Method of processing messages in a secure communications system having a plurality of encryption procedures, and such a secure communication system

• US 6,005,874 A
• Filed: 08/18/1997
• Issued: 12/21/1999
• Est. Priority Date: 09/29/1994
• Status: Expired due to Term

• Current Assignee: RPX Clearinghouse LLC (RPX Corporation)
• Original Assignee: Northern Telecom Limited (Nortel Networks Corporation)
• Inventors: Sharpe, Martin
• Primary Examiner(s): NGUYEN, CHAU T
• Application Number:
  US08/809,350
• Time in Patent Office: 855 Days
• Field of Search: 370/535, 370/536, 370/542, 370/537, 370/543, 370/544, 370/522, 370/524, 380/48, 380/49, 380/42, 380/43, 380/44, 380/45, 380/9
• US Class Current: 370/524
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04M 2203/609 Secret communication
• CPC Class Codes: H04M 3/42 Systems providing special services or facilities to subscribers specially adapted for wireless communication networks H04W4/00
• CPC Class Codes: H04Q 2213/13196 Connection circuit/link/trunk/junction, bridge, router, gateway
• CPC Class Codes: H04Q 2213/13339 Ciphering, encryption, security
• CPC Class Codes: H04Q 3/0029 Provisions for intelligent networking
• CPC Class Codes: H04Q 3/625 Arrangements in the private branch exchange

Abstract

In a secure communications system where messages between subscribers are encrypted according to a selection of encryption procedures, a gateway trunk is provided. The gateway trunk comprises a telecommunications trunk (35) with one or more cryptographic devices (A,B,C) inserted in each traffic channel and a separate signaling channel (37), and a traffic channel is selected according to a code dialed by a subscriber. The gateway trunk may be associated with a PABX (31) such that messages are routed through a channel of the trunk corresponding to the cryptographic device required. Pairs of different cryptographic devices may be inserted in each channel of the trunk to effect conversion from one encryption procedure to another.

Claims

1. A secure communications system in which messages between subscribers are encrypted, there being a plurality of encryption procedures, the system including a gateway trunk comprising a telecommunications trunk having:

a demultiplexer, to demultiplex the trunk into a plurality of constituent traffic channels and a signalling channel;

at least one cryptographic device inserted in each of the demultiplexed traffic channels, there being a plurality of different types of cryptographic devices;

a multiplexer to multiplex the traffic channels and signalling channel, and;

a bypass to couple the signalling channel directly between the multiplexer and demultiplexer without subjecting it to the effects of the cryptographic devices,

wherein the gateway trunk provides an interface between subscribers and wherein the system is such that messages are routed through a traffic channel of the gateway trunk according to a code dialled by a subscriber, said code identifying a required at least one cryptographic device.

2. A secure communications system as claimed in claim 1 wherein the gateway trunk is associated with a switching centre.

3. A secure communications system as claimed in claim 2 wherein the switching centre is a PABX.

4. A secure communications system as claimed in claim 1 wherein a pair of different cryptographic devices connected back-to-back are inserted in each traffic channel of the gateway trunk to convert messages from one encryption procedure to another.

5. A secure communications system as claimed in claim 1 wherein the channels of the trunk are demultiplexed by the demultiplexer and interfaces to match the cryptographic devices are provided as part of the demultiplexer.

6. A secure communications system as claimed in claim 1 wherein a signalling converter is inserted in the signalling channel of the gateway trunk to allow analogue and digital calls to be interconnected.

7. A method of processing messages in a secure communications system in which messages between subscribers are encrypted, there being a plurality of encryption procedures, the system including a gateway trunk which provides an interface between subscribers, the method comprising:

demultiplexing the trunk into a plurality of constituent traffic channels and a signalling channel;

providing at least one cryptographic device in each of the demultiplexed traffic channels, there being a plurality of different types of cryptographic devices;

multiplexing the constituent traffic channels and the signalling channel;

wherein the signalling channel is coupled directly between the a multiplexer and a demultiplexer without being subjected to the effects of the cryptographic devices,

and wherein messages are routed through a traffic channel of the gateway trunk according to a code dialled by a subscriber, said code identifying a required at least one cryptographic device.