EP0436799A2
Expired / Lapsed
EP
⏱️ 0.0 years remaining
Communication network with key distribution
Assignee: Nexans Norway AS
•
Filing: 1990-11-10
•
Granted: —
•
Expires: 2010-11-10
Abstract
Abstract This invention relates to a communication network intended for secure transmission of speech and data, including different types of subscriber terminals (10-15) and switching modules (4-6), and where the network further comprise crypto devices to undertake encryption/decryption of information transmitted through the network. At least one of the crypto devices is constituted by a crypto-pool device (7,8,9) having a number of crypto modules (CM) physically separated from the switching modules (4,5,6). Each crypto-pool (7,8,9; 20) is provided with a managing device (MA, 26) for communicating with a ciphering key distribution authority through standardized communication protocols and distribute keys to the relevant CM through a control path (25) of the crypto-pool. Each crypto-pool has access to an authentication server (AS, 16; 41,43) providing a directory of security certificates necessary in the authentication process when initiating a network connection.
Inventors
- 👤 Kare Presttun
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-10-29 18:57
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/06; H04L63/062; H04L9/00; H04L9/08; H04L9/0816; H04L9/0819; H04L9/0827; H04Q; H04Q11/00; H04Q11/04; H04Q11/0428; H04Q3/00; H04Q3/58; H04Q3/62; H04Q3/622; H04L63/04; H04L63/0428; H04Q2213/00; H04Q2213/13095; H04Q2213/13174; H04Q2213/13176; H04Q2213/13205; H04Q2213/13209; H04Q2213/1322; H04Q2213/13339; H04Q2213/13395
Claims Analysis
Total Claims: 11
Claim 1
Independent Claim
120 words
Communication network intended for secure transmission of speech and data, including different types of subscriber terminals (10-15) and switching modules (4-6), where subscriber lines connect each subscriber terminal with a switching module and transmission links connect each switching module to other switching modules in the network, and where the network further comprise crypto devices to undertake encryption/decryption of information transmitted through the network, characterized in this that at least one of the crypto devices is constituted by a crypto-pool device (7,8,9) having a number of crypto modules (CM) physically separated from the switching modules (4,5,6), and communicating with the switching modules through standardized interface and communication protocols makes the device accessible from subscriber terminals, switching modules or other network equipment.
Claim 2
Dependent Claim
120 words
Communication network intended for secure transmission of speech and data, including different types of subscriber terminals (10-15) and switching modules (4-6), where subscriber lines connect each subscriber terminal with a switching module and transmission links connect each switching module to other switching modules in the network, and where the network further comprise crypto devices to undertake encryption/decryption of information transmitted through the network, characterized in this that at least one of the crypto devices is constituted by a crypto-pool device (7,8,9) having a number of crypto modules (CM) physically separated from the switching modules (4,5,6), and communicating with the switching modules through standardized interface and communication protocols makes the device accessible from subscriber terminals, switching modules or other network equipment.
Claim 3
Dependent Claim
48 words
Network according to claim 1, characterized in this that each crypto-pool (7,8,9; 20) is provided with a managing device (MA, 26) for communicating with a ciphering key distribution authority through standardized communication protocols and distribute keys to the relevant CM through a control path (25) of the crypto-pool.
Claim 4
Dependent Claim
42 words
Network according to claim 1 or 2, characterized in this that each crypto-pool has access to an authentication server (AS, 16; 41,43) providing a directory of security certificates necessary in the authentication process and encryption key exchange, when initiating a network connection.
Claim 5
Dependent Claim
28 words
Network according to claim 1, characterized in this that the crypto-pools (44,45) are arranged in a public ISDN environment (Fig. 3) having a number of ISPABX switches (31,32).
Claim 6
Dependent Claim
34 words
Network according to claim 1, charcterized in this that the crypto-pool (44,45) may be activated both from a subscriber set (35,36,40) without security module and from a subscriber set (34,38) with security module (46,47).
Claim 7
Dependent Claim
37 words
Network according to claim 1, charcterized in this that the crypto-pool (44,45) may be activated directly by the attached PABX or ISPABX, so that neither the subscriber nor the terminal equipment are aware of the crypto-pool usage.
Claim 8
Dependent Claim
42 words
Network according to claim 1, charcterized in this that the crypto-pool (44,45) may be activated directly by the subscriber (33,34,37,38) having a security module (52,46,53,47) through the terminal equipment (AS, 41,43) which is attached to the same ISPABX as the available crypto-pool.
Claim 9
Dependent Claim
29 words
Network according to claim 4, charcterized in this that the crypto-pool (44,45) may be activated indirectly by accessing an ISPABX service through an end-to-end D-channel or a dedicated 8-channel.
Claim 10
Dependent Claim
41 words
Network according to claim 1, characterized in this that the standardized communication channels (bearer services) which can be handled by a CM are: B-channel 64 kbit/sec H₀-channel 384 kbit/sec (6 B-channels) H₁₁-channel 1536 kbit/sec (24 B-channels) H₁₂-channel 1920 kbit/sec (30 B-channels)
Claim 11
Dependent Claim
48 words
Network according to claim 1, characterized in this that non-secure subscriber equipment (35) can communicate with secure subscriber equipment (38) through a crypto-pool (44) without any weakening of existing security, as the secure terminal (38) and the crypto-pool (44) will authenticate each other and exchange session encryption keys.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.