Method for updating encryption key information in communication units

• US 5,325,432 A
• Filed: 02/04/1993
• Issued: 06/28/1994
• Est. Priority Date: 02/04/1993
• Status: Expired due to Term

• Current Assignee: Motorola Solutions, Inc.
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Cutts, Kevin M., Gardeck, Kevin
• Primary Examiner(s): Cain, David C.
• Application Number:
  US08/013,393
• Time in Patent Office: 509 Days
• Field of Search: 380/21, 380/45, 380/47
• US Class Current: 380/273
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 9/0833 involving conference or group key network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04W 12/0433 Key management protocols

Abstract

Within a communication system, an encryption controller receives unit identification information from a plurality of encrypting/decrypting communication units. For any individual communication unit, the encryption controller uses the unit identification associated with that transmitting communication unit to determine if it contains updated encryption key information. If the transmitting communication unit is not currently updated, a group call is used to send the current encryption key information to all communication units within the transmitting communication unit'"'"'s group, thereby updating all active, non-current communication units. After a first predetermined period of time has elapsed, this process is allowed to repeat.

Claims

1. In a communication system that includes a plurality of communication units, an encryption controller, wherein the plurality of communication units includes a first set of communication units that are currently active and a second set of communication units that are currently inactive and wherein communication units of the plurality of communication units readily change from the first set of communication units to the second set of communication units and vice versa, a method for updating encryption key information to the plurality of communication units, the method comprises the steps of:

a) transmitting, by a first communication unit in the first set of communication units, unit identification information to the encryption controller;

b) when the unit identification information is received, determining, by the encryption controller, that the first communication unit does not have updated encryption key information;

c) transmitting, by the encryption controller, updated encryption key information to the plurality of communication units, wherein only the first set of communication units are updated with the updated encryption key information;

d) initiating, by the encryption controller, a predetermined wait period;

e) changing, by a second communication unit, from the second set of communication units to the first set of communication units;

f) after expiration of the predetermined wait period, receiving, by the encryption controller, unit identification information from the second communication unit; and

g) when the unit identification information from the second communication unit is received, retransmitting, by the encryption controller, the updated key information to the plurality of communication units, wherein communication units that have changed from the second set of communication units to the first set of communication units are updated with the updated encryption key information.

2. The method of claim 1 further comprises the steps of:

h) changing, by a third communication unit, from the second set of communication units to the first set of communication units;

i) receiving, by the encryption controller, unit identification information from the third communication unit; and

j) when the unit identification information from the third communication unit is received, retransmitting, by the encryption controller, the updated key information only to the third communication unit after a first predetermined period of time elapses, wherein the first predetermined period of time is at least a factor of 10 greater than the predetermined wait period.

3. In the method of claim 1, step (c) further comprises changing the updated encryption key information automatically after a second predetermined period of time elapses.

4. In a communication system that includes a plurality of communication units, an encryption controller, wherein the plurality of communication units includes a first set of communication units that are currently active and a second set of communication units that are currently inactive and wherein communication units of the plurality of communication units readily change from the first set of communication units to the second set of communication units and vice versa, a method for updating encryption key information to the plurality of communication units, the method comprises the steps of:

a) receiving, by the encyption controller, unit identification information from a first communication unit in the first set of communication units;

b) determining, by the encryption controller, that the first communication unit does not have updated encryption key information;

c) transmitting, by the encryption controller, updated encryption key information to the plurality of communication units, wherein only the first set of communication units are updated with the updated encryption key information;

d) initiating, by the encryption controller, a predetermined wait period;

e) after expiration of the predetermined wait period, receiving, by the encryption controller, unit identification information from a second communication unit, wherein the second communication unit has changed from the second set of communication units to the first set of communication units; and

f) retransmitting, by the encryption controller, the updated key information to the plurality of communication units, wherein communication units that have changed from the second set of communication units to the first set of communication units are updated with the updated encryption key information.

5. The method of claim 4 further comprises the steps of:

h) changing, by a third communication unit, from the second set of communication units to the first set of communication units;

i) receiving, by the encryption controller, unit identification information from the third communication unit; and

j) when the unit identification information from the third communication unit is received, retransmitting, by the encryption controller, the updated key information only to the third communication unit after a first predetermined period of time elapses, wherein the first predetermined period of time is at least a factor of 10 greater than the first predetermined period of time.

6. In the method of claim 4, step (c) further comprises changing the updated encryption key information automatically after a second predetermined period of time elapses.