Communication network with secure access for portable users

• US 8,406,427 B2
• Filed: 10/13/2009
• Issued: 03/26/2013
• Est. Priority Date: 10/13/2009
• Status: Expired due to Fees

• Current Assignee: BAE Systems Information and Electronic Systems Integration Incorporated (BAE Systems Plc)
• Original Assignee: BAE Systems Information and Electronic Systems Integration Incorporated (BAE Systems Plc)
• Inventors: Chand, Naresh, Eteson, Bruce M.
• Primary Examiner(s): Homayounmehr, Farid
• Assistant Examiner(s): LEWIS, LISA C
• Application Number:
  US12/587,743
• Publication Number:
  US 20110087879A1
• Time in Patent Office: 1,260 Days
• Field of Search: None
• US Class Current: 380/255
• CPC Class Codes: H04K 2203/14 for the transfer of light or images, e.g. for video-surveillance, for television or from a computer screen
• CPC Class Codes: H04K 2203/18 for wireless local area networks or WLAN
• CPC Class Codes: H04K 3/25 based on characteristics of target signal or of transmission as countermeasure against surveillance H04K3/827, e.g. using direct sequence spread spectrum or fast frequency hopping spread spectrum techniques H04B1/69
• CPC Class Codes: H04K 3/827 using characteristics of target signal or of transmission as countermeasure against jamming H04K3/25, e.g. using direct sequence spread spectrum or fast frequency hopping spread spectrum techniques H04B1/69
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

A communication network includes a local area network (LAN) and a wireless access point coupled to the LAN. In one embodiment, each access point includes a medium access control (MAC) stage, and a radio frequency (RF) transmitter/receiver for communicating unsecure message data via RF links with users of associated wireless devices. An optical transmitter/receiver in the access point enables the users to communicate secure message data over the LAN via free space optical (FSO) links with the users. The MAC stage operates (i) to direct unsecure data from the LAN to the wireless device users and to direct unsecure data from the users to the LAN, via the RF transmitter/receiver; and (ii) to direct secure data from the LAN to the wireless device users and to direct secure data from the users to the LAN, via the optical transmitter/receiver. An integrated VoIP/FSO portable handset is also disclosed.

Claims

1. A communication network, comprising:

a local area network (LAN);

one or more wireless network access points coupled to the LAN, wherein a given network access point includes;

a medium access control (MAC) stage;

a radio frequency (RF) transmitter/receiver arranged for transmitting and receiving RF signals to and from associated wireless devices, and for enabling users of the wireless devices to gain access to the LAN by way of RF links with the access point;

an optical transmitter/receiver arranged for transmitting and receiving light signals to and from the wireless devices, and for enabling users of the wireless devices to gain access to the LAN through free space optical (FSO) links with the access point;

the MAC stage is configured (i) to direct unsecure first voice data originating from the LAN to users of the wireless devices, and to direct unsecure second voice data received from the users of the wireless devices to the LAN, by way of the RF transmitter/receiver; and

(ii) to direct secure third voice data originating from the LAN to users of the wireless devices, and to direct secure fourth voice data received from the users of the wireless devices to the LAN, by way of the optical transmitter/receiver; and

an optical access antenna system coupled to the optical transmitter/receiver of the network access point, wherein at least a part of the antenna system is arranged to be within an optical range of one or more users of the wireless devices;

a decrypto processor having an input coupled to the MAC stage and an output coupled to the optical transmitter/receiver, and the decrypto processor is configured to decode encrypted secure third voice data received from the LAN and destined to the users of the wireless devices, and to produce corresponding decrypted secure third voice data at the output of the processor;

a crypto device having an output coupled to the MAC stage and operative to encrypt unencrypted secure fourth voice data received at an input of the device from users of the wireless devices and destined to the LAN, and to supply the encrypted secure fourth voice data to the MAC stage of the access point; and

one or more wireless handsets constituting the wireless devices, wherein each handset includes;

a source of unencrypted voice data;

a radio frequency (RF) transceiver constructed and arranged for transmitting RF signals corresponding to unsecure second voice data from the voice data source to at least one of the network access points, and for receiving RF signals corresponding to unsecure first voice data from the access point;

an optical transceiver for transmitting free space optical (FSO) signals corresponding to secure fourth voice data from the voice data source to the optical access antenna system, and for receiving FSO signals corresponding to secure decrypted third voice data from the optical access antenna system; and

a switching stage having a first port coupled to the source of voice data, a second port coupled to the RF transceiver, and a third port coupled to the optical transceiver, wherein the switching stage is configured to couple the source of voice data to a selected one of the RF transceiver for transmission of the unsecure second voice data, and the optical transceiver for transmission of the secure fourth voice data.

2. The communication network according to claim 1, wherein the antenna system comprises a number of optical antennas arrayed in a grid configuration.

3. The communication network according to claim 2, wherein the antenna system comprises a passive optical network (PON) connected between the optical transmitter/receiver of the network access point, and each of the optical antennas.

4. The communication network according to claim 1, wherein the antenna system comprises electrical-to-optical (E/O) converters associated with the optical antennas, and a wire cable distribution system connected at one end to the E/O converters, and at an opposite end to the decrypto processor and the crypto device of the given network access point.

5. The communication network according to claim 1, wherein the source of unencrypted voice data in a given handset comprises a microphone transducer.

6. The communication network according to claim 1, wherein the source of unencrypted voice data in a given handset includes an encoder stage configured to convert analog voice signals into corresponding digital data according to a voice over Internet protocol (VoIP).

7. The communication network according to claim 6, wherein a given handset includes a decoder stage for converting (a) voice data modulated on the RF signals received from a given network access point, and (b) voice data modulated on the light signals received from the optical access antenna system of the network, into corresponding analog voice signals.

8. The communication network according to claim 1, wherein a given handset includes an indicator stage coupled to the optical transceiver of the handset for alerting a user when light signals from the optical access antenna system of the network are detected by the optical transceiver.