Apparatus and method for secure transmission of data over an unsecure transmission channel

• US 4,881,263 A
• Filed: 09/25/1987
• Issued: 11/14/1989
• Est. Priority Date: 09/25/1987
• Status: Expired due to Term

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Digital Equipment Corporation (HP Inc.)
• Inventors: Karger, Paul, Miller, Arnold, Mann, Bruce, Herbison, B. J., Lyman, Carter, Lipner, Steve
• Primary Examiner(s): Buczinski, Stephen C.
• Assistant Examiner(s): GREGORY, BERNARR E
• Application Number:
  US07/101,125
• Time in Patent Office: 781 Days
• Field of Search: 380/21, 380/23-25, 380/42-47, 380/49, 380/50, 380/28-30
• US Class Current: 713/162
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]

Abstract

Apparatus and methods, readily adapted to interface with a standard data transmission network having an unsecure transmission channel, e.g., "Ethernet," for the provision of secure transmission of data over the network channel in a manner which is essentially transparent to the standard network devices and users thereof, are provided. Various encryption keys are generated and utilized within the system to disguise or encrypt information transferred between network nodes. The encryption keys are made known only to those network devices which are permitted to handle information encrypted with the encryption keys.

Claims

1. A method for transmitting data packets in a secure manner on an unsecured data transmission channel having a plurality of nodes coupled thereto, each of said nodes including a memory for storing encryption key words for use in encrypting said data packets, said method comprising the steps of:

generating at one of said nodes a data packet for transmission to a target one of said nodes;

searching the memory at said host node to locate an encryption key word designated for use with data packets to be processed by said target node;

assembling, upon determining that no said encryption key word is stored, a key request (AR) data packet; and

transmitting said AR data packet to a key distribution (KDC) one of said nodes to request assignment of an encryption key word for use in encrypting data packets to be processed by said host and target nodes.

2. The method set forth in claim 1 comprising the further steps of:

generating at said KDC node, in response to receipt of said AR data packet, a first encryption key word;

assembling at said KDC node a key transfer (AO) data packet including said first encryption key word;

encrypting said AO data packet with a first master encryption key word usable for decryption only at said host node; and

transmitting said encrypted AO data packet to said host node.

3. The method set forth in claim 2 comprising the further steps of:

decrypting said AO data packet at said host node; and

storing said first key word in said host node memory.

4. The method set forth in claim 3 comprising the further steps of:

assembling at said host node an association setup (AF) data packet including said first encryption key word encrypted with a second master encryption key word usable for decryption only at said target node;

transmitting said AF data packet to said target node;

decrypting said AF data packet at said target node; and

storing said first encryption key word in the memory of said target node.

5. The method set forth in claim 4 including the further steps of:

encrypting said first encryption key word with said second master encryption key word at said KDC node;

including the encrypted first encryption key word in said AO data packet for transmission to said host node, whereby after decryption at said host node said encrypted first encryption key word is assembled into said AF data packet.

6. The method set forth in claim 3 comprising the further step of:

periodically rendering unusable the encryption key words stored in said memory.

7. A method for transmitting data packets in a secure manner on an unsecured data transmission channel having a plurality of nodes coupled thereto, each of said nodes including memory for storing encryption key words for use in encrypting said data packets, said method comprising the steps of:

periodically generating at a key distribution (KDC) one of said nodes new encryption key words;

assembling at said KDC node a key transfer (AO) data packet for transmission to a host one of said nodes;

encrypting a new encryption key word generated at said KDC node with a first master encryption key word usable for decryption only at a target one of said nodes;

including said encrypted new encryption key word in said AO data packet;

including the unencrypted new encryption key word in said AO data packet;

encrypting said AO data packet with a second master encryption key word usable for decryption only at said host node; and

transmitting said encrypted AO data packet to said host node thereby transferring said new encryption key word to said host node.

8. The method set forth in claim 7 comprising the further steps of:

decrypting said AO data packet at said host node with said second master encryption key word to derive said new encryption key word;

assembling at said host node an association setup (AF) data packet including the portion of said decrypted AO data packet containing said new encryption key word encrypted with said first master encryption key word;

transmitting said AF data packet to said target node; and

decrypting said AF data packet at said target node with said first master encryption key word to derive said new encryption key word.

9. The method set forth in claim 8 comprising the further step of:

storing said new encryption key word derived at said host and target nodes in said decrypting steps in the memory of said host and target nodes, respectively.

10. The method set forth in claim 9 comprising the further steps of:

generating a message data packet at said host node;

encrypting said message data packet with said new encryption key word stored in said memory of said host node;

transmitting said encrypted message data packet over said unsecured data transmission channel to said target node; and

decrypting said message data packet at said target node with said new encryption key word stored in said memory of said target node.

11. Them method set forth in claim 10 wherein each encryption key word is usable for processing data packets at only a specified pair of nodes.

12. The method set forth in claim 11 wherein each encryption key word is rendered unusable for encryption after being used to process a predetermined number of data packets.

13. The method set forth in claim 11 wherein each encryption key word is rendered unusable for encryption after being stored at a node for a predetermined length of time.

14. A secure data transmission system for transmitting data packets having a destination address and a message field, the system comprising:

unsecured channel means for transferring said data packets;

a plurality of node means coupled to said unsecured channel means for generating said data packets and for transmitting said data packets onto said channel means;

first encryption means included at a first one of said node means for encrypting the message field of a first data packet according to a first encryption key word;

key control means for automatically invalidating said first encryption key word upon detection of a predetermined condition;

key generation means included at a second one of said node means for generating a second encryption key word and for including said second encryption key word in the message field of a second data packet having a destination address identifying said first node means;

second encryption means included at said second node means for encrypting the message field of said second data packet with a first master encryption key word unique to said first node means, said second encryption means including

means for generating an intermediate key word,

means for encrypting said intermediate key word according to said first master encryption key word and for including said encrypted intermediate key word in the message field of said second data packet, and

means for encrypting a portion of said message field following said encrypted intermediate key word according to said intermediate key word; and

first decryption means included at said first node means for decrypting said second data packet and for substituting said second encryption key word obtained therefrom for said first encryption key word used by said first encryption means.

15. A secure data transmission system for transmitting data packets having a destination address and a message field, the system comprising:

unsecured channel means for transferring said data packets;

a plurality of node means coupled to said unsecured channel means for generating said data packets and for transmitting said data packets onto said channel means;

first encryption means included at a first one of said node means for encrypting the message field of a first data packet according to a first encryption key word;

key control means for automatically invalidating said first encryption key word upon detection of a predetermined condition;

key generation means included at a second one of said node means for generating a second encryption key word and for including said second encryption key word in the message field of a second data packet having a destination address identifying said first node means;

second encryption means included at said second node means for encrypting the message field of said second data packet with a first master encryption key word unique to said first node means;

first decryption means included at said first node means for decrypting said second data packet and for substituting said second encryption key word obtained therefrom for said first encryption key word used by said first encryption means;

means included in said second node means for generating an association setup message including a target address identifying a third one of said node means, said setup message further including said second encryption key word;

means for controlling said second encryption means to encrypt said second encryption key word within said association setup message with a second master encryption key word unique to said third node means; and

means for including said association setup message within the message field of said second data packet.

16. The secure data transmission system of claim 15 wherein said second encryption means comprises:

means for generating an intermediate key word;

means for encrypting said intermediate key word according to said second master encryption key word and for including said encrypted intermediate key word in said association setup message; and

means for encrypting the portion of said association setup message following said encrypted intermediate key word according to said intermediate key word.

17. The secure data transmission system of claim 15 wherein said first node means further comprises:

means responsive to the reception of said second data packet from said second node means for forming a third data packet having a destination address equal to said target address contained in said association setup message and having a message field containing the encrypted second encryption key word from said association setup message.

18. The secure data transmission sYstem of claim 17 wherein said third node means comprises:

second decryption means for decrypting said third data packet including said encrypted second encryption key word;

means for storing said decrypted second encryption key word; and

means for controlling said second decryption means to decrypt further data packets received from said first node means with said stored second encryption key word.

19. The secure data transmission system of claim 15 further comprising:

means included in said first node means for generating a further data packet having a destination address identifying said third node means;

key word storage means included in said first encryption means for storing different encryption key words identified with different ones of said plurality of node means;

search means responsive to generation of said further data packet for searching said key word storage means to locate a valid encryption key word identified with said third node means; and

means responsive to operation of said search means for forming a key request data packet including an address identifying said second node means when said search means fails to locate a valid encryption key word identified with said third node means.

20. The secure data transmission system of claim 19 wherein said second node means includes means responsive to reception of said key request data packet for initiating operation of said means for generating said association setup message.

21. A method for transmitting data packets in a secure manner on an unsecured data transmission channel having a plurality of nodes coupled thereto, each of said nodes including a memory for storing encryption key words for use in encrypting said data packets, said method comprising the steps of:

periodically rendering said encryption key words stored at a host one of said nodes unusable for encryption;

generating at a key distribution (KDC) one of said nodes a new encryption key word;

assembling said new encryption key word into a key transfer (AO) data packet which is encrypted through use of a first master encryption key word unique to said host node;

transmitting said AO data packet from said KDC node to said host node; and

accessing the memory for storing the encryption key words at each of said nodes using procedures which preclude the transmission of a master encryption key word stored in said memory over said unsecured data transmission channel.

22. A method for transmitting data packets in a secure manner on an unsecured data transmission channel having a plurality of nodes coupled thereto, each of said nodes including a memory for storing encryption key words for use in encrypting said data packets, said method comprising the steps of:

periodically rendering said encryption key words stored at a host one of said nodes unusable for encryption;

generating at a key distribution (KDC) one of said nodes a new encryption key word;

assembling said new encryption key word into a key transfer (AO) data packet;

encrypting said AC data packet by encrypting said new encryption key word with an intermediate encryption key word included in said AO data packet after being encrypted with a first master encryption key word unique to said host node; and

transmitting said encrypted AO data packet from said KDC node to said host node.

23. A method for transmitting data packets in a secure manner on an unsecured data transmission channel having a plurality of nodes coupled thereto, each of said nodes including a memory for storing encryption key words for use in encrypting said data packets, said method comprising the steps of:

periodically rendering said encryption key words stored at a host one of said nodes unusable for encryption;

generating at a key distribution (KDC) one of said nodes a new encryption key word;

assembling said new encryption key word into a key transfer (AO) data packet which is encrypted through use of a first master key word unique to said host node;

assembling into said AO data packet at said KDC node a message field including said new encryption key word encrypted through use of a second master encryption key word unique to a target one of said nodes;

transmitting said AO data packet from said KDC node to said host node;

decrypting said AO data packet at said host node;

storing the decrypted new encryption key word in the memory of said host node in place of said unusable encryption key word;

assembling at said host node an association setup (AF) data packet including said encrypted message field taken from said AO data packet;

transmitting said AF data packet from said host node to said target node;

decrypting said AF data packet at said target node through use of said second master encryption key word; and

storing in the memory at said target node the new encryption key word obtained from said decrypted AF data packet.

24. The method set forth in claim 23 including the further steps of:

assembling at said host node a message data packet which is encrypted with said new encryption key word stored in said host node memory;

transmitting said encrypted message data packet from said host node to said target node; and

decrypting said message data packet at said target node through use of said new encryption key word stored in said target node memory.

25. A method for transmitting data packets in a secure manner on an unsecured data transmission channel having a plurality of nodes coupled thereto, said method comprising the steps of:

initializing a source one of said nodes, a destination one of said nodes, and a key distribution control one of said nodes;

placing the source and destination nodes in an operational state upon completion of the initialization step;

storing at the source node a transmission message data packet to be transmitted over the unsecured data transmission channel to a destination node;

determining at the source node existence of a valid association of the source and destination nodes;

determining at the key distribution control node the existence of a permitted association between the initialized source and distribution nodes;

formulating at the key distribution control node an association open message including an association key for encrypting the transmission message data packet stored at the source node;

encrypting an association forward data packet field portion of the association open message with a first master key corresponding to the destination node;

encrypting the association open message with a second master key corresponding to the source node;

transmitting the encrypted association open message from the key distribution control node to the source node;

determining at the source node the message type and the encryption keys of the association open message;

decrypting the association open message at the source node with the second master key;

transmitting the association forward data packet field portion of the association open message including the first master key from the source node to the destination node;

decrypting the association forward message at the destination node with the first master key;

creating an association record for the source and destination nodes;

determining that the association key used by the source node and the destination node is identical for subsequent encryption and decryption of the transmission message data packets to be transferred between the source node and the destination node;

encrypting the transmission message data packet at the source node with the association key upon determining that the association key is the same for the source and destination node;

transmitting the encrypted transmission message data packet from the source node to the destination node;

decrypting the transmission message data packet at the destination node with the association key upon determining that the association key is the same as the association key at the source node; and

preparing and receiving a receive message at the destination node identical to the decrypted transmission message data packet.

26. The method of claim 25, wherein the step of initializing includes the sub-steps of:

formulating an initialization request message at the source node;

transmitting the formulated initialization request message to the key distribution control node;

formulating an initialization message and a general information message at the key distribution control node;

transmitting the formulated initialization and general information messages to the source node and the destination node;

transmitting a message acknowledging receipt of the initialization and general information messages by the source and destination nodes to the key distribution control node; and

placing the source and destination nodes in an operational state subsequent to transmission of the message acknowledging receipt by the source and designation nodes.

27. A method for transmitting data packets in a secure manner on an unsecured data transmission channel having a plurality of nodes coupled thereto, said method comprising the steps of:

formulating an initialization request message at a source one of said nodes;

transmitting the formulated initialization request message to a key distribution control one of said nodes;

formulating an initialization message and a general information message at the key distribution control node;

transmitting the formulated initialization and general information messages to the source node and a destination one of said nodes;

transmitting a message acknowledging receipt of the initialization and general information messages by the source and destination nodes to the key distribution control node;

placing the source and destination nodes in an operational state subsequent to transmission of the message acknowledging receipt by the source and destination nodes;

storing at the source node a transmission message data packet to be transmitted over the unsecured data transmission channel to the destination node;

determining at the source node existence of a valid association of the source and destination nodes;

determining at the key distribution control node existence of a permitted association between the initialized source and destination nodes;

formulating at the key distribution control node an association open message including an association key for encrypting the transmission message data packet stored at the source node;

storing the association open message at the key distribution control node;

encrypting an association forward data packet field portion of the association open message with a first master key corresponding to the destination node;

encrypting the association open message with a second master key corresponding to the source node;

transmitting the encrypted association open message from the key distribution control node to the source node;

storing the association open message at the source node;

determining at the source node the message type and the encryption keys of the association open message;

decrypting the association open message at the source node with the second master key;

transmitting the association forward data packet field portion of the association open message including the first master key from the source node to the destination node;

storing the association forward message at the destination node;

decrypting the association forward message at the destination node with the first master key;

creating an association record for the source and destination nodes;

determining that the association key used by the source node and the destination node is identical for subsequent encryption and decryption of the transmission message data packets to be transferred between the source node and the destination node;

encrypting the transmission message data packet at the source node with the association key upon determining that the association key is the same for the source and destination nodes;

transmitting the encrypted transmission message data packet from the source node to the destination node;

storing the encrypted transmission message data packet at the destination node;

decrypting the stored transmission message data packet at the destination node with the association key upon determining that the key is the same as the association key at the source node; and

preparing and receiving a receive message at the destination node identical to the decrypted transmission message data packet.