Device and method for dynamic encryption

• US 5,742,686 A
• Filed: 06/14/1996
• Issued: 04/21/1998
• Est. Priority Date: 06/14/1996
• Status: Expired due to Term

• Current Assignee: Phillip Scott Finley
• Original Assignee: Phillip Scott Finley
• Inventors: Finley, Phillip Scott
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): White, Carmen D.
• Application Number:
  US08/662,241
• Time in Patent Office: 676 Days
• Field of Search: 380/49, 380/28
• US Class Current: 380/28
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/06 the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds

Abstract

An apparatus and method for dynamic encryption of information including data, voice, and graphics, consisting of a random access memory containing encryption and decryption programs and the information to be encrypted and decrypted, an encryption processor executing the encryption and decryption programs, the encryption and decryption programs being a code set whose members are distinct encryption/decryption codes executed serially by the encryption processor to encrypt and decrypt the information, and also being optionally repetitively executed, and a data set in the random access memory specifying the order and execution and number of repetitions of each member of the code set.

Claims

1. An apparatus for dynamic encryption of information including data, voice, and graphics, comprising:

a random-access memory containing more than one distinct encryption and decryption programs and the information to be encrypted and decrypted,

a first encryption processor executing said encryption and decryption programs,

wherein said encryption and decryption programs further comprise a code set, the members of said code set being executed serially by said first encryption processor, each member partially encrypting the information, each member of said code set being optionally repetitively executed, and

a data set in said random access memory specifying the order of execution of said members of said code set and the number of times each such member is executed, the contents of said data set changing automatically on a periodic basis.

2. The apparatus of claim 1, wherein said data set is randomly generated based on a seed.

3. The apparatus of claim 2, wherein said seed is an identification signature unique to each medium containing said encryption and decryption programs.

4. The apparatus of claim 3, wherein said seed further comprises the date and time of day at which encryption begins.

5. The apparatus of claim 3, wherein said apparatus further comprises a counter which counts the number of complete encryptions and said seed further comprises said count of complete encryptions.

6. The apparatus of claim 3, wherein said seed further comprises the length of the last portion of information encrypted.

7. The apparatus of claim 2, wherein said data set is created by the user.

8. The apparatus of claim 7, further comprising user software executing on a host computer connected to said apparatus by a host computer interface and said user software creating said data set.

9. The apparatus of claim 8, further comprising user interface software adapted to allow the user to specify the contents of said data set to said user software.

10. The apparatus of claim 9, wherein said user interface software allows the user to test the statistical probability of an unauthorized user deciphering said data set.

11. The apparatus of claim 1, further comprising a second encryption processor executing in parallel to said first encryption processor and controlling said first encryption processor.

12. The apparatus of claim 11, wherein said first encryption processor performs batch encryption/decryption and said second encryption processor performs real-time encryption/decryption.

13. The apparatus of claim 1, further comprising a communications port for voice and data.

14. The apparatus of claim 13, wherein said communications port further comprises a telephone line interface and a handset interface.

15. The apparatus of claim 14, further comprising an analog/digital converter connected to said communications port.

16. The apparatus of claim 13, further comprising a host computer interface for connecting said apparatus to a host computer containing the information to be encrypted and decrypted.

17. The apparatus of claim 1, wherein the contents of said data set changes periodically.

18. The apparatus of claim 17, wherein two of said apparatus are connected in a network and cooperate to periodically, automatically change the contents of said data set.

19. The apparatus of claim 18, further comprising a network interface to a local area network.

20. The apparatus of claim 19, wherein the network addresses of each of said apparatus are encrypted by one of said two apparatuses.

21. The apparatus of claim 1, further comprising an interface to a cellular telephone.

22. The apparatus of claim 1, further comprising an interface to a car alarm system and a remote car alarm transmitter.

23. The apparatus of claim 16, further comprising a relay switch for enabling and disabling the flow of information between said communications port and said host computer interface, said first encryption processor controlling said relay switch.

24. The apparatus of claim 1, further comprising a mass storage device interface for transferring information between said apparatus and a mass storage device.

25. The apparatus of claim 1, wherein said apparatus resides on a standard expansion card for a personal computer.

26. The apparatus of claim 1, wherein said apparatus resides on the motherboard of a personal computer.

27. The apparatus of claim 1, further comprising a non-volatile memory containing start-up programs.

41. The apparatus of claim 6, wherein the contents of said data set changes with every transmission between the two apparatuses.

28. A method for performing dynamic encryption and decryption of information including data, voice, and graphics, comprising the steps of:

in a first host computer, generating a data set whose contents specify the order of execution and number of repetitions of each member of a code set having multiple members whose members are distinct encryption/decryption codes stored in said host computer,

loading said data set from said first host computer into an encryption apparatus,

parsing said data set in said encryption apparatus,

loading each member of said code set into said encryption apparatus,

loading the information to be encrypted into said encryption apparatus,

executing each member of said code set in said encryption apparatus in the order of execution and number of repetitions indicated by said data set each member partially encrypting the information,

notifying the first host computer at the completion of encryption of the information,

moving the encrypted information from said encryption apparatus to the first host computer,

transmitting the contents of said data set and the members of said code set to a second host computer,

transmitting the encrypted information to a second encryption apparatus connected to said first encryption apparatus over a network, and said second encryption apparatus parsing said data set, loading the members of said code set from said second host computer, executing the members of said code set to decrypt the information, notifying said second host computer at the completion of decryption of the information, and transferring the decrypted information to said second host computer,

changing the contents of said data set automatically and periodically at said first encryption apparatus and communicating the changed contents of said data set to said second encryption apparatus.

29. The method of claim 28, wherein said data set generation step is performed without user intervention.

30. The method of claim 28, wherein said data set generation step is controlled by the user.

31. The method of claim 28, comprising the further step of encrypting the network address of said second encryption apparatus at said first encryption apparatus, and decrypting the network address of said second encryption apparatus at said second encryption apparatus.

43. The method of claim 30, wherein said data set is initially randomly generated.

44. The method of claim 30, wherein said data set is initially generated by the user.

32. A method for performing dynamic encryption of information including data, voice, and graphics at a first location and dynamic decryption of the information at a second location, comprising the steps of:

at the first location;

generating a data set whose contents specify the order of execution and number of repetitions of each member of a code set having multiple members, said members being distinct encryption/decryption codes,

transmitting said data set and said code set to the second location,

parsing said data set,

executing each member of said code set in the order of execution and number of repetitions indicated by said data set, each member encrypting the information,

transmitting the encrypted information to the second location, and

at the second location;

receiving said data set and said code set from the first location,

parsing said data set, and

executing each member of said code set in the order of execution and number of repetitions indicated by said data set to decrypt the information,

wherein the contents of said data set is automatically and periodically changed and the changed contents are transmitted from the first location to the second location.

33. The method of claim 32, wherein said data set is randomly generated.

34. The method of claim 32, wherein said data set is generated by a user.

35. An apparatus for dynamic encryption of information including data, voice, and graphics, by automatic, periodic changes to a set of encryption programs and to the repetition count for each program, comprising:

a memory containing more than one distinct encryption/decryption program and the information to be encrypted and decrypted,

a first encryption processor serially executing certain of said encryption/decryption programs, each encryption/decryption program partially encrypting the information,

a code set specifying the identities of the encryption/decryption programs, and

a data set specifying which of said encryption/decryption programs identified by said code set are to be executed by said first encryption processor, the order of execution of said encryption/decryption programs, and the number of times each encryption/decryption program is executed, the contents of said data set changing automatically and periodically.

36. The apparatus of claim 35, wherein each of said encryption/decryption programs itself remains unmodified by the first encryption processor.

37. The apparatus of claim 35, wherein said data set is initially randomly generated.

38. The apparatus of claim 35, wherein said data set is initially created by the user.

39. The apparatus of claim 35, wherein two of said apparatus are connected in a network and cooperate to automatically and periodically change the contents of said data set.

40. The apparatus of claim 39, wherein the contents of said data set changes at least once per minute.

42. A method for performing dynamic encryption of information including data, voice, and graphics at a first location and dynamic decryption of the information at a second location, by automatic, periodic changes to a set of encryption programs and to the repetition count for each program, comprising the steps of:

at the first location;

generating, in a first memory, a data set whose contents specify the identity, order of execution, and repetition count of members of a group of more than one distinct encryption/decryption programs, each encryption/decryption program residing in a second memory,

transmitting said data set to the second location, parsing said data set,

executing each specified encryption/decryption program in the order of execution and number of repetitions indicated by said data set, each encryption/decryption program partially encrypting the information,

transmitting the encrypted information to the second location,

automatically and periodically changing the contents of said data set at the first location and transmitting the changed contents of said data set to the second location,

at the second location;

receiving said data set from the first location,

parsing said data set, and

executing each specified encryption/decryption program in the order of execution and number of repetitions indicated by said data set to decrypt the information, and

automatically and periodically receiving a said data set whose contents have been changed at the first location.