Wireless device to network server encryption

• US 7,983,419 B2
• Filed: 08/09/2001
• Issued: 07/19/2011
• Est. Priority Date: 08/09/2001
• Status: Expired due to Term

• Current Assignee: Trimble Navigation Limited (Trimble Inc.)
• Original Assignee: Trimble Navigation Limited (Trimble Inc.)
• Inventors: Tiwari, Anil, Tumuluri, Ramakrishna, Fan, Roderic C.
• Primary Examiner(s): Moise; Emmanuel L
• Assistant Examiner(s): Teslovich; Tamara
• Application Number:
  US09/927,928
• Publication Number:
  US 20030031320A1
• Time in Patent Office: 3,631 Days
• Field of Search: 713/160, 713/162, 713/151, 713/201, 380/33, 380/45, 380/247, 380/255, 380/258, 380/270
• US Class Current: 380/255
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks

Abstract

A system and method are disclosed for providing encryption of location data transmitted from a wireless device to a wireline network server. In one embodiment, the wireless device encrypts a payload, adds a header to the payload to form a data packet, encrypts the payload and the header of the data packet, and transmits the encrypted data packet.

Claims

1. A method of transmitting secured data, the method comprising:

utilizing a first key to encrypt a payload by a mobile device;

adding a header to the encrypted payload to form a data packet by said mobile device, wherein said payload comprises GPS location of said mobile device;

utilizing a second key to encrypt the first key by said mobile device;

utilizing a third key to encrypt the data packet by said mobile device;

transmitting the encrypted first key separate from the encrypted data packet to a wireline device in a first transmission from said mobile device, wherein the wireline device decrypts the encrypted first key;

transmitting only the encrypted data packet without said first key over a wireless link to a gateway in a second transmission from said mobile device, wherein the gateway decrypts the encrypted data packet to recreate the encrypted payload and the header, and forwards the encrypted payload and the header to the wireline device over an open network; and

utilizing the wireline device and the first key from the first transmission to decrypt the encrypted payload.

2. The method of claim 1, wherein the first key comprises a symmetric key.

3. The method of claim 1, further comprising:

transmitting the encrypted first key to the wireline device, wherein the wireline device decrypts the encrypted first key using a private key associated with the second key.

4. The method of claim 1, wherein the third key comprises a symmetric session key.

11. The method of claim 1, further comprising:

implementing an encryption algorithm selected from a group of encryption algorithms consisting of DESX and DES.

12. The method of claim 1, wherein the data packet includes GPS location information obtained by the wireless device and associated with a geographical location of the wireless device.

13. The method of claim 1, further comprising:

utilizing a random number to generate the first key.

5. A device for transmitting secured data over a wireless link, the device comprising:

an encryption engine which generates a first key, encrypts a payload according to the first key, adds a header to the encrypted payload to form a data packet, encrypts the first key according to a second key, and encrypts the data packet according to a third key, wherein the payload comprises GPS location information obtained by the device and regarding a geographical location of the device; and

a wireless transceiver coupled to the encryption engine, the wireless transceiver transmitting the encrypted first key separate from the encrypted data packet to a server in a first transmission from the device and transmitting only the encrypted data packet without said first key over the wireless link to a gateway in a second transmission from the device, wherein the gateway decrypts the encrypted data packet to recreate the encrypted payload and the header, and forwards the encrypted payload and the header to the server over an open network;

wherein the server decrypts the encrypted first key received in the first transmission and decrypts the encrypted payload of the second transmission using the decrypted first key.

6. The device of claim 5, wherein the first key comprises a symmetric key.

14. The device of claim 5, further comprising:

a memory coupled to the encryption engine, wherein the memory stores the second key, and wherein the encryption engine accesses the second key from the memory.

7. A method for secured communication between a mobile device and a server on a wide area network, the method comprising:

encrypting a payload at the mobile device using a first session key, wherein the payload includes GPS location information obtained by the mobile device and associated with a geographical location of the mobile device;

encrypting the first session key at the mobile device using a public key;

transmitting the encrypted first session key separate from an encrypted data packet to the server over a wireless link in a first transmission from the mobile device;

decrypting the encrypted first session key at the server;

adding a header to the encrypted payload to form a data packet at the mobile device;

encrypting the data packet according to a second session key configured for secured communications over the wireless link; and

transmitting only the encrypted data packet without said first key in a second transmission from the mobile device to a gateway which decrypts the encrypted data packet to recreate the encrypted payload and the header, and forwards the encrypted payload and the header to the server;

wherein the server utilizes the decrypted first session key, decrypted from the first transmission, to decrypt the encrypted payload.

8. The method of claim 7 wherein the decrypting the encrypted first session key at the server further comprises:

decrypting the encrypted first session key at the server using a private key associated with the public key.

9. The method of claim 7, further comprising:

generating the first session key at the mobile device based on a random number.

10. The method of claim 7, wherein the encrypting the payload at the mobile device using the first session key further comprises:

encrypting the payload at the mobile device using the first session key, wherein the first session key employs an encryption algorithm selected from a group of encryption algorithms consisting of DESX and DES.

15. A non-transitory computer readable storage medium comprising program instructions for performing a method comprising:

encrypting a payload according to a first key, wherein said payload comprises GPS location of a mobile device;

adding a header to the encrypted payload to form a data packet;

encrypting the first key according to a second key;

encrypting the data packet according to a third key configured for secured communications over a wireless link;

transmitting the encrypted first key separate from the encrypted data packet to a server in a first transmission from said mobile device; and

transmitting only the encrypted data packet without said first key over the wireless link to a gateway in a second transmission from the mobile device, wherein the gateway decrypts the encrypted data packet to recreate the encrypted payload and the header, and forwards the encrypted payload and the header to the server, and wherein the server decrypts the encrypted first key received in the first transmission and decrypts the encrypted payload using the decrypted first key.

16. The computer readable storage medium of claim 15, wherein the first key comprises a symmetric key.

17. The computer readable storage medium of claim 15, wherein the method further comprises:

receiving the data packet at the gateway;

decrypting the data packet at the gateway according to the third key;

forwarding the encrypted payload to the server;

receiving the encrypted first key at the server;

decrypting the encrypted first key using a fourth key; and

decrypting the payload according to the decrypted first key.

18. The computer readable storage medium of claim 15, wherein the first key comprises a symmetric session key.

19. The computer readable storage medium of claim 15, wherein the method further comprises:

implementing an encryption algorithm selected from a group of encryption algorithms consisting of DESX and DES.

20. The computer readable storage medium of claim 18, wherein the symmetric session key is generated based on a random number.