METHOD AND APPARATUS FOR ENCRYPTION OF COMMUNICATIONS OVER A NETWORK

• US 20170093807A1
• Filed: 09/28/2015
• Published: 03/30/2017
• Est. Priority Date: 09/28/2015
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: GROSS, DAVID, LACKEY, JOSHUA, LEVY, DONALD E., JOVER, ROGER PIQUERAS, RAMACHANDRAN, JAYARAMAN, SERBAN, CRISTINA
• Granted Patent: US 9,769,128 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04B 3/52 Systems for transmission between fixed stations via waveguides
• CPC Class Codes: H04B 3/54 Systems for transmission via power distribution lines
• CPC Class Codes: H04B 3/56 Circuits for coupling, blocking, or by-passing of signals
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 72/0453 Resources in frequency domain, e.g. a carrier in FDMA
• CPC Class Codes: H04W 88/08 Access point devices
• CPC Class Codes: H04W 88/085 Access point devices with remote components

Abstract

Aspects of the subject disclosure may include, for example, determining whether communications are encrypted, determining a communication type for the communications according to sensitivity criteria, encrypting the communications according to the communication type to generate encrypted communications, and transmitting to a second network device the encrypted communications. Other embodiments are disclosed.

Claims

1. A first waveguide system comprising:

a processor; and

a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising;

receiving communications;

determining whether the communications are encrypted;

responsive to a determination that the communications are not encrypted, encrypting the communications to generate encrypted communications; and

transmitting, to a second waveguide system, electromagnetic waves to a physical interface of a transmission medium that propagate without utilizing an electrical return path, wherein the electromagnetic waves are guided by the transmission medium, wherein the electromagnetic waves are within a non-optical frequency range, wherein the electromagnetic waves convey the encrypted communications.

2. The first waveguide system of claim 1, wherein the operations further comprise determining a communication type for the communications, wherein the encrypting of the communications is based on the communication type.

3. The first waveguide system of claim 2, wherein the receiving the communications comprises receiving the communications from a communication device, wherein the first waveguide system is a closest network device to the communication device.

4. The first waveguide system of claim 1, wherein the operations further comprise:

receiving, from the second waveguide system, second electromagnetic waves from the physical interface of the transmission medium that propagate without utilizing the electrical return path, wherein the second electromagnetic waves are guided by the transmission medium, wherein the second electromagnetic waves have a non-optical frequency range, wherein the second electromagnetic waves convey authentication information associated with the second waveguide system; and

authenticating the second waveguide system according to an authentication protocol based on the authentication information, wherein the transmitting of the electromagnetic waves to the second waveguide system is responsive to the authenticating.

5. The first waveguide system of claim 1, wherein the second waveguide system is an adjacent node in a wired network comprising power lines.

6. The first waveguide system of claim 1, wherein the encrypting of the communications comprises accessing an encryption database that includes public encryption keys.

7. The first waveguide system of claim 6, wherein the encryption database includes device information indicating a location and a device capability for network devices including the first waveguide system and the second waveguide system.

8. The first waveguide system of claim 6, wherein a third waveguide system has access to the encryption database for decrypting the encrypted communications, wherein the third waveguide system is a closest network device to a recipient communication device of the communications.

9. The first waveguide system of claim 1, wherein the operations further comprise:

monitoring previous communications to identify sensitivity criteria, wherein the previous communications are unencrypted, wherein the encrypting of the communications is based on a communication type, and wherein a determining of the communication type for the communications is according to the sensitivity criteria.

10. A method comprising:

receiving, by a first network device, communications originated from a source communication device;

determining, by the first network device, whether the communications are encrypted;

responsive to a determination that the communications are not encrypted;

determining, by the first network device, a communication type for the communications according to sensitivity criteria, and

encrypting, by the first network device, the communications according to the communication type to generate encrypted communications; and

transmitting, by the first network device to a second network device, the encrypted communications.

11. The method of claim 10, wherein the transmitting of the encrypted communications comprises:

transmitting, by the first network device to the second network device, electromagnetic waves at a physical interface of a transmission medium that propagate without utilizing an electrical return path, wherein the electromagnetic waves are guided by the transmission medium, wherein the electromagnetic waves are within a non-optical frequency range, wherein the electromagnetic waves convey the encrypted communications.

12. The method of claim 11, wherein the first network device is customer premises equipment that is located at a premises with the source communication device and is coupled with the source communication device.

13. The method of claim 12, comprising:

monitoring, by the first network device, previous communications to identify the sensitivity criteria, wherein the previous communications are unencrypted; and

storing, by the network device in a memory of the first network device, information representative of the sensitivity criteria.

14. The method of claim 11, wherein the communications originated from the source communication device are directed to a recipient communication device located at a recipient premises, wherein the second network device is customer premises equipment that is located at the recipient premises and is coupled with the recipient communication device, and wherein the transmitting of the encrypted communications to the second network device causes the second network device to decrypt the encrypted communications.

15. A machine-readable storage device comprising instructions, which when executed by a processor of a first network device cause the processor to perform operations comprising:

storing information representative of sensitivity criteria, wherein the sensitivity criteria is generated based on monitoring unencrypted communications;

receiving communications originated from a source communication device;

determining whether the communications satisfy an encryption threshold;

responsive to a determination that the communications do not satisfy the encryption threshold;

determining a communication type for the communications according to sensitivity criteria, and

encrypting the communications according to the communication type to generate encrypted communications; and

transmitting, to a second network device, the encrypted communications.

16. The machine-readable storage device of claim 15, wherein the first network device and the second network device comprise waveguide systems that operate by receiving electromagnetic waves at a physical interface of a transmission medium that propagate without utilizing an electrical return path, wherein the electromagnetic waves are guided by the transmission medium, and wherein the electromagnetic waves are within a non-optical frequency range.

17. The machine-readable storage device of claim 15, wherein the monitoring of the unencrypted communications is performed by the processor of the first network device.

18. The machine-readable storage device of claim 15, wherein the first network device is first customer premises equipment that is located at a source premises with the source communication device and is coupled with the source communication device, wherein the communications originated from the source communication device are directed to a recipient communication device located at a recipient premises, wherein the second network device is second customer premises equipment that is located at the recipient premises and is coupled with the recipient communication device, and wherein the transmitting of the encrypted communications to the second network device causes the second network device to decrypt the encrypted communications.

19. The machine-readable storage device of claim 18, wherein the encrypting of the communications comprises accessing an encryption database that includes public encryption keys.

20. The machine-readable storage device of claim 19, wherein the encryption database includes device information indicating a location and a device capability for network devices including the first and second network devices, and wherein the second network device has access to the encryption database.