Encryption of voice and data in a single data stream in a deployable, secure communication system

• US 8,209,750 B2
• Filed: 04/20/2010
• Issued: 06/26/2012
• Est. Priority Date: 09/15/2003
• Status: Active Grant

• Current Assignee: TeleCommunication Systems Inc (Comtech Telecommunications Corporation)
• Original Assignee: TeleCommunication Systems Inc (Comtech Telecommunications Corporation)
• Inventors: Anspach, Steve, Salazar, Luke, Heyliger, Brian, Kasson, Greg, West, Jeff
• Primary Examiner(s): LEMMA, SAMSON B
• Application Number:
  US12/662,477
• Publication Number:
  US 20100202615A1
• Time in Patent Office: 798 Days
• Field of Search: 380/275, 380/37, 380/42, 713/160, 370/352, 370/389, 726/15
• US Class Current: 726/15
• CPC Class Codes: H04K 1/00 Secret communication
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281

Abstract

Separate IP data streams, including both voice (VoIP) and data sources, are routed over a single network data stream, encrypted by a single KIV encryption unit, and transmitted as a single packet data stream including both computer and voice data. Integration of the use of a VoIP data stream, together with data sources, and encrypted through a single serial encryption unit such as a KIV-7 enables the encryption of both voice and data using a single KIV encryption unit. After encryption by the Type 1 encryption unit (e.g., KIV-7) in a remotely deployed, secure communication system, the single encrypted data stream is encapsulated into IP packets. The IP packets are addressed to a distant IP device that removes the encapsulated, encrypted data and passes it to a similar Type 1 KIV device for decryption, and distributed to voice devices and computer devices via another voice-enabled router.

Claims

1. A method of encrypting and transmitting data in a secure communication system, comprising:

encrypting a data stream through a Type 1 encryption unit into an encrypted data stream;

encapsulating said Type 1 encrypted data stream in an Internet Protocol (IP) packet with a near-end IP encapsulator;

establishing a first data tunnel with a black side router;

establishing a second data tunnel between said near-end IP encapsulator and a remote IP encapsulator; and

routing said encapsulated Type 1 encrypted data stream through said second data tunnel over a non-secure public data network.

2. The method of encrypting and transmitting data in a secure communication system according to claim 1, further comprising:

encrypting both voice data and non-voice data with said Type 1 encryption unit.

3. The method of encrypting and transmitting data in a secure communication system according to claim 1, wherein:

said routing is performed by a voice-enabled router.

4. The method of encrypting and transmitting data in a secure communication system according to claim 1, wherein:

said Type 1 encryption unit is a KIV-type encryption unit.

5. The method of encrypting and transmitting data in a secure communication system according to claim 4, wherein:

said KIV-type encryption unit is a KIV-7 encryption unit.

6. Apparatus for encrypting and transmitting data in a secure communication system, comprising:

a physical Type 1 encryption unit to encrypt a data stream into an encrypted data stream;

a physical black side router to establish a first data tunnel; and

a near-end IP encapsulator to encapsulate said Type 1 encrypted data stream into an IP packet and to establish a second data tunnel between said near-end IP encapsulator and a remote IP encapsulator;

wherein said encapsulated Type 1 encrypted data stream is routed through said second data tunnel over a non-secure public data network.

7. The apparatus for encrypting and transmitting data in a secure communication system according to claim 6, wherein:

said physical Type 1 encryption unit encrypts both voice data and non-voice data.

8. The apparatus for encrypting and transmitting data in a secure communication system according to claim 6, further comprising:

a physical voice-enabled router to perform said routing.

9. The apparatus for encrypting and transmitting data in a secure communication system according to claim 6, wherein:

said physical Type 1 encryption unit is a physical KIV-type encryption unit.

10. The apparatus for encrypting and transmitting data in a secure communication system according to claim 9, wherein:

said physical KIV-type encryption unit is a physical KIV-7 encryption unit.