Method of encrypting and transmitting data and system for transmitting encrypted data

• US 8,275,997 B2
• Filed: 07/01/2010
• Issued: 09/25/2012
• Est. Priority Date: 01/08/2004
• Status: Active Grant

• Current Assignee: Active Cypher, Inc.
• Original Assignee: Encryption Solutions, Inc. (Worldwide Diversified Holdings, Inc.)
• Inventors: Stedron, Robert Allen, Chmielewski, John L.
• Primary Examiner(s): LANIER, BENJAMIN E
• Application Number:
  US12/829,133
• Publication Number:
  US 20110194686A1
• Time in Patent Office: 817 Days
• Field of Search: 380/29, 713/189
• US Class Current: 713/189
• CPC Class Codes: G09C 1/02 by using a ciphering code in chart form
• CPC Class Codes: H04L 2209/08 Randomization, e.g. dummy operations or using noise
• CPC Class Codes: H04L 2209/12 Details relating to cryptographic hardware or logic circuitry
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 2209/34 Encoding or coding, e.g. Huffman coding or error correction
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 9/065 Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3

Abstract

A method of encrypting and transmitting data and a system for transmitting encrypted data. The method includes one or more different encryption algorithms, and may include employing different encryption algorithms to achieve multiple levels of encryption. A first encryption algorithm is based upon multiple rearrangements of bits representing data to obtain encoded data. A second encryption algorithm is based upon performing multiple XOR operations on bits representing data so that each data word is at least encoded with previous data words. The system comprises first and second computers and a plurality of communication parameters. The two computers are communicably connected to a network, and the second computer is adapted to route a transmission to the first computer. The transmission includes a data part and a header part, both of which are encrypted by the second computer utilizing the communication parameters. The first computer decrypts the transmission utilizing the communication parameters.

Claims

1. A method of encrypting data, comprising:

representing the data in binary format having words of X bits in length;

using at least one computer to;

perform a first reversible rearrangement of the order of the bits of each word of the data, utilizing a reference table;

perform a second reversible rearrangement of the order of the bits of each word of the data, utilizing the reference table; and

generate the reference table before representing the data in binary format, the reference table having a first row of m entries and r rows of n entries each, wherein m, n, and r are prime numbers.

2. A method according to claim 1, further comprising the step of transmitting a signal corresponding to the second reversible rearrangement of bits, from a sender to a recipient.

3. A method according to claim 2, wherein data which is encrypted corresponds to an identity of the sender.

4. A method according to claim 2, wherein data which is encrypted corresponds to an identity of the recipient.

5. A method according to claim 2, wherein the transmitting step comprises the step of transmitting the signal over the Internet.

6. A method of encrypting data, comprising:

using at least one computer to;

represent the data in binary format having words of X bits in length;

perform a first reversible rearrangement of the order of the bits of each word of the data, utilizing a reference table;

perform a second reversible rearrangement of the order of the bits of each word of the data utilizing the reference table; and

generate the reference table before representing the data in binary format, the reference table having a first row of m entries and r rows of n entries each,

wherein generating the reference table further includes assigning numbers to the entries of the reference table, one number per entry, wherein the number assigned to each entry in the first row is unique within the first row and the number assigned to each entry in each of the r rows is unique within each respective row, and

wherein performing the first reversible rearrangement of the order of the bits in each word of the data comprises using the at least one computer to;

group each word of the data into m groups of bits;

arrange the numbers from the first row of the table into numerical order;

correlate each of the groups of bits with one of the numbers from the first row of the table as arranged in numerical order; and

rearrange the groups of bits based upon the numbers from the first row of the table as ordered in the first row of the table, and

wherein grouping each word of the data into m groups of bits includes grouping each word of the data into m−

1 groups of p bits in length and one group of q bits in length, q being less than p.

7. The method of claim 6, wherein performing the second reversible rearrangement of the order of the bits in each word of the data comprises using the at least one computer to:

group each word of the data into n groups of bits;

arrange the numbers from one of the r rows of the table into numerical order;

correlate each of the groups of bits with one of the numbers from the one of the r rows of the table as arranged in numerical order; and

rearrange the groups of bits based upon the numbers from the one of the r rows of the table as ordered in the one of the r rows of the table,

wherein grouping each word of the data into n groups of bits includes grouping each word of the data into n−

1 groups of p bits in length and one group of q bits in length, q being less than p.

8. A method according to claim 6, further comprising the step of transmitting a signal corresponding to the second reversible rearrangement of bits, from a sender to a recipient.

9. A method according to claim 8, wherein data which is encrypted corresponds to an identity of the sender.

10. A method according to claim 8, wherein data which is encrypted corresponds to an identity of the recipient.

11. A method according to claim 8, wherein the transmitting step comprises the step of transmitting the signal over the Internet.

12. A method of encrypting data, comprising:

using at least one computer to;

represent the data in binary format having words of X bits in length;

perform an XOR operation on a first data word utilizing a key and a first noise table word from a noise table, wherein the noise table is represented in binary format having words of X bits in length and the key is represented in binary format having a word of X bits in length; and

perform the XOR operation on successive data words utilizing an immediately preceding XOR operation result and a subsequent noise table word, and the method further comprising

generate the noise table prior to representing the data in binary format, the noise table having a greater size than the data, wherein generating the noise table comprises

obtain a data sample which is greater in size than a random character table;

identify a data sub-sample within the data sample, the data sub-sample being equal in size to a random character table which is at least 128 bytes in size;

represent the data sub-sample in words of X bits in length;

perform a first rearrangement of the order of the bits in each word of the data sub-sample utilizing a reference table;

perform a second rearrangement of the order of the bits in each word of the data sub-sample utilizing the reference table; and

perform successive XOR operations on each rearranged word of the data sub-sample, respectively, utilizing the random character table.

13. The method of claim 12, the method further comprising using the at least one computer to generate the reference table, the reference table having a first row of m entries and r rows of n entries each, wherein m, n, and r are prime numbers.

14. A method according to claim 12, further comprising the step of transmitting a signal corresponding to the second reversible rearrangement of bits, from a sender to a recipient.

15. A method according to claim 14, wherein data which is encrypted corresponds to an identity of the sender.

16. A method according to claim 14, wherein data which is encrypted corresponds to an identity of the recipient.

17. A method according to claim 14, wherein the transmitting step comprises the step of transmitting the signal over the Internet.

18. A method of encrypting data, comprising:

using at least one computer to;

represent the data in binary format having at least a first word and a second word, both of X bits in length;

perform a first reversible rearrangement of the order of the bits of each word of the data utilizing a reference table;

perform a second reversible rearrangement of the order of the bits of each word of the data utilizing the reference table, the first and second reversible rearrangements generating a first rearranged word and a second rearranged word;

perform an XOR operation on the first rearranged word utilizing a key and a first noise table word from a noise table, wherein the noise table and the key are represented in binary format having words of X bits in length and the key is represented in binary format having a word of X bits in length; and

perform the XOR operation on a second rearranged word utilizing the key, a second noise table word subsequent to the first noise table word, and a result from performing the XOR operation on the first word utilizing the key and the first noise table word, and the method further including using the computer to generate the reference table before representing the data in binary format, the reference table having a first row of m entries and r rows of n entries each, wherein m, n, and r are prime numbers.

19. A method according to claim 18, further comprising the step of transmitting a signal corresponding to the second reversible rearrangement of bits, from a sender to a recipient.

20. A method according to claim 19, wherein data which is encrypted corresponds to an identity of the sender.

21. A method according to claim 19, wherein data which is encrypted corresponds to an identity of the recipient.

22. A method according to claim 19, wherein the transmitting step comprises the step of transmitting the signal over the Internet.

23. A method of encrypting data comprising:

using at least one computer to;

represent the data in binary format having at least a first word and a second word, both of X bits in length;

perform a first reversible rearrangement of the order of the bits of each word of the data utilizing a reference table;

perform a second reversible rearrangement of the order of the bits of each word of the data utilizing the reference table, the first and second reversible rearrangements generating a first rearranged word and a second rearranged word;

perform an XOR operation on the first rearranged word utilizing a key and a first noise table word from a noise table, wherein the noise table and the key are represented in binary format having words of X bits in length and the key is represented in binary format having a word of X bits in length; and

perform the XOR operation on a second rearranged word utilizing the key, a second noise table word subsequent to the first noise table word, and a result from performing the XOR operation on the first word utilizing the key and the first noise table word, wherein the first word is formed by using the computer to perform the XOR operation on a time and date indicator utilizing at least a message number.

24. A method according to claim 23, further comprising the step of transmitting a signal corresponding to the second reversible rearrangement of bits, from a sender to a recipient.

25. A method according to claim 24, wherein data which is encrypted corresponds to an identity of the sender.

26. A method according to claim 24, wherein data which is encrypted corresponds to an identity of the recipient.

27. A method according to claim 24, wherein the transmitting step comprises the step of transmitting the signal over the Internet.

28. A method of transmitting encrypted data comprising:

using at least one computer to;

represent the data in binary format having at least a first word and a second word, both of X bits in length, the first word being formed by performing an XOR operation on a time and date indicator utilizing a message number and a port offset indicator, wherein the time and date indicator, the port offset indicator, and the message number are each represented in binary format having a word of X bits in length;

perform the XOR operation on the first word utilizing a key and a first noise table word from a noise table to generate a first encrypted word, wherein the noise table is represented in binary format having words of X bits in length and the key is represented in binary format having a word of X bits in length;

perform the XOR operation on the second data word utilizing the key, a second noise table word subsequent to the first noise table word, and the encrypted first word to generate a second encrypted word, the encrypted data comprising the first and second encrypted words; and

transmitting the encrypted data from a sender to a recipient.

29. A method according to claim 28, wherein data which is encrypted corresponds to an identity of the sender.

30. A method according to claim 28, wherein data which is encrypted corresponds to an identity of the recipient.

31. A method according to claim 28, wherein the transmitting step comprises the step of transmitting the signal over the Internet.

32. A method of transmitting encrypted data comprising:

using at least one computer to;

represent the data in binary format having at least a first word and a second word, both of X bits in length, the first word being formed by performing an XOR operation on a time and date indicator utilizing a message number and a port offset indicator, wherein the time and date indicator, the port offset indicator, and the message number are each represented in binary format having a word of X bits in length;

perform a first reversible rearrangement of the order of the bits of each word of the data utilizing a reference table;

perform a second reversible rearrangement of the order of the bits of each word of the data utilizing the reference table, the first and second reversible rearrangements generating a first rearranged word and a second rearranged word from the first word and the second word, respectively;

perform the XOR operation on the first rearranged word utilizing a key and a first noise table word from a noise table to generate a first encrypted word, wherein the noise table is represented in binary format having words of X bits in length and the key is represented in binary format having a word of X bits in length;

perform the XOR operation on the second rearranged word utilizing the key, a second noise table word subsequent to the first noise table word and, a first result from performing the XOR operation on the first word utilizing the key and the first noise table word to generate a second encrypted word, the encrypted data comprising the first and second encrypted words; and

transmitting the encrypted data.

33. A method according to claim 32, wherein the transmitting step includes the step of transmitting a signal corresponding to the second reversible rearrangement of bits, from a sender to a recipient.

34. A method according to claim 33, wherein data which is encrypted corresponds to an identity of the sender.

35. A method according to claim 33, wherein data which is encrypted corresponds to an identity of the recipient.

36. A method according to claim 33, wherein the transmitting step comprises the step of transmitting the signal over the Internet.

39. The system of claim 35, wherein the message number is encrypted within the header part.

40. The system of claim 39, wherein the communication parameters further include a plurality of private reference tables, and wherein the at least one second computer is configured to additionally utilize one of the private reference tables to encrypt the data part, and wherein the at least one first computer is configured to additionally utilize the one of the private reference tables to decrypt the data part.

41. The system of claim 39, wherein the communication parameters further include a plurality of semi-public reference tables, wherein the at least one second computer is configured to additionally utilize one of the semi-public reference tables to encrypt the header part, and wherein the at least one first computer is configured to additionally utilize the one of the semi-public reference tables to decrypt the header part.

47. The system of claim 35, wherein the at least one first computer is configured to establish the communication parameters.

37. A data transmission system comprising:

at least one first computer communicably connected to a network;

at least one second computer communicably connected to the network and configured to route a transmission to the at least one first computer;

wherein a plurality of communication parameters include (i) a message number, (ii) an encryption algorithm identifier, (iii) a first encryption key comprising a first key part for encryption and a second key part for decryption, and (iv) a second encryption key comprising a third key part for encryption and a fourth key part for decryption,

wherein the at least one second computer is configured to (i) utilize the encryption algorithm identifier, the message number, and the first key part to encrypt a data part of the transmission to the at least one first computer, and (ii) utilize the encryption algorithm identifier and the third key part to encrypt a header part of the transmission, and

wherein the at least one first computer is configured to (i) utilize the encryption algorithm identifier and the fourth key part to decrypt the header part and (ii) utilize the encryption algorithm identifier, the second key part, and the message number to decrypt the data part.

38. The system of claim 37, wherein the network comprises the Internet.

42. The system of claim 37, wherein the communication parameters further include:

(i) a private noise table, (ii) a first noise table key, and (ii) a second noise table key, wherein the at least one second computer is configured to additionally utilize the private noise table and the first noise table key to encrypt the data part, and wherein the at least one first computer is configured to additionally utilize the private noise table, the first noise table key, and the second noise table key to decrypt the data part.

43. The system of claim 42, wherein the at least one first computer maintains the private noise table and the first noise table key in an encrypted format.

44. The system of claim 37, wherein the communication parameters further include:

(i) a semi-public noise table, (ii) a semi-public noise table key, and (iii) a private noise table key, wherein the at least one second computer is configured to additionally utilize the semi-public noise table and the semi-public noise table key to encrypt the header part, and wherein the at least one first computer is configured to additionally utilize the semi-public noise table, the semi-public noise table key, and the private noise table key to decrypt the header part.

45. The system of claim 42, wherein the first computer maintains the semi-public noise table and the semi-public noise table key in an encrypted format.

46. The system of claim 37, wherein the communication parameters further include a list of network ports, wherein the at least one second computer is configured to additionally utilize the list of network ports to encrypt the data part and the header part, and wherein the at least one first computer is configured to additionally utilize the list of network ports to decrypt the data part and the header part.