Method for providing limited secure services in secure trunking communication systems

• US 5,402,491 A
• Filed: 08/20/1993
• Issued: 03/28/1995
• Est. Priority Date: 08/20/1993
• Status: Expired due to Fees

• Current Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Original Assignee: Donald B. Southard
• Inventors: Kim, Charles C., Locascio, Robert J.
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/109,563
• Time in Patent Office: 585 Days
• Field of Search: 380/21, 380/44, 380/47, 455/33.1, 455/8, 455/9, 455/133, 370/95, 370/2
• US Class Current: 380/273
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04W 84/08 Trunked mobile radio systems

Abstract

In a secure trunking communication system, limited secure service is provided during periods of limited service or failsoft operations using the following method. When the limited service or failsoft condition is detected, a limited secure service message or a failsoft service message, respectively, is transmitted to those system components utilizing encryption keys, including console interface units (CIU) (106-107) and communication units (111-113). Upon reception of the limited secure service message, the communication units load at least one limited service key. Simultaneously, the console interface units also load the at least one limited service key. Upon reception of the failsoft service message, the console interface units load at least one failsoft key. Simultaneously, the communication units also load the at least one failsoft key. The communication units and the CIUs use the limited service keys or the failsoft keys until normal operation is restored.

Claims

1. In a secure trunking communication system that includes a central controller, a plurality of communication units, a limited number of broadcast units that transceive a limited number of communication resources, at least one console, and a limited number of console interface units that are operably coupled to the limited number of broadcast units, the at least one console, and the central controller, a method for providing limited secure services when the central controller is not operably coupled to the limited number of console interface units, the method comprises the steps of:

a) determining, by the central controller and the limited number of console interface units, that the central controller is not operably coupled to the limited number of console interface units;

b) transmitting, by the central controller, a limited secure service message to the plurality of communication units;

c) upon receiving the limited secure service message, loading, by each of the plurality of communication units, at least one limited service key into a communication unit encryption/decryption device;

d) loading, within each of the limited number of console interface units, the at least one limited service key into a console interface unit encryption/decryption device;

e) utilizing the at least one limited service key by the plurality of communication units and the limited number of console interface units until the central controller is operably coupled to the limited number of console interface units.

2. In the method of claim 1, step (b) further comprises periodically transmitting, by the central controller, the limited secure service message to the plurality of communication units.

3. In the method of claim 2, step (e) comprises:

1) determining, by the central controller and the limited number of console interface units, that the central controller is operably coupled to the limited number of console interface units; and

2) transmitting, by the central controller, a full secure service message to the plurality of communication units.

4. The method of claim 3 further comprises the step of:

f) upon power up of a communication unit of the plurality of communication units, inhibiting, by the communication unit, transmission of a secure communication until the limited secure service message or the full secure service message is received.

5. In a secure trunking communication system that includes a central controller, a plurality of communication units, a limited number of broadcast units that transceive a limited number of communication resources, at least one console, and a limited number of console interface units that are operably coupled to the limited number of broadcast units, the at least one console, and the central controller, a method for the central controller to provide limited secure services when the central controller is not operably coupled to the limited number of console interface units, the method comprises the steps of:

a) determining, by the central controller, that the central controller is not operably coupled to the limited number of console interface units;

b) transmitting, by the central controller, a limited secure service message to the plurality of communication units;

c) determining, by the central controller, that the central controller is once again operably coupled to the limited number of console interface units; and

d) when the central controller is once again operably coupled to the limited number of console interface units, transmitting, by the central controller, a full secure service message to the plurality of communication units.

6. In a secure trunking communication system that includes a central controller, a plurality of communication units, a limited number of broadcast units that transceive a limited number of communication resources, at least one console, and a limited number of console interface units that are operably coupled to the limited number of broadcast units, the at least one console, and the central controller, a method for the limited number of console interface units to provide limited secure services when the central controller is not operably coupled to the limited number of console interface units, the method comprises the steps of:

a) determining, by the limited number of console interface units, that the central controller is not operably coupled to the limited number of console interface units;

b) loading, within each of the limited number of console interface units, at least one limited service key into a console interface unit encryption/decryption device; and

c) utilizing the at least one limited service key by the limited number of console interface units until the central controller is operably coupled to the limited number of console interface units.

7. In a secure trunking communication system that includes a central controller, a plurality of communication units, a limited number of broadcast units that transceive a limited number of communication resources, at least one console, and a limited number of console interface units that are operably coupled to the limited number of broadcast units, the at least one console, and the central controller, a method for a communication unit of the plurality of communication units to provide limited secure services when the central controller is not operably coupled to the limited number of console interface units, the method comprises the steps of:

a) receiving, by the communication unit, a limited secure service message;

b) loading, by the communication unit, at least one limited service key into a communication unit encryption/decryption device; and

c) utilizing, by the communication unit, the at least one limited service key until a full secure service message is received.

8. The method of claim 7 further comprises the steps of:

d) upon power up of the communication unit, inhibiting, by the communication unit, transmission of a secure communication until the limited secure service message or the full secure service message is received.

9. In a secure trunking communication system that includes a central controller, a plurality of communication units, a limited number of broadcast units that transceive a limited number of communication resources, at least one console, and a limited number of console interface units that are operably coupled to the limited number of broadcast units, the central controller, and the at least one console, a method for providing failsoft services when the central controller is inoperable, the method comprises the steps of:

a) determining, by the limited number of broadcast units and the plurality of communication units, that the central controller is not operable;

b) transmitting, by each of the limited number of broadcast units to a respective console interface unit of the limited number of console interface units, a failsoft service message;

c) upon receiving the failsoft service message, loading, within each of the respective console interface units, at least one failsoft key into a console interface unit encryption/decryption device;

d) loading, by each of the plurality of communication units, the at least one failsoft key into a communication unit encryption/decryption device; and

e) utilizing the at least one failsoft key by the plurality of communication units and the limited number of console interface units until the central controller is operable.

10. The method of claim 9 further comprises the steps of:

f) when the central controller is once again operable, transmitting, by the central controller, a full secure service message to the plurality of communication units.

11. In the method of claim 9, step (c) further comprises loading a unique failsoft key of the at least one failsoft key into the console interface unit encryption/decryption device of the each of the respective console interface units.

12. The method of claim 11 further comprises the steps of:

f) determining, by each of the plurality of communication units, a default broadcast unit of the limited number of broadcast units, wherein the determination of the default broadcast unit for each of the plurality of communication units is based on predetermined information; and

g) loading, by each of the plurality of communication units, the unique failsoft key of the respective console interface units into the communication unit encryption/decryption device.

13. In a secure trunking communication system that includes a central controller, a plurality of communication units, a limited number of broadcast units that transceive a limited number of communication resources, at least one console, and a limited number of console interface units that are operably coupled to the limited number of broadcast units, the central controller, and the at least one console, a method for the limited number of console interface units to provide failsoft services when the central controller is inoperable, the method comprises the steps of:

a) receiving, by each of the limited number of console interface units, a failsoft service message;

b) loading, within each of the limited number of console interface units, at least one failsoft key into a console interface unit encryption/decryption device; and

c) utilizing the at least one failsoft key by the limited number of console interface units until the central controller is operable.

14. In the method of claim 13, step (b) further comprises loading a unique failsoft key of the at least one failsoft key into the console interface unit encryption/decryption device of the each of the respective console interface units.

15. In a secure trunking communication system that includes a central controller, a plurality of communication units, a limited number of broadcast units that transceive a limited number of communication resources, at least one console, and a limited number of console interface units that are operably coupled to the limited number of broadcast units, the central controller, and the at least one console, a method for a communication unit of the plurality of communication units to provide failsoft services when the central controller is inoperable, the method comprises the steps of:

a) determining, by the communication unit, that the central controller is not operable;

b) loading, by the communication unit, at least one failsoft key into a communication unit encryption/decryption device; and

c) utilizing the at least one failsoft key by the communication unit until the central controller is operable.

16. The method of claim 15 further comprises the steps of:

d) determining, by the communication unit, a default broadcast unit of the limited number of broadcast units, wherein the determination of the default broadcast unit for the communication unit is based on predetermined information; and

e) loading, by the communication unit, a unique failsoft key of the at least one failsoft key into the communication unit encryption/decryption device that corresponds to the default broadcast unit.