US5442702A — Method and apparatus for privacy of traffic behav…

Claim 1

Independent Claim 195 words

A circuit for the generation and validation of new encryption patterns for the transmission of data cells and commands on a shared medium network having a line termination transmitting the data cells and commands, and a plurality of network terminations, each transmitted data cell or command containing encrypted address information of its destination network termination, the address information being the destination network termination address plus additional identifier bits, and a different encryption pattern being used for each destination network termination, the circuit comprising; a microprocessing unit for performing the generating and verifying of the new encryption patterns; and a memory device for storing and retrieval of active encryption pattern information, the memory device being connected to the processing unit, wherein the processing unit generates a new encryption pattern for a particular network termination which is verified by sequentially processing it with each of the active encryption patterns to detect for potential misdeliveries, and storing it in a respective location of the memory device if a potential misdelivery condition is not detected in each of the processing results, and generating a new encryption pattern to be verified if any of the processing results indicate potential misdeliveries.

Claim 2

Dependent Claim 195 words

A circuit for the generation and validation of new encryption patterns for the transmission of data cells and commands on a shared medium network having a line termination transmitting the data cells and commands, and a plurality of network terminations, each transmitted data cell or command containing encrypted address information of its destination network termination, the address information being the destination network termination address plus additional identifier bits, and a different encryption pattern being used for each destination network termination, the circuit comprising; a microprocessing unit for performing the generating and verifying of the new encryption patterns; and a memory device for storing and retrieval of active encryption pattern information, the memory device being connected to the processing unit, wherein the processing unit generates a new encryption pattern for a particular network termination which is verified by sequentially processing it with each of the active encryption patterns to detect for potential misdeliveries, and storing it in a respective location of the memory device if a potential misdelivery condition is not detected in each of the processing results, and generating a new encryption pattern to be verified if any of the processing results indicate potential misdeliveries.

Claim 3

Dependent Claim 23 words

The circuit of claim 1, further comprising: a pseudo-random number generator being connected to the processing unit for generating the new encryption patterns.

Claim 4

Dependent Claim 29 words

The circuit of claim 1, wherein a format of the memory table having the encryption patterns at memory address locations corresponding to the addresses of the respective network terminations.

Claim 5

Independent Claim 177 words

A method of generating and evaluating pseudo-random encryption patterns for encrypting destination address information contained in data cells or commands on a shared medium network, the network having a line termination and a plurality of network terminations, the method comprising: generating a new pseudo-random encryption pattern for the address information of data cells or commands destined for a particular network termination, the address information containing the destination network termination address and additional identifier bits; generating a sum for each encrypted address information for data cells or commands destined for the other network terminations by adding, using modulo 2 addition, the encrypted address information for the other network terminations with a portion of the new encryption pattern used for encrypting the address information; and comparing each sum with the address of the particular network termination for which the new encryption pattern is generated, wherein if all sums are not equal to the address of the particular network termination for which the pattern was generated, then the new encryption pattern is valid and may be used in the network.

Claim 6

Independent Claim 177 words

A method of generating and evaluating pseudo-random encryption patterns for encrypting destination address information contained in data cells or commands on a shared medium network, the network having a line termination and a plurality of network terminations, the method comprising: generating a new pseudo-random encryption pattern for the address information of data cells or commands destined for a particular network termination, the address information containing the destination network termination address and additional identifier bits; generating a sum for each encrypted address information for data cells or commands destined for the other network terminations by adding, using modulo 2 addition, the encrypted address information for the other network terminations with a portion of the new encryption pattern used for encrypting the address information; and comparing each sum with the address of the particular network termination for which the new encryption pattern is generated, wherein if all sums are not equal to the address of the particular network termination for which the pattern was generated, then the new encryption pattern is valid and may be used in the network.

Claim 7

Dependent Claim 41 words

The method of claim 4, further comprising: notifying the particular network termination of the new encryption pattern which has been generated and determined valid for use of encrypting the address information for data cells and commands destined to that network termination.

Claim 8

Dependent Claim 19 words

The method of claim 4, further comprising: storing the encryption patterns for the network termination in a memory device.

Claim 9

Dependent Claim 27 words

The method of claim 4, wherein the method is repeatedly sequentially performed to generate and evaluate new encryption patterns corresponding to each network termination in the network.

Claim 10

Dependent Claim 25 words

The method of claim 4, wherein the method is repeatedly randomly performed to generate new encryption patterns corresponding to each network termination in the network.

Claim 11

Dependent Claim 47 words

The method of claim 4, further comprising: ranking each network termination based on the required level of security wherein new encryption patterns will be generated and tested more frequently for the network terminating requiring a higher level of security than those requiring a lesser level of security.

Claim 12

Independent Claim 162 words

A method for transmitting data cells from a line termination to a plurality of network terminations over a shared medium network having privacy of traffic behavior, each network termination having a unique address, the method comprising: combining identifier bits with destination address information for each data cell to form a corresponding expanded address; inserting the expanded address into the destination address field of the corresponding data cell; encrypting the expanded address using a particular encryption pattern corresponding to the destination network termination; transmitting the data cell on the shared medium network, each network termination receiving the data cell transmitted on the network; processing the encrypted expanded address of the data cell with a particular decryption pattern corresponding to a network termination to form a processed address, each network termination performing such processing on the received data cell; and verifying whether identifier bits of the processed address are proper if a destination address of the processed address corresponds to the network termination address.

Claim 13

Independent Claim 162 words

A method for transmitting data cells from a line termination to a plurality of network terminations over a shared medium network having privacy of traffic behavior, each network termination having a unique address, the method comprising: combining identifier bits with destination address information for each data cell to form a corresponding expanded address; inserting the expanded address into the destination address field of the corresponding data cell; encrypting the expanded address using a particular encryption pattern corresponding to the destination network termination; transmitting the data cell on the shared medium network, each network termination receiving the data cell transmitted on the network; processing the encrypted expanded address of the data cell with a particular decryption pattern corresponding to a network termination to form a processed address, each network termination performing such processing on the received data cell; and verifying whether identifier bits of the processed address are proper if a destination address of the processed address corresponds to the network termination address.

Claim 14

Dependent Claim 19 words

The method of claim 10, wherein the identifier bits correspond to particular bits of the destination network termination address.

Claim 15

Dependent Claim 17 words

The method of claim 10, wherein the identifier bits are derived from the destination network termination address.

Claim 16

Dependent Claim 186 words

A shared-medium network having privacy of traffic behavior comprising: a line termination having a processing unit connected to a memory device, wherein the line termination is operable to transmit data cells and to combine identifier bits with a destination address to form an expanded address, and insert the expanded address into an address field of each data cell to be transmitted and encrypt the expanded address using a particular encryption pattern corresponding to a destination network termination, and; a shared medium network operably connected to the line termination processing unit; and a plurality of network terminations connected to the network, each network termination having a processing unit connected to a memory device, the processing unit being operably connected to the network, each network termination having a unique address, wherein each network termination processing unit is operable to process the encrypted expanded addresses of each data cell received from the network with a decryption pattern corresponding to the network termination address, and to verify that identifier bits of the processed address are proper if a destination address of the processed address corresponds to the network termination address.

Claim 17

Dependent Claim 186 words

A shared-medium network having privacy of traffic behavior comprising: a line termination having a processing unit connected to a memory device, wherein the line termination is operable to transmit data cells and to combine identifier bits with a destination address to form an expanded address, and insert the expanded address into an address field of each data cell to be transmitted and encrypt the expanded address using a particular encryption pattern corresponding to a destination network termination, and; a shared medium network operably connected to the line termination processing unit; and a plurality of network terminations connected to the network, each network termination having a processing unit connected to a memory device, the processing unit being operably connected to the network, each network termination having a unique address, wherein each network termination processing unit is operable to process the encrypted expanded addresses of each data cell received from the network with a decryption pattern corresponding to the network termination address, and to verify that identifier bits of the processed address are proper if a destination address of the processed address corresponds to the network termination address.

Claim 18

Dependent Claim 19 words

The network of claim 13, wherein the identifier bits correspond to particular bits in the destination network termination address.

Claim 19

Dependent Claim 17 words

The network of claim 13, wherein the identifier bits are derived from the destination network termination address.

Claim 20

Dependent Claim 13 words

The network of claim 13, wherein the shared-medium network is a optical network.

Claim 21

Dependent Claim 14 words

The network of claim 16, wherein the passive optical network has a tree-and-branch topology.

Claim 22

Dependent Claim 14 words

The network of claim 13, wherein the data cells are asynchronous transfer mode cells.

Claim 23

Dependent Claim 26 words

The network of claim 13, wherein the data cells contain commands giving authority to the particular destination network termination to transmit data to the line termination.

Claim 24

Dependent Claim 34 words

The method of claim 10, further comprising the steps of: updating the encryption pattern and corresponding decryption pattern for each network termination address; and providing the updated decryption patterns to the respective network terminations.

Claim 25

Dependent Claim 22 words

The method of claim 20, wherein the steps of updating and providing the decryption patterns to the network terminations is performed periodically.

Claim 26

Dependent Claim 22 words

The method of claim 20, wherein the steps of updating and providing the decryption patterns to the network terminations is performed randomly.

Claim 27

Independent Claim 87 words

A method for transmitting data cells to a plurality of network terminations over a shared medium network, wherein each network termination has a unique address, the method comprising: combining identifier bits with destination address information for each data cell to form a corresponding expanded address; inserting the expanded address into a destination address field of the corresponding data cell; encrypting the address field using a particular encryption pattern corresponding to the destination address; and transmitting the data cell with encrypted address field on the shared medium network.

Claim 28

Independent Claim 87 words

A method for transmitting data cells to a plurality of network terminations over a shared medium network, wherein each network termination has a unique address, the method comprising: combining identifier bits with destination address information for each data cell to form a corresponding expanded address; inserting the expanded address into a destination address field of the corresponding data cell; encrypting the address field using a particular encryption pattern corresponding to the destination address; and transmitting the data cell with encrypted address field on the shared medium network.

Claim 29

Dependent Claim 19 words

The method of claim 23, wherein the identifier bits correspond to particular bits of the destination network termination address.

Claim 30

Dependent Claim 17 words

The method of claim 24, wherein the identifier bits are derived from the destination network termination address.

Claim 31

Dependent Claim 19 words

The method of claim 23, further comprising the step of updating the encryption pattern for each network termination address.

Claim 32

Dependent Claim 16 words

The method of claim 26, wherein the step of updating the encryption patterns is performed periodically.

Claim 33

Dependent Claim 16 words

The method of claim 26, wherein the step of updating the encryption patterns is performed randomly.

Claim 34

Dependent Claim 28 words

The method of claim 26, further comprising the step of notifying each of the network terminations of an updated decryption pattern corresponding to the respective updated encryption pattern.

Claim 35

Independent Claim 142 words

A method for a network termination for receiving data cells transmitted over a shared medium network to provide privacy of traffic behavior and prevent misdeliveries, each network termination being connected to the network and having a unique address, each transmitted data cell having an address field containing an expanded destination address, the expanded destination address including a particular destination network termination address combined with identifier bits based on the destination address, the address field of each data cell being encrypted using an encryption pattern corresponding to the destination address, the method comprising: processing the expanded encrypted address of the data cell with a particular decryption pattern corresponding to the respective network termination to form a processed address; and verifying whether identifier bits of the processed address are proper if a destination address of the processed address corresponds to the network termination address.

Claim 36

Independent Claim 142 words

A method for a network termination for receiving data cells transmitted over a shared medium network to provide privacy of traffic behavior and prevent misdeliveries, each network termination being connected to the network and having a unique address, each transmitted data cell having an address field containing an expanded destination address, the expanded destination address including a particular destination network termination address combined with identifier bits based on the destination address, the address field of each data cell being encrypted using an encryption pattern corresponding to the destination address, the method comprising: processing the expanded encrypted address of the data cell with a particular decryption pattern corresponding to the respective network termination to form a processed address; and verifying whether identifier bits of the processed address are proper if a destination address of the processed address corresponds to the network termination address.

Claim 37

Dependent Claim 17 words

The method of claim 30, wherein the identifier bits are derived from the destination network termination address.

Claim 38

Dependent Claim 34 words

The method of claim 30, further comprising: providing the data cell to a customer premises network connected to the network termination if the identifier bits are determined to be proper in the verifying step.

Claim 39

Dependent Claim 124 words

A line termination circuit for transmitting data cells to a plurality of network terminations over a shared medium network having privacy of traffic behavior, each network termination having a unique address, the circuit comprising: a processing unit; and a memory device connected to the processing unit, wherein the processing unit is operable to: combine identifier bits with the destination address for each data cell to form a corresponding expanded address, wherein the identifier bits facilitate verification of the destination address when decrypted, insert the expanded address into an address field of the corresponding data cell, encrypt the address field using a particular encryption pattern corresponding to the destination network termination, and transmit the data cell with encrypted address field on the shared medium network.

Claim 40

Dependent Claim 124 words

A line termination circuit for transmitting data cells to a plurality of network terminations over a shared medium network having privacy of traffic behavior, each network termination having a unique address, the circuit comprising: a processing unit; and a memory device connected to the processing unit, wherein the processing unit is operable to: combine identifier bits with the destination address for each data cell to form a corresponding expanded address, wherein the identifier bits facilitate verification of the destination address when decrypted, insert the expanded address into an address field of the corresponding data cell, encrypt the address field using a particular encryption pattern corresponding to the destination network termination, and transmit the data cell with encrypted address field on the shared medium network.

Claim 41

Dependent Claim 19 words

The circuit of claim 33, wherein the encryption patterns for the network terminations are stored in the memory device.

Claim 42

Dependent Claim 17 words

The circuit of claim 33, wherein the processing unit is further operable to update the encryption patterns.

Claim 43

Dependent Claim 31 words

The circuit of claim 35, wherein the processing unit is further operable to notify each of the network terminations of an updated decryption pattern corresponding to the respective updated encryption pattern.

Claim 44

Dependent Claim 136 words

A network termination circuit for receiving data cells from a shared medium network, wherein each transmitted data cell contains encrypted expanded address information of a destination network termination, the expanded address information including the destination network termination address combined with identifier bits corresponding to the destination address, the expanded address information being encrypted by an encryption pattern corresponding to the destination network termination, the circuit comprising: a processing unit; and a memory device connected to the processing unit, wherein the processing unit is operable to: process the encrypted expanded address of each received data cell with a particular decryption pattern corresponding to the network termination address to form a processed address, and verify whether identifier bits of the processed address are proper if a destination address of the processed address corresponds to the network termination address.

Claim 45

Dependent Claim 136 words

A network termination circuit for receiving data cells from a shared medium network, wherein each transmitted data cell contains encrypted expanded address information of a destination network termination, the expanded address information including the destination network termination address combined with identifier bits corresponding to the destination address, the expanded address information being encrypted by an encryption pattern corresponding to the destination network termination, the circuit comprising: a processing unit; and a memory device connected to the processing unit, wherein the processing unit is operable to: process the encrypted expanded address of each received data cell with a particular decryption pattern corresponding to the network termination address to form a processed address, and verify whether identifier bits of the processed address are proper if a destination address of the processed address corresponds to the network termination address.

Claim 46

Dependent Claim 15 words

The circuit of claim 37, wherein the decryption pattern is stored in the memory device.

Claim 47

Dependent Claim 27 words

The circuit of claim 38, wherein the processing unit is further operable to receive updated decryption patterns and store the updated decryption patterns in the memory device.

Annuity Stage	Window Opens	Payment Deadline	Surcharge Period Until	Estimated Fee	Status
3.5 Years (Year 4)	1998-08-14	1999-02-13	1999-08-15	$2000.00	Window Closed / Lapsed
7.5 Years (Year 8)	2002-08-14	2003-02-13	2003-08-15	$3760.00	Window Closed / Lapsed
11.5 Years (Year 12)	2006-08-14	2007-02-13	2007-08-15	$7700.00	Window Closed / Lapsed

Method and apparatus for privacy of traffic behavior on a shared medium network

Abstract

Inventors

Bibliographic Details

Claims Analysis

References Cited (Backward Citations)

USPTO Annuity & Maintenance Windows

Assigned Categories & Tags

Assign Category Tag