Deployable secure communication system

• US 8,090,941 B2
• Filed: 08/17/2009
• Issued: 01/03/2012
• Est. Priority Date: 08/20/2003
• Status: Expired due to Fees

• Current Assignee: TeleCommunication Systems Inc (Comtech Telecommunications Corporation)
• Original Assignee: TeleCommunication Systems Inc (Comtech Telecommunications Corporation)
• Inventors: Anspach, Steve, Lleras, Jose, Salazar, Luke, Kasson, Greg
• Primary Examiner(s): Gee, Jason
• Application Number:
  US12/461,570
• Publication Number:
  US 20090313469A1
• Time in Patent Office: 869 Days
• Field of Search: 713/160
• US Class Current: 713/160
• CPC Class Codes: H04L 63/0457 wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption cryptographic mechanisms or cryptographic arrangements for stream encryption H04L9/065
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/70 Media network packetisation

Abstract

A secure Voice-Over-IP (VOIP), video and data network functionality in a single, small size deployable case, for a remote user. While capable of secure communications, the disclosed system also provides communication capability (VOIP, video and/or data) in a non-secure manner if desired. Most importantly, bulk encrypted (i.e., secure) data may be routed over a public network, e.g., the Internet.

Claims

1. A portable, deployable communication system, comprising:

an encryption device to produce bulk encrypted data;

a red side Internet Protocol (IP) network router to route said bulk encrypted data to and from said portable, deployable communication system;

an encapsulator to encapsulate said bulk encrypted data in IP packets; and

a black side IP network router distinct from said red side IP network router and routing said IP encapsulated, bulk encrypted data to and from said portable, deployable communication system over a data tunnel established over a public IP network.

2. The portable, deployable communication system according to claim 1, wherein:

said IP encapsulated, bulk encrypted data is routed to a remote router.

3. The portable, deployable communication system according to claim 1, wherein:

said encryption device is a KIV-7 encryption device.

4. The portable, deployable communication system according to claim 1, wherein:

said encryption device is a KIV-21 encryption device.

5. The portable, deployable communication system according to claim 1, wherein:

at least one of said red side IP network router and said black side IP network router maintain a quality of service.

6. The portable, deployable communication system according to claim 1, wherein:

said data tunnel is a dedicated data tunnel.

7. A method of providing a secure communication with a portable, deployable communication system, comprising:

producing bulk encrypted data with an encryption device;

routing said bulk encrypted data with a red side Internet Protocol (IP) network router of said portable, deployable communication system;

encapsulating said bulk encrypted data in IP packets; and

routing, with a black side IP network router distinct to and from said red side IP network router, said IP encapsulated, bulk encrypted data to and from said portable, deployable communication system over a data tunnel established over a public IP network.

8. The method of providing a secure communication with a portable, deployable communication system according to claim 7, further comprising:

routing said IP encapsulated, bulk encrypted data to a remote router.

9. The method of providing a secure communication with a portable, deployable communication system according to claim 7, wherein:

said encryption device is a KIV-7 encryption device.

10. The method of providing a secure communication with a portable, deployable communication system according to claim 7, wherein:

said encryption device is a KIV-21 encryption device.

11. The method of providing a secure communication with a portable, deployable communication system according to claim 7, further comprising:

maintaining a quality of service with at least one of said red side IP network router and said black side IP network router.

12. The method of providing a secure communication with a portable, deployable communication system according to claim 7, wherein:

said data tunnel is a dedicated data tunnel.