein switching comprises switching the network wireless LAN interface circuit to one of an access point (AP) mode, an infrastructure mode, and an ad-hoc mode.

23. The method of claim 21 wherein the cryptographic module further comprises a first connector carried by the first housing and coupled to the cryptographic processor;

wherein the communications module further comprises a second connector carried by the second housing and connected to the network wireless LAN interface; and

wherein removably coupling comprises removably mating the second connector to the first connector.

24. The method of claim 21 wherein the user LAN interface comprises an Ethernet interface.

25. A communications method comprising:

coupling a cryptographic module to a Local Area Network (LAN) device, the cryptographic module comprising a first housing, a user Local Area Network (LAN) interface carried by the first housing, and a cryptographic processor carried by the first housing and coupled to the user LAN interface;

coupling the user LAN interface to a LAN device

removably coupling one of a plurality of communications modules to the cryptographic module, the communications module comprising a second housing and a network wireless LAN interface carried by the second housing, and the network wireless LAN interfaces of the plurality of interchangeable communications modules each operating in a different wireless LAN mode; and

using the removably coupled communications module to communicate with a LAN.

26. The method of claim 25 wherein the different wireless LAN modes comprise an access point (AP) mode, an infrastructure mode, and an ad-hoc mode.

27. The method of claim 25 wherein the cryptographic module further comprises a first connector carried by the first housing and coupled to the cryptographic processor;

wherein the communications module further comprises a second connector carried by the second housing and connected to the network wireless LAN interface; and

wherein removably connecting comprises removably mating the second connector with the first connector of the cryptographic module.

28. The method of claim 25 wherein the user LAN interface comprises an Ethernet interface.

29. A communications system comprising:

a plurality of Local Area Network (LAN) devices coupled together to define a wireless LAN, and a cryptographic device coupled to at least one of said LAN devices;

said cryptographic device comprising a cryptographic module coupled to said at least one LAN device, and a communications module removably coupled to said cryptographic module;

said cryptographic module comprising

a first housing,

a user LAN interface carried by said first housing, and

a cryptographic processor carried by said first housing and coupled to said user LAN interface;

said communications module comprising

a second housing, and

a network wireless LAN interface carried by said second housing, coupled to said cryptographic processor and switchable between wireless LAN modes.

30. The communications system of claim 29 wherein said network wireless LAN interface circuit is switchable to one of an access point (AP) mode, an infrastructure mode, and an ad-hoc mode.

31. The communications system of claim 29 wherein said cryptographic module further comprises a first connector carried by said first housing and coupled to said cryptographic processor;

wherein said communications module further comprises a second connector carried by said second housing and connected to said network wireless LAN interface, said second connector being removably mateable with said first connector of said cryptographic module.

32. The communications system of claim 29 wherein said user LAN interface comprises an Ethernet interface.

33. The communications system of claim 29 further comprising a power circuit carried by said first housing and powering said cryptographic processor, said user LAN interface, and said network LAN interface.

34. The communications system of claim 29 wherein said cryptographic processor implements an encryption algorithm to provide a predetermined security level.

35. The communications system of claim 29 wherein said cryptographic processor comprises:

a host network processor coupled to said user LAN interface; and

a cryptography circuit coupled to said host network processor.

36. The communications system of claim 35 wherein said cryptographic processor further comprises:

an encrypted data buffer circuit coupled between said user LAN interface and said cryptography circuit; and

an unencrypted data buffer circuit coupled between said cryptography circuit and said network LAN interface.