System and method for providing encryption for rerouting of real time multi-media flows

• US 7,536,546 B2
• Filed: 08/28/2001
• Issued: 05/19/2009
• Est. Priority Date: 08/28/2001
• Status: Active Grant

• Current Assignee: Primary Network
• Original Assignee: Acme Packet Incorporated (Oracle Corporation)
• Inventors: Penfield, Robert F., Norton, Stephen E., Dobbins, Ephraim W., MeLampy, Patrick J.
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): Sherkat; Arezoo
• Application Number:
  US09/941,229
• Publication Number:
  US 20030051130A1
• Time in Patent Office: 2,821 Days
• Field of Search: 713/153, 380 46- 49, 380/261, 714/746, 714/774, 714/807, 370/352
• US Class Current: 713/162
• CPC Class Codes: H04L 47/34 ensuring sequence integrity, e.g. using sequence numbers
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04L 65/65 Network streaming protocols, e.g. real-time transport protocol [RTP] or real-time control protocol [RTCP]
• CPC Class Codes: H04L 65/80 Responding to QoS

Abstract

A system for providing encryption for the rerouting of multi-media data flow packets is disclosed. Generally, a first endpoint is connected to a second endpoint, wherein the first endpoint comprises a transceiver, encryption software stored within the first endpoint defining functions to be performed by the first endpoint, and a processor. The processor is configured by the encryption software to perform the steps of: assigning a sequence number to a first multi-media data flow packet received by a first endpoint, wherein the first multi-media data flow packet is within a series of multi-media data flow packets; pseudo-randomly shuffling the sequence number of the first multi-media data flow packet; and, transmitting the pseudo-randomly shuffled sequence number to a second endpoint. These steps may be performed by a programmed controller, or other hardware, instead of, or in addition to, being performed in accordance with software.

Claims

1. A method for encrypting muli-media data flow packets, comprising the steps of:

receiving a series of multi-media data flow packets;

storing the series of multi-media data flow packets in a jitter buffer;

pseudo-randomly shuffling a destination address of each of the multi-media data flow packets;

re-sequencing the series of multi-media data flow packets into a pseudo-random order; and

transmitting each multi-media data flow packet in the re-sequenced series in the re-sequenced order.

2. The method of claim 1, wherein said re-sequencing uses a randomization code that is algorithmically predictable if a key to said randomization code is known.

3. The method of claim 1, further comprising the step of performing bit manipulation within said first multi-media data flow packet.

4. The method of claim 3, wherein said step of performing bit manipulation is performed by using a bit-size operation that is restorable.

5. The method of claim 4, wherein said bit-size operation comprises negation.

6. The method of claim 1, wherein said destination address is a destination port address.

7. A computer readable storage medium having a program for encrypting multi-media data flow packets, the program performing the steps of:

receiving a series of multi-media data flow packets;

storing the series of multi-media data flow packets in a jitter buffer;

pseudo-randomly shuffling a destination address of each of the multi-media data flow packets;

re-sequencing the series of multi-media data flow packets into a pseudo-random order; and

transmitting each multi-media data flow packet in the re-sequenced series in the re-sequenced order.

8. The computer readable medium of claim 7, wherein said re-sequencing uses a randomization code that is algorithmically predictable if a key to said randomization code is known.

9. The computer readable medium of claim 7, the program further comprising logic for performing the step of performing bit manipulation within said first multi-media data flow packet.

10. The computer readable medium of claim 9, wherein said step of performing bit manipulation is performed by using a bit-size operation that is restorable.

11. The computer readable medium of claim 10, wherein said bit-size operation comprises negation.

12. The computer readable storage medium of claim 7, wherein said destination address is a destination port address.

13. A system for encrypting muli-media data flow packets, comprising:

a transceiver;

software defining functions to be performed by the system; and

a processor configured by said software to perform the steps of;

receiving a series of multi-media data flow packets;

storing the series of multi-media data flow packets in a jitter buffer;

pseudo-randomly shuffling a destination address of each of the multi-media data flow packets;

re-sequencing the series of multi-media data flow packets into a pseudo-random order; and

transmitting each multi-media data flow packet in the re-sequenced series in the re-sequenced order.

14. The system of claim 13, wherein said re-sequencing uses a randomization code that is algorithmically predictable if a key to said randomization code is known.

15. The system of claim 13, wherein said destination address is a destination port address.

16. A method of encrypting a series of multi-media data flow packets, comprising the steps of:

receiving a series of multi-media data flow packets belonging to a first flow, each packet in the series having a port address that is the same as the port address of the other packets in the series;

generating a pseudo-random sequence of numbers, the sequence of numbers associated with the port address;

replacing the port address in each packet with the product of a corresponding number in the sequence of numbers and the size of the sequence; and

transmitting each packet to a receiver.

17. The method of claim 16, wherein the generating step uses a randomization code that is predictable if a key to the randomization code is known.

18. The method of claim 17, wherein the key is known to the receiver.

19. The method of claim 16, wherein the size of the sequence is known to the receiver.

20. The method of claim 16, wherein the port address comprises a destination port address.