Encryption system for time division multiplexed networks

• US 5,161,191 A
• Filed: 11/27/1990
• Issued: 11/03/1992
• Est. Priority Date: 11/27/1990
• Status: Expired due to Fees

• Current Assignee: Darryl C. Morris, Shanti S. Gupta
• Original Assignee: Darryl C. Morris, Shanti S. Gupta
• Inventors: Morris, Darryl C., Gupta, Shanti S.
• Primary Examiner(s): Swann, Tod R.
• Application Number:
  US07/618,617
• Time in Patent Office: 707 Days
• Field of Search: 380/42, 380/48, 380/49, 380/50, 380/36, 380/37, 370/58.2, 370/60, 370/60.1, 370/68, 370/68.1, 370/99, 370/102
• US Class Current: 380/37
• CPC Class Codes: H04J 3/0602 Systems characterised by the synchronising information used
• CPC Class Codes: H04J 3/1623 Plesiochronous digital hierarchy [PDH]
• CPC Class Codes: H04L 9/065 Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3

Abstract

An encryption system is provided for interfacing a time division multiplexing (TDM) telecommunications arrangement with an encryption device for the scrambling of data received by the telecommunications arrangement. The telecommunications arrangement produces a TDM data stream formatted into TDM frames including a predetermined number of TDM framing bits and corresponding framing bit locations. At a local side of the system, a first TDM data stream is received and sampled, and the TDM framing bit information is detected and stored therefrom. The data stream is then sent to an encryptor for encryption, and thereafter the TDM framing bit information is reinserted into the corresponding bit locations of the encrypted data stream. As a result, the TDM framing bit information is passed around the encryptor. This encrypted data stream and framing bit information is transmitted to a remote station across a TDM (e.g., T1) communications network. At the remote station, the TDM framing bit information is again detected and stored, the encrypted data stream is decrypted, and the TDM framing bit information is reinserted to the corresponding locations.

Claims

1. An encryption system for interfacing with a time division multiplexing (TDM) telecommunications arrangement, said encryption system providing encryption of data received by said telecommunications arrangement and the telecommunications arrangement producing an in-band TDM data stream formatted into TEM frames including a predetermined number of individual in-band TDM framing bits located at corresponding individual original in-band framing bit locations, said encryption system including a local side comprising:

means for receiving from said telecommunications arrangement a first in-band TDM data stream to be encrypted;

means for removing each of said individual in-band TDM framing bits from the received in-band TDM data stream;

means for encrypting said received in-band TDM data stream after said framing bits are removed to produce an encrypted data stream; and

means for reinserting each of said individual in-band TDM framing bits into a said corresponding individual original framing bit location in said encrypted TDM data stream to produce an encrypted data stream with reinserted in-band TDM framing bits; and

said system further including a remote side comprising;

means for receiving said encrypted data stream with inserted in-band TDM framing bits, for removing said in-band TDM framing bits therefrom, and for decrypting the received encrypted data stream to produce a second TDM data stream; and

means for reinserting said in-band TDM framing bits into said second TDM data stream at said corresponding original framing bit locations so as to produce a third in-band TDM data stream that corresponds to said first in-band TDM data stream.

2. The system recited in claim 1 further comprising means for detecting a predetermined number of consecutive zeros in said encrypted data stream with inserted TDM framing bits and means for inserting a predetermined pattern of bits into bit locations of said predetermined number of zeros.

3. The system recited in claim 2 further comprising means for detecting said predetermined pattern in said encrypted data stream with inserted TDM framing bits and means for inserting a predetermined number of consecutive zeros into bit locations of said predetermined pattern.

4. The system recited in claim 1 wherein said encrypting means further comprises a means for selecting a clocking signal.

5. The system recited in claim 4 wherein said clocking signal comprises an internal clock.

6. The system recited in claim 4 wherein said clocking signal comprises an external clock.

7. The system recited in claim 4 wherein said clocking signal comprises a loop timing clock.

8. In a time division multiplexing (TDM) telecommunications system which produces an in-band TDM data stream formatted into TDM frames including a predetermined number of individual in-band TDM framing bits located at corresponding individual original framing bit locations, an encryption system comprising first and second encryption units interconnected by a telecommunications network of said telecommunications system, said encryption units comprising:

means for receiving a first in-band TDM data stream to be encrypted;

means for removing each of said individual in-band TDM framing bits from the received in-band TDM data stream;

means for encrypting said received in-band TDM data stream after said framing bits have been detected and stored to produce an encrypted data stream; and

means for inserting each of said individual in-band TDm framing bits into a said individual corresponding original framing bit location in said encrypted TDM data stream to produce an encrypted data stream with inserted in-band TDM framing bits for transmission to said second unit; and

means for receiving an encrypted data stream with inserted in-band TDM framing bits from said second unit, for detecting and storing each of said individual in-band TDM framing bits therefrom, and for decrypting said encrypted data stream to produce a second TDM data stream; and

means for reinserting each of said individual in-band TDM framing bits into said second TDM data stream at said corresponding original framing bit locations so as to produce a third in-band TDM data stream that corresponds to said first in-band TDM data stream encrypted by said second unit.

9. The system recited in claim 8 wherein said means for receiving a first TDM data stream comprises a multiplexer and a line interface connected to the output of said multiplexer.

10. The system recited in claim 8 wherein said means for detecting and storing said TDM framing bits comprises a clock and frame detection circuit connected to said means for receiving a first TDM data stream.

11. The system recited in claim 8 wherein said means for encrypting said received TDM data stream after said framing bits are detected and stored to produce an encrypted data stream comprises a buffer connected to said means for receiving a first TDM data stream and an encryptor connected to said buffer.

12. The system recited in claim 8 wherein said means for reinserting said TDM framing bits into said corresponding framing bit locations in said encrypted TDM data stream to produce an encrypted data stream with inserted TDM framing bits comprises a buffer means connected to the encrypting means for storing said encrypted TDM data stream, and a frame generator connected to said means for removing said TDM framing bits for generating frame bits, a frame assembler connected to said buffer means and to said frame generator for inserting said frame bits in said encrypted TDM data stream stored in said buffer means.

13. The system recited in claim 8 wherein said means for receiving said encrypted data stream with inserted TDM framing bits comprises a transmission network interface and a line interface connected to said multiplexer.

14. The system recited in claim 8 wherein said means for removing said TDM framing bits comprises a clock and frame detector connected to said means for receiving said encrypted data stream.

15. The system recited in claim 8 wherein said means for decrypting said encrypted data stream comprises a buffer connected to said means for receiving said encrypted data stream and an encryptor connected to said buffer.

16. The system recited in claim 8 wherein said means for inserting said TDM framing bits into said second TDM data stream at said corresponding framing bit locations comprises a buffer means connected to said decrypting means for storing said encrypted TDM data stream, a frame generator attached to said means for detecting and storing said TDM framing bits for generating frame bits, a frame assembler connected to said buffer means and to said frame generator for inserting said frame bits in said encrypted TDM data stream stored in said buffer means.