Data security for networks combining encryption with error correction
AssigneeCisco Technology, Inc.
InventorsScott Roy Fluhrer, Gilberto Loprieno
Life of this patent
Estimating the term…
Abstract
In one example embodiment, data is received at a node of a network. The data includes encrypted data segments containing data portions and error correction information. The encrypted data segments are decrypted to produce the data portions and the error correction information. Error correction is performed on the data portions using the error correction information. Corrupt data is determined based on the error correction indicating uncorrectable data.
Claims20
A method comprising:
- receiving data of a frame at a node of a network, wherein the data includes encrypted codewords generated by encrypting codewords including encoded data segments, wherein the encoded data segments include plaintext symbols representing data portions and error correction information, wherein each plaintext symbol of the encoded data segments is associated with a different portion of unpredictable sequences of values and independently encrypted within the encrypted codewords by corresponding values from the different portion to map each plaintext symbol to a corresponding unpredictable ciphertext symbol, and wherein the unpredictable sequences of values are produced from different portions of an encrypted value;
- generating the unpredictable sequences of values used to encrypt the codewords;
- decrypting the encrypted codewords of the frame using the unpredictable sequences of values to produce the encoded data segments containing the data portions and the error correction information;
- performing authentication and error correction simultaneously on the data portions using the error correction information;
- and
- determining corrupt data based on the error correction indicating uncorrectable data.
An apparatus comprising:
- a network computing device of a network comprising a memory for storing program instructions and one or more processors configured to execute the program instructions and perform operations including:
- receiving data of a frame including encrypted codewords generated by encrypting codewords including encoded data segments, wherein the encoded data segments include plaintext symbols representing data portions and error correction information, wherein each plaintext symbol of the encoded data segments is associated with a different portion of unpredictable sequences of values and independently individually encrypted within the encrypted codewords by corresponding values from the different portion to map each plaintext symbol to a corresponding unpredictable ciphertext symbol, and wherein the unpredictable sequences of values are produced from different portions of an encrypted value;
- generating the unpredictable sequences of values used to encrypt the codewords;
- decrypting the encrypted codewords of the frame using the unpredictable sequences of values to produce the encoded data segments containing the data portions and the error correction information;
- performing authentication and error correction simultaneously on the data portions using the error correction information;
- and
- determining corrupt data based on the error correction indicating uncorrectable data.
One or more non-transitory computer readable storage media encoded with processing instructions that, when executed by one or more processors, cause the one or more processors to perform operations including:
- receiving data of a frame at a node of a network, wherein the data includes encrypted codewords generated by encrypting codewords including encoded data segments, wherein the encoded data segments include plaintext symbols representing data portions and error correction information, wherein each plaintext symbol of the encoded data segments is associated with a different portion of unpredictable sequences of values and independently encrypted within the encrypted codewords by corresponding values from the different portion to map each plaintext symbol to a corresponding unpredictable ciphertext symbol, and wherein the unpredictable sequences of values are produced from different portions of an encrypted value;
- generating the unpredictable sequences of values used to encrypt the codewords;
- decrypting the encrypted codewords of the frame using the unpredictable sequences of values to produce the encoded data segments containing the data portions and the error correction information;
- performing authentication and error correction simultaneously on the data portions using the error correction information;
- and
- determining corrupt data based on the error correction indicating uncorrectable data.
Dependencies are inferred from the claim text.