Method and apparatus for preventing unauthorized monitoring of wireless data transmissions

• US 5,602,916 A
• Filed: 10/05/1994
• Issued: 02/11/1997
• Est. Priority Date: 10/05/1994
• Status: Expired due to Term

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Markison, Timothy W., Grube, Gary W., Rybicki, Mathew A.
• Primary Examiner(s): Cain, David C.
• Application Number:
  US08/317,668
• Time in Patent Office: 860 Days
• Field of Search: 380/21, 380/23, 380/49
• US Class Current: 380/270
• CPC Class Codes: H04L 12/22 Arrangements for preventing the taking of data from a data transmission channel without authorisation means for verifying the identity or the authority of a user of a secure or secret communication system H04L9/32
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/1475 Passive attacks, e.g. eavesdropping or listening without modification of the traffic monitored
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/67 Risk-dependent, e.g. selecting a security level depending on risk profiles

Abstract

Preventing unauthorized monitoring of wireless data transmissions is accomplished by routing requests for data, from communication units (114) operating on wireless communication systems (101), to a security gateway (103) which determines a transmission security level, based on the type of data requested, the identity of the data requester, and the identity of the database containing the requested data. Once this is determined, the security gateway (103) establishes a secure communication with the communication unit according to the transmission security level. If the secure communication was successful, the security gateway (103) routes the requested data to the communication unit (114).

Claims

1. In a communication system envoronment that includes a wireless communication system operably coupled to a public data system, wherein the wireless communication system includes a plurality of communication units, a method for preventing unauthorized monitoring of wireless data transmissions to a communication unit of the plurality of communication units, the method comprising:

a) transmitting, by the communication unit, a request for data to the wireless communication system;

b) routing, by the wireless communication system, the request to a security gateway;

c) determining, by the security gateway, type of data requested, identity of the communication unit, and identity of a particular database of the public data system that contains the data requested;

d) determining, by the security gateway, a transmission security level;

e) determining, by the security gateway, a unique user key of the communication unit;

f) attempting, by the security gateway, to establish a secure communication with the communication unit based on the unique user key and the transmission security level; and

g) when the secure communication is established, routing, by the security gateway, the request to the particular database.

2. The method of claim 1, wherein step (e) further comprises identifying the unique user key as a time variant function programmed into the communication unit and the security gateway.

3. The method of claim 1, wherein step (e) further comprises identifying the unique user key as a static numerical value stored in both the communication unit and the security gateway.

4. The method of claim 1 further comprises:

h) routing, by the particular database, requested data to the security gateway;

i) encrypting, by the security gateway, the requested data based on the unique user key and the transmission security level to produce encrypted data; and

j) routing, by the security gateway, the encrypted data to the communication unit via the wireless communication system.

5. The method of claim 4 further comprises:

k) decrypting, by the communication unit, the encrypted data using a default decryption code.

6. The method of claim 5 wherein step (f) further comprises transmitting, by the security gateway, the default decrypting code during the secure communication.

7. The method of claim 1, wherein step (d) further comprises:

determining the transmission security level to be one of an algorithm, a key, or algorithm-key function.

8. The method of claim 1, wherein step (d) further comprises determining the transmission security level based on at least one of the type of data requested, identity of the particular database, or identity of the communication unit.

9. The method of claim 1, wherein step (d) further comprises:

determining, by the security gateway, identity of the wireless communication system; and

determining the transmission security level based on the identity of the wireless communication system.

10. The method of claim 1, wherein step (e) further comprises:

receiving, by the communication unit and the security gateway, the unique user key from a system manager.

11. In a communication environment that includes a wireless communication system operably coupled to a public data system, wherein the wireless communication system includes a plurality of communication units, a method for a communication unit of the plurality of communication units to receive authorized data transmissions, the method comprising:

a) transmitting a request for data to the wireless communication system;

b) determining a unique user key and a transmission security level;

c) establishing a secure communication based on the unique user key and the transmission security level; and

d) decrypting encrypted data using a default decryption code, wherein the default decryption code is based on the unique user key and the transmission security level.

12. The method of claim 11, wherein step (b) further comprises determining the unique user key as a time variant function programmed into the communication unit.

13. The method of claim 11, wherein step (b) further comprises determining the unique user key as a static numerical value stored in the communication unit.

14. The method of claim 11, wherein step (b) further comprises:

receiving the unique user key from a system manager.

15. A method for a security gateway to prevent unauthorized monitoring of wireless data transmissions, the method comprising:

a) receiving a request for data;

b) determining type of data requested, identity of requesting unit, and identity of a particular database that contains the data;

c) determining a transmission security level;

d) determining a unique user key of the requesting unit;

e) attempting to establish a secure communication with the requesting unit based on the unique user key and the transmission security level; and

f) when the secure communication is established, routing the request to the particular database.

16. The method of claim 15 further comprises:

g) routing, by the particular database, requested data to the security gateway;

h) encrypting, by the security gateway, the requested data based on the unique user key and the transmission security level to produce encrypted data; and

i) routing, by the security gateway, the encrypted data to the requesting unit via a wireless communication system.

17. The method of claim 15, wherein step (c) further comprises:

determining the transmission security level to be one of an algorithm, a key, or algorithm-key function.

18. The method of claim 15, wherein step (c) further comprises determining the transmission security level based on at least one of the type of data requested, identity of the particular database, or identity of the requesting unit.

19. The method of claim 15, wherein step (d) further comprises:

receiving, by the requesting unit and the security gateway, the unique user key from a system manager.

20. A communication unit for use in a wireless communication system and for receiving data from a public data system, the communication unit comprising:

a wireless transceiver,

an encryption processor operably coupled to the wireless transceiver, wherein the encryption processor decrypts received data based on a unique user key and a transmission security level;

memory operably coupled to the encryption processor, wherein the memory stores the unique user key and transmission security level;

a variable identification processor, operably coupled to the memory for varying the unique user key based on a predetermined variation algorithm; and

a display operably coupled to the encryption processor, wherein the display provides an image of received data.

21. The communication unit of claim 20 further comprises an input port that is operably coupled to the memory and the encryption processor, wherein the input port receives data requests.

22. A security gateway for using in a wireless communication system and for prevention unauthorized monitoring of data transmissions, the security gateway comprises:

a transceiver that provides a communication path with the wireless communication system and a public data system;

a variable identification processor for providing a unique user key based on a time variant function;

an encryption processor operably coupled to the transceiver, wherein the encryption processor determines a transmission security level based on type of data requested and a unique user key of a requesting unit;

memory operable coupled to the encryption processor and the variable identification processor, wherein the memory stores the unique user key and the transmission security level.

23. The security gateway of claim 22 wherein the memory further stores, as the transmission security level, the type of data, identity of a data base, identity of a requesting unit, and security level.

24. In a communication environment that includes a wireless communication system operably coupled to a public data system, wherein the wireless communication system includes a plurality of communication units, a method for preventing unauthorized monitoring of wireless data transmissions to a communication unit of the plurality of communication units, the method comprising:

a) transmitting, by the communication unit, a request for data to the wireless communication system;

b) routing, by the wireless communication system, the request to the public data system;

c) receiving, by a security gateway, the data from the public data system;

d) determining, by the security gateway, transmission security level based on identity of the communication unit, and identity of a particular database of the public data system that contains the data;

e) determining, by the security gateway, a unique user key of the communication unit based on the identity of the communication unit;

f) attempting, by the security gateway, to establish a secure communication with the communication unit based on the unique user key and the transmission security level; and

g) when the secure transmission is established, transmitting, by the security gateway, the data to the communication unit.

25. The method of claim 24, wherein step (e) further comprises identifying the unique user key as a time variant function programmed into the communication unit and the security gateway.

26. The method of claim 24 step (g) further comprises:

encrypting, by the security gateway, the data prior to the step of transmitting to produce encrypted data.

27. The method of claim 26 further comprises:

h) decrypting, by the communication unit, the encrypted data using a default decryption code.

28. The method of claim 27 further comprises transmitting, by the security gateway, the default decrypting code during the secure communication.

29. A method for a security gateway to prevent unauthorized monitoring of wireless data transmissions, the method comprising:

a) receiving data from a data base of a public data system;

b) determining type of data, identity of requesting unit, and identity of the database;

c) determining a transmission security level;

d) determining a unique key of the requesting unit;

e) attempting to establish a secure communication with the requesting unit based on the unique user key and the transmission security level; and

f) when the secure communication is established, routing the data to the requesting unit.

30. The method of claim 29 further comprises:

prior to routing the data, encrypting the data based on the unique user key and the transmission security level to produce encrypted data.

31. The method of claim 29, wherein step (c) further comprises:

determining the transmission security level to be one of an algorithm, a key, or algorithm-key function.

32. A method comprising the steps of:

a) receiving a request from a requesting communication unit over a wireless communication resource for data, wherein at least part of the data is stored in a first database;

b) automatically selecting a particular transmission security level from amongst a plurality of transmission security levels in response to receiving the request, to provide a selected transmission security level;

c) using the selected transmission security level when providing at least some of the data to the requesting communication unit.