Modular cryptographic device and related methods

• US 7,877,595 B2
• Filed: 03/23/2004
• Issued: 01/25/2011
• Est. Priority Date: 03/23/2004
• Status: Active Grant

• Current Assignee: Harris Global Communications, Inc. (L3Harris Technologies, Inc.)
• Original Assignee: Harris Corporation (L3Harris Technologies, Inc.)
• Inventors: Hyland, Gregory Andrew, Dellmo, Russell Wayne, Yancy, Bruce Wayne, Newland, Scott Richard, Waldo, Lawrence Richard, Bricher, Daniel John, Bolick, David Anthony, Petkus, Eric Edmond
• Primary Examiner(s): Kim; Jung
• Assistant Examiner(s): Okeke; Izunna
• Application Number:
  US10/806,949
• Publication Number:
  US 20050216765A1
• Time in Patent Office: 2,499 Days
• Field of Search: 713/194, 713/153, 713/201, 713/167
• US Class Current: 713/153
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0485 Networking architectures for enhanced packet encryption processing, e.g. offloading of IPsec packet processing or efficient security association look-up
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols

Abstract

A cryptographic device may include a cryptographic module and a communications module removably coupled thereto. The cryptographic module may include a first housing, a user network interface carried by the first housing, a cryptographic processor carried by the first housing and coupled to the user network interface, and a first connector carried by the first housing and coupled to the cryptographic processor. Furthermore, the communications module may include a second housing, a second connector carried by the second housing and being removably mateable with the first connector of the cryptographic module, and a network communications interface carried by the second housing and coupled to the second connector.

Claims

1. A cryptographic device comprising:

a cryptographic module and a communications module removably coupled thereto;

said cryptographic module comprising

a first housing,

a wired Ethernet user Local Area Network (LAN) interface carried by said first housing,

a cryptographic processor carried by said first housing and coupled to said wired Ethernet user LAN interface,

a power circuit carried by said first housing and powering said cryptographic processor and said wired Ethernet user LAN interface, and

a first connector carried by said first housing and coupled to said cryptographic processor;

said communications module comprising

a second housing,

a second connector carried by said second housing and being removably mateable with said first connector of said cryptographic module, and

a network communications interface carried by said second housing and coupled to said second connector;

said communications module comprising one from among a plurality of interchangeable communications modules each for communicating over a different communications media;

said communications module also being powered by said power circuit.

2. The cryptographic device of claim 1 wherein said network communications interface comprises a wireless LAN (WLAN) communication circuit.

3. The cryptographic device of claim 1 wherein said network communications interface comprises a wireline communication circuit.

4. The cryptographic device of claim 1 wherein said network communications interface comprises a fiber optic communication circuit.

5. The cryptographic device of claim 1 wherein network communications interface comprises a network LAN interface.

6. The cryptographic device of claim 1 wherein said cryptographic processor implements an encryption algorithm to provide a predetermined security level.

7. The cryptographic device of claim 1 wherein said cryptographic processor comprises:

a host network processor coupled to said user network interface; and

a cryptography circuit coupled to said host network processor.

8. The cryptographic device of claim 7 wherein said cryptographic processor further comprises:

an encrypted data buffer circuit coupled between said wired Ethernet user LAN interface and said cryptography circuit; and

an unencrypted data buffer circuit coupled between said cryptography circuit and said network communications interface.

9. The cryptographic device of claim 1 wherein said cryptographic module further comprises a tamper circuit for disabling said cryptographic processor based upon tampering with said first housing.

10. The cryptographic device of claim 9 wherein said tamper circuit comprises at least one conductor substantially surrounding said cryptographic processor, and wherein said cryptographic processor is disabled based upon a break in said at least one conductor.

11. A cryptographic device comprising:

a cryptographic module and a communications module removably coupled thereto;

said cryptographic module comprising

a first housing,

a wired Ethernet user Local Area Network (LAN) interface carried by said first housing,

a cryptographic processor carried by said first housing and coupled to said user LAN interface,

a power circuit carried by said first housing and powering said cryptographic processor and said wired Ethernet user LAN interface,

a tamper circuit for disabling said cryptographic processor based upon tampering with said first housing, and

a first connector carried by said first housing and coupled to said cryptographic processor;

said communications module comprising

a second housing,

a second connector carried by said second housing and being removably mateable with said first connector of said cryptographic module, and

a network LAN interface carried by said second housing and coupled to said second connector;

said communications module comprising one from among a plurality of interchangeable communications modules each for communicating over a different communications media;

said communications module also being powered by said power circuit.

12. The cryptographic device of claim 11 wherein said network LAN interface comprises a wireless LAN (WLAN) communication circuit.

13. The cryptographic device of claim 11 wherein said network LAN interface comprises a wireline LAN communication circuit.

14. The cryptographic device of claim 11 wherein said network LAN interface comprises a fiber optic LAN communication circuit.

15. The cryptographic device of claim 11 wherein said cryptographic processor implements an encryption algorithm to provide a predetermined security level.

16. The cryptographic device of claim 11 wherein said cryptographic processor comprises:

a host network processor coupled to said wired Ethernet user LAN interface; and

a cryptography circuit coupled to said host network processor.

17. The cryptographic device of claim 16 wherein said cryptographic processor further comprises:

an encrypted data buffer circuit coupled between said wired Ethernet user LAN interface and said cryptography circuit; and

an unencrypted data buffer circuit coupled between said cryptography circuit and said network LAN interface.

18. The cryptographic device of claim 11 wherein said tamper circuit comprises at least one conductor substantially surrounding said cryptographic processor, and wherein said cryptographic processor is disabled based upon a break in said at least one conductor.

19. A communications method comprising:

coupling a cryptographic module to a network device, the cryptographic module comprising a first housing, a wired Ethernet user LAN interface carried by the first housing, a cryptographic processor carried by the first housing and coupled to the wired Ethernet user LAN interface, a first connector carried by the first housing and coupled to the cryptographic processor, and a power circuit carried by the first housing;

providing a communications module from among a plurality of interchangeable communications modules each for communicating over a different communications media and comprising a second housing, a second connector carried by the second housing, and a network communications interface carried by the second housing coupled to the second connector, the second connector of the communications module being removably mated with the first connector of the cryptographic module;

using the power circuit to power the cryptographic processor, the wired Ethernet user LAN interface, and the communications module; and

using the network communications interface to communicate with a network.

20. The method of claim 19 wherein the network communications interface comprises at least one of a wireless LAN (WLAN) communication circuit, a wireline communication circuit, and a fiber optic communication circuit.

21. The method of claim 19 wherein the network communications interface comprises a network LAN interface.

22. A communications system comprising:

a plurality of network devices coupled together to define a network, and a cryptographic device coupled to at least one of said network devices;

said cryptographic device comprising a cryptographic module coupled to said at least one network device, and a communications module removably coupled to said cryptographic module;

said cryptographic module comprising

a first housing,

a wired Ethernet user LAN interface carried by said first housing,

a cryptographic processor carried by said first housing and coupled to said wired Ethernet user LAN interface,

a power circuit carried by the first housing and powering the cryptographic processor and the wired Ethernet user LAN interface, and

a first connector carried by said first housing and coupled to said cryptographic processor;

said communications module comprising

a second housing,

a second connector carried by said second housing and being removably mateable with said first connector of said cryptographic module, and

a network communications interface carried by said second housing and coupled to said second connector;

said communications module comprises a predetermined one from among a plurality of interchangeable communications modules each for communicating over a different communications media;

said communications module also being powered by said power circuit.

23. The communications system of claim 22 wherein said network communications interface comprises at least one of a wireless LAN (WLAN) communication circuit, a wireline communication circuit, and a fiber optic communication circuit.

24. The communications system of claim 22 wherein said network communications interface comprises a network LAN interface.

25. The communications system of claim 22 wherein said cryptographic processor implements an encryption algorithm to provide a predetermined security level.

26. The communications system of claim 22 wherein said cryptographic processor comprises:

a host network processor coupled to said wired Ethernet user LAN interface; and

a cryptography circuit coupled to said host network processor.

27. The communications system of claim 26 wherein said cryptographic processor further comprises:

an encrypted data buffer circuit coupled between said wired Ethernet user LAN interface and said cryptography circuit; and

an unencrypted data buffer circuit coupled between said cryptography circuit and said network communications interface.

28. The communications system of claim 22 wherein said cryptographic module further comprises a tamper circuit comprising at least one conductor substantially surrounding said cryptographic processor, and wherein said cryptographic processor is disabled based upon a break in said at least one conductor.