Encryption of voice and data in a single data stream in a deployable, secure communication system

• US 7,707,407 B2
• Filed: 11/20/2003
• Issued: 04/27/2010
• Est. Priority Date: 09/15/2003
• Status: Expired due to Fees

• Current Assignee: TeleCommunication Systems Inc (Comtech Telecommunications Corporation)
• Original Assignee: TeleCommunication Systems Inc (Comtech Telecommunications Corporation)
• Inventors: Anspach, Steve
• Primary Examiner(s): Kim; Jung
• Assistant Examiner(s): Lemma; Samson B
• Application Number:
  US10/716,564
• Publication Number:
  US 20050060543A1
• Time in Patent Office: 2,350 Days
• Field of Search: 713/150, 713/160, 380/37
• US Class Current: 713/160
• CPC Class Codes: H04K 1/00 Secret communication
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281

Abstract

Separate IP data streams, including both voice (VoIP) and data sources, are routed over a single network data stream, encrypted by a single KIV encryption unit, and transmitted as a single packet data stream including both computer and voice data. Integration of the use of a VoIP data stream, together with data sources, and encrypted through a single serial encryption unit such as a KIV-7 enables the encryption of both voice and data using a single KIV encryption unit. After encryption by the Type 1 encryption unit (e.g., KIV-7) in a remotely deployed, secure communication system, the single encrypted data stream is encapsulated into IP packets. The IP packets are addressed to a distant IP device that removes the encapsulated, encrypted data and passes it to a similar Type 1 KIV device for decryption, and distributed to voice devices and computer devices via another voice-enabled router.

Claims

1. A method of encrypting and transmitting data in a secure communication system, said method comprising:

establishing a first data tunnel over a non-secure public data network;

combining an analog communication data stream and a digital data stream to form a data stream, said combining being performed by a voice-enabled router;

encrypting said data stream through a Type 1 encryption unit into an encrypted data stream;

encapsulating said Type 1 encrypted data stream in an IP packet;

establishing a second data tunnel over said non-secure public data network to transmit said encapsulated Type 1 encrypted data stream; and

transmitting said encapsulated Type 1 encrypted data stream through said first data tunnel and said second data tunnel over said non-secure public data network;

wherein a payload of said encapsulated Type 1 encrypted data stream IP packet contains routing information for routing said encapsulated Type 1 encrypted data stream to a second computing device and a second analog communications device.

2. The method of encrypting and transmitting data in a secure communication system according to claim 1, wherein:

said Type 1 encryption unit is a KIV-type encryption unit.

3. The method of encrypting and transmitting data in a secure communication system according to claim 2, wherein:

said KIV-type encryption unit is a KIV-7 encryption unit.

4. The method of encrypting and transmitting data in a secure communication system according to claim 1, wherein:

said Type 1 encryption unit is a KIV-type encryption unit.

5. The method of encrypting and transmitting data in a secure communication system according to claim 4, wherein:

said KIV-type encryption unit is a KIV-7 encryption unit.

6. Apparatus for encrypting and transmitting data in a secure communication system, said method comprising:

means for establishing a first data tunnel over a non-secure public data network between a near secure communication system and a remote secure communication system;

means for combining an analog communication data stream and a digital data stream to form a data stream;

means for encrypting said data stream through a Type 1 encryption unit into an encrypted data stream;

means for encapsulating said Type 1 encrypted data stream in an IP packet;

for transmission

means for establishing a second data tunnel over said non-secure public data network to transmit said encapsulated Type 1 encrypted data stream; and

means for transmitting said encapsulated Type 1 encrypted data stream through said first data tunnel and said second data tunnel over said non-secure public data network;

wherein a payload of said encapsulated Type 1 encrypted data stream IP packet contains routing information for routing said encapsulated Type 1 encrypted data stream to a second computing device and a second analog communications device.

7. The apparatus for encrypting and transmitting data in a secure communication system according to claim 6, wherein:

said Type 1 encryption unit is a KIV-type encryption unit.

8. The apparatus for encrypting and transmitting data in a secure communication system according to claim 7, wherein:

said KIV-type encryption unit is a KIV-7 encryption unit.

9. The apparatus for encrypting and transmitting data in a secure communication system according to claim 6, wherein:

said Type 1 encryption unit is a KIV-type encryption unit.

10. The apparatus for encrypting and transmitting data in a secure communication system according to claim 9, wherein:

said KIV-type encryption unit is a KIV-7 encryption unit.