Patent US5809147A successfully refreshed from Google Patents.
US5809147A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Device for cryptographically processing data packets and method of generating cryptographic processing data
Assignee: Koninklijke PTT Nederland NV
•
Filing: 1997-08-14
•
Granted: 1998-09-15
•
Expires: 2017-08-14
Abstract
Abstract A device for encrypting or decrypting data packets. The device includes two cryptographic elements. The first cryptographic element generates processing data, based on a first starting value, for use in cryptographically processing the data packet. The second cryptographic element is arranged to generate the first starting value based on a second starting value. The second starting value is based on a previously cryptographically processed data packet.
Inventors
- 👤 Martin Klaas De Lange
- 👤 Jean Paul Boly
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-07 12:33
CPC Classifications
H; H04; H04Q; H04Q11/00; H04Q11/04; H04Q11/0428; H04Q11/0478; H04L; H04L9/00; H04L9/06; H04L9/065; H04L12/00; H04L12/54; H04L12/56; H04L12/5601; H04L2012/5672; H04L2012/5673; H04L2012/5687
Claims Analysis
Total Claims: 33
Claim 1
Independent Claim
184 words
Device for cryptographically processing a sequence of data packets, the device comprising: buffer means for temporarily storing the data packets; memory means for storing cryptographic information; identification means for identifying the data packets to form a packet identification and for addressing, based on the packet identification, at least a portion of the cryptographic information stored in the memory means; and processing means for cryptographically processing the data packets based on the cryptographic information stored in the memory means and addressed by the identification means, wherein said processing means comprise a first and a second cryptographic element, said first cryptographic element being designed for generating, on the basis of a first starting vector, processing data for the cryptographic processing of a data packet of the sequence of data packets to be encrypted, and said second cryptographic element being designed for generating, on the basis of a second starting vector, said first starting vector, and said processing means are designed for forming said second starting vector on the basis of a cryptographically processed data packet which precedes the data packet of the sequence of data packets.
Claim 2
Dependent Claim
184 words
Device for cryptographically processing a sequence of data packets, the device comprising: buffer means for temporarily storing the data packets; memory means for storing cryptographic information; identification means for identifying the data packets to form a packet identification and for addressing, based on the packet identification, at least a portion of the cryptographic information stored in the memory means; and processing means for cryptographically processing the data packets based on the cryptographic information stored in the memory means and addressed by the identification means, wherein said processing means comprise a first and a second cryptographic element, said first cryptographic element being designed for generating, on the basis of a first starting vector, processing data for the cryptographic processing of a data packet of the sequence of data packets to be encrypted, and said second cryptographic element being designed for generating, on the basis of a second starting vector, said first starting vector, and said processing means are designed for forming said second starting vector on the basis of a cryptographically processed data packet which precedes the data packet of the sequence of data packets.
Claim 3
Dependent Claim
15 words
Device according to claim 1, wherein said processing means are designed for encrypting data packets.
Claim 4
Dependent Claim
15 words
Device according to claim 1, wherein said processing means are designed for decrypting data packets.
Claim 5
Dependent Claim
19 words
Device according to claim 1, wherein said processing means are designed for selecting between encrypting and decrypting data packets.
Claim 6
Dependent Claim
32 words
Device according to claim 1, designed for processing data packets from different logical channels and for storing a key and first starting value for each of said channels in said memory means.
Claim 7
Dependent Claim
25 words
Device according to claim 1, wherein said processing means comprise a combination element for combining processing data with data of data packets to be processed.
Claim 8
Dependent Claim
13 words
Device according to claim 6, wherein said combination element comprises a modulo-2 adder.
Claim 9
Dependent Claim
23 words
Device according to claim 1, wherein said first cryptographic element and said second cryptographic element are designed for carrying out identical cryptographic functions.
Claim 10
Dependent Claim
25 words
Device according to claim 8, wherein said processing means are designed for interchanging the functions of said first cryptographic element and said second cryptographic element.
Claim 11
Dependent Claim
33 words
Device according to claim 1, wherein said processing means are designed for forming said second starting value on the basis of a key and the first eight bytes of a processed data packet.
Claim 12
Dependent Claim
19 words
Device according to claim 1, wherein said processing means are designed for directly exchanging values between said cryptographic elements.
Claim 13
Dependent Claim
16 words
Device according to claim 1, wherein at least one cryptographic element is provided with plural registers.
Claim 14
Dependent Claim
20 words
Device according to claim 12, wherein said registers are designed for copying the content of one register to another register.
Claim 15
Dependent Claim
12 words
Device according to claim 1, suitable for processing Asynchronous Transfer Mode cells.
Claim 16
Dependent Claim
10 words
Device according to claim 1, accommodated in an integrated circuit.
Claim 17
Dependent Claim
107 words
Method of generating cryptographic processing data, said method comprising the steps of: carrying out a first cryptographic processing on a first starting vector, a final value of said first cryptographic processing being used as processing data for processing a first data segment; and carrying out a second cryptographic processing on a second starting vector, a final value of said second cryptographic processing being used as a first starting vector for said first cryptographic processing when processing a data segment following said first data segment, and said second starting vector being formed on the basis of a key and data which have been combined with the processing data.
Claim 18
Dependent Claim
107 words
Method of generating cryptographic processing data, said method comprising the steps of: carrying out a first cryptographic processing on a first starting vector, a final value of said first cryptographic processing being used as processing data for processing a first data segment; and carrying out a second cryptographic processing on a second starting vector, a final value of said second cryptographic processing being used as a first starting vector for said first cryptographic processing when processing a data segment following said first data segment, and said second starting vector being formed on the basis of a key and data which have been combined with the processing data.
Claim 19
Dependent Claim
199 words
Communication system for transferring data by means of encrypted data packets, comprising a plurality of devices for cryptographically processing a sequence of data packets, said devices comprising: buffer means for temporarily storing the data packets; memory means for storing cryptographic information; identification means for identifying the data packets to form a packet identification and for addressing, based on the packet identification, at least a portion of the cryptographic information stored in the memory means; and processing means for cryptographically processing the data packets based on the cryptographic information stored in the memory means, which cryptographic information is addressed by the identification means, wherein said processing means comprise a first and a second cryptographic element, said first cryptographic element being designed for generating, on the basis of a first starting vector, processing data for the cryptographic processing of a data packet of the sequence of data packets, and said second cryptographic element being designed for generating, on the basis of a second starting vector, said first starting vector, and said processing means are designed for forming said second starting vector on the basis of a cryptographically processed data packet which precedes the data packet of the sequence of data packets.
Claim 20
Dependent Claim
199 words
Communication system for transferring data by means of encrypted data packets, comprising a plurality of devices for cryptographically processing a sequence of data packets, said devices comprising: buffer means for temporarily storing the data packets; memory means for storing cryptographic information; identification means for identifying the data packets to form a packet identification and for addressing, based on the packet identification, at least a portion of the cryptographic information stored in the memory means; and processing means for cryptographically processing the data packets based on the cryptographic information stored in the memory means, which cryptographic information is addressed by the identification means, wherein said processing means comprise a first and a second cryptographic element, said first cryptographic element being designed for generating, on the basis of a first starting vector, processing data for the cryptographic processing of a data packet of the sequence of data packets, and said second cryptographic element being designed for generating, on the basis of a second starting vector, said first starting vector, and said processing means are designed for forming said second starting vector on the basis of a cryptographically processed data packet which precedes the data packet of the sequence of data packets.
Claim 21
Dependent Claim
15 words
System according to claim 17, wherein said processing means are designed for encrypting data packets.
Claim 22
Dependent Claim
15 words
System according to claim 17, wherein said processing means are designed for decrypting data packets.
Claim 23
Dependent Claim
19 words
System according to claim 17, wherein said processing means are designed for selecting between encrypting and decrypting data packets.
Claim 24
Dependent Claim
33 words
System according to claim 17, designed for processing data packets from different logical channels and for storing a key and a first starting value for each of said channels in said memory means.
Claim 25
Dependent Claim
18 words
System according to claim 17, designed for transferring data packets in accordance with the asynchronous transfer mode (ATM).
Claim 26
Independent Claim
158 words
A method for cryptographically processing a first data packet and for subsequently cryptographically processing a second data packet, the method comprising steps of: a) buffering the first data packet; b) identifying the first data packet to generate a packet identification value; c) addressing, based on the packet identification value, stored cryptographic information; d) applying, as a first starting vector, the cryptographic information to a first encryption device to generate processing data; e) encrypting the first data packet based on the processing data to generate a first output; f) generating a second starting vector based on at least a portion of the first output; g) applying the second starting vector to a second encryption device to generate new cryptographic information; h) applying the new cryptographic information, as another first starting vector, to the first encryption device to generate new processing data; and i) encrypting the second data packet based on the new processing data to generate a second output.
Claim 27
Independent Claim
158 words
A method for cryptographically processing a first data packet and for subsequently cryptographically processing a second data packet, the method comprising steps of: a) buffering the first data packet; b) identifying the first data packet to generate a packet identification value; c) addressing, based on the packet identification value, stored cryptographic information; d) applying, as a first starting vector, the cryptographic information to a first encryption device to generate processing data; e) encrypting the first data packet based on the processing data to generate a first output; f) generating a second starting vector based on at least a portion of the first output; g) applying the second starting vector to a second encryption device to generate new cryptographic information; h) applying the new cryptographic information, as another first starting vector, to the first encryption device to generate new processing data; and i) encrypting the second data packet based on the new processing data to generate a second output.
Claim 28
Dependent Claim
56 words
The method of claim 23 wherein the step of generating a second starting vector based on at least a portion of the first output includes sub-steps of: i) copying a portion of the first output to form a first value; and ii) adding a pre-determined value to the first value to generate the second starting vector.
Claim 29
Dependent Claim
24 words
The method of claim 24 wherein the first value is formed by generating four copies of a first eight bytes of the first output.
Claim 30
Independent Claim
128 words
A method for cryptographically processing a first data packet and for subsequently cryptographically processing a second data packet, the method comprising steps of: a) applying, as a first starting vector, cryptographic information to a first encryption device to generate processing data; b) encrypting the first data packet based on the processing data to generate a first output; c) generating a second starting vector based on at least a portion of the first output; d) applying the second starting vector to a second encryption device to generate new cryptographic information; e) applying the new cryptographic information, as another first starting vector, to the first encryption device to generate new processing data; and f) encrypting the second data packet based on the new processing data to generate a second output.
Claim 31
Independent Claim
128 words
A method for cryptographically processing a first data packet and for subsequently cryptographically processing a second data packet, the method comprising steps of: a) applying, as a first starting vector, cryptographic information to a first encryption device to generate processing data; b) encrypting the first data packet based on the processing data to generate a first output; c) generating a second starting vector based on at least a portion of the first output; d) applying the second starting vector to a second encryption device to generate new cryptographic information; e) applying the new cryptographic information, as another first starting vector, to the first encryption device to generate new processing data; and f) encrypting the second data packet based on the new processing data to generate a second output.
Claim 32
Independent Claim
285 words
An apparatus for cryptographically processing a first data packet and a second data packet, the device comprising: a) a first cryptographic processing unit having an input and an output; b) an encryption element having a first input for receiving the first and second data packets, a second input coupled with the output of the first cryptographic processing unit, and an output; and c) a second cryptographic processing unit having an input for receiving at least a part of an encrypted data packet provided at the output of the encryption element, and an output coupled with the input of the first cryptographic processing unit, wherein the first cryptographic processing unit is adapted to (i) receive, at its input, cryptographic information, as a first starting vector, and (ii) in response, provide processing data at its output, wherein the encryption element is adapted to (i) receive, at its first input, the first data packet, and (ii) encrypt the first data packet based on the processing data to generate a first output value, wherein a second starting vector is generated based on at least a portion of the first output value, wherein the second cryptographic processing unit is adapted to (i) receive, at its input, the second starting vector, and (ii) in response, provide, at its output, new cryptographic information, wherein the first cryptographic processing unit is adapted to (i) receive, at its input, the new cryptographic information as another first starting vector, and (ii) in response, provide new processing data at its output, and wherein the encryption element is adapted to (i) receive, at its input, the second data packet, and to provide, at its output, a second output value which is based on the new processing data.
Claim 33
Independent Claim
285 words
An apparatus for cryptographically processing a first data packet and a second data packet, the device comprising: a) a first cryptographic processing unit having an input and an output; b) an encryption element having a first input for receiving the first and second data packets, a second input coupled with the output of the first cryptographic processing unit, and an output; and c) a second cryptographic processing unit having an input for receiving at least a part of an encrypted data packet provided at the output of the encryption element, and an output coupled with the input of the first cryptographic processing unit, wherein the first cryptographic processing unit is adapted to (i) receive, at its input, cryptographic information, as a first starting vector, and (ii) in response, provide processing data at its output, wherein the encryption element is adapted to (i) receive, at its first input, the first data packet, and (ii) encrypt the first data packet based on the processing data to generate a first output value, wherein a second starting vector is generated based on at least a portion of the first output value, wherein the second cryptographic processing unit is adapted to (i) receive, at its input, the second starting vector, and (ii) in response, provide, at its output, new cryptographic information, wherein the first cryptographic processing unit is adapted to (i) receive, at its input, the new cryptographic information as another first starting vector, and (ii) in response, provide new processing data at its output, and wherein the encryption element is adapted to (i) receive, at its input, the second data packet, and to provide, at its output, a second output value which is based on the new processing data.
References Cited (Backward Citations)
US4159468A
Cited
US4160120A
Cited
US4471164A
Cited
WO1987007796A1
Cited
EP0227318A2
Cited
US4791669A
Cited
US4972481A
Cited
US4815130A
Cited
EP0366288A2
Cited
US5016275A
Cited
US5048087A
Cited
US5195136A
Cited
US5442705A
Cited
US5365588A
Cited
US5483598A
Cited
US5381480A
Cited
US5425103A
Cited
US5619576A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-09-14 | 2002-03-16 | 2002-09-15 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-09-14 | 2006-03-16 | 2006-09-15 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-09-14 | 2010-03-16 | 2010-09-15 | $7700.00 | Window Closed / Lapsed |