Signature specification for encrypted packet streams

• US 7,451,309 B2
• Filed: 09/17/2004
• Issued: 11/11/2008
• Est. Priority Date: 09/17/2004
• Status: Active Grant

• Current Assignee: Bellsouth Intellectual Property Corporation (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Aaron, Jeffrey A., Shrum, Edgar Vaughan Jr.
• Primary Examiner(s): Smithers; Matthew
• Assistant Examiner(s): CALLAHAN, PAUL E
• Application Number:
  US10/943,588
• Publication Number:
  US 20060064746A1
• Time in Patent Office: 1,516 Days
• Field of Search: 380/201, 380/240, 380/241, 713/160
• US Class Current: 713/160
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/065 Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Methods, systems, and products are disclosed for specifying a signature for an encrypted packet stream. One method receives the encrypted stream of packets, and encryption obscures the contents of a packet. A signature for insertion into the stream of packets is specified, and the signature identifies a type of data encrypted within the stream of packets. The signature identifies the contents of the packet despite the encryption obscuring the contents.

Claims

1. A method, comprising the steps of:

receiving an encrypted stream of packets having the contents of a packet obscured by encryption; and

specifying a signature for the stream of packets, the signature identifying a type of data encrypted within the stream of packets,

wherein the signature identifies the contents of the packet despite the encryption obscuring the contents; and

wherein the step of specifying the signature comprises at least one of i) specifying at least one packet for insertion into the stream of packets, the packet having a size that identifies the type of data encrypted within the stream of packets, and ii) specifying at least one packet for time-based insertion into the stream of packets, the packet having a size that identifies the type of data encrypted within the stream of packets.

2. A method according to claim 1, wherein the step of specifying the signature further comprises at least one of i) establishing a periodic timing interval between at least two encrypted packets, the timing interval identifying the type of data encrypted within the stream of packets, and ii) establishing a timing interval between at least two encrypted packets, the timing interval identifying the type of data encrypted within the stream of packets.

3. A method according to claim 1, further comprising the step of changing the signature.

4. A method according to claim 1, further comprising the step of communicating the signature to a communications device.

5. A method according to claim 1, further comprising the step of specifying a signature identifying Voice Over Internet Protocol data encrypted within the stream of packets,

wherein the signature identifies the Voice Over Internet Protocol data despite the encryption obscuring the contents of the stream of packets.

6. A method, comprising the steps of:

receiving an encrypted stream of packets having the contents of a packet obscured by encryption; and

specifying a signature for the stream of packets. the signature identifying a type of data encrypted within the stream of packets,

wherein the signature identifies the contents of the packet despite the encryption obscuring the contents; and

wherein the step of specifying the signature comprises establishing a size for each packet in the stream of packets, the size for each packet identifying the type of data encrypted within the stream of packets.

7. A method, comprising the steps of:

receiving an encrypted stream of packets having the contents of a packet obscured by encryption; and

specifying a signature for the stream of packets, the signature identifying a type of data encrypted within the stream of packets,

wherein the signature identifies the contents of the packet despite the encryption obscuring the contents; and

wherein the step of specifying the signature comprises at least one of i) establishing a pattern of packet sizes, the pattern of packet sizes identifying the type of data encrypted within the stream of packets, and ii) establishing a pattern of timing intervals, the pattern of timing intervals identifying the type of data encrypted within the stream of packets.

8. A system, comprising:

a communications module stored in a memory device, and a processor communicating with the memory device;

the communications module receiving an encrypted stream of packets having the contents of a packet obscured by encryption; and

the communications module specifying a signature for the stream of packets, the signature identifying a type of data encrypted within the stream of packets.

wherein the signature identifies the contents of the packet despite the encryption obscuring the contents; and

wherein the communications module specifics at least one of i) at least one packet for insertion into the stream of packets, the packet having a size that identifies the type of data encrypted within the stream of packets, and ii) at least one packet for time-based insertion into the stream of packets, the packet having a size that identifies the type of data encrypted within the stream of packets.

9. A system according to claim 8, wherein the communications module further establishes at least one of i) a periodic timing interval between at least two encrypted packets, the timing interval identifying the type of data encrypted within the stream of packets, and ii) a timing interval between at least two encrypted packets, the timing interval identifying the type of data encrypted within the stream of packets.

10. A system according to claim 8, wherein the communications module changes the signature.

11. A system according to claim 8, wherein the communications module communicates the signature to a communications device.

12. A system according to claim 8, wherein the communications module specifies a signature identifying Voice Over Internet Protocol data encrypted within the stream of packets, wherein the signature identifies the Voice Over Internet Protocol data despite the encryption obscuring the contents of the stream of packets.

13. A system, comprising:

a communications module stored in a memory device, and a processor communicating with the memory device;

the communications module receiving an encrypted stream of packets having the contents of a packet obscured by encryption; and

the communications module specifying a signature for the stream of packets, the signature identifying a type of data encrypted within the stream of packets,

wherein the signature identifies the contents of the packet despite the encryption obscuring the contents; and

wherein the communications module establishes a size for each packet in the stream of packets, the size for each packet identifying the type of data encrypted within the stream of packets.

14. A system, comprising:

a communications module stored in a memory device, and a processor communicating with the memory device;

the communications module receiving an encrypted stream of packets having the contents of a packet obscured by encryption; and

the communications module specifying a signature for the stream of packets, the signature identifying a type of data encrypted within the stream of packets,

wherein the signature identifies the contents of the packet despite the encryption obscuring the contents; and

wherein the communications module establishes at least one of i) a pattern of packet sizes, the pattern of packet sizes identifying the type of data encrypted within the stream of packets, and ii) a pattern of timing intervals, the pattern of timing intervals identifying the type of data encrypted within the stream of packets.

15. A computer program product comprising a computer readable medium including instructions for performing the steps:

receiving an encrypted stream of packets having the contents of a packet obscured by encryption; and

specifing a signature for the stream of packets, the signature identifying a type of data encrypted within the stream of packets,

wherein the signature identifies the contents of the packet despite the encryption obscuring the contents; and

wherein the step of specifying the signature comprises at least one of i) specifying at least one packet for insertion into the stream of packets, the packet having a size that identifies the type of data encrypted within the stream of packets, and ii) specifying at least one packet for time-based insertion into the stream of packets, the packet having a size that identifies the type of data encrypted within the stream of packets.

16. A computer program product according to claim 15, wherein the step of specifying the signature further comprises at least one of i) establishing a periodic timing interval between at least two encrypted packets, the timing interval identifying the type of data encrypted within the stream of packets, and ii) establishing a timing interval between at least two encrypted packets, the timing interval identifying the type of data encrypted within the stream of packets.

17. A computer program product according to claim 15, further performing the step of specifying a signature identifying Voice Over Internet Protocol data encrypted within the stream of packets,

wherein the signature identifies the Voice Over Internet Protocol data despite the encryption obscuring the contents of the stream of packets.