Methods of detecting decryption errors

• US 5,841,873 A
• Filed: 08/14/1997
• Issued: 11/24/1998
• Est. Priority Date: 06/08/1995
• Status: Expired due to Term

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Mosher, Richard, Lockhart, Thomas W., Chatur, Nazira, Kilner, William H., Mamaghani, Farzan, Fraser, Bud, Reardon, Karl A.
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): Laufer, Pinchus M.
• Application Number:
  US08/911,405
• Time in Patent Office: 467 Days
• Field of Search: 380/44, 380/47, 380/49, 348/5.5
• US Class Current: 713/181
• CPC Class Codes: G06F 7/725 over elliptic curves
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic

Abstract

In a data communications system, including an infrastructure arranged to communicate over a data channel with a plurality of data terminals, a method of detecting data decryption errors in a data packet includes receiving an encrypted data packet (213); decrypting the encrypted data packet to provide a decrypted data packet; and comparing a reference value to a portion of the decrypted data packet to determine when a predetermined relationship is satisfied (221).

Claims

1. In a data communications system, including an infrastructure arranged to communicate messages comprising user information data over a data channel with a plurality of data terminals, a method of operation of one of said plurality of data terminals, the method comprising the steps of:

receiving an encrypted data packet;

decrypting said encrypted data packet using a decryption key to provide a decrypted data packet;

comparing a reference value to a portion of said decrypted data packet to determine when a predetermined relationship is satisfied thereby detecting a decryption error in said user information data;

generating a decryption error report message when said predetermined relationship is not satisfied such that said decryption error is detected in said user information data;

sending the decryption error report message corresponding to said decryption error to the infrastructure;

receiving a service authorization denial message responsive to said step of sending; and

disconnecting from the infrastructure, responsive to said step of receiving said service authorization denial message.

2. In a data communications system, including an infrastructure arranged to communicate messages comprising user information data over a data channel with a plurality of data terminals, a method of detecting data decryption errors in a data packet, the method including the steps of:

at the infrastructure;

providing a data packet for transmission, which includes a reference value at a predetermined location in the data packet;

encrypting the data packet using a data decryption algorithm and a data decryption key to provide an encrypted data packet;

adding a check sum to the encrypted data packet; and

transmitting the encrypted data packet;

at a data terminal;

receiving the encrypted data packet;

checking said encrypted data packet for transmission errors using said check sum;

when no transmission errors are present, decrypting said encrypted data packet using a data decryption algorithm and a data decryption key to provide a decrypted data packet;

comparing data received in said predetermined location of said decrypted data packet to determine when a predetermined relationship is satisfied thereby detecting a decryption error in said user information data;

concluding that a data decryption error has occurred within one of the data decryption key and the data decryption algorithm if the predetermined relationship is not satisfied such that said decryption error is detected in said user information data;

sending a decryption error report message to the infrastructure when a data encryption error has occurred; and

at the infrastructure;

receiving the decryption error report message; and

sending a service authorization denial message to the data terminal in response to the decryption error report message.