US 9,871,772 B1 · Cryptographic system for secure command and control of remotely controlled devices

Abstract

A system and method operate on a first electronic device and a second electronic device. The first device has a control system and a cryptographic communications module. The second device has a key generator, a user interface, and a cryptographic communications module. The second device generates a single-mission cryptographic key that is securely programmed into the first device, and the first device is deployed to a remote location. The user interface receives a command for controlling the first device. The second device encrypts the command according to the cryptographic key, and transmits the encrypted command to the first device. The first device authenticates the command, decrypts it, and passes the decrypted command to the control system. The first device may be actively guided ordnance, and the second device may be a control element for controlling the actively guided ordnance. The key may be automatically obfuscated upon mission completion or termination.

A system for managing encryption keys and secure communications for a mission for a remotely controlled device (RCD), wherein the remotely controlled device is stored unkeyed and is keyed at the time of deployment, the system comprising:

a primary control element (PCE);
a forward observer control element (FO);
and
a remotely controlled device (RCD), wherein:
the primary control element (PCE) is configured to (a) obtain indicia from the remotely controlled device;
(b) obtain an RCD public key associated with the remotely controlled device based on the indicia;
(c) generate a first operational keyset including a first single-mission encryption key for the remotely controlled device;
(d) encrypt at least a portion of the first operational keyset using the RCD public key to form an encrypted first operational keyset;
(e) transmit the encrypted first operational keyset to the remotely controlled device over a key load interface;
(f) generate a second operational keyset including a second single-mission encryption key for the remotely controlled device;
(g) encrypt at least a portion of the second operational keyset using an FO public key associated with the FO and transmit such encrypted second operational keyset to the FO;
and (h) encrypt at least a portion of the second operational keyset using the RCD public key associated with the RCD and transmit such encrypted second operational keyset to the RCD;
(i) encrypt a first command for the remotely controlled device using a PCE in-use encryption key derived from the first single-mission encryption key;
and (j) transmit the encrypted first command to the remotely controlled device along with an authentication tag over a first wireless communication link;
the FO is configured to (a) receive the encrypted second operational keyset from the PCE;
(b) decrypt the encrypted second operational keyset using an FO private key associated with the FO public key in order to obtain the second single-mission encryption key;
and (c) encrypt a second command for the RCD using an FO in-use key derived from the second single-mission encryption key;
and (d) transmit the encrypted second command to the RCD over a second wireless communication link;
and
the RCD includes said indicia and is configured to (a) receive the encrypted first operational keyset over the key load interface;
(b) decrypt the encrypted first operational keyset using an RCD private key associated with the RCD public key in order to obtain the first single-mission encryption key;
(c) receive the encrypted first command over the first wireless communication link;
(d) authenticate the encrypted first command using the authentication tag and a pre-loaded hash key;
and (e) decrypt the encrypted first command using a first RCD in-use encryption key derived from the obtained first single-mission encryption key;
(f) receive the encrypted second operational keyset from the PCE;
(g) decrypt the encrypted second operational keyset using the RCD private key associated with the RCD public key in order to obtain the second single-mission encryption key;
(h) receive the encrypted second command from the FO over the second wireless communication link;
and (i) decrypt the encrypted second command using a second RCD in-use key derived from the second single-mission encryption key.

25 more elements

Cryptographic system for secure command and control of remotely controlled devices

Life of this patent

Cryptographic system for secure command and control of remotely controlled devices

Life of this patent

Abstract

Claims19