Method, apparatus and device for enciphering messages transmitted between interconnected networks

Claim 3

A method according to claim 1 wherein: enciphering the part of one of the TCP or UDP header and the data with a Data Encryption Standard with the part of one of the TCP or UDP header and the data comprising a string of bits having a length divisible by 64.

Claim 4

A method according to claim 2 wherein: the Data Encryption Standard is used in a CBC mode with an initial vector required by the CBC mode modified as a function of time in order to avoid unauthorized replay.

Claim 5

A method according to claim 1 wherein: the part of one of the TCP or UDP header comprises a checksum field of the TCP or UDP header.

Claim 6

A method of processing messages transmitted between first and second items of equipment contained respectively in interconnected first and second networks, each of the first and second networks including at least one sending equipment and one receiving equipment authorized to send and receive respectively messages enciphered by the method for enciphering according to claim 1 wherein each message is processed with the following steps: verifying a presence of a first memory card to authenticate a first operator of the first item of equipment; determining what protocol is being used between the first and second items of equipment, and if the protocol used is Internet network layer protocol searching for a first key associated with the sending equipment of the first item of equipment and for a second key associated with the receiving equipment of the second item equipment; if the first and second keys exist, enciphering a message to be sent with the first key to obtain an enciphered message, and transmitting the enciphered message by the sending equipment of the first item of equipment and otherwise rejecting the message to be sent; verifying a presence of a second memory card to authenticate a second operator of the second item of equipment; and if the first and second keys exist, deciphering a received message with the second key and otherwise rejecting a received message.

Claim 7

An application of the method according to claim 1 further comprising: protecting access to servers of computer network with the method for enciphering messages.

Claim 8

An interface apparatus connected between a highway and one of a network or an item of equipment, the highway using a specified network layer protocol, and permitting a transmission of messages via the highway between one of the network or the item of equipment to which the interface apparatus is connected and another one of the network or the item of equipment to which another interface apparatus is connected, each of the messages containing a plurality of headers including an Internet header and one of a TCP or UDP header and data comprising: means for reading a memory card; means for enciphering, for each of the messages, the data and at least a part of one of the TCP or UDP header to obtain enciphered data and an enciphered part of one of the TCP or UDP header and with the Internet header not being enciphered; means for transferring an enciphered message comprising the Internet header, the enciphered data and the enciphered part of one of the TCP or UDP header, for routing of the enciphered message via the highway; and means for identifying one of the networks or items of equipment associated with the interface apparatus.

Claim 9

An interface apparatus connected between a highway and one of a network or an item of equipment, the highway using a specified network layer protocol, and permitting a transmission of messages via the highway between one of the network or the item of equipment to which the interface apparatus is connected and another one of the network or the item of equipment to which another interface apparatus is connected, each of the messages containing a plurality of headers including an Internet header and one of a TCP or UDP header and data comprising: means for reading a memory card; means for enciphering, for each of the messages, the data and at least a part of one of the TCP or UDP header to obtain enciphered data and an enciphered part of one of the TCP or UDP header and with the Internet header not being enciphered; means for transferring an enciphered message comprising the Internet header, the enciphered data and the enciphered part of one of the TCP or UDP header, for routing of the enciphered message via the highway; and means for identifying one of the networks or items of equipment associated with the interface apparatus.

Claim 10

An interface apparatus according to claim 7 further comprising: means for deciphering received enciphered messages.

Claim 11

An interface apparatus according to claim 7 further comprising: an item of equipment of a station or a server type associated with the interface apparatus via one of direct connection or a protected network.

Claim 12

An interface apparatus according to claim 7 further comprising: means for authorizing or prohibiting an association between the interface apparatus and one of the network or item of equipment.

Claim 13

An interface apparatus according to claim 7 further comprising: an item of equipment of the server type associated with the interface apparatus.

Claim 14

An application of the interface apparatus according to claim 7 further comprising: a communication network coupled to the interface apparatus using a protocol of the Internet.