Communication network with secure access for portable users

• US 20110087879A1
• Filed: 10/13/2009
• Published: 04/14/2011
• Est. Priority Date: 10/13/2009
• Status: Active Grant

• Current Assignee: BAE Systems Information and Electronic Systems Integration Incorporated (BAE Systems Plc)
• Original Assignee: BAE Systems Information and Electronic Systems Integration Incorporated (BAE Systems Plc)
• Inventors: Eteson, Bruce M., Chand, Naresh
• Granted Patent: US 8,406,427 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: H04K 2203/14 for the transfer of light or images, e.g. for video-surveillance, for television or from a computer screen
• CPC Class Codes: H04K 2203/18 for wireless local area networks or WLAN
• CPC Class Codes: H04K 3/25 based on characteristics of target signal or of transmission as countermeasure against surveillance H04K3/827, e.g. using direct sequence spread spectrum or fast frequency hopping spread spectrum techniques H04B1/69
• CPC Class Codes: H04K 3/827 using characteristics of target signal or of transmission as countermeasure against jamming H04K3/25, e.g. using direct sequence spread spectrum or fast frequency hopping spread spectrum techniques H04B1/69
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

A communication network includes a local area network (LAN) and a wireless access point coupled to the LAN. In one embodiment, each access point includes a medium access control (MAC) stage, and a radio frequency (RF) transmitter/receiver for communicating unsecure message data via RF links with users of associated wireless devices. An optical transmitter/receiver in the access point enables the users to communicate secure message data over the LAN via free space optical (FSO) links with the users. The MAC stage operates (i) to direct unsecure data from the LAN to the wireless device users and to direct unsecure data from the users to the LAN, via the RF transmitter/receiver; and (ii) to direct secure data from the LAN to the wireless device users and to direct secure data from the users to the LAN, via the optical transmitter/receiver. An integrated VoIP/FSO portable handset is also disclosed.

Claims

1. A communication network, comprising:

a local area network (LAN);

one or more wireless access points coupled to the LAN, wherein each access point includes;

a medium access control (MAC) stage;

a radio frequency (RF) transmitter/receiver arranged for transmitting and receiving RF signals to and from associated wireless devices, and for enabling users of the wireless devices to gain access to the LAN by way of RF links with the access point;

an optical transmitter/receiver arranged for transmitting and receiving light signals to and from the wireless devices, and for enabling users of the wireless devices to gain access to the LAN through free space optical (FSO) links with the users; and

the MAC stage is configured (i) to direct unsecure data from the LAN to users of the wireless devices and to direct unsecure data from the users to the LAN, by way of the RF transmitter/receiver; and

(ii) to direct secure data from the LAN to users of the wireless devices and to direct secure data from the users to the LAN, by way of the optical transmitter/receiver.

2. A communication network according to claim 1, including an optical access antenna system coupled to the optical transmitter/receiver of the wireless access point, wherein at least a part of the antenna system is arranged to be fixed within an optical range of one or more users of the wireless devices.

3. A communication network according to claim 2, wherein the antenna system comprises a number of optical antennas arrayed in a grid configuration.

4. A communication network according to claim 3, wherein the antenna system comprises a passive optical network (PON) connected between the optical transmitter/receiver of the access point, and each of the optical antennas.

5. A communication network, comprising:

a local area network (LAN);

one or more wireless access points coupled to the LAN, wherein each access point includes;

a medium access control (MAC) stage;

a radio frequency (RF) transmitter/receiver arranged for transmitting and receiving RF signals to and from associated wireless devices, and for enabling users of the wireless devices to gain access to the LAN by way of RF links with the access point;

the MAC stage is configured (i) to direct unsecure data from the LAN to users of the wireless devices, and to direct unsecure data from the users to the LAN, by way of the RF transmitter/receiver; and

(ii) to direct secure data from the LAN to users of the wireless devices, and to direct secure data from the users to the LAN;

a decrypto processor having an input coupled to the MAC stage and configured to decode secure encrypted data received over the LAN and output from the MAC stage, and to produce a corresponding decrypted data output;

a crypto device operative to encrypt secure data received at an input of the device from users of the wireless devices, the crypto device having a corresponding encrypted data output coupled to the MAC stage; and

an optical access antenna system coupled to the input of the crypto device and to the output of the decrypto processor, wherein the antenna system is constructed and arranged to establish free space optical (FSO) links with one or more users of the wireless devices.

6. A communication network according to claim 5, wherein the antenna system comprises electrical-to-optical (E/O) converters associated with the optical antennas, and a wire cable distribution system connected at one end to the E/O converters, and at an opposite end to the decrypto processor and the crypto device of the access point.

7. A communication network according to claim 5, wherein the antenna system comprises a number of optical antennas arrayed in a grid configuration.

8. A wireless handset, comprising:

a message data source;

a radio frequency (RF) transceiver constructed and arranged for transmitting RF signals corresponding to unsecure message data to a network access point, and for receiving RF signals corresponding to unsecure message data radiated from the access point;

an optical transceiver for transmitting free space optical (FSO) signals corresponding to secure message data to an optical access antenna system associated with the access point, and for receiving FSO signals corresponding to secure message data emitted from the optical antenna system; and

a switching stage having a first port coupled to the message data source, a second port coupled to the RF transceiver, and a third port coupled to the optical transceiver, wherein the switching stage is configured to couple the message data source to the RF transceiver for unsecure message data, and to the optical transceiver for secure message data.

9. A wireless handset according to claim 8, wherein the message data comprises a microphone transducer.

10. A wireless handset according to claim 8, wherein the message data source includes an encoder stage configured to convert analog voice signals into corresponding digital data according to a voice over Internet protocol (VoIP).

11. A wireless handset according to claim 10, including a decoder stage for converting (a) voice data modulated on the RF signals received from the network access point, and (b) voice data modulated on the light signals received from the optical antenna system, into corresponding analog voice signals.

12. A wireless handset according to claim 8, including an indicator stage coupled to the optical transceiver for alerting a user when light signals from the optical access antenna system are detected by the optical transceiver.