Data securing communication apparatus and method

• US 7,216,230 B2
• Filed: 04/22/2002
• Issued: 05/08/2007
• Est. Priority Date: 04/20/2001
• Status: Expired due to Fees

• Current Assignee: Google Inc. (Alphabet Inc.)
• Original Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Inventors: Yoshimura, Takeshi, Suzuki, Takashi
• Primary Examiner(s): Barron; Gilberto
• Assistant Examiner(s): PERUNGAVOOR, VENKATANARAY
• Application Number:
  US10/333,748
• Publication Number:
  US 20030167394A1
• Time in Patent Office: 1,842 Days
• Field of Search: 713/170, 713/151, 713/168
• US Class Current: 713/170
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

An object to be encrypted is decided in accordance with the type of input data and transfer characteristic of a network connected, and communication is performed with a communication mate by sharing parameters including an encryption object range and a data verification range in accordance with the object to be encrypted.

Claims

1. A data-securing communication apparatus comprising:

an application part for generating an application data to be transmitted;

parameter sharing means for sharing parameters for securing input data including said application data with a receiving-side data-securing communication apparatus via a communication channel;

securing means for securing said input data based on said shared parameters;

sending means for sending the output of said securing means through said communication channel in a predetermined form; and

wherein said parameter sharing means negotiates and shares, with the receiving-side data-securing communication apparatus, parameters indicative of a portion of said input data to be secured and said securing means is adapted to selectively secure the portion of said input data based on said shared parameters.

2. The data-securing communication apparatus as claimed in claim 1, which is further provided with means for determining said portion of input data in accordance with the kind of said application data.

3. The data-securing communication apparatus as claimed in claim 1, which is further provided with means for determining said portion of input data in accordance with the network to which said apparatus is connected.

4. The data-securing communication apparatus as claimed in claim 1, wherein said portion of input data is a portion for encryption, said receiving-side communication apparatus being a decrypting apparatus and said securing means being encryption means.

5. The data-securing communication apparatus as claimed in claim 4, wherein said input data is an RTP packet and said portion for encryption is data except an RTP header.

6. The data-securing communication apparatus as claimed in claim 4, wherein the criterion for determining said portion for encryption is the transmission rate of the communication channel of said network.

7. The data-securing communication apparatus as claimed in claim 1, wherein:

said portion of input data is a portion for authentication of said input data;

said receiving-side data-securing communication apparatus is a data verification apparatus;

said securing means is means for calculating an authenticator from said portion for authentication of said input data; and

means for outputting the input data after adding thereto said authenticator.

10. The data-securing communication apparatus as claimed in claim 2, which is further provided with means for determining said securing target in accordance with the network to which said apparatus is connected.

12. The data-securing communication apparatus as claimed in claim 2, wherein said securing target is a target for encryption, said receiving-side communication apparatus being a decoding apparatus and said securing means being encryption means.

13. The method as claimed in claim 12, wherein said received data is an RTP packet and said selective decoding is performed for data except an RTP header of said RTP packet.

14. The data-securing communication method as claimed in claim 10, wherein said input data is an RTP packet and the selective encryption is performed for data except an RTP header of said RTP packet.

15. The method of claim 12, wherein said received data contain authenticator and said portion is a portion for authentication, and said step (c) is a step for:

verifying the validity of data contained in said portion for authentication of the received data by data of said portion and said authenticator contained in said received data according to said parameters.

16. The data-securing communication apparatus as claimed in claim 3, wherein said securing target is a target for encryption, said receiving-side communication apparatus being a decoding apparatus and said securing means being encryption means.

17. The data-securing communication apparatus as claimed in claim 10, wherein said securing target is a target for encryption, said receiving-side communication apparatus being a decoding apparatus and said securing means being encryption means.

18. The data-securing communication apparatus as claimed in claim 2, wherein:

said securing target is the range of authentication of said input data;

said receiving-side data-securing communication apparatus is a data verification apparatus;

said securing means is means for calculating an authenticator from said range of authentication of said input data; and

means for outputting the input data after adding thereto said authenticator.

19. The data-securing communication apparatus as claimed in claim 3, wherein:

said securing target is the range of authentication of said input data;

said receiving-side data-securing communication apparatus is a data verification apparatus;

said securing means is means for calculating an authenticator from said range of authentication of said input data; and

means for outputting the input data after adding thereto said authenticator.

20. The data-securing communication apparatus as claimed in claim 10, wherein said securing target is the range of authentication of said input data;

said receiving-side data-securing communication apparatus is a data verification apparatus;

said securing means is means for calculating an authenticator from said range of authentication of said input data; and

means for outputting the input data after adding thereto said authenticator.

8. A data-securing communication apparatus comprising:

receiving means for receiving data through a communication channel;

parameter sharing means for sharing parameters for securing data with a transmitting-side data-securing communication apparatus via a communication channel; and

means for decoding and/or verifying said received data based on said shared parameters;

wherein said parameter sharing means negotiates and shares, with said transmitting-side data-securing communication apparatus, parameters indicative of a portion of said received data to be secured, and said means for decoding and/or verifying is adapted to selectively decode and/or verify the portion of the received data based on the shared parameters.

9. A data-securing communication method comprising:

(a) generating application data to be transmitted at a transmitting side;

(b) sharing parameters for securing input data including said application data with a receiving side via a communication channel; and

(c) securing said input data based on said shared parameters; and

(d) sending out said secured data through said communication channel to the receiving side;

in the receiving side;

(e) receiving data through said communication channel;

(f) sharing parameters for securing data with the transmitting side via the communication channel; and

(g) decoding and/or verifying the received data based on said shared parameters;

wherein

said sharing step (b) includes step for negotiating and sharing, with the receiving side, parameters indicative of a portion of said input data to be secured;

said securing step (c) includes step for selectively securing the portion of input data based on said shared parameters;

(h) said step (f) includes a step of negotiating and sharing, with said transmitting side, the parameters indicative of the portion of data, and said step (g) is a step for selectively decoding and/or verifying the portion of the received data based on said shared parameters.

11. The data-securing communication method of claim 9, wherein said portion of said input data is a portion for authentication, and said securing step (c) is a step for:

calculating an authenticator from said portion of said input data and said step (d) is a step for outputting said input data after adding thereto said authenticator.

21. The data-securing communication method of claim 9, wherein said portion of input data is a portion for encryption, and said securing step (c) is a step for selectively encrypting the portion of input data based on said shared parameters.

22. The method of claim 9, wherein said portion is a portion for encryption, and said step (g) is a step for selectively decoding the portion of the received data based on the shared parameters.