Method and apparatus for encrypted communication in data networks

Patent 5479514 Issued on December 26, 1995. Estimated Expiration Date:

February 23, 2014. Estimated Expiration Date is calculated based on simple USPTO term provisions. It does not account for terminal disclaimers, term adjustments, failure to pay maintenance fees, or other factors which might affect the term of a patent.

Abstract Claims Description Full Text

Patent References

End-to-end encryption system and method of operation
Patent #: 4423287
Issued on: 12/27/1983
Inventor: Zeidler

Apparatus and method for restricting access to a communication network
Patent #: 4638356
Issued on: 01/20/1987
Inventor: Frezza

Locating resources in computer networks
Patent #: 4914571
Issued on: 04/03/1990
Inventor: Baratz, et al.

Apparatus and method for establishing crypto conferences on a telecommunications network
Patent #: 5210794
Issued on: 05/11/1993
Inventor: Brunsgard

Method and means for combining and managing personal verification and message authentication encrytions for network transmission
Patent #: 5319710
Issued on: 06/07/1994
Inventor: Atalla, et al.

Method and apparatus for securely conveying network control data across a cryptographic boundary
Patent #: 5386471
Issued on: 01/31/1995
Inventor: Bianco

Method and apparatus for key-management scheme for use with internet protocols at site firewalls Patent #: 5416842
Issued on: 05/16/1995
Inventor: Aziz

Inventor

Klonowski, John L.

Application

No. 200610 filed on 02/23/1994

US Classes:

380/47, Plural generators380/277, KEY MANAGEMENT713/162Having particular address related cryptography

Examiners

Primary: Buczinski, Stephen C.

Attorney, Agent or Firm

Herndon; Jerry W.

International Classes

H04L 009/02
H04K 001/00

Abstract

A secure network data communication technique that allows the designation of selected network nodes to share encryption keys with other selected network nodes. A message originating node determines nodes along a message route with which it shares encryption keys. One of these keys is selected and a message is encrypted with the key. The identity of the originating node and the decrypting node that also knows the selected key is added to the encrypted message in clear form. The decrypting node receives the message, recognizes its identity in the message and decrypts the message using the key shared with the originating node. If it is also not the destination node, it repeats the process of selecting a new encrypting node with which it shares a key, re-encrypting and transmitting re-encrypted message toward the destination.