US5805705A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Synchronization of encryption/decryption keys in a data communication network
Assignee: Henkel AG and Co KGaA
•
Filing: 1996-01-29
•
Granted: 1998-09-08
•
Expires: 2016-01-29
Abstract
Abstract To enhance the security provided by data encryption in a data communication network, the encryption/decryption keys are changed periodically at the source and destination nodes for an established connection. A destination node must know not only the value of any new key but also when to begin using that key to decrypt received data packets. Synchronization (making sure a data packet is decrypted using a decryption key correlated with the encryption key used to encrypt the same packet) is achieved by defining a single bit in each packet header as a key synchronization bit. As long as key synchronization bit value remains unchanged from one received packet to the next, a receiving node will continue to use the same decryption key it has been using. When a change in the key synchronization bit value is detected, the receiving node will begin using a previously-received, new decryption key.
Inventors
- 👤 James P. Gray
- 👤 Raif O. Onvural
- 👤 Mohammad Peyravian
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 04:15
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/06; H04L63/068; H04L69/00; H04L69/22; H04L9/00; H04L9/08; H04L9/0891; H04L9/12
Claims Analysis
Total Claims: 26
Claim 1
Independent Claim
204 words
For use in a system including one or more source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, a method of maintaining synchronization between the encryption key used at a source node in encrypting a data packet and the decryption key used at a destination node to decrypt the same data packet, said method comprising the steps of: sending a decryption key from the source node to the destination node; storing said decryption key at the destination node; at the source node, writing a predetermined binary value into one or more predetermiined bit positions in the header portion of each data packet to be decrypted using said decryption key, at the destination node, monitoring said one or more bit positions in the header portion of each received data packet for the presence of said predetermined binary value; and at the destination node, activating said decryption key when said predetermined binary value is detected in said one or more predetermined bit positions.
Claim 2
Dependent Claim
204 words
For use in a system including one or more source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, a method of maintaining synchronization between the encryption key used at a source node in encrypting a data packet and the decryption key used at a destination node to decrypt the same data packet, said method comprising the steps of: sending a decryption key from the source node to the destination node; storing said decryption key at the destination node; at the source node, writing a predetermined binary value into one or more predetermiined bit positions in the header portion of each data packet to be decrypted using said decryption key, at the destination node, monitoring said one or more bit positions in the header portion of each received data packet for the presence of said predetermined binary value; and at the destination node, activating said decryption key when said predetermined binary value is detected in said one or more predetermined bit positions.
Claim 3
Dependent Claim
37 words
A method as set forth in claim 1 wherein the predetermined binary value comprises the binary complement of the binary value stored in the corresponding predetermined bit positions of the header portion of the prior data packet.
Claim 4
Dependent Claim
158 words
For use at a source node in a system including one or more such source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, a method of maintaining synchronization between an encryption key used at the source node in encrypting data packets and a decryption key used at a destination node to decrypt the same packets after transmission through the network, said method comprising the steps of: when an encryption key is to be activated, sending the corresponding decryption key from the source node to the destination node; and writing a predetermined binary value into one or more predetermined bit positions in the header portion of each data packet to be decrypted using said decryption key.
Claim 5
Dependent Claim
158 words
For use at a source node in a system including one or more such source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, a method of maintaining synchronization between an encryption key used at the source node in encrypting data packets and a decryption key used at a destination node to decrypt the same packets after transmission through the network, said method comprising the steps of: when an encryption key is to be activated, sending the corresponding decryption key from the source node to the destination node; and writing a predetermined binary value into one or more predetermined bit positions in the header portion of each data packet to be decrypted using said decryption key.
Claim 6
Dependent Claim
36 words
A method as set forth in claim 3 wherein the predetermined binary value comprises the binary complement of the binary value stored in the corresponding bit positions of the header portion of the prior data packet.
Claim 7
Dependent Claim
222 words
For use in a system including one or more source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, a key-synchronizing system for maintaining synchronization between the encryption key used at a source node to encrypt a data packet and the decryption key used at the destination node in decrypting the same data packet after transmission through the network, said key-synchronizing system comprising: at the source node from which the encrypted packet is to be sent, means for sending a decryption key to the destination node which is to receive the packet; at the destination node, means for storing said decryption key; at the source node, means for writing a predetermined binary value into one or more predetermined bit positions in the header portion of a data packet to be decrypted using said decryption key; at the destination node, means monitoring the header portion of each received data packet for the presence of the predetermined binary value in the predetermined bit positions; and at the destination node, means for activating said decryption key when the predetermined binary value is detected.
Claim 8
Dependent Claim
222 words
For use in a system including one or more source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, a key-synchronizing system for maintaining synchronization between the encryption key used at a source node to encrypt a data packet and the decryption key used at the destination node in decrypting the same data packet after transmission through the network, said key-synchronizing system comprising: at the source node from which the encrypted packet is to be sent, means for sending a decryption key to the destination node which is to receive the packet; at the destination node, means for storing said decryption key; at the source node, means for writing a predetermined binary value into one or more predetermined bit positions in the header portion of a data packet to be decrypted using said decryption key; at the destination node, means monitoring the header portion of each received data packet for the presence of the predetermined binary value in the predetermined bit positions; and at the destination node, means for activating said decryption key when the predetermined binary value is detected.
Claim 9
Dependent Claim
31 words
A system as set forth in claim 5 wherein the predetermined binary value comprises the binary complement of the binary value written into corresponding bit positions of the prior data packet.
Claim 10
Dependent Claim
126 words
A key-synchronizing source node for use in a system including one or more source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, said key-synchronizing source node comprising: means for sending a decryption key to at least one destination node to which data packets are to be sent; and means for writing a predetermined binary value into one or more predetermined bit positions in the header portion of each data packet which is to be decrypted using said decryption key at the destination node.
Claim 11
Dependent Claim
126 words
A key-synchronizing source node for use in a system including one or more source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, said key-synchronizing source node comprising: means for sending a decryption key to at least one destination node to which data packets are to be sent; and means for writing a predetermined binary value into one or more predetermined bit positions in the header portion of each data packet which is to be decrypted using said decryption key at the destination node.
Claim 12
Dependent Claim
133 words
A key-synchronizing destination node for use in a system including one or more source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, said key-synchronizing destination node comprising: means for receiving a decryption key from a source node from which data packets are being transmitted; means for storing said decryption key; means for monitoring one or more predetermined bit positions in the header portion of each received data packet; means for activating said decryption key when a predetermined change is detected in the predetermined bit positions of a received data packet.
Claim 13
Dependent Claim
133 words
A key-synchronizing destination node for use in a system including one or more source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, said key-synchronizing destination node comprising: means for receiving a decryption key from a source node from which data packets are being transmitted; means for storing said decryption key; means for monitoring one or more predetermined bit positions in the header portion of each received data packet; means for activating said decryption key when a predetermined change is detected in the predetermined bit positions of a received data packet.
Claim 14
Dependent Claim
200 words
For use in a system including one or more source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, a method of maintaining synchronization between the encryption key used at a source node in encrypting a data packet and the decryption key used at a destination node to decrypt the same data packet, said method comprising the steps of: storing at least one unactivated decryption key at the destination node; at the source node, writing a predetermined binary value into one or more predetermined bit positions in the header portion of each data packet to be decrypted using said decryption key; at the destination node, monitoring said one or more bit positions in the header portion of each received data packet for the presence of said predetermined binary value; and at the destination node, activating said decryption key when the predetermined binary value is detected in said one or more predetermined bit positions of a received data packet.
Claim 15
Dependent Claim
200 words
For use in a system including one or more source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, a method of maintaining synchronization between the encryption key used at a source node in encrypting a data packet and the decryption key used at a destination node to decrypt the same data packet, said method comprising the steps of: storing at least one unactivated decryption key at the destination node; at the source node, writing a predetermined binary value into one or more predetermined bit positions in the header portion of each data packet to be decrypted using said decryption key; at the destination node, monitoring said one or more bit positions in the header portion of each received data packet for the presence of said predetermined binary value; and at the destination node, activating said decryption key when the predetermined binary value is detected in said one or more predetermined bit positions of a received data packet.
Claim 16
Dependent Claim
36 words
A method as set forth in claim 9 wherein the predetermined binary value comprises the binary complement of the binary value stored in the corresponding bit positions of the header portion of the prior data packet.
Claim 17
Dependent Claim
155 words
For use at a source node in a system including one or more such source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, a method of maintaining synchronization between an encryption key used at the source node in encrypting data packets and a decryption key used at a destination node to decrypt the same packets after transmission through the network, said method comprising the steps of: determining that a decryption key is to be activated at the destination node; and in response to such determination, writing a predetermined binary value into one or more predetermined bit positions in the header portion of each data packet to be decrypted using said decryption key.
Claim 18
Dependent Claim
155 words
For use at a source node in a system including one or more such source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, a method of maintaining synchronization between an encryption key used at the source node in encrypting data packets and a decryption key used at a destination node to decrypt the same packets after transmission through the network, said method comprising the steps of: determining that a decryption key is to be activated at the destination node; and in response to such determination, writing a predetermined binary value into one or more predetermined bit positions in the header portion of each data packet to be decrypted using said decryption key.
Claim 19
Dependent Claim
36 words
A method as set forth in claim 11 wherein the predetermined binary value comprises the binary complement of the binary value stored in the corresponding bit positions of the header portion of the prior data packet.
Claim 20
Dependent Claim
207 words
For use in a system including one or more source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, a key-synchronizing system for maintaining synchronization between the encryption key used at a source node to encrypt a data packet and the decryption key used at the destination node in decrypting the same data packet after transmission through the network, said key-synchronizing system comprising: at the destination node, means for storing at least one decryption key; at the source node, means for writing a predetermined binary value into one or more predetermined bit positions in the header portion of a data packet to be decrypted using said decryption key; at the destination node, means monitoring the header portion of each received data packet for the presence of said predetermined binary value in the predetermined bit positions; and at the destination node, means for retrieving said decryption key from storage and activating said key for each received data packet in which the predetermined binary value is detected.
Claim 21
Dependent Claim
207 words
For use in a system including one or more source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, a key-synchronizing system for maintaining synchronization between the encryption key used at a source node to encrypt a data packet and the decryption key used at the destination node in decrypting the same data packet after transmission through the network, said key-synchronizing system comprising: at the destination node, means for storing at least one decryption key; at the source node, means for writing a predetermined binary value into one or more predetermined bit positions in the header portion of a data packet to be decrypted using said decryption key; at the destination node, means monitoring the header portion of each received data packet for the presence of said predetermined binary value in the predetermined bit positions; and at the destination node, means for retrieving said decryption key from storage and activating said key for each received data packet in which the predetermined binary value is detected.
Claim 22
Dependent Claim
31 words
A system as set forth in claim 13 wherein the predetermined binary value comprises the binary complement of the binary value written into corresponding bit positions of the prior data packet.
Claim 23
Dependent Claim
118 words
A key-synchronizing source node for use in a system including one or more source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, said key-synchronizing source node comprising: means for determining when a decryption key is to be used at a destination node; and means for writing a predetermined binary value into predetermined bit positions in the header portion of each data packet which is to be decrypted at the destination node using said decryption key.
Claim 24
Dependent Claim
118 words
A key-synchronizing source node for use in a system including one or more source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, said key-synchronizing source node comprising: means for determining when a decryption key is to be used at a destination node; and means for writing a predetermined binary value into predetermined bit positions in the header portion of each data packet which is to be decrypted at the destination node using said decryption key.
Claim 25
Dependent Claim
115 words
A key-synchronizing destination node for use in a system including one or more source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, said key-synchronizing destination node comprising: means for storing at least one decryption key; means for monitoring predetermined bit positions in the header portion of each received data packet; means for activating a stored decryption key when a change is detected in the predetermined bit positions of a received data packet.
Claim 26
Dependent Claim
115 words
A key-synchronizing destination node for use in a system including one or more source nodes for encrypting information using an encryption key, an interposed data communication network through which data packets including the encrypted information are transmitted, each of said data packets including a header and a data payload portion, and one or more destination nodes for decrypting received data packets using a decryption key, said key-synchronizing destination node comprising: means for storing at least one decryption key; means for monitoring predetermined bit positions in the header portion of each received data packet; means for activating a stored decryption key when a change is detected in the predetermined bit positions of a received data packet.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-09-07 | 2002-03-09 | 2002-09-08 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-09-07 | 2006-03-09 | 2006-09-08 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-09-07 | 2010-03-09 | 2010-09-08 | $7700.00 | Window Closed / Lapsed |