Secure data packet transmission system and method

• US 4,944,006 A
• Filed: 04/25/1989
• Issued: 07/24/1990
• Est. Priority Date: 03/12/1987
• Status: Expired due to Fees

• Current Assignee: Zenith Electronics Corporation (LG Corporation)
• Original Assignee: Zenith Electronics Corporation (LG Corporation)
• Inventors: Sgrigonoli, Gary J., Citta, Richard W., Mutzabaugh, Dennis M., Gosc, Paul M.
• Primary Examiner(s): Buczinski, Stephen C.
• Application Number:
  US07/343,103
• Time in Patent Office: 455 Days
• Field of Search: 380/20, 380/21, 380/42, 380/43, 380/44, 380/45, 380/50
• US Class Current: 380/239
• CPC Class Codes: H04L 2209/34 Encoding or coding, e.g. Huffman coding or error correction
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A bit packet communication system includes a head-end having a software implemented 16 bit shift register with a plurality of feed-forward taps and a different plurality of feedback taps for simultaneously dividing and multiplying the input data bit packet to provide an output bit packet that is both encrypted and error protected. Dynamic encryption is provided by utilizing an initial preset for the software corresponding to a preset encryption key for the shift register. Authorized subscriber terminals are provided with memories and decryption keys are downloaded. The bit packets are assembled with a global bit packet encrypted with a global encryption key and subsequent individually addressed bit packets encrypted with address keys. The address keys and terminal addresses are permanently stored in the subscriber terminal memories. The global encryption keys are changed periodically. Means are provided in each subscriber terminal for storing a number of global decryption keys which are cycled through in attempts to decrypt the global packets. One of the global decryption keys is a permanent default key associated with the subscriber terminal to assure that communication with that terminal is possible despite a lack of knowledge of the terminal address or the other global decryption keys in its memory.

Claims

1. In a data packet communication system having messages comprising a first data packet encrypted with a global encryption key and a second addressed data packet containing the binary address of a subscriber terminal and encrypted with an address encryption key;

a plurality of subscriber terminals each including memory means for storing a plurality of global decryption keys, an address decryption key and a binary address, the address decryption key and binary address uniquely identifying the individual subscriber terminal;

means at each subscriber terminal for attempting to decrypt said second addressed data packet with said stored address decryption key; and

means responsive to decryption of said second addressed data packet for comparing the binary address in said second addressed data packet with said binary address stored at said subscriber terminal.

2. The system of claim 1 wherein a permanent default global decryption key is stored in the memory means of each subscriber terminal to enable communication with a subscriber terminal without knowledge of its address or of its other stored global decryption keys.

3. The system of claim 1 wherein said plurality of global decryption keys, other than said default key, are changeable by data included in said second addressed encrypted packet.

4. The system of claim 1 further including a plurality of address encryption keys whereby more than one subscriber terminal may have the same binary address.

5. A data pocket communication system comprising:

formatting means for formatting binary data into data packets including a subscriber terminal address;

encryption means for simultaneously encrypting and error protecting said binary data packets with an address key;

means transmitting said encrypted and error protected data packets to subscriber terminals, each having a stored address decryption key and a stored address;

receiving means at each subscriber terminal for testing received data packets with said stored address decryption key to determine whether said received data packets have a matching address key;

means for checking the address of received data packets having a matching address key with the stored address of the particular subscriber terminal; and

means for processing a received binary data packet only when the address thereof corresponds to the stored address of the subscriber terminal.

6. The system of claim 5, further including a plurality of address encryption keys whereby more than one subscriber terminal may have the same stored address.

7. The system of claim 6 wherein said binary data packets are encrypted with a CRC code and wherein the number of bits in the CRC code is equal to or greater than the number of bits in the address encryption key.

8. In a data packet communication system having messages comprising a data packet containing the binary address of a subscriber terminal and encrypted with an address encryption key;

a plurality of subscriber terminals each including memory means for storing an address decryption key and a binary address, the address decryption key and binary address uniquely identifying the individual subscriber terminal;

means at each subscriber terminal for attempting to decrypt said data packet with said stored address decryption key; and

means responsive to decryption of said data packet for comparing the binary address in said data packet with said binary address stored at said subscriber terminal.

9. The system of claim 8 wherein said means for comparing comprises a microprocessor.