Method and system for securely transferring a data set in a data communications system

• US 6,128,735 A
• Filed: 11/25/1997
• Issued: 10/03/2000
• Est. Priority Date: 11/25/1997
• Status: Expired due to Term

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Goldstein, Gary Allan, Sumner, Terence Edward
• Primary Examiner(s): Swann, Tod R.
• Assistant Examiner(s): JACK, TODD M
• Application Number:
  US08/978,392
• Time in Patent Office: 1,043 Days
• Field of Search: 380/49, 380/141, 380/41, 713/200, 713/166, 455/61
• US Class Current: 713/166
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068

Abstract

In a telecommunications system, data having a higher sensitivity and data having a lower sensitivity are identified within a data set. The data having a higher sensitivity is encrypted to produce encrypted sensitive data. Thereafter, the data having a lower sensitivity and the encrypted sensitive data are encrypted to produce an encrypted data set. The encrypted data set is then transferred from a sending unit to a receiving unit. Decryption information may be appended to the encrypted sensitive data before the data having a lower sensitivity and the encrypted sensitive data are encrypted to produce an encrypted data set. The decryption information may include an algorithm identifier, a key identifier, and receiver response instructions. At the receiving unit, the data set is decrypted to recover the data having lower sensitivity. A second decryption of the encrypted sensitive information recovers the data having a higher sensitivity. Appended decryption information may be used to locate and decrypt the encrypted sensitive information.

Claims

1. A method for securely transferring a data set in a telecommunications system comprising the steps of:

within the data set, identifying data having a higher sensitivity and data having a lower sensitivity;

encrypting the data having a higher sensitivity to produce encrypted sensitive data;

encrypting the data having a lower sensitivity and the encrypted sensitive data to produce an encrypted data set; and

transferring the encrypted data set from a sending unit to a receiving unit.

2. The method for securely transferring a data set in a telecommunications system according to claim 1 further including the step of appending decryption information to the encrypted sensitive data.

3. The method for securely transferring a data set in a telecommunications system according to claim 2 wherein the decryption information further includes an algorithm identifier.

4. The method for securely transferring a data set in a telecommunications system according to claim 2 wherein the decryption information further includes a key identifier.

5. The method for securely transferring a data set in a telecommunications system according to claim 2 wherein the decryption information further includes receiver response instructions.

6. The method for securely transferring a data set in a telecommunications system according to claim 1 wherein the step of encrypting the data having a higher sensitivity to produce encrypted sensitive data further includes:

encrypting the data having a higher sensitivity with an algorithm having higher security to produce encrypted sensitive data;

and wherein the step of encrypting the data having a lower sensitivity and the encrypted sensitive data to produce an encrypted data set further includes;

encrypting the data having a lower sensitivity and the encrypted sensitive data with an encryption algorithm having lower security to produce an encrypted data set.

7. The method for securely transferring a data set in a telecommunications system according to claim 1 further including the steps of:

decrypting the encrypted data set;

recovering the data having a lower sensitivity and the encrypted sensitive data;

decrypting the encrypted sensitive data; and

recovering the data having a higher sensitivity.

8. The method for securely transferring a data set in a telecommunications system according to claim 7 wherein the step of decrypting the encrypted data set further includes decrypting the encrypted data set using decryption information appended to the encrypted sensitive data.

9. The method for securely transferring a data set in a telecommunications system according to claim 8 wherein the decryption information appended to the encrypted sensitive data includes receiver response instructions, and further including the steps of:

detecting a condition in the receiving unit; and

in the receiving unit, responding to the detected condition in a manner described in the receiver response instructions.

10. A system for securely transferring a data set in a telecommunications system comprising:

means for identifying data having a higher sensitivity and data having a lower sensitivity, within the data set;

means for encrypting the data having a higher sensitivity to produce encrypted sensitive data;

means for encrypting the data having a lower sensitivity and the encrypted sensitive data to produce an encrypted data set; and

means for transferring the encrypted data set from a sending unit to a receiving unit.

11. The system for securely transferring a data set in a telecommunications system according to claim 10 further including means for appending decryption information to the encrypted sensitive data.

12. The system for securely transferring a data set in a telecommunications system according to claim 11 wherein the decryption information further includes an algorithm identifier.

13. The system for securely transferring a data set in a telecommunications system according to claim 11 wherein the decryption information further includes a key identifier.

14. The system for securely transferring a data set in a telecommunications system according to claim 11 wherein the decryption information further includes receiver response instructions.

15. The system for securely transferring a data set in a telecommunications system according to claim 10 wherein the means for encrypting the data having a higher sensitivity to produce encrypted sensitive data further includes:

means for encrypting the data having a higher sensitivity with an algorithm having higher security to produce encrypted sensitive data;

and wherein the means for encrypting the data having a lower sensitivity and the encrypted sensitive data to produce an encrypted data set further includes;

means for encrypting the data having a lower sensitivity and the encrypted sensitive data with an encryption algorithm having lower security to produce an encrypted data set.

16. The system for securely transferring a data set in a telecommunications system according to claim 10 further including:

means for decrypting the encrypted data set;

means for recovering the data having a lower sensitivity and the encrypted sensitive data;

means for decrypting the encrypted sensitive data; and

means for recovering the data having a higher sensitivity.

17. The system for securely transferring a data set in a telecommunications system according to claim 16 wherein the means for decrypting the encrypted data set further includes means for decrypting the encrypted data set using decryption information appended to the encrypted sensitive data.

18. The system for securely transferring a data set in a telecommunications system according to claim 17 wherein the decryption information appended to the encrypted sensitive data includes receiver response instructions, and further including:

means for detecting a condition in the receiving unit; and

in the receiving unit, means for responding to the detected condition in a manner described in the receiver response instructions.

19. A system for securely transferring a data set in a telecommunications system comprising:

a data sensitivity detector coupled to a data set for identifying data having a higher sensitivity and data having a lower sensitivity, within the data set;

an encryption engine coupled to the data sensitivity detector for encrypting the data having a higher sensitivity to produce encrypted sensitive data;

a second encryption engine coupled to the data sensitivity detector and the encrypted sensitive data for encrypting the data having a lower sensitivity and the encrypted sensitive data to produce an encrypted data set; and

a transmission unit coupled to the encrypted data set for transferring the encrypted data set from a sending unit to a receiving unit.

20. The system for securely transferring a data set in a telecommunications system according to claim 19 further comprising:

an encryption engine and key selector coupled to the data sensitivity detector for selecting an encryption algorithm and key in response to the data sensitivity detector;

a header creator coupled to the encryption engine and key selector for creating and appending to the encrypted sensitive data a header containing decryption information.