# US 2021/0243031 A1 · Method, architecture and devices for the realization of an encrypted communication protocol of encrypted data packets named 'transport encrypted protocol' (tep)

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0243031 A1
- Document ID: US20210243031A1
- Status: Published application
- Kind: A1
- Application number: 17/059,348
- Filed: 2019-05-24
- Published: 2021-08-05
- Earliest claimed: 2018-05-28
- Assignees: Gabriele Edmondo PEGORARO; Christian Fabio PERSURICH; Gianluca TIROZZI
- Inventors: Gabriele Edmondo PEGORARO
- Web page: https://patentgrep.com/patent/US20210243031A1

## CPC

- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates}
- H04L 63/166: {at the transport layer}
- H04L 67/104: Peer-to-peer [P2P] networks
- H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
- H04W 88/08: Access point devices
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04W 8/02: Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
- H04W 36/08: Reselecting an access point
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Method, devices, programs and system for the realization of an encrypted protocol for the transmission of encrypted data packets, called “Transport Encrypted Protocol” (TEP), intended for communication, characterized by a particular methodology of data encrypted encapsulation according to the blockchain paradigm including the following steps: the establishment of a distributed ledger which generate sender and recipient addresses to establish a communication characterized by the encryption of both the content and the transport channels; the verification of the integrity of the message and the correct correspondence of the address by the receiving node (hash), which decrypts each layer of encapsulation and hence decrypting the message itself; and the submission of an encrypted notification of receipt to the sender node and the subsequent preparation of the receiving node to the next state, either the break in communication or the modification of its status from recipient to sender.

## Claims

### Claim at position 1

1-30. (canceled)

### Claim 31

A telecommunication apparatus, comprising:
a calculator;
a hypervisor comprised in a firmware of said calculator;
a copy of a distributed ledger; and
an antenna,
wherein
the hypervisor is configured to launch a virtual machine executing a first application and a second application, and
the distributed ledger contains a database of caller identifiers that transit through said telecommunication apparatus, each of the caller identifiers is recorded in the distributed ledger as a corresponding hash, and
the first application executed by the virtual machine is configured to generate a data packet to be transmitted and is further configured to transmit the data packet as radiofrequency pulses emitted by the antenna; and
the second application executed by the virtual machine is configured to select a hash recorded in the distributed ledger corresponding to a receiver of the data packet to be transmitted, and is further configured to provide said selected hash to the first application, and
the first application is configured to insert said selected hash in the data packet to be transmitted.

### Claim 32 (depends on 31)

The telecommunication apparatus according to claim 31, wherein the first application is configured to generate the data packet, comprising:
a cryptographic protection encapsulation layer;
a descriptor encapsulation layer; and
a data encapsulation layer containing data to be transmitted,
wherein the descriptor encapsulation layer encapsulates the data encapsulation layer and the cryptographic protection encapsulation layer encapsulates the descriptor encapsulation layer.

### Claim 33 (depends on 32)

The telecommunication apparatus according to claim 32, wherein the first application is configured for encrypting each data packet to be transmitted according to a blockchain paradigm by using a public key of the receiver of the data packet according to an asymmetric encryption scheme.

### Claim 34 (depends on 33)

The telecommunication apparatus according to claim 33, further comprising:
a third application, installed either in the firmware of said calculator, or executed by said virtual machine,
the third application being configured to manage an encryption phase of the data packet according to a secure communication protocol, said protocol providing a further encryption layer.

### Claim 35 (depends on 31)

The telecommunication apparatus according to claim 31, wherein the second application is configured to generate and store in the distributed ledger a record of each data packet transmitted by the first application.

### Claim 36 (depends on 31)

The telecommunication apparatus according to claim 31, wherein the first application is configured to implement a logic circuit to simulate an apparatus that performs device to device communications.

### Claim 37 (depends on 36)

The telecommunication apparatus according to claim 36, wherein the first software application is configured to have the logic circuit to simulate an apparatus that operates as a node of a peer to peer network.

### Claim 38

A mobile station comprising:
an EPROM storing a firmware comprising a hypervisor configured to launch a virtual machine which is configured to execute a first application and a second application,
an antenna, and
storing a distributed ledger which contains a database comprising caller identifiers that transit through said mobile station, wherein each one of the caller identifiers is recorded in the distributed ledger as a corresponding hash,
wherein
the first application executed by the virtual machine is configured to generate a data packet to be transmitted and transmit the data packet as radiofrequency pulses emitted by the antenna;
the second application executed by the virtual machine is configured to select a hash recorded in the distributed ledger corresponding to a receiver of the data packet to be transmitted, and is further configured to provide said selected hash to the first application, and
the first application is configured to insert said selected hash in the data packet to be transmitted.

### Claim 39 (depends on 38)

The mobile station according to claim 38, further comprising a memory card storing a computer software product that when executed by the hypervisor instantiates said virtual machine.

### Claim 40 (depends on 38)

The mobile station according to claim 38, wherein the first application is configured to generate the data packet comprising:
a cryptographic protection encapsulation layer;
a descriptor encapsulation layer; and
a data encapsulation layer containing data to be transmitted,
wherein the descriptor encapsulation layer encapsulates the data encapsulation layer and the cryptographic protection encapsulation layer encapsulates the descriptor encapsulation layer.

### Claim 41 (depends on 40)

The mobile station according to claim 40, wherein the first application is configured for encrypting each data packet to be transmitted according to a blockchain paradigm by using a public key of the receiver of the data packet according to an asymmetric encryption scheme.

### Claim 42 (depends on 40)

The mobile station according to claim 40, further comprising:
a third application, installed either in the firmware stored in the EPROM, or executed by the virtual machine,
the third application being configured to manage an encryption phase of the data packet according to a secure communication protocol, said protocol providing a further encryption layer.

### Claim 43 (depends on 38)

The mobile station according to claim 38, wherein the second software application is configured to generate and store a record of each data packet transmitted in the distributed ledger.

### Claim 44

The mobile station according to 38, wherein the first application is configured to implement a logic circuit which is configured to simulate an apparatus that allows to perform device to device communications.

### Claim 45

The mobile station according to 44, wherein the first software application is configured to have the logic circuit to simulate an apparatus that operate as a node of a peer to peer network.

### Claim 46

A method for data exchange among nodes of a telecommunication network, comprising:
computing a plurality of hashes by means of an encryption technique, each hash identifying a corresponding node of the telecommunication network;
establishing a distributed ledger which is distributed among all the nodes of the network, the distributed ledger memorizing said plurality of hashes, a copy of said distributed ledger being stored by each node of the telecommunication network, and
for each data packet to be transmitted:
associating the data packet to a hash corresponding to an address of the destination node of the data packet, said hash being selected among the plurality of the hashes memorized by the distributed ledger, and
transmitting the data packet to the receiver via a radiofrequency transmission.

### Claim 47 (depends on 46)

The method according to claim 46, further comprising, for each data packet to be transmitted:
associating the data packet to a further hash corresponding to an address of the sender node of the data packet.

### Claim 48 (depends on 46)

The method according to claim 46, wherein associating the data packet to a hash corresponding to an address of the receiver of the data packet comprises:
encapsulating the data packet with an encapsulation layer comprising a header including said hash.

### Claim 49 (depends on 46)

The method according to claim 46, further comprising, for each data packet to be transmitted:
generating a data hash comprising information regarding the data packet;
recording said data hash in the distributed ledger as a transaction data in a data block of the distributed ledger.

### Claim 50 (depends on 49)

The method according to claim 49, further comprising, for each data packet received:
verifying a correspondence between the data packet received and corresponding data packet information comprised in the data hash recorded in the distributed ledger, and
discarding the data packet whether said correspondence is not verified.