Streaming one time pad cipher using rotating ports for data encryption

• US 9,584,313 B2
• Filed: 12/16/2013
• Issued: 02/28/2017
• Est. Priority Date: 08/09/2013
• Status: Active Grant

• Current Assignee: Introspective Power, Inc.
• Original Assignee: Introspective Power, Inc.
• Inventors: Thompson, Anthony Scott
• Primary Examiner(s): PYZOCHA, MICHAEL J
• Application Number:
  US14/107,158
• Publication Number:
  US 20150043730A1
• Time in Patent Office: 1,170 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 9/002 Countermeasures against attacks on cryptographic mechanisms network architectures or network communication protocols for protection against malicious traffic H04L63/1441
• CPC Class Codes: H04L 9/0656 Pseudorandom key sequence combined element-for-element with data sequence, e.g. one-time-pad [OTP] or Vernam's cipher

Abstract

A streaming one time pad cipher using rotating ports for data encryption uses a One Time Pad (OTP) and an Exclusive Or (XOR) (or other cipher) with a public key channel to encrypt and decrypt OTP data. There is no method in cryptography to thwart the OTP/XOR method and it is proven impossible to crack. The method also rotates the ports of the channels periodically to increase communication obfuscation. Through pre-fetching and cache of OTP data, latency increases from encryption are kept to an absolute minimum as the XOR for encryption and decryption is done with a minimal number of instructions.

Claims

1. A method for communicating information securely comprising:

(a) transmitting, with a data transmitter over plural rotating channels and randomly rotating ports, to securely stream an encrypted one time pad to a receiver, wherein encrypting, and transmitting over the plural rotating channels and randomly rotating ports conceal the transmitted one time pad from an eavesdropper;

(b) using at least one processor, encrypting at least one message(s) using the one time pad;

(c) using the same or different data transmitter, transmitting the encrypted at least one message(s) to the receiver while the data transmitter streams said encrypted one-time pad to the receiver over the plural rotating channels and randomly rotating ports;

(d) controlling rotation between said plural rotating channels;

(e) using an encrypted control channel to securely coordinate the data transmitter and receiver to randomly rotate between said randomly rotating ports; and

(f) using a virtual port to faç

ade communication of the at least one message(s) at a network layer.

2. The method of claim 1 wherein the encrypting comprises XORing the at least one message with the one time pad.

3. The method of claim 1 wherein one time pad streaming is performed over secure public key encrypted channels.

4. The method of claim 1 wherein transmitting the encrypted at least one message comprises sending the at least one message in different parts over different randomly rotating ports.

5. The method of claim 1 wherein sending over rotating channels comprises using random rotation offsets to rotate between different channels.

6. The method of claim 1 further including discarding the one time pad after using it to encrypt one message.

7. The method of claim 1 wherein the processor uses portions n of the one time pad corresponding in size to messages m to encrypt the messages m.

8. The method of claim 1 further including transmitting over at least one decoy channel to the receiver, the decoy channel rotating between ports and providing a decoy data stream that mimics encrypted data and/or the one time pad.

9. The method of claim 1 further including sending the one time pad and the encrypted at least one message(s) over different channels.

10. The method of claim 1 further including using a random number generator to generate the one time pad.

11. The method of claim 10 where the random number generator is located on a system different from the one that transmits the at least one encrypted message(s) to the receiver.

12. The method of claim 1 further including establishing a VPN network or secure tunnel.

13. The method of claim 1 further including caching the One Time Pad data in a memory to be used to encrypt/decrypt.

14. The method of claim 1 further including encrypting the one time pad with at least one further one time pad.

15. The method of claim 1 wherein contents of each of the plural channels are used to encrypt other channels.

16. The method of claim 1 further including using a VPN network or secure tunnel to add another layer of encryption.

17. A method for communicating information securely comprising:

(a) securely receiving an encrypted one time pad streamed over plural rotating channels and randomly rotating ports;

(b) at the same time as securely receiving the one time pad stream, also receiving cipher text that was encrypted using the one time pad;

(c) using at least one processor, decrypting the received one time pad stream and decrypting the at least one message using the received cipher text and the received decrypted one time pad;

(d) controlling rotation between said plural channels;

(e) controlling random rotation between said randomly rotating ports;

(f) using an encrypted control channel to securely coordinate random port rotation; and

(g) using a virtual port to facade communication of the message at a network layer.

18. The method of claim 17 wherein the decrypting comprises XORing.

19. The method of claim 17 wherein the streamed one time pad is received over secure encrypted public key channels.

20. The method of claim 17 wherein cipher text receiving comprises receiving the cipher text in different parts over different randomly rotated ports.

21. The method of claim 17 further including using a random number generator to generate the one time pad.

22. The method of claim 17 further including discarding the one time pad after using it to decrypt one message.

23. The method of claim 17 wherein the processor uses portions n of the one time pad corresponding in size to messages m to decrypt the messages m.

24. The method of claim 17 further including using a VPN network or secure tunnel to add another layer of encryption.

25. A system for communicating information securely comprising:

(a) a random number generator generating a one time pad;

(b) an encryptor that encrypts at least parts of the generated one time pad;

(c) a stream transmitter that securely streams the encrypted one time pad to a receiver over plural rotating channels and randomly rotating ports;

(d) an encrypted control channel configured to securely coordinate random port rotation;

(e) at least one processor that encrypts at least one message using the generated one time pad;

(f) a data transmitter that transmits the at least one encrypted message to the receiver concurrently with the stream transmitter securely streaming to the receiver the encrypted one time pad;

(g) a controller that controls rotation between the plural rotating channels and random rotation between ports; and

(h) a virtual port that facades communication of the at least one encrypted message at a network layer.

26. The system of claim 25 further including a VPN network or secure tunnel configured to add another layer of encryption.

27. A system for communicating information securely comprising:

(a) a stream receiver that securely receives (i) an encrypted one time pad stream over plural rotating channels and randomly rotating ports, and (ii) additional information from a listen plane including an encrypted control channel configured to securely coordinate random port rotation;

(b) a data receiver that receives at least one message encrypted with at least a portion of the one time pad stream while the stream receiver securely receives the encrypted one time pad stream;

(c) at least one processor that decrypts the received encrypted one time pad stream and decrypts the at least one received encrypted message using the received decrypted one time pad stream,

(d) a controller that controls rotation between said plural rotating channels and between said randomly rotating ports; and

(e) a virtual port that facades, at a network layer, communication of the encrypted message.

28. The system of claim 27 further including a cache that stores portions of the one time pad stream until needed to decrypt the at least one message.

29. The system of claim 27 wherein the receiver receives at a time and using a randomly rotated port sequence that is not predictable by an attacker.

30. The system of claim 27 wherein the receiver receives using rotating ports the rotation of which is unpredictable to an attacker.

31. The system of claim 27 further including a VPN network or secure tunnel configured to add another layer of encryption.