Modular cryptographic device providing status determining features and related methods

• US 7,657,755 B2
• Filed: 03/23/2004
• Issued: 02/02/2010
• Est. Priority Date: 03/23/2004
• Status: Active Grant

• Current Assignee: Harris Global Communications, Inc. (L3Harris Technologies, Inc.)
• Original Assignee: Harris Corporation (L3Harris Technologies, Inc.)
• Inventors: Dellmo, Russell Wayne, Yancy, Bruce Wayne, Waldo, Lawrence Richard, Bricher, Daniel John
• Primary Examiner(s): Vu; Kimyen
• Assistant Examiner(s): PAN, JOSEPH T
• Application Number:
  US10/806,667
• Publication Number:
  US 20050216750A1
• Time in Patent Office: 2,142 Days
• Field of Search: 713/1, 713/2, 713/188, 713/194, 713/189, 380/200, 380/201, 380/255, 380/277, 726/2, 370/463, 370/465, 710/301
• US Class Current: 713/189
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: H04L 63/0485 Networking architectures for enhanced packet encryption processing, e.g. offloading of IPsec packet processing or efficient security association look-up
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic

Abstract

A cryptographic device may include a cryptographic module and a communications module removably coupled thereto. The cryptographic module may include a first housing, a user Local Area Network (LAN) interface carried by the first housing, a cryptographic processor carried by the first housing and coupled to the user network interface, and a first connector carried by the first housing and coupled to the cryptographic processor. The communications module may include a second housing, a second connector carried by the second housing and being removably mateable with the first connector of the cryptographic module, and a network communications interface carried by the second housing and coupled to the second connector. The communications module may also include at least one logic device for cooperating with the cryptographic processor to determine a status of the communications module.

Claims

1. A cryptographic device comprising:

a cryptographic module and a communications module removably coupled thereto;

said cryptographic module comprising

a first housing,

a user network interface carried by said first housing,

a cryptographic processor carried by said first housing and coupled to said user network interface, and

a first connector carried by said first housing and coupled to said cryptographic processor;

said communications module comprising

a second housing,

a second connector carried by said second housing and being removably mateable with said first connector of said cryptographic module,

a network interface carried by said second housing and coupled to said second connector, and

at least one logic device being polled by said cryptographic processor to determine a type of communications module as being one of wired and wireless, and an operating status of said communications module, said at least one logic device also causing said cryptographic processor to configure said network communications interface of said communications module for a given application based upon the type of communications module.

2. The cryptographic device of claim 1 wherein said communications module comprises a predetermined one from among a plurality of interchangeable communications modules each for communicating over a different communications media.

3. The cryptographic device of claim 1 wherein said communications module further comprises at least one status indicator carried by said second housing and coupled to said at least one logic device.

4. The cryptographic device of claim 1 wherein said at least one logic device comprises a complex programmable logic device (CPLD).

5. The cryptographic device of claim 1 wherein said network communications interface comprises at least one of a wireless LAN (WLAN) communication circuit, a wireline communication circuit, and a fiber optic communication circuit.

6. The cryptographic device of claim 1 wherein said user network interface comprises an Ethernet Local Area Network (LAN) interface, and wherein said network communications interface comprises a network LAN interface.

7. The cryptographic device of claim 1 wherein said cryptographic processor comprises:

a host network processor coupled to said user network interface; and

a cryptography circuit coupled to said host network processor.

8. The cryptographic device of claim 7 wherein said cryptographic processor further comprises:

an unencrypted data buffer circuit coupled between said user network interface and said cryptography circuit; and

an encrypted data buffer circuit coupled between said cryptography circuit and said network communications interface.

9. The cryptographic device of claim 1 wherein said cryptographic module further comprises a tamper circuit for disabling said cryptographic processor based upon tampering with said first housing.

10. The cryptographic device of claim 9 wherein said tamper circuit comprises at least one conductor substantially surrounding said cryptographic processor, and wherein said cryptographic processor is disabled based upon a break in said at least one conductor.

11. A cryptographic device comprising:

a cryptographic module and a communications module removably coupled thereto;

said cryptographic module comprising

a first housing,

a user Local Area Network (LAN) interface carried by said first housing and comprising a plurality of different connectors for coupling the cryptographic module to different network devices,

a cryptographic processor carried by said first housing and coupled to said user LAN interface, and

a first connector carried by said first housing and coupled to said cryptographic processor;

said communications module comprising

a second housing,

a second connector carried by said second housing and being removably mateable with said first connector of said cryptographic module,

a network LAN interface carried by said second housing and coupled to said second connector, and

at least one logic device for cooperating with said cryptographic processor to determine a type of communications module as being one of wired and wireless, and an operating status thereof, said at least one logic device also causing said cryptographic processor to configure said network LAN interface based upon the type of communications module.

12. The cryptographic device of claim 11 wherein said communications module comprises a predetermined one from among a plurality of interchangeable communications modules each for communicating over a different communications media.

13. The cryptographic device of claim 11 wherein said communications module further comprises at least one status indicator carried by said second housing and coupled to said at least one logic device.

14. The cryptographic device of claim 11 wherein said at least one logic device comprises a complex programmable logic device (CPLD).

15. The cryptographic device of claim 11 wherein said network LAN interface comprises at least one of a wireless LAN (WLAN) communication circuit, a wireline LAN communication circuit, and a fiber optic LAN communication circuit.

16. The cryptographic device of claim 11 wherein said user LAN interface comprises an Ethernet interface.

17. The cryptographic device of claim 11 wherein said cryptographic processor comprises:

a host network processor coupled to said user LAN interface; and

a cryptography circuit coupled to said host network processor.

18. The cryptographic device of claim 17 wherein said cryptographic processor further comprises:

an unencrypted data buffer circuit coupled between said user LAN interface and said cryptography circuit; and

an encrypted data buffer circuit coupled between said cryptography circuit and said network LAN interface.

19. The cryptographic device of claim 11 wherein said cryptographic module further comprises a tamper circuit for disabling said cryptographic processor based upon tampering with said first housing.

20. The cryptographic device of claim 19 wherein said tamper circuit comprises at least one conductor substantially surrounding said cryptographic processor, and wherein said cryptographic processor is disabled based upon a break in said at least one conductor.

21. A communications method comprising:

coupling a cryptographic module to a network device, the cryptographic module comprising a first housing, a user network interface carried by the first housing, a cryptographic processor carried by the first housing and coupled to the user network interface, and a first connector carried by the first housing and coupled to the cryptographic processor;

providing a communications module comprising a second housing, a second connector carried by the second housing, a network LAN interface carried by the second housing and coupled to the second connector, and at least one logic device carried by the second housing and coupled to the second connector, the second connector of the communications module being removably mated with the first connector of the cryptographic module;

using the network LAN interface to communicate with a network;

causing the at least one logic device to be polled by the cryptographic processor to determine a type of communications module as being one of wired and wireless, and an operating status of the communications module; and

using the at least one logic device to configure the network communications interface of the communications module for a given application based upon the type of communications module.

22. The method of claim 21 wherein the communications module comprises a predetermined one from among a plurality of interchangeable communications modules each for communicating over a different communications media.

29. The method of claim 21 wherein the user network interface comprises a plurality of different connectors for coupling the cryptographic module to different network devices.

23. A communications system comprising:

a plurality of network devices coupled together to define a network, and a cryptographic device coupled to at least one of said network devices;

said cryptographic device comprising a cryptographic module coupled to said at least one network device, and a communications module removably coupled to said cryptographic module;

said cryptographic module comprising

a first housing,

a user network interface carried by said first housing,

a cryptographic processor carried by said first housing and coupled to said user network interface, and

a first connector carried by said first housing and coupled to said cryptographic processor;

said communications module comprising

a second housing,

a second connector carried by said second housing and being removably mateable with said first connector of said cryptographic module,

a network communications interface carried by said second housing and coupled to said second connector, and

at least one logic device being polled by said cryptographic processor to determine a type of communications module as being one of wired and wireless, and an operating status of said communications module, said at least one logic device also causing said cryptographic processor to configure said network communications interface of said communications module for a given application based upon the type of communications module.

24. The communications system of claim 23 wherein said communications module comprises a predetermined one from among a plurality of interchangeable communications modules each for communicating over a different communications media.

25. The communications system of claim 23 wherein said communications module further comprises at least one status indicator carried by said second housing and coupled to said at least one logic device.

26. The communications system of claim 23 wherein said at least one logic device comprises a complex programmable logic device (CPLD).

27. The communications system of claim 23 wherein said network communications interface comprises at least one of a wireless LAN (WLAN) communication circuit, a wireline communication circuit, and a fiber optic communication circuit.

28. The communications system of claim 23 wherein said user network interface comprises an Ethernet Local Area Network (LAN) interface, and wherein said network interface comprises a network LAN interface.

30. The communications system of claim 23 wherein said user network interface comprises a plurality of different connectors for coupling the cryptographic module to different network devices.