Back to results
US 8,300,824 B1Granted
System and method for encrypting data using a cipher text in a communications environment
AssigneeCisco Technology, Inc.
InventorsDavid A. McGrew, Malcolm M. Smith
Life of this patent
Estimating the term…
Abstract
Data is encrypted by receiving a plurality of bits associated with a communications flow and compressing at least a portion of the bits in order to produce a plurality of sub-frames. The sub-frames may be assembled into a superframe and a stream cipher may be applied to the superframe in order to generate an encrypted packet.
Claims22
An apparatus for encrypting data, comprising:
- a cell site element associated with a base transceiver station and comprising one or more processors operable to:
- receive a plurality of voice packets associated with a communications flow;
- convert the plurality of voice packets into a plurality of user datagram protocol/Internet protocol (UDP/IP) packets;
- compress at least a portion of the UDP/IP packets using cUDP/IP in order to yield a plurality of sub-frames, each sub-frame corresponding to one of the UDP/IP packets;
- assemble the sub-frames into a point-to-point protocol (PPP) superframe;
- apply a stream cipher of a plurality of stream ciphers to the PPP superframe at a point to point protocol level to generate a cipher text by:
- generating a key sequence from a cipher key and a sequence parameter;
- and
- XORing the key sequence and the superframe to generate the cipher text;
- and
- generate a PPP packet comprising the cipher text, a security parameter index (SPI) field operable to identify the cipher key and an algorithm to decrypt the cipher text, and an authentication data field operable to identify the result of a per-frame authentication calculation.
8 more elements
A method for encrypting data, comprising:
- receiving, by a cell site element, a plurality of voice packets associated with a communications flow;
- converting the plurality of voice packets into a plurality of user datagram protocol/Internet protocol (UDP/IP) packets;
- compressing, by one or more processors of the cell site element, at least a portion of the UDP/IP packets using cUDP/IP in order to yield a plurality of sub-frames, each sub-frame corresponding to one of the UDP/IP packets;
- assembling, by the one or more processors of the cell site element, the sub-frames into a point-to-point (PPP) superframe;
- and
- applying, by the one or more processors of the cell site element, a stream cipher of a plurality of stream ciphers to the PPP superframe at a point to point protocol level to generate a cipher text by:
- generating a key sequence from a cipher key and a sequence parameter;
- and
- XORing the key sequence and the superframe to generate the cipher text;
- and
- generating, by the one or more processors of the cell site element, a PPP packet comprising the cipher text, a security parameter index (SPI) field operable to identify the cipher key and an algorithm to decrypt the cipher text, and an authentication data field operable to identify the result of a per-frame authentication calculation.
8 more elements
A system for encrypting data, comprising:
- means for receiving a plurality of voice packets associated with a communications flow;
- means for converting the plurality of voice packets into a plurality of user datagram protocol/Internet protocol (UDP/IP) packets;
- means for compressing at least a portion of the UDP/IP packets using cUDP/IP in order to yield a plurality of subframes, each sub-frame corresponding to one of the UDP/IP packets;
- means for assembling the sub-frames into a point-to-point protocol (PPP) superframe;
- and
- means for applying a stream cipher of a plurality of stream ciphers to the PPP superframe at a point to point protocol level to generate a cipher text by:
- generating a key sequence from a cipher key and a sequence parameter;
- and
- XORing the key sequence and the superframe to generate the cipher text;
- and
- means for generating a PPP packet comprising the cipher text, a security parameter index (SPI) field operable to identify the cipher key and an algorithm to decrypt the cipher text, and an authentication data field operable to identify the result of a per-frame authentication calculation.
8 more elements
A non-transitory computer readable storage medium including code for encrypting data, the code operable to:
- receive a plurality of voice packets associated with a communications flow;
- convert the plurality of voice packets into a plurality of user datagram protocol/Internet protocol (UDP/IP) packets;
- compress at least a portion of the UDP/IP packets using cUDP/IP in order to yield a plurality of sub-frames, each sub-frame corresponding to one of the UDP/IP packets;
- assemble the sub-frames into a point-to-point protocol (PPP) superframe;
- and
- apply a stream cipher of a plurality of stream ciphers to the PPP superframe at a point to point protocol level to generate a cipher text by:
- generating a key sequence from a cipher key and a sequence parameter;
- and
- XORing the key sequence and the superframe to generate the cipher text;
- and
- generate a PPP packet comprising the cipher text, a security parameter index (SPI) field operable to identify the cipher key and an algorithm to decrypt the cipher text, and an authentication data field operable to identify the result of a per-frame authentication calculation.
8 more elements
Dependencies are inferred from the claim text.