System and method for securing communications over cellular networks
AssigneeMsafe, Inc.
InventorsOffer Sharon, Meir Lasry, Victor Sherbinin, Uri Baror, M. Ran Bittmann
Life of this patent
Estimating the term…
Abstract
Disclosed is a mobile unit that includes a dedicated cryptographic processor connected to a main processing unit of the mobile unit and configured to encrypt outgoing packets received from the main processing unit and destined for a remote entity, and configured to decrypt incoming packets transmitted by the remote entity and destined for the main processing unit. In one embodiment of the invention, the dedicated cryptographic processor also functions as a proxy server.
Claims26
A mobile unit configured to securely transmit and receive packets, comprising:
- a dedicated cryptographic processor connected to a main processing unit of the mobile unit and configured to encrypt outgoing packets received from said main processing unit and destined for a remote entity, and configured to decrypt incoming packets transmitted by said remote entity and destined for said main professing unit.
A mobile unit configured to securely transmit and receive packets, comprising:
- a dedicated cryptographic processor connected to a communication interface of the mobile unit and to a main processing unit of the mobile unit, said dedicated processor configured to participate in establishing a security association SA with a remote entity, and configured to encrypt outgoing packets received from said main processing unit and destined for said remote entity during said SA, and configured to decrypt incoming packets, received from said remote entity during said SA and destined for said main processing unit.
A method for securely transferring packets from a mobile unit to a remote entity, comprising:
- routing at least one packet for which encryption is desired from a main processing unit in the mobile unit to a dedicated cryptographic processor in the mobile unit;
- said dedicated processor encrypting said at least one routed packet;
- and
- the mobile unit transmitting said at least one encrypted packet to said remote entity during a security association SA established between the mobile unit and said remote entity.
A method for securely transferring packets from a mobile unit to a remote entity, comprising:
- routing at least one packet for which encryption is desired from a main processing unit in the mobile unit to a dedicated cryptographic processor in the mobile unit;
- said dedicated processor encrypting said at least one routed packet;
- and
- said dedicated processor transmitting said at least one encrypted packet to said remote entity during a security association SA established between said dedicated processor and said remote entity.
A method for securely receiving packets by a mobile unit from a remote entity, comprising:
- the mobile unit receiving at least one encrypted packet from a remote entity during a security association SA established between the mobile unit and said remote entity;
- a dedicated cryptographic processor in the mobile unit decrypting said at least one received packet;
- and
- said dedicated cryptographic processor transferring said at least one decrypted packet to a main processing unit in the mobile unit.
A method for securely receiving packets by a mobile unit from a remote entity, comprising:
- a dedicate cryptographic processor in the mobile unit receiving at least one encrypted packet from a remote entity during a security association SA established between said dedicated cryptographic processor and said remote entity;
- said dedicated cryptographic processor decrypting said at least one received packet;
- and
- said dedicated cryptographic processor transferring said at least one decrypted packet to a main processing unit in the mobile unit.
A mobile unit configured to secure data within a mobile unit, comprising:
- a dedicated cryptographic processor connected to a main processing unit of the mobile unit and configured to encrypt data blocks or streams received from said main processing unit and destined for said main processing unit, and configured to decrypt data blocks or streams received from said main processing unit and destined for said main processing unit, wherein said data blocks or streams are for internal use of at least one application running on the mobile unit.
A method for securing data within a mobile unit, comprising:
- routing at least one data block or stream for which encryption or decryption is desired from a main processing unit in the mobile unit to a dedicated cryptographic processor in the mobile unit;
- said dedicated processor encrypting or decrypting said at least one routed data block or steam;
- and
- said dedicated processor transferring said at least one encrypted or decrypted data block or stream to said main processing unit, wherein said at least one encrypted or decrypted data block or stream is for internal use of at least one application running on the mobile unit.
Dependencies are inferred from the claim text.