Streaming one time pad cipher using rotating ports for data encryption

• US 8,995,652 B1
• Filed: 11/26/2014
• Issued: 03/31/2015
• Est. Priority Date: 08/09/2013
• Status: Expired due to Fees

• Current Assignee: Introspective Power, Inc.
• Original Assignee: Introspective Power, Inc.
• Inventors: Thompson, Anthony Scott
• Primary Examiner(s): PYZOCHA, MICHAEL J
• Application Number:
  US14/555,277
• Publication Number:
  US 20150082020A1
• Time in Patent Office: 125 Days
• Field of Search: 380/42
• US Class Current: 380/42
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 9/002 Countermeasures against attacks on cryptographic mechanisms network architectures or network communication protocols for protection against malicious traffic H04L63/1441
• CPC Class Codes: H04L 9/0656 Pseudorandom key sequence combined element-for-element with data sequence, e.g. one-time-pad [OTP] or Vernam's cipher

Abstract

A streaming one time pad cipher using rotating ports for data encryption uses a One Time Pad (OTP) and an Exclusive Or (XOR) (or other cipher) with a public key channel to encrypt and decrypt OTP data. There is no method in cryptography to thwart the OTP/XOR method and it is proven impossible to crack. The method also rotates the ports of the channels periodically to increase communication obfuscation. Through pre-fetching and cache of OTP data, latency increases from encryption are kept to an absolute minimum as the XOR for encryption and decryption is done with a minimal number of instructions.

Claims

1. A system for securely communicating data across a data network comprising:

at least one sending computer system including a processor coupled to memory connected to a network, at least one receiving computer system connected to the network,

the network providing a least one communication path for communicating information from the sending computer system to the receiving computer system,

at least one sending computer system being configured to send at least one message and/or data stream across the network to the receiving computer system,

the sending computer system being configured to generate a random, non-repeating One Time Pad (OTP) for use in encrypting at least one message for sending across the network to the receiving computer system,

the sending computer system being configured to create multiple logical or physical ports for the message and/or data stream to traverse the network to provide multiple connections on different ports across the network path(s) between the sending computer system and the receiving computer system,

the sending computer system and the receiving computer system being configured to communicate over the network via a first communication channels

on a first port, a second communication channel on a second port and a third communication channel on a third port,

the sending computer system being configured to conceal a message with a first calculation using a first One Time Pad to produce a first encrypted stream, the sending computer system sending the first encrypted stream to the receiving computer system over the first communication channel;

the sending computer system being configured to use a second calculation based on the first One Time Pad and a second One Time Pad to produce a second encrypted stream, the sending computer system sending the second encrypted stream to the receiving computer system over the second communication channel,

the sending computer system being configured to encrypt the second One Time Pad to produce cipher text and sending the cipher text to the receiving computer system over the third communication channel,

the receiving computer system being configured to (a) receive and decrypting the cipher text to recover the second One Time Pad, (b) receive the second encrypted stream, (c) use the recovered second One Time Pad on the received second encrypted stream to reveal the first One Time Pad, (d) receive the first encrypted stream, and (e) use the recovered first One Time Pad on the received first encrypted stream to recover the message.

2. The system of claim 1 further including a further computer system that securely provides the non-repeating, OTP ciphers to both the sending computer system and the receiving computer system.

3. The system of claim 2 wherein the non-repeating, OTP ciphers change over time.

4. The system of claim 1 further including a further computer system that securely provides channel control messages to both the sending computer system and the receiving computer system.

6. The system of claim 1 wherein the sending computer comprises a single arithmetic unit that has an inverse operator configured to perform the first and second calculations.

7. The system of claim 1 wherein the sending computer system and the receiving computer system are configured to communicate control information therebetween over an encrypted control channel.

8. The system of claim 1 wherein the sending computer system is configured to send across distinct physical network paths.

9. The system of claim 1 wherein the sending computer system is configured to periodically rotate ports/channels.

10. The system of claim 1 wherein the sending computer system is configured to rotate at least some of the communication channels across optical or other wavelengths.

11. The system of claim 1 wherein the sending computer system is configured to rotate logical ports with separate IP addresses.

12. The system of claim 11 wherein the sending computer system is configured to rotate only Internet Protocol ports.

13. The system of claim 1 wherein the sending computer system is configured to rotate control information onto different channels.

14. The system of claim 1 wherein the sending computer system is configured to send randomized information to the receiving computer system over at least one phantom or decoy channel.

15. The system claim 1 wherein the sending computer system is configured to change an arithmetic unit used for generating the first and second streams over time to further obfuscate the data.

16. The system of claim 1 wherein the sending computer system is configured to alter or change control messages over time using a series of message groups to further obfuscate the data.

17. The system of claim 1 wherein the sending computer system is configured to pre-encrypt control messages prior to channel level encryption to further obfuscate the messages and stop possible known repeating strings from being sent across the control channel.

5. The system of 4 wherein the channel control messages change over time.

18. A system for securely transporting information from a sending computing system to a receiver computing system comprising:

a) a One Time Pad (OTP) encryption mechanism using a first One Time Pad to send a message across a communication channel;

b) One Time Pad (OTP) encryption mechanism encrypting the first One Time Pad being encrypted using a further One Time Pad to send the result across a separate and distinct communication channel;

c) the One Time Pad (OTP) encryption mechanism encrypting the further One Time Pad N-1 times to be sent across N-1 further separate and distinct communication channels;

d) a data encryption mechanism encrypting the N-1th One Time Pad to be sent to the receiver computing system over an Nth channel;

e) the receiver computing system including a processor coupled to memory, and a decryption unit using the encryption mechanism that decrypts the Nth channel to reveal the N-1th One Time Pad;

f) the receiving computing system including a One Time Pad (OTP) decryption mechanism that reverses the encryption process to successively reveal each of the N-1 One Time Pads to thereby recover the first One Time Pad and uses the recovered first One Time Pad to reveal the message.

19. The system of claim 18 further including a further computer system that securely provides the non-repeating, OTP ciphers to both the sending computer system and the receiving computer system.

20. The system of claim 19 wherein the non-repeating, OTP ciphers change over time.

21. The system of claim 18 further including a further computer system that securely provides channel control messages to both the sending computer system and the receiving computer system.

23. The system of claim 18 wherein the first and second calculations use a single arithmetic unit that has an inverse operator.

24. The system of claim 18 wherein the sending computer system and the receiving computer system communicate control information therebetween over an encrypted control channel.

25. The system of claim 18 wherein the sending computer system sends across distinct physical network paths.

26. The system of claim 18 wherein the sending computer system periodically rotates ports/channels.

27. The system of claim 18 wherein the sending computer system rotates at least some of the communication channels across optical or other wavelengths.

28. The system of claim 18 wherein the sending computer system rotates logical ports with separate IP addresses.

22. The system of 21 wherein the channel control messages change over time.

29. A secure data transmitter for securely communicating data across a data network providing a least one communication path for communicating information, the secure data transmitter being configured to send at least one message and/or data stream across the network, the secure data transmitter comprising:

a One Time Pad (OTP) generator configured to generate a random, non-repeating One Time Pad (OTP) for use in encrypting at least one message,

a port manager configured to create multiple logical or physical ports for the message and/or data stream to traverse the network to provide multiple connections on different ports across the network path(s),

a data communicator configured to communicate over the network via a first communication channels on a first port, a second communication channel on a second port and a third communication channel on a third port,

an encryptor configured to conceal a message with a first calculation using a first One Time Pad to produce a first encrypted stream, the data communicator further configured to send the first encrypted stream over the first communication channel;

the encryptor being configured to use a second calculation based on the first One Time Pad and a second One Time Pad to produce a second encrypted stream, the data communicator being further configured to send the second encrypted stream over the second communication channel,

the encryptor being further configured to encrypt the second One Time Pad to produce cipher text, the data communicator being further configured to send the cipher text over the third communication channel,

the sending computer system including a processor coupled to memory being configured to generate a random, non-repeating One Time Pad (OTP) for use in encrypting at least one message for sending across the network to the receiving computer system.

30. A data receiver for securely receiving data communicated across a data network providing a least one communication path, the data receiver comprising:

a data receiver including a processor coupled to memory configured to receive at least one message and/or data stream sent across the network,

the data receiver being configured to receive the message and/or data stream data via multiple logical or physical ports to provide multiple connections on different ports across the network path(s),

the data receiver being further configured to receive data over the network via a first communication channels on a first port, a second communication channel on a second port and a third communication channel on a third port,

the data receiver being further configured to receive, over the first communication channel, a first encrypted stream encoding a message concealed with a first calculation using a first One Time Pad;

the data receiver being further configured to receive, over the second communication channel, a second encrypted stream enciphered using a second calculation based on the first One Time Pad and a second One Time Pad,

the data receiver being further configured to receive, over the third communication channel, cipher text encrypted with the second One Time Pad, and

a data decryptor coupled to the data receiver and configured to decrypt the received cipher text to recover the second One Time Pad, use the recovered second One Time Pad on the received second encrypted stream to reveal the first One Time Pad, and use the recovered first One Time Pad on the received first encrypted stream to recover the message.