Method and apparatus for providing secure communications for mobile communication devices

• US 8,515,072 B2
• Filed: 07/27/2010
• Issued: 08/20/2013
• Est. Priority Date: 03/10/2010
• Status: Active Grant

• Current Assignee: Lockheed Martin Corporation (Martin Marietta Corporation)
• Original Assignee: Lockheed Martin Corporation (Martin Marietta Corporation)
• Inventors: Spahic, Victor
• Primary Examiner(s): Zele, Krista
• Assistant Examiner(s): SCOTT, RANDY A
• Application Number:
  US12/844,569
• Publication Number:
  US 20110222689A1
• Time in Patent Office: 1,120 Days
• Field of Search: 380/200, 380/271, 380/270, 713/150, 713/155, 713/172
• US Class Current: 380/270
• CPC Class Codes: H04L 63/0478 applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic

Abstract

A method and apparatus that enables secure communications from a wireless communication device is disclosed. The method may include receiving a signal to transmit data, wherein the data is at least one of voice, text, image, and video, applying a first layer of encryption to the data, applying a second layer of encryption to the data, applying a third layer of encryption to the data, and sending the encrypted data over a communications network.

Claims

1. A method to enable secure communications between a user'"'"'s wireless communication device and a secure data server, comprising:

establishing, with a processor, a first communication link between the user'"'"'s wireless communication device and a wireless communication node, the first communication link requiring user input of first identification information via the user'"'"'s wireless communication device;

establishing, with the processor, a second communication link between the wireless communication node and a communication gateway, the second communication link requiring user input of second identification information via the user'"'"'s wireless communication device, the second identification information being different identification information from the first identification information;

establishing, with the processor, a third communication link between the communication gateway and the secure data server;

exchanging data with the processor between the user'"'"'s wireless communication device and the secure data server via the first, second and third communication links, the data being at least one of voice, text, image, and video data,

wherein;

a first layer of encryption is applied to the data exchanged between the user'"'"'s wireless communication device and the secure data server via the first, second and third communication links,

a second layer of encryption is applied to the data exchanged between the user'"'"'s wireless communication device and the communication gateway via the first and second communication links,

a third layer of encryption is applied to the data exchanged between the user'"'"'s wireless communication device and the wireless communication node via the first communication link.

2. The method of claim 1, wherein the first layer of encryption is one of session layer encryption and presentation layer encryption.

3. The method of claim 1, wherein the second layer of encryption is one of session layer encryption, presentation layer encryption, and network layer encryption.

4. The method of claim 3, wherein the second layer of encryption is one of session layer encryption and presentation layer encryption for communications when the user'"'"'s wireless communication device is one of a wireless telephone and a personal digital assistant (PDA), and network layer encryption for the communications when the user'"'"'s wireless communication device is a wireless laptop computer.

5. The method of claim 1, wherein the third layer of encryption is one of data layer encryption and network layer encryption.

6. The method of claim 5, wherein the third layer of encryption is network layer encryption for communications when the user'"'"'s wireless communication device is one of a wireless telephone and a personal digital assistant (PDA), and data layer encryption for the communications when the user'"'"'s wireless communication device is a wireless laptop computer.

7. The method of claim 1, wherein the user'"'"'s wireless communication device is at least one of a laptop computer, a wireless telephone, a Personal Digital Assistant (PDA), a cellular telephone, an MP3 player, and a camera.

8. A wireless communication device that enables secure communications with a secure data server, comprising:

an input interface by which a user inputs information to the wireless communication device;

a communication interface that facilitates exchanging data with the secure data server; and

a secure communication unit that receives an input to transmit secure data, the secure communication unit (1) establishing a first communication link between the wireless communication device and a wireless communication node after entry of first identification information by a user via input interface, (2) establishing a second communication link between the wireless communication node and a communication gateway after entry of second identification information by the user via the input interface, (3) establishing a third communication link between the communication gateway and the secure data server, and (4) exchanging data with the secure data server via the communication interface and the first, second and third communication links,

wherein;

the data is at least one of voice, text, image, and video data,

a first layer of encryption is applied to the data exchanged between the wireless communication device and the secure data server via the first, second and third communication links,

a second layer of encryption is applied to the data exchanged between the wireless communication device and the communication gateway via the first and second communication links, and

a third layer of encryption is applied to the data exchanged between the wireless communication device and the wireless communication node via the first communication link.

9. The device of claim 8, wherein the first layer of encryption is one of session layer encryption and presentation layer encryption.

10. The device of claim 8, wherein the second layer of encryption is one of session layer encryption, presentation layer encryption, and network layer encryption.

11. The device of claim 10, wherein the second layer of encryption is one of session layer encryption and presentation layer encryption for communications when the device is one of a wireless telephone and a personal digital assistant (PDA), and network layer encryption for the communications when the device is a wireless laptop computer.

12. The device of claim 8, wherein the third layer of encryption is one of data layer encryption and network layer encryption.

13. The device of claim 12, wherein the third layer of encryption is network layer encryption for communications when the device is one of a wireless telephone and personal digital assistant (PDA), and data layer encryption for communications when the device is a wireless laptop computer.

14. The device of claim 8, wherein the device is at least one of a laptop computer, a wireless telephone, a Personal Digital Assistant (PDA), a cellular telephone, an MP3 player, and a camera.

15. A non-transitory computer-readable medium storing instructions which, when executed by a computing device, cause the computing device execute a method to enable secure communications between a wireless communication device and a secure data server, the method comprising:

establishing a first communication link between the wireless communication device and a wireless communication node, the first communication link requiring user input of first identification information via the wireless communication device;

establishing a second communication link between the wireless communication node and a communication gateway, the second communication link requiring user input of second identification information via the wireless communication device, the second identification information being different identification information from the first identification information;

establishing a third communication link between the communication gateway and the secure data server;

exchanging data between the wireless communication device and the secure data server via the first, second and third communication links, the data being at least one of voice, text, image, and video data,

wherein;

a first layer of encryption is applied to the data exchanged between the wireless communication device and the secure data server via the first, second and third communication links,

a second layer of encryption to the data exchanged between the wireless communication device and the communication gateway via the first and second communication links,

a third layer of encryption is applied to the data exchanged between the wireless communication device and wireless communication node via the first communication link.

16. The non-transitory computer-readable medium of claim 15, wherein the first layer of encryption is one of session layer encryption and presentation layer encryption.

17. The non-transitory computer-readable medium of claim 15, wherein the second layer of encryption is one of session layer encryption, presentation layer encryption, and network layer encryption.

18. The non-transitory computer-readable medium of claim 17, wherein the second layer of encryption is one of session layer encryption and presentation layer encryption for communications when the wireless communication device is one of a wireless telephone and personal digital assistant (PDA), and network layer encryption for communications when the wireless communication device is a wireless laptop computer.

19. The non-transitory computer-readable medium of claim 15, wherein the third layer of encryption is one of data layer encryption and network layer encryption.

20. The non-transitory computer-readable medium of claim 19, wherein the third layer of encryption is network layer encryption for communications when the wireless communication device is one of a wireless telephone and personal digital assistant (PDA), and data layer encryption for communications when the wireless communication device is a wireless laptop computer.

21. The non-transitory computer-readable medium of claim 15, wherein the wireless communication device is at least one of a laptop computer, a wireless telephone, a Personal Digital Assistant (PDA), a cellular telephone, an MP3 player, and a camera.