Modular cryptographic device providing multi-mode wireless LAN operation features and related methods

• US 9,003,199 B2
• Filed: 03/23/2004
• Issued: 04/07/2015
• Est. Priority Date: 03/23/2004
• Status: Active Grant

• Current Assignee: Harris Global Communications, Inc. (L3Harris Technologies, Inc.)
• Original Assignee: Harris Corporation (L3Harris Technologies, Inc.)
• Inventors: Dellmo, Russell Wayne, Petkus, Eric Edmond, Yancy, Bruce Wayne
• Primary Examiner(s): Najjar, Saleh
• Assistant Examiner(s): Pan, Peiliang
• Application Number:
  US10/806,668
• Publication Number:
  US 20050216751A1
• Time in Patent Office: 4,032 Days
• Field of Search: 703/1, 703/2, 703/188, 703/194, 380/200, 380/201, 380/255, 380/277, 726/2, 713/1, 713/2, 713/188, 713/194, 713/189, 713/190, 713/191, 370/463, 370/465, 710/301
• US Class Current: 713/189
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: H04L 63/0485 Networking architectures for enhanced packet encryption processing, e.g. offloading of IPsec packet processing or efficient security association look-up
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic

Abstract

A cryptographic device may include a cryptographic module and a communications module removably coupled thereto. The cryptographic module may include a first housing, a user Local Area Network (LAN) interface carried by the first housing, and a cryptographic processor carried by the first housing and coupled to the user LAN interface. The communications module may include a second housing and a network wireless LAN interface carried by the second housing. The network wireless LAN interface may be coupled to the cryptographic processor, and it may be switchable between wireless LAN modes.

Claims

1. A cryptographic device comprising:

a cryptographic module and a communications module removably coupled thereto;

said cryptographic module comprising

a first housing,

a user Local Area Network (LAN) interface carried by said first housing,

a cryptographic processor carried by said first housing and coupled to said user LAN interface, and

a tamper circuit for disabling said cryptographic processor the tamper circuit is for disabling the cryptographic processor by disrupting power to the cryptographic processor based upon tampering with said first housing, said tamper circuit comprising at least one conductive trace printed on at least the inside of said first housing so that power to said cryptographic processor is disabled based upon a break in said at least one conductive trace;

said communications module comprising

a second housing, and

a network wireless LAN interface carried by said second housing, coupled to said cryptographic processor and switchable between wireless LAN modes.

2. The cryptographic device of claim 1 wherein said network wireless LAN interface circuit is switchable to one of an access point (AP) mode, an infrastructure mode, and an ad-hoc mode.

3. The cryptographic device of claim 1 wherein said cryptographic module further comprises a first connector carried by said first housing and coupled to said cryptographic processor;

wherein said communications module further comprises a second connector carried by said second housing and connected to said network wireless LAN interface, said second connector being removably mateable with said first connector of said cryptographic module.

4. The cryptographic device of claim 1 wherein said user LAN interface comprises an Ethernet interface.

5. The cryptographic device of claim 1 further comprising a power circuit carried by said first housing and powering said cryptographic processor, said user LAN interface, and said network LAN interface.

6. The cryptographic device of claim 1 wherein said cryptographic processor implements an encryption algorithm to provide a predetermined security level.

7. The cryptographic device of claim 1 wherein said cryptographic processor comprises:

a host network processor coupled to said user LAN interface; and

a cryptography circuit coupled to said host network processor.

8. The cryptographic device of claim 7 wherein said cryptographic processor further comprises:

an encrypted data buffer circuit coupled between said user LAN interface and said cryptography circuit; and

an unencrypted data buffer circuit coupled between said cryptography circuit and said network LAN interface.

9. The cryptographic device according to claim 1 wherein said user LAN comprises a plurality of different connectors for coupling the cryptographic module to different network devices.

10. A cryptographic device comprising:

a cryptographic module and a communications module removably coupled thereto;

said cryptographic module comprising

a first housing,

a user Local Area Network (LAN) interface carried by said first housing,

a cryptographic processor carried by said first housing and coupled to said user LAN interface, and

a tamper circuit for disabling said cryptographic processor based upon tampering with said first housing, said tamper circuit comprising at least one conductive trace printed on at least the inside of said first housing so that power to said cryptographic processor is disabled based upon a break in said at least one conductive trace;

said communications module comprising a second housing and a network wireless LAN interface carried by said second housing;

said communications module comprising a predetermined one from among a plurality of interchangeable communications modules, and said network wireless LAN interfaces of said plurality of interchangeable communications modules each operating using a different wireless LAN mode.

11. The cryptographic device of claim 10 wherein the different wireless LAN modes comprise an access point (AP) mode, an infrastructure mode, and an ad-hoc mode.

12. The cryptographic device of claim 10 wherein said cryptographic module further comprises a first connector carried by said first housing and coupled to said cryptographic processor;

wherein said communications module further comprises a second connector carried by said second housing and connected to said network wireless LAN interface, said second connector being removably mateable with said first connector of said cryptographic module.

13. The cryptographic device of claim 10 wherein said user LAN interface comprises an Ethernet interface.

14. The cryptographic device of claim 10 further comprising a power circuit carried by said first housing and powering said cryptographic processor, said user LAN interface, and said network LAN interface.

15. The cryptographic device of claim 10 wherein said cryptographic processor implements an encryption algorithm to provide a predetermined security level.

16. The cryptographic device of claim 10 wherein said cryptographic processor comprises:

a host network processor coupled to said user LAN interface; and

a cryptography circuit coupled to said host network processor.

17. The cryptographic device of claim 16 wherein said cryptographic processor further comprises:

an encrypted data buffer circuit coupled between said user LAN interface and said cryptography circuit; and

an unencrypted data buffer circuit coupled between said cryptography circuit and said network LAN interface.

18. The cryptographic device according to claim 10 wherein said user LAN comprises a plurality of different connectors for coupling the cryptographic module to different network devices.

19. A communications method comprising:

coupling a cryptographic module to a Local Area Network (LAN) device, the cryptographic module comprising a first housing, a user LAN interface carried by the first housing, a cryptographic processor carried by the first housing and coupled to the user LAN interface, and a tamper circuit for disabling the cryptographic processor based upon tampering with the first housing, the tamper circuit comprising at least one conductive trace printed on at least the inside of the first housing so that power to the cryptographic processor is disabled based upon a break in the at least one conductive trace;

providing a communications module comprising a second housing and a network wireless LAN interface carried by the second housing and removably coupled to the cryptographic module; and

switching the network wireless LAN interface between wireless LAN modes, and using the network wireless LAN to communicate with a wireless LAN.

20. The method of claim 19 wherein switching comprises switching the network wireless LAN interface circuit to one of an access point (AP) mode, an infrastructure mode, and an ad-hoc mode.

21. The method of claim 19 wherein the cryptographic module further comprises a first connector carried by the first housing and coupled to the cryptographic processor;

wherein the communications module further comprises a second connector carried by the second housing and connected to the network wireless LAN interface; and

wherein removably coupling comprises removably mating the second connector to the first connector.

22. The method of claim 19 wherein the user LAN interface comprises an Ethernet interface.

23. A communications method comprising:

coupling a cryptographic module to a Local Area Network (LAN) device, the cryptographic module comprising a first housing, a user Local Area Network (LAN) interface carried by the first housing, and a cryptographic processor carried by the first housing and coupled to the user LAN interface, and a tamper circuit for disabling the cryptographic processor based upon tampering with the first housing, the tamper circuit comprising at least one conductive trace printed on at least the inside of the first housing so that power to the cryptographic processor is disabled based upon a break in the at least one conductive trace;

coupling the user LAN interface to a LAN device;

removably coupling one of a plurality of communications modules to the cryptographic module, the communications module comprising a second housing and a network wireless LAN interface carried by the second housing, and the network wireless LAN interfaces of the plurality of interchangeable communications modules each operating in a different wireless LAN mode; and

using the removably coupled communications module to communicate with a LAN.

24. The method of claim 23 wherein the different wireless LAN modes comprise an access point (AP) mode, an infrastructure mode, and an ad-hoc mode.

25. The method of claim 23 wherein the cryptographic module further comprises a first connector carried by the first housing and coupled to the cryptographic processor;

wherein the communications module further comprises a second connector carried by the second housing and connected to the network wireless LAN interface; and

wherein removably connecting comprises removably mating the second connector with the first connector of the cryptographic module.

26. The method of claim 23 wherein the user LAN interface comprises an Ethernet interface.

27. A communications system comprising:

a plurality of Local Area Network (LAN) devices coupled together to define a wireless LAN, and a cryptographic device coupled to at least one of said LAN devices;

said cryptographic device comprising a cryptographic module coupled to said at least one LAN device, and a communications module removably coupled to said cryptographic module;

said cryptographic module comprising

a first housing,

a user LAN interface carried by said first housing,

a cryptographic processor carried by said first housing and coupled to said user LAN interface, and

a tamper circuit for disabling said cryptographic processor based upon tampering with said first housing,

said tamper circuit comprising at least one conductive trace printed on at least the inside of said first housing so that power to said cryptographic processor is disabled based upon a break in said at least one conductive trace;

said communications module comprising

a second housing, and

a network wireless LAN interface carried by said second housing, coupled to said cryptographic processor and switchable between wireless LAN modes.

28. The communications system of claim 27 wherein said network wireless LAN interface circuit is switchable to one of an access point (AP) mode, an infrastructure mode, and an ad-hoc mode.

29. The communications system of claim 27 wherein said cryptographic module further comprises a first connector carried by said first housing and coupled to said cryptographic processor;

wherein said communications module further comprises a second connector carried by said second housing and connected to said network wireless LAN interface, said second connector being removably mateable with said first connector of said cryptographic module.

30. The communications system of claim 27 wherein said user LAN interface comprises an Ethernet interface.

31. The communications system of claim 27 further comprising a power circuit carried by said first housing and powering said cryptographic processor, said user LAN interface, and said network LAN interface.

32. The communications system of claim 27 wherein said cryptographic processor implements an encryption algorithm to provide a predetermined security level.

33. The communications system of claim 27 wherein said cryptographic processor comprises:

a host network processor coupled to said user LAN interface; and

a cryptography circuit coupled to said host network processor.

34. The communications system of claim 33 wherein said cryptographic processor further comprises:

an encrypted data buffer circuit coupled between said user LAN interface and said cryptography circuit; and

an unencrypted data buffer circuit coupled between said cryptography circuit and said network LAN interface.