Standard telephone equipment (STE) based deployable secure communication system

• US 20100067696A1
• Filed: 11/13/2009
• Published: 03/18/2010
• Est. Priority Date: 09/15/2003
• Status: Active Grant

• Current Assignee: TeleCommunication Systems Inc (Comtech Telecommunications Corporation)
• Original Assignee: TeleCommunication Systems Inc (Comtech Telecommunications Corporation)
• Inventors: Anspach, Steve S.
• Granted Patent: US 8,295,273 B2
• Time in Patent Office: Days
• US Class Current: 380/257
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04M 7/0078 Security; Fraud detection; Fraud prevention
• CPC Class Codes: H04M 7/1245 where a network other than PSTN/ISDN interconnects two PSTN/ISDN networks

Abstract

Sensitive, Standard Telephone Equipment (STE) data is encapsulated into IP packets in a remotely deployed, secure communication system. The IP packets are addressed to a matching IP encapsulator/decapsulator device over the public Internet or other IP protocol network, that then passes it to a similar STE device over an ISDN link for decryption. The present invention is embodied in a system that provides secure Voice-Over-IP (VOIP), video and data network functionality in a single, small size deployable case, to a remote user. Most importantly, the embodiment allows for the routing of bulk encrypted (i.e., secure) data over a public network, e.g., the Internet.

Claims

1-27. -27. (canceled)

28. A method of cloaking encrypted data communications, comprising:

formulating, with an encryption device, a single digitally encrypted secure serial data stream from at least one of a telephony signal and a data signal;

establishing a first data tunnel between a local black side router and a remote gateway router; and

establishing a second data tunnel between a local digital data packet encapsulator and a remote digital data packet encapsulator;

wherein said first data tunnel and said second data tunnel mask a unique signature produced by said encryption device.

29. The method of cloaking encrypted data communications according to claim 28, further comprising:

providing a routing communication path for said single digitally encrypted secure serial data stream with said second data tunnel.

30. The method of cloaking encrypted data communications according to claim 28, further comprising:

presenting a commercial/civilian appearance to said single digitally encrypted secure serial data stream with said first data tunnel.

31. The method of cloaking encrypted data communications according to claim 28, further comprising:

encapsulating said single digitally encrypted secure serial data stream into IP data packets.

32. The method of cloaking encrypted data communications according to claim 28, further comprising:

communicating said single digitally encrypted secure serial data stream on a public non-secure IP network

33. The method of cloaking encrypted data communications according to claim 32, wherein:

said public non-secure IP network is the Internet.

34. The method of cloaking encrypted data communications according to claim 28, further comprising:

transmitting said digital data packets via an ISDN router.

35. The method of cloaking encrypted data communications according to claim 28, further comprising:

transmitting said digital data packets over a satellite terminal.

36. The method of cloaking encrypted data communications according to claim 28, further comprising:

encrypting said single digitally encrypted secure serial data stream using a KIV-7 encryption device.

37. The method of cloaking encrypted data communications according to claim 28, wherein:

said single digitally encrypted secure serial data stream is a 2 B plus D ISDN serial data stream containing both voice and data information.

38. A system for cloaking encrypted data communications, comprising:

an encryption device to formulate a single digitally encrypted secure serial data stream from at least one of a telephony signal and a data signal;

a first data tunnel between a local black side router and a remote gateway router; and

a second data tunnel between a local digital data packet encapsulator and a remote digital data packet encapsulator;

wherein said first data tunnel and said second data tunnel mask a unique signature produced by said encryption device.

39. The system for cloaking encrypted data communications according to claim 38, wherein:

said second data tunnel provides a routing communication path for said single digitally encrypted secure serial data stream.

40. The system for cloaking encrypted data communications according to claim 38, wherein:

said first data tunnel presents a commercial/civilian appearance to said single digitally encrypted secure serial data stream.

41. The system for cloaking encrypted data communications according to claim 38, wherein:

said local digital data packet encapsulator encapsulates said single digitally encrypted secure serial data stream into IP data packets.

42. The method of cloaking encrypted data communications according to claim 38, wherein:

said single digitally encrypted secure serial data stream is communicated on a public non-secure IP network

43. The method of cloaking encrypted data communications according to claim 42, wherein:

said public non-secure IP network is the Internet.

44. The method of cloaking encrypted data communications according to claim 38, wherein:

said digital data packets are transmitted via an ISDN router.

45. The method of cloaking encrypted data communications according to claim 38, wherein:

said digital data packets are transmitted over a satellite terminal.

46. The method of cloaking encrypted data communications according to claim 38, wherein:

said single digitally encrypted secure serial data stream is encrypted using a KIV-7 encryption device.

47. The method of cloaking encrypted data communications according to claim 38, wherein:

said single digitally encrypted secure serial data stream is a 2 B plus D ISDN serial data stream containing both voice and data information.