Communication device for providing security in a group communication network

• US 7,689,822 B2
• Filed: 03/23/2004
• Issued: 03/30/2010
• Est. Priority Date: 03/03/2000
• Status: Expired due to Term

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Maggenti, Mark, Rosen, Eric, Crockett, Douglas M.
• Primary Examiner(s): Cervetti; David García
• Assistant Examiner(s): Traore; Fatoumata
• Application Number:
  US10/807,990
• Publication Number:
  US 20040179689A1
• Time in Patent Office: 2,198 Days
• Field of Search: 725 25- 28, 725/31, 725/86, 725/98, 725/100, 380/37, 380/43, 380/200, 380/205, 380/210, 380/260, 713150-152, 713/160, 713/168
• US Class Current: 713/151
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 65/1046 Call controllers; Call servers
• CPC Class Codes: H04L 65/403 Arrangements for multi-party communication, e.g. for conferences data switching systems for conference H04L12/18; arrangements for connecting several subscribers to a common circuit, i.e. affording conference facilities H04M3/56; television conferencing systems H04N7/15
• CPC Class Codes: H04L 65/4061 Push-to services, e.g. push-to-talk or push-to-video
• CPC Class Codes: H04W 4/10 Push-to-Talk [PTT] or Push-On-Call services
• CPC Class Codes: H04W 76/45 for Push-to-Talk [PTT] or Push-to-Talk over cellular [PoC] services

Abstract

A method and apparatus for providing security in a group communication network provides for receiving an encryption key, encrypting media for transmission to a controller using the received encryption key, the encrypted media being directed to another communication device, and communicating the encrypted media to the controller. In one embodiment, the communicating includes wireless communication. The method and apparatus further provides for receiving encrypted media from a controller and blocking the encrypted media if the communication device is not enabled to receive encrypted-media transmission, or if the media is not encrypted based on an encryption key previously specified by the communication device. In another aspect, the communication device is a push-to-talk (PTT) device.

Claims

1. A method for synchronizing encryption and decryption of a data frame in a communication network, the method comprising:

encrypting a first data frame based on a first unique code in a first communication device, said first unique code being derived from a first sequential code;

encapsulating said first encrypted data frame in a first transport frame, said first transport frame comprising a first portion and a second portion of said first sequential code;

encrypting a second data frame based on a second unique code in the first communication device, said second unique code being derived from a second sequential code;

encapsulating said second encrypted data frame in a second transport frame, said second transport frame comprising a first portion and a second portion of said second sequential code; and

transmitting said first transport frame and said second transport frame to a second communication device,

wherein said first portion of said first sequential code and said first portion of said second sequential code identify the same relative portions of said first and second sequential codes, and said second portion of said second sequential code represents a successive relative portion with respect to said second portion of said first sequential code.

2. The method of claim 1, wherein:

said first portion of said first sequential code and said first portion of said second sequential code each represent a short-term component of said first and second sequential codes, respectively; and

said second portion of said first sequential code and said second portion of said second sequential code each represent a long-term component of said first and second sequential codes, respectively.

3. The method of claim 1, wherein said transport frame comprises a radio link protocol (RLP) frame.

4. The method of claim 1, wherein the encrypting and encapsulating steps are performed at a transport layer of an Internet Protocol (IP) standard.

5. The method of claim 1, wherein the encrypting of the first and second data frames is not based on a level of encryption associated with a higher-layer data object that includes data present within one of the first and second data frames.

6. The method of claim 1, wherein the first and second data frames carry data associated with a push-to-talk (PTT) or PTX communication session.

7. A computer-readable medium embodying computer codes for implementing a method for synchronizing encryption and decryption of a data frame in a communication network, the method comprising:

encrypting a first data frame based on a first unique code in a first communication device, said first unique code being derived from a first sequential code;

encapsulating said first encrypted data frame in a first transport frame, said first transport frame comprising a first portion and a second portion of said first sequential code;

encrypting a second data frame based on a second unique code in the first communication device, said second unique code being derived from a second sequential code;

encapsulating said second encrypted data frame in a second transport frame, said second transport frame comprising a first portion and a second portion of said second sequential code; and

transmitting said first transport frame and said second transport frame to a second communication device,

wherein said first portion of said first sequential code and said first portion of said second sequential code identify the same relative portions of said first and second sequential codes, and said second portion of said second sequential code represents a successive relative portion with respect to said second portion of said first sequential code.

8. The medium of claim 7, wherein:

said first portion of said first sequential code and said first portion of said second sequential code each represent a short-term component of said first and second sequential codes, respectively; and

said second portion of said first sequential code and said second portion of said second sequential code each represent a long-term component of said first and second sequential codes, respectively.

9. The medium of claim 7, wherein said transport frame comprises a radio link protocol (RLP) frame.

10. An apparatus for synchronizing encryption and decryption of a data frame in a communication network, comprising:

means for encrypting a first data frame based on a first unique code in a first communication device, said first unique code being derived from a first sequential code;

means for encapsulating said first encrypted data frame in a first transport frame, said first transport frame comprising a first portion and a second portion of said first sequential code;

means for encrypting a second data frame based on a second unique code in the first communication device, said second unique code being derived from a second sequential code;

means for encapsulating said second encrypted data frame in a second transport frame, said second transport frame comprising a first portion and a second portion of said second sequential code; and

means for transmitting said first transport frame and said second transport frame to a second communication device,

wherein said first portion of said first sequential code and said first portion of said second sequential code identify the same relative portions of said first and second sequential codes, and said second portion of said second sequential code represents a successive relative portion with respect to said second portion of said first sequential code.

11. The apparatus of claim 10, wherein:

said first portion of said first sequential code and said first portion of said second sequential code each represent a short-term component of said first and second sequential codes, respectively; and

said second portion of said first sequential code and said second portion of said second sequential code each represent a long-term component of said first and second sequential codes, respectively.

12. The apparatus of claim 10, wherein said transport frame comprises a radio link protocol (RLP) frame.

13. An apparatus, comprising:

a receiver;

a transmitter; and

a processor communicatively coupled to the receiver and the transmitter, the processor being capable of implementing a method for synchronizing encryption and decryption of a data frame in a communication network;

the method comprising;

encrypting a first data frame based on a first unique code in a first communication device, said first unique code being derived from a first sequential code;

encapsulating said first encrypted data frame in a first transport frame, said first transport frame comprising a first portion and a second portion of said first sequential code;

encrypting a second data frame based on a second unique code in the first communication device, said second unique code being derived from a second sequential code;

encapsulating said second encrypted data frame in a second transport frame, said second transport frame comprising a first portion and a second portion of said second sequential code; and

transmitting said first transport frame and said second transport frame to a second communication device,

wherein said first portion of said first sequential code and said first portion of said second sequential code identify the same relative portions of said first and second sequential codes, and said second portion of said second sequential code represents a successive relative portion with respect to said second portion of said first sequential code.

14. The apparatus of claim 13, wherein:

said first portion of said first sequential code and said first portion of said second sequential code each represent a short-term component of said first and second sequential codes, respectively; and

said second portion of said first sequential code and said second portion of said second sequential code each represent a long-term component of said first and second sequential codes, respectively.

15. The apparatus of claim 13, wherein said transport frame comprises a radio link protocol (RLP) frame.

16. A method for synchronizing encryption and decryption of a data frame in a communication network, the method comprising:

receiving a first transport frame at a communication device within the communication network, said first transport frame comprising a first encrypted data payload, a first portion of a first sequential code, and a second portion of said first sequential code;

receiving a second transport frame, said second transport frame comprising a second encrypted data payload, a first portion of a second sequential code, and a second portion of said second sequential code; and

determining said second sequential code using said first portion of said second sequential code, said second portion of said second sequential code, and said second portion of said first sequential code,

wherein said first portion of said first sequential code and said first portion of said second sequential code identify the same relative portions of said first and second sequential codes, and said second portion of said second sequential code represents a successive relative portion with respect to said second portion of said first sequential code.

17. The method of claim 16, further comprising:

decrypting said second encrypted data payload using said second sequential code.

18. The method of claim 16, further comprising:

determining said first sequential code using said first portion of said first sequential code, said second portion of said first sequential code, and said second portion of said second sequential code.

19. The method of claim 18, further comprising:

decrypting said first encrypted data payload using said first sequential code.

20. A computer-readable storage medium embodying computer codes for implementing a method for synchronizing encryption and decryption of a data frame in a communication network, the method comprising:

receiving a first transport frame, said first transport frame comprising a first encrypted data payload, a first portion of a first sequential code, and a second portion of said first sequential code;

receiving a second transport frame, said second transport frame comprising a second encrypted data payload, a first portion of a second sequential code, and a second portion of said second sequential code; and

determining said second sequential code using said first portion of said second sequential code, said second portion of said second sequential code, and said second portion of said first sequential code,

wherein said first portion of said first sequential code and said first portion of said second sequential code identify the same relative portions of said first and second sequential codes, and said second portion of said second sequential code represents a successive relative portion with respect to said second portion of said first sequential code.

21. The medium of claim 20, the method further comprising:

decrypting said second encrypted data payload using said second sequential code.

22. The medium of claim 20, the method further comprising:

determining said first sequential code using said first portion of said first sequential code, said second portion of said first sequential code, and said second portion of said second sequential code.

23. The medium of claim 22, the method further comprising:

decrypting said first encrypted data payload using said first sequential code.

24. An apparatus for synchronizing encryption and decryption of a data frame in a communication network, comprising:

means for receiving a first transport frame, said first transport frame comprising a first encrypted data payload, a first portion of a first sequential code, and a second portion of said first sequential code;

means for receiving a second transport frame, said second transport frame comprising a second encrypted data payload, a first portion of a second sequential code, and a second portion of said second sequential code; and

means for determining said second sequential code using said first portion of said second sequential code, said second portion of said second sequential code, and said second portion of said first sequential code,

wherein said first portion of said first sequential code and said first portion of said second sequential code identify the same relative portions of said first and second sequential codes, and said second portion of said second sequential code represents a successive relative portion with respect to said second portion of said first sequential code.

25. The apparatus of claim 24, further comprising:

means for decrypting said second encrypted data payload using said second sequential code.

26. The apparatus of claim 24, further comprising:

means for determining said first sequential code using said first portion of said first sequential code, said second portion of said first sequential code, and said second portion of said second sequential code.

27. The apparatus of claim 26, further comprising:

means for decrypting said first encrypted data payload using said first sequential code.

28. An apparatus, comprising:

a receiver;

a transmitter; and

a processor communicatively coupled to the receiver and the transmitter, the processor being capable of implementing a method for synchronizing encryption and decryption of a data frame in a communication network, the method comprising;

receiving a first transport frame, said first transport frame comprising a first encrypted data payload, a first portion of a first sequential code, and a second portion of said first sequential code;

receiving a second transport frame, said second transport frame comprising a second encrypted data payload, a first portion of a second sequential code, and a second portion of said second sequential code; and

determining said second sequential code using said first portion of said second sequential code, said second portion of said second sequential code, and said second portion of said first sequential code,

wherein said first portion of said first sequential code and said first portion of said second sequential code identify the same relative portions of said first and second sequential codes, and said second portion of said second sequential code represents a successive relative portion with respect to said second portion of said first sequential code.

29. The apparatus of claim 28, the method further comprising:

decrypting said second encrypted data payload using said second sequential code.

30. The apparatus of claim 28, the method further comprising:

determining said first sequential code using said first portion of said first sequential code, said second portion of said first sequential code, and said second portion of said second sequential code.

31. The apparatus of claim 30, the method further comprising:

decrypting said first encrypted data payload using said first sequential code.