Formation of rekey messages in a communication system

• US 5,164,986 A
• Filed: 02/27/1991
• Issued: 11/17/1992
• Est. Priority Date: 02/27/1991
• Status: Expired due to Term

• Current Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Bright, Michael W.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US07/662,582
• Time in Patent Office: 629 Days
• Field of Search: 380/21, 380/43, 380/49, 380/50
• US Class Current: 380/273
• CPC Class Codes: H04L 2209/34 Encoding or coding, e.g. Huffman coding or error correction
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/12 Transmitting and receiving encryption devices synchronised or initially set up in a particular manner
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

Formation and sending of rekeying messages (305, 415, 515, and 605) in an encrypted communication system with over-the-channel rekeying of communication units is performed by a KMC, key management controller (101). The KMC (101) forms messages to provide new keys (1541), zeroization information (1549), and key indexing information (1543) to communication units (107), and to provide keyloader upload data (1563). Acknowledgments and rekey requests are also handled between the KMC (101) and communication units (107).

Claims

1. A method of rekeying at least one communication unit in a communication system, comprising the steps of:

generating an acknowledgment field;

loading a message number field;

setting a destination/source field;

setting an operation-code field;

determining an address field;

forming a rekeying message comprising said acknowledgment field, said message number field, said destination/source field, said operation-code field, and said address field; and

transmitting said rekeying message to the at least one communication unit.

2. The method of rekeying of claim 1, further comprising the step of encrypting any of said acknowledgment field, said message number field, said destination/source field, said operation-code field, and said address field.

3. The method of rekeying of claim 1 further comprising the steps of;

generating a synchronization field; and

incorporating said synchronization field into said rekeying message.

4. The method of rekeying of claim 1 further comprising the steps of;

setting a key identification field; and

incorporating said key identification field into said rekeying message.

5. The method of rekeying of claim 1, further comprising the steps of:

forming a key identification block;

generating a key field; and

incorporating said key identification block and said key field into said rekeying message.

6. The method of rekeying of claim 1, further comprising the steps of;

forming an index identification block; and

incorporating said index identification block into said rekeying message.

7. The method of rekeying of claim 6, further comprising the steps of:

generating an index name field; and

incorporating said index name field into said rekeying message.

8. The method of rekeying of claim 1, further comprising the steps of:

forming a zeroization identification block; and

incorporating said zeroization identification block into said rekeying message.

9. The method of rekeying of claim 1, further comprising the steps of:

generating a data packet; and

incorporating said data packet into said rekeying message.

10. The method of rekeying of claim 1, further comprising the steps of:

generating an initialization vector field; and

incorporating said initialization vector field into said rekeying message.

11. The method of rekeying of claim 1, further comprising the steps of:

generating a security test data field; and

incorporating said security test data field into said rekeying message.

12. The method of rekeying of claim 1, further comprising the steps of:

forming a map identification block; and

incorporating said map identification block into said rekeying message.

13. The method of rekeying of claim 1, wherein said rekey packet further comprising the steps of:

determining a previous message number field; and

incorporating said previous message number field into said rekeying message.

14. The method of rekeying of claim 1, wherein said rekey packet further comprising the steps of:

generating keyloader upload data; and

incorporating said keyloader upload data into said rekeying message.

15. A key management controller for use in a communication system with rekeying at least one communication unit, comprising:

means for generating an acknowledgment field;

means for loading a message number field;

means for setting a destination/source field;

means for setting an operation-code field;

means for determining an address field;

means for forming a rekeying message comprised of said acknowledgment field, said message number field, said destination/source field, said operation-code field, and said address field; and

means, coupled to said means for forming, for sending said rekeying message to the at least one communication unit.

16. The key management controller of claim 15, further comprising means for encrypting any of said acknowledgment field, said message number field, said destination/source field, said operation-code field, and said address field.

17. The key management controller of claim 15, further comprising:

means for generating a synchronization field; and

means, coupled to said means for forming, for incorporating said synchronization field into said rekeying message.

18. The key management controller of claim 15, further comprising:

means for setting a key identification field; and

means, coupled to said means for forming, for incorporating said key identification field into said rekeying message.

19. The key management controller of claim 15, further comprising:

means for forming a key identification block;

means for generating a key field; and

means, coupled to said means for forming a rekeying message, for incorporating said key identification block and said key field into said rekeying message.

20. The key management controller of claim 15, further comprising:

means for forming an index identification block; and

means, coupled to said means for forming a rekeying message, for incorporating said index identification block into said rekeying message.

21. The key management controller of claim 20, further comprising:

means for generating an index name field; and

means, coupled to said means for forming, for incorporating said index name field into said rekeying message.

22. The key management controller of claim 15, further comprising:

means for forming a zeroization identification block; and

means, coupled to said means for forming a rekeying message, for incorporating said zeroization identification block into said rekeying message.

23. The key management controller of claim 15, further comprising:

means for generating a data packet; and

means, coupled to said means for forming, for incorporating said data packet into said rekeying message.

24. The key management controller of claim 15, further comprising:

means for generating an initialization vector field; and

means, coupled to said means for forming, for incorporating said initialization vector field into said rekeying message.

25. The key management controller of claim 15, further comprising:

means for generating a security test data field; and

means, coupled to said means for forming, for incorporating said security test data field into said rekeying message.

26. The key management controller of claim 15, further comprising:

means for forming a map identification block; and

means, coupled to said means for forming a rekeying message, for incorporating said map identification block into said rekeying message.

27. The key management controller of claim 15, further comprising:

means for determining a previous message number field; and

means, coupled to said means for forming, for incorporating said previous message number field into said rekeying message.

28. The key management controller of claim 15, further comprising:

means for generating keyloader upload data; and

means, coupled to said means for forming, for incorporating said keyloader upload data into said rekeying message.

29. A communication unit for use in a communication system with rekeying of at least one communication unit by a key management controller, comprising:

means for generating an acknowledgment field;

means for loading a message number field;

means for setting a destination/source field;

means for setting an operation-code field;

means for determining an address field;

means for generating a rekey request packet;

means for forming a rekey request message comprised of said acknowledgment field, said message number field, said destination/source field, said operation-code field, said address field, and said rekey request packet; and

means, coupled to said means for forming, for sending said rekey request message to the key management controller.

30. A communication unit for use in a communication system with rekeying of at least one communication unit by a key management controller, comprising:

means for generating an acknowledgment field;

means for loading a message number field;

means for setting a destination/source field;

means for setting an operation-code field;

means for determining an address field;

means for generating an acknowledgment packet;

means for forming an acknowledgment message comprised of said acknowledgment field, said message number field, said destination/source field, said operation-code field, said address field, and said acknowledgment packet; and

means, coupled to said means for forming, for sending said acknowledgment message to the key management controller.