Patent US5115466A successfully refreshed from Google Patents.
US5115466A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Communication network intended for secure transmission of speech and data
Assignee: Nexans Norway AS
•
Filing: 1990-10-31
•
Granted: 1992-05-19
•
Expires: 2010-10-31
Abstract
Abstract This invention relates to a communication network intended for secure transmission of speech and data, including different types of subscriber terminals (10-15) and switching modules (4-6), and where the network further comprise crypto devices to undertake encryption/decryption of information transmitted through the network. At least one of the crypto devices is constituted by a crypto-pool device (7,8,9) having a number of crypto modules (CM) physically separated from the switching modules (4,5,6). Each crypto-pool (7,8,9; 20) is provided with a managing device (MA, 26) for communicating with a ciphering key distribution authority through standardized communication protocols and distribute keys to the relevant CM through a control path (25) of the crypto-pool. Each crypto-pool has access to an authentication server (AS, 16; 41,43) providing a directory of security certificates necessary in the authentication process when initiating a network connection.
Inventors
- 👤 Kare Presttun
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 21:49
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/06; H04L63/062; H04L9/00; H04L9/08; H04L9/0816; H04L9/0819; H04L9/0827; H04Q; H04Q11/00; H04Q11/04; H04Q11/0428; H04Q3/00; H04Q3/58; H04Q3/62; H04Q3/622; H04L63/04; H04L63/0428; H04Q2213/00; H04Q2213/13095; H04Q2213/13174; H04Q2213/13176; H04Q2213/13205; H04Q2213/13209; H04Q2213/1322; H04Q2213/13339; H04Q2213/13395
Claims Analysis
Total Claims: 11
Claim 1
Independent Claim
266 words
Communication network for secure transmission of information, comprising: at least three subscriber terminals, at least two switching modules including a first switching module associated with a first and second said subscriber terminal and a second switching module associated with a third said switching module, subscriber lines to connect each of the subscriber terminals with its associated said switching module, at least one transmission link connecting the switching modules to each other to thereby form a switched network, and at least two cryptographic devices, including a first cryptographic device associated with the first switching module and a second cryptographic device associated with the second switching module, to undertake encryption/decryption of at least some of the information transmitted through the switched network between the first switching module and the second switching module, wherein: the first cryptographic device is physically separated from said first switching module, the first cryptographic device uses standardized interface and communication protocols, to communicate with said first switching module and, via said first switching module, with said first and second subscriber terminals, said first cryptographic device is a crypto-pool device comprising a plurality of cryptographic modules for simultaneous encryption/decryption of respective different information being transmitted between the associated said first switching module and one or more other said switching modules, each said cryptographic module providing a non-secure communication path via said first switching module to a currently designated one of said at least two subscriber terminals, and a secure communication path via said first switching module, said switched network and a currently designated said second switching module to a currently designated said second cryptographic device.
Claim 2
Dependent Claim
266 words
Communication network for secure transmission of information, comprising: at least three subscriber terminals, at least two switching modules including a first switching module associated with a first and second said subscriber terminal and a second switching module associated with a third said switching module, subscriber lines to connect each of the subscriber terminals with its associated said switching module, at least one transmission link connecting the switching modules to each other to thereby form a switched network, and at least two cryptographic devices, including a first cryptographic device associated with the first switching module and a second cryptographic device associated with the second switching module, to undertake encryption/decryption of at least some of the information transmitted through the switched network between the first switching module and the second switching module, wherein: the first cryptographic device is physically separated from said first switching module, the first cryptographic device uses standardized interface and communication protocols, to communicate with said first switching module and, via said first switching module, with said first and second subscriber terminals, said first cryptographic device is a crypto-pool device comprising a plurality of cryptographic modules for simultaneous encryption/decryption of respective different information being transmitted between the associated said first switching module and one or more other said switching modules, each said cryptographic module providing a non-secure communication path via said first switching module to a currently designated one of said at least two subscriber terminals, and a secure communication path via said first switching module, said switched network and a currently designated said second switching module to a currently designated said second cryptographic device.
Claim 3
Dependent Claim
44 words
Network according to claim 1, wherein each crypto-pool device further comprises a managing device for communicating with a ciphering key distribution authority through said standardized communication protocols and for distributing ciphering keys to the relevant cryptographic module through a control path of the crypto-pool.
Claim 4
Dependent Claim
35 words
Network according to claim 1, wherein each crypto-pool device has access to an authentication server providing a directory of security certificates necessary in the authentication process and encryption key exchange, when initiating a network connection.
Claim 5
Dependent Claim
22 words
Network according to claim 1, wherein the crypto-pool devices are arranged in a public ISDN environment having a number of ISPABX switches.
Claim 6
Dependent Claim
25 words
Network according to claim 4, wherein the crypto-pool may be activated indirectly to accessing an ISPABX service through an end-to-end D-channel or a dedicated B-channel.
Claim 7
Dependent Claim
30 words
Network according to claim 1, wherein the crypto-pool device may be activated both from a subscriber terminal without a security module and from a subscriber terminal with a security module.
Claim 8
Dependent Claim
30 words
Network according to claim 1, wherein the crypto-pool may be activated directly by an attached PABX or ISPABX, so that no subscriber terminal is aware of any associated crypto-pool usage.
Claim 9
Dependent Claim
28 words
Network according to claim 1, wherein the crypto-pool may be activated directly by a security module at a subscriber terminal attached to the same ISPABX as said crypto-pool.
Claim 10
Dependent Claim
41 words
Network according to claim 1, wherein the standardized communication channels which can be handled by one or more of said crypto modules are: B-channel 64 kbit/sec H 0 -channel 384 kbit/sec H 11 -channel 1536 kbit/sec H 12 -channel 1920 kbit/sec.
Claim 11
Dependent Claim
65 words
Network according to claim 1, wherein one of the subscriber terminals is a non-secure terminal and another one of the subscriber terminals is a secure terminal, and the secure terminal and the crypto-pool each further comprise means for authenticating each other and exchanging session encryption keys, whereby the non-secure terminal can communicate with the secure terminal through the crypto-pool without any weakening of existing security.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1995-05-19 | 1995-11-18 | 1996-05-19 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1999-05-19 | 1999-11-18 | 2000-05-19 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2003-05-19 | 2003-11-18 | 2004-05-19 | $7700.00 | Window Closed / Lapsed |