System and method for providing security in data communication systems

• US 5,872,846 A
• Filed: 11/07/1996
• Issued: 02/16/1999
• Est. Priority Date: 11/07/1996
• Status: Expired due to Term

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: MCI Communications Corporation (Verizon Communications Inc.)
• Inventors: Ichikawa, Bryan K.
• Primary Examiner(s): CAIN, DAVID C
• Application Number:
  US08/743,786
• Time in Patent Office: 831 Days
• Field of Search: 380/23, 380/25
• US Class Current: 380/282
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]

Abstract

A system and method for providing security in data communication systems where multiple users are coupled to a common receiving system. The data is encrypted or otherwise encoded by a sender using a key. The encrypted data is then scrambled or otherwise encoded, and transmitted by the sender. The transmitted data is received at a receiver where it is descrambled or otherwise decoded. An authorized user decrypts or otherwise decodes the descrambled data using a key to retrieve clear data. The key itself is encrypted by the sender using an asymmetric encryption algorithm, and is then transmitted by the sender. The authorized user decrypts the encrypted key using the asymmetric encryption algorithm, and uses the key to decrypt the encrypted data.

Claims

1. A method for providing security in a data transmission system where data is transmitted from a sender to an authorized user via a receiver, the authorized user being one of a plurality of users connected to the receiver, the method comprising the steps of:

encoding said data using a first-level encoding scheme;

encoding said first-level encoded data using a second-level encoding scheme; and

transmitting said second-level encoded data;

wherein, as a result of encoding data using said first and second-level encoding scheme, only a user capable of decoding said first-level encoded data and connected to a receiver capable of decoding said second-level encoded data can access said transmitted data.

2. The method according to claim 1 wherein said first-level encoding scheme is an encryption scheme using a first key.

3. The method according to claim 2 wherein said first-level encoding scheme further comprises:

encrypting said first key using the authorized user'"'"'s public key; and

transmitting said encrypted first key to said receiver.

4. The method according to claim 2 wherein said first-level encoding scheme further comprises:

encrypting said first key using the authorized user'"'"'s said public key and the sender'"'"'s private key; and

transmitting said first key to said receiver.

5. The method according to claim 1 wherein said second-level encoding scheme comprises scrambling said data using a signal scrambler.

6. The method according to claim 1 further comprising the steps of:

receiving said transmitted data at said receiver;

decoding said received data using a second-level decoding scheme; and

the authorized user decoding said second-level decoded data using a first-level decoding scheme.

7. A method for providing security in a data transmission system where data is transmitted from a sender to an authorized user via a receiver, the authorized user being one of a plurality of users connected to said receiver, the method comprising the steps of:

receiving said data at said receiver;

decoding said data using a second-level decoding scheme wherein said data has been encoded using a second-level encoding scheme by the sender; and

the authorized user decoding said data using a first-level decoding scheme wherein the data has been encoded using a first-level encoding scheme by the sender.

8. The method according to claim 7 wherein said first-level decoding scheme further includes:

receiving an encrypted first key that has been encrypted and transmitted by the sender;

decrypting said first key; and

decrypting said data using said decrypted first key.

9. The method according to claim 8 wherein said encrypted first key is decrypted by the authorized user using the authorized user'"'"'s private key.

10. The method according to claim 8 wherein said encrypted first key is decrypted by the authorized user using the authorized user'"'"'s said private key and the sender'"'"'s public key.

11. The method according to claim 7 wherein said second level decoding scheme at the receiver comprises scrambling the data using a signal scrambler.

12. A system for providing security in a data transmission system where data is transmitted from a sender to an authorized user via a receiver, the authorized user being one of a plurality of users connected to the receiver, comprising:

first-level encoder means for encoding said data using a first-level encoding scheme;

second-level encoder means, connected to said first-level encoder means, for encoding said first-level encoded data using a second-level encoding scheme; and

transmitter means, connected to said second-level encoder means, for transmitting said second-level encoded data;

wherein, as a result of encoding data using said first and second-level encoding scheme, only a user capable of decoding said first-level encoded data and connected to a receiver capable of decoding said second-level encoded data can access said transmitted data.

13. The system according to claim 12 wherein said first-level encoder means is a means for encrypting data using a first key.

14. The system according to claim 13, wherein said first-level encoder means further comprises means for encrypting said first key using the authorized user'"'"'s public key.

15. The system according to claim 13, wherein said first-level encoder means further comprises means for encrypting said first key using the authorized user'"'"'s said public key and the sender'"'"'s private key.

16. The system according to claim 12 wherein said second-level encoder means comprises a signal scrambler.

17. The system according to claim 12 further comprising:

receiver means for receiving said transmitted data;

second-level decoder means, connected to said receiver means, for decoding said received data; and

first-level decoder means, connected to said second-level decoder means, for decoding said second-level decoded data.

18. An system for providing security in a data transmission system where data is transmitted from a sender to an authorized user via a receiver, the authorized user being one of a plurality of users connected to said receiver, comprising:

receiver means for receiving said data;

a second-level decoder means, connected to said receiver means, for decoding said data that has been encoded by the sender using a second-level encoder means; and

first-level decoder means, connected to said second-level decoder means, for decoding said second-level decoded data that has been encoded by the sender using a first-level encoder means.

19. The system according to claim 18, wherein said first-level decoder means further includes:

means for decrypting a first-key that has been encrypted by the sender; and

means for decrypting said data using said decrypted first key.

20. The system according to claim 19 wherein said means for decrypting said first key includes the authorized user'"'"'s private key.

21. The system according to claim 19 wherein said means for decrypting said first key includes the authorized user'"'"'s said private key and the sender'"'"'s public key.

22. The system according to claim 18 wherein said second-level decoder means is a signal scrambler.