Standard telephone equipment (STE) based deployable secure communication system

• US 8,295,273 B2
• Filed: 11/13/2009
• Issued: 10/23/2012
• Est. Priority Date: 09/15/2003
• Status: Expired due to Fees

• Current Assignee: TeleCommunication Systems Inc (Comtech Telecommunications Corporation)
• Original Assignee: TeleCommunication Systems Inc (Comtech Telecommunications Corporation)
• Inventors: Anspach, Steve S.
• Primary Examiner(s): Scheibel, Robert
• Application Number:
  US12/591,234
• Publication Number:
  US 20100067696A1
• Time in Patent Office: 1,075 Days
• Field of Search: None
• US Class Current: 370/352
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04M 7/0078 Security; Fraud detection; Fraud prevention
• CPC Class Codes: H04M 7/1245 where a network other than PSTN/ISDN interconnects two PSTN/ISDN networks

Abstract

Sensitive, Standard Telephone Equipment (STE) data is encapsulated into IP packets in a remotely deployed, secure communication system. The IP packets are addressed to a matching IP encapsulator/decapsulator device over the public Internet or other IP protocol network, that then passes it to a similar STE device over an ISDN link for decryption. The present invention is embodied in a system that provides secure Voice-Over-IP (VOIP), video and data network functionality in a single, small size deployable case, to a remote user. Most importantly, the embodiment allows for the routing of bulk encrypted (i.e., secure) data over a public network, e.g., the Internet.

Claims

1. A method of cloaking encrypted data communications, comprising:

formulating, with an encryption device within a portable secure communication system, a single digitally encrypted secure serial data stream from at least one of a telephony signal and a data signal;

establishing a first secure data tunnel between a local black side router within said portable secure communication system and a remote gateway router; and

establishing a second data tunnel between a local digital data packet encapsulator of said portable secure communication system and a remote digital data packet encapsulator;

wherein said first data tunnel and said second data tunnel mask a unique signature produced by said encryption device.

2. The method of cloaking encrypted data communications according to claim 1, further comprising:

providing a routing communication path for said single digitally encrypted secure serial data stream with said second data tunnel.

3. The method of cloaking encrypted data communications according to claim 1, further comprising:

presenting a commercial/civilian appearance to said single digitally encrypted secure serial data stream with said first data tunnel.

4. The method of cloaking encrypted data communications according to claim 1, further comprising:

encapsulating said single digitally encrypted secure serial data stream into IP data packets.

5. The method of cloaking encrypted data communications according to claim 1, further comprising:

communicating said single digitally encrypted secure serial data stream on a public non-secure IP network.

6. The method of cloaking encrypted data communications according to claim 5, wherein:

said public non-secure IP network is the Internet.

7. The method of cloaking encrypted data communications according to claim 1, further comprising:

transmitting said digital data packets via an ISDN router.

8. The method of cloaking encrypted data communications according to claim 1, further comprising:

transmitting said digital data packets over a satellite terminal.

9. The method of cloaking encrypted data communications according to claim 1, further comprising:

encrypting said single digitally encrypted secure serial data stream using a KIV-7 encryption device.

10. The method of cloaking encrypted data communications according to claim 1, wherein:

said single digitally encrypted secure serial data stream is a 2B plus D ISDN serial data stream containing both voice and data information.

11. A system for cloaking encrypted data communications, comprising:

an encryption device, of within a portable secure communication system, to formulate a single digitally encrypted secure serial data stream from at least one of a telephony signal and a data signal;

a first secure data tunnel between a local black side router of within said portable secure communication system and a remote gateway router; and

a second data tunnel between a local digital data packet encapsulator of said portable secure communication system and a remote digital data packet encapsulator;

wherein said first data tunnel and said second data tunnel mask a unique signature produced by said encryption device.

12. The system for cloaking encrypted data communications according to claim 11, wherein:

said second data tunnel provides a routing communication path for said single digitally encrypted secure serial data stream.

13. The system for cloaking encrypted data communications according to claim 11, wherein:

said first data tunnel presents a commercial/civilian appearance to said single digitally encrypted secure serial data stream.

14. The system for cloaking encrypted data communications according to claim 11, wherein:

said local digital data packet encapsulator encapsulates said single digitally encrypted secure serial data stream into IP data packets.

15. The system for cloaking encrypted data communications according to claim 11, wherein:

said single digitally encrypted secure serial data stream is communicated on a public non-secure IP network.

16. The system for cloaking encrypted data communications according to claim 15, wherein:

said public non-secure IP network is the Internet.

17. The system for cloaking encrypted data communications according to claim 11, wherein:

said digital data packets are transmitted via an ISDN router.

18. The system for cloaking encrypted data communications according to claim 11, wherein:

said digital data packets are transmitted over a satellite terminal.

19. The system for cloaking encrypted data communications according to claim 11, wherein:

said single digitally encrypted secure serial data stream is encrypted using a KIV-7 encryption device.

20. The system for cloaking encrypted data communications according to claim 11, wherein:

said single digitally encrypted secure serial data stream is a 2B plus D ISDN serial data stream containing both voice and data information.