Selective downlink data encryption system for satellites

• US 9,001,642 B2
• Filed: 02/23/2012
• Issued: 04/07/2015
• Est. Priority Date: 09/23/2011
• Status: Active Grant

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: Blanchard, Duane L., Corbett, Angelia Mae
• Primary Examiner(s): Moore, Ian N
• Assistant Examiner(s): MCCALLUM, LATRESA A
• Application Number:
  US13/403,669
• Publication Number:
  US 20130077788A1
• Time in Patent Office: 1,139 Days
• Field of Search: None
• US Class Current: 370/216
• CPC Class Codes: H04B 7/1851 Systems using a satellite or space-based relay H04B7/18508, H04B7/18521 take precedence; providing specific services H04B7/18523 - H04B7/18576
• CPC Class Codes: H04B 7/18519 Operations control, administration or maintenance
• CPC Class Codes: H04B 7/18593 Arrangements for preventing unauthorised access or for providing user protection arrangements for secret or secure communication H04L9/00

Abstract

A method and apparatus for a satellite system. A satellite system is comprised of a communications system in a satellite and a number of computers associated with the satellite. The communications system is configured to receive first information and transmit second information from the satellite to a remote platform over a number of communications links. The number of computers is configured to identify a block of information for encryption from instructions in the first information. The number of computers is further configured to generate a key from a portion of the block of information based on the instructions. The number of computers is further configured to perform an exclusive OR operation on the block of information using the key to form a block of encrypted information. The number of computers is further configured to transmit the block of encrypted information.

Claims

1. A satellite system comprising:

a communications system in a satellite, wherein the communications system is configured to receive first information from a particular operator of a plurality of operators; and

a number of computers associated with the satellite, wherein the number of computers is configured to avoid conflicts between information sent by the communications system to the satellite from different operators in the plurality of operators that cause an undesired operation of the satellite, identify a block of information for encryption from instructions in the first information received by the communications system in the satellite, generate a key for the particular operator from a portion of the block of information identified in the first information based on the instructions in the first information from the particular operator, and encrypt the block of information using the key for the particular operator to form a block of encrypted information, and transmit the block of encrypted information to a remote platform over a number of communications links.

2. The satellite system of claim 1, wherein the instructions comprise an identification of at least one of the block of information and a portion of the block of information.

3. The satellite system of claim 1, wherein the number of computers is further configured to identify the block of information from a plurality of blocks of information for encryption.

4. The satellite system of claim 1, wherein the block of information comprises telemetry.

5. The satellite system of claim 4, wherein the telemetry comprises commands received in the first information and processed by the number of computers.

6. The satellite system of claim 1, wherein in being configured to generate the key for the particular operator from the portion of the block of information, the number of computers is configured to perform at least one of reversal, inversion, reduplication, mirroring, and mirroring with inversion on the portion of the block of information to form the key.

7. The satellite system of claim 1, wherein in being configured to transmit the block of encrypted information, the number of computers is configured to transmit the block of encrypted information to an operations center.

8. The satellite system of claim 1, wherein the portion of the block of information is a word.

9. The satellite system of claim 1, wherein the number of computers comprises a first module and a second module, wherein the first module is configured to decrypt commands in the first information and wherein the second module is configured to process the commands, identify the block of information generated in response to processing the commands from the instructions in the first information, generate the key for the particular operator from the portion of the block of information based on the instructions, encrypt the block of information using the key for the particular operator to form the block of encrypted information, and transmit the block of encrypted information.

10. The satellite system of claim 1 further comprising:

a computer system in a location remote to the satellite, wherein the computer system is configured to receive the block of encrypted information and decrypt the block of encrypted information using the key for the particular operator.

11. The satellite system of claim 1, wherein in being configured to identify the block of information for encryption from instructions in the first information received by the communications system in the satellite, the number of computers is configured to identify another block of information to not encrypt from other instructions in second information received by the communications system in the satellite from another operator in the plurality of operators.

12. A satellite system comprising:

a first module in a satellite, wherein the first module is configured to receive first information from a particular operator of a plurality of operators;

avoid conflicts between information sent from different operators in the plurality of operators that cause an undesired operation of the satellite; and

decrypt commands in the first information; and

a second module in the satellite, wherein the second module is configured to process the commands decrypted by the first module, generate a key for the particular operator from a portion of a block of information including a number of commands processed, encrypt a block of telemetry using the key for the particular operator to form a block of encrypted information, and transmit the block of encrypted information.

13. The satellite system of claim 12, wherein the second module is further configured to identify the block of information.

14. The satellite system of claim 12, wherein the second module is configured to identify the block of information from instructions received in the first information and generate the key for the particular operator from the portion of the block of information including the number of commands processed based on the instructions received in the first information.

15. The satellite system of claim 12, wherein the block of information comprises telemetry, and wherein the telemetry comprises the commands received in the first information by the first module and processed by the second module.

16. The satellite system of claim 12, wherein in being configured to generate the key for the particular operator from the portion of the block of information, the second module is configured to perform at least one of reversal, inversion, reduplication, mirroring, and mirroring with inversion on the portion of the block of information to form the key.

17. The satellite system of claim 12 further comprising:

a computer system in a location remote to the satellite, wherein the computer system is configured to receive the block of encrypted information and decrypt the block of encrypted information using the key for the particular operator.

18. A method for transmitting information, the method comprising:

receiving in an uplink at a satellite first information from a particular operator of a plurality of operators;

processing commands received in the first information while avoiding conflicts between information sent from different operators in the plurality of operators that cause an undesired operation of the satellite;

identifying a block of information resulting from processing the commands received in the first information in the uplink at the satellite;

generating a key for the particular operator from a portion of the block of information resulting from processing the commands received in the first information in the uplink at the satellite based on instructions received in the first information in the uplink at the satellite;

encrypting the block of information using the key for the particular operator to form a block of encrypted information; and

transmitting the block of encrypted information from the satellite in a downlink.

19. The method of claim 18, wherein identifying the block of information resulting from processing the commands comprises:

identifying the block of information resulting from processing the commands based on the instructions received in the first information in the uplink.

20. The method of claim 18, wherein generating the key for the particular operator from the portion of the block of information based on the instructions received in the first information comprises:

performing at least one of reversal, inversion, reduplication, mirroring, and mirroring with inversion on the portion of the block of information to form the key for the particular operator based on the instructions received in the first information.