Secure data packet transmission system and method

• US 4,876,718 A
• Filed: 07/19/1988
• Issued: 10/24/1989
• Est. Priority Date: 03/12/1987
• Status: Expired due to Term

• Current Assignee: Zenith Electronics Corporation (LG Corporation)
• Original Assignee: Zenith Electronics Corporation (LG Corporation)
• Inventors: Citta, Richard W., Mutzabaugh, Dennis M., Sgrignoli, Gary J., Gosc, Paul M.
• Primary Examiner(s): Buczinski, Stephen C.
• Application Number:
  US07/221,166
• Time in Patent Office: 462 Days
• Field of Search: 380/20, 380/21, 380/42, 380/43, 380/45, 380/50
• US Class Current: 380/42
• CPC Class Codes: H04L 2209/34 Encoding or coding, e.g. Huffman coding or error correction
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A bit packet communication system includes a head-end having a software implemented 16 bit shaft register with a plurality of feed-forward taps and a different plurality of feed-back taps for simultaneously dividing and multiplying the input data bit packet to provide an output bit packet that is both encrypted and error protected. Dynamic encryption is provided by utilizing an initial preset for the software corresponding to a preset encryption key for the shift register. Authorized subscriber terminals are provided with memories and decryption keys are downloaded. The bit packets are assembled with a global bit packet encrypted with a global encryption key and subsequent individually addressed bit packets encrypted with address keys. The address keys and terminal addresses are permanently stored in the subscriber terminal memories. The global encryption keys are changed periodially. Means are provided in each subscriber terminal for storing a number of global decryption keys which are cycled through in attempts to decrypt the global packets. One of the global decryption keys is a permanent default key associated with the subscriber terminal to assure that communication with that terminal is possible despite a lack of knowledge of the terminal address or the other global decryption keys in its memory.

Claims

1. A method of operating a data packet communication system comprising the steps of:

formatting data into binary data packets;

processing said binary data packets by division and multiplication by different factors to simultaneously encrypt and error protect said binary data packets; and

transmitting the processed binary data packets.

2. The method of claim 1, further including the steps of:

receiving said data packets; and

processing the received binary data packets by division and multiplication by complementary factors to said different factors to simultaneously decrypt and error detect the packets.

3. The method of claim 2, further including the step of:

selectively changing the effective value of said different factors.

9. The method of claim 3 wherein said changing step comprises encoding said data packets in accordance with a selectively changeable preset value.

10. The method of claim 9 including the steps of passing said received data packets through a multi-bit shift register having feed-forward and feed-back connections corresponding to said complementary factors and presetting said shift register with said preset value prior to said processing step.

4. A data packet communication system comprising:

formatting means for formatting data into binary data packets;

encryption means coupled to said formatting means for dividing and multiplying said binary data packets by different factors to simultaneously encrypt and error protect said binary data packets; and

means for transmitting the encrypted-error protected binary data packets.

5. The system of claim 4 wherein said encryption means comprise software that is functionally equivalent to a multi-bit shift register having feed-forward and feed back connections that differ from each other.

6. The system of claim 5, wherein said software is preset to an initial state that is functionally equivalent to presetting said shift register with an encryption key.

7. The system of claim 6 wherein said binary data packets each include 48 binary bits and wherein said encryption means adds a 16 bit CRC code to said binary data packets.

8. A data packet communication system comprising:

formatting means for formatting data into binary data packets of 64 bits;

software encryption means for dividing and multiplying said binary data packets to simultaneously encrypt and error protect said binary data packets, said software encryption means being functionally equivalent to a 16 bit shift register having a plurality of feed-forward and feed-back connections that differ from each other;

means for presetting said software to an initial state with an encryption key; and

means for transmitting said encrypted binary data packets.

11. A method of operating a data packet communication system comprising the steps of:

formatting data into binary data packets including a message portion and a code portion;

processing said binary data packets by division and multiplication by different factors to simultaneously encrypt and error protect said binary data packets;

transmitting said processed binary data packets;

receiving said transmitted binary data packets;

processing received binary data packets by division and multiplication by factors complementary to said different factors to simultaneously decrypt and error detect said binary data packets; and

determining whether said predetermined code portion was altered during transmission.

12. A data packet communication system comprising:

formatting means for formatting data into binary data packets of a given number of bits including a message portion and a predetermined code portion;

encryption means for effectively dividing and multiplying said binary data packets to simultaneously encrypt and error protect said binary data packets by different factors, said encryption means being functionally equivalent to a multi bit shift register having a plurality of feed forward and feedback connections that differ from each other;

means for transmitting said encrypted binary data packets;

means for receiving and for processing received binary data packets by effectively dividing and multiplying by factors complementary to said different factors to simultaneously decrypt and error detect said binary data packets; and

means for determining whether the predetermined code portion was altered in transmission.