Motorola Corporation

Motorola Solutions, Inc.

Other

Michael W Bright

Eric F Ziolko

Alan L Wilson

Scott James Pappas

David L Weiss

Michelle M Bray

Kevin G Doberstein

Thomas J Senese

Chris A Kruegel

Kurt W Steinbrenner

Anthony R Metke

Dipendra M Chowdhary

Larry C Puhl

Ezzat A Dabbish

Shanthi E Thomas

Hans Christopher Sowa

Daniel P Brown

Kevin M Cutts

Kenneth C Fuchs

John Paul Byrns

Timothy Woodward

Robert J Locascio

Scott Gordon

Harry A Hennen

Michael J McClaughry

Larry Murrill

Scott C Daniels

Kelly Jo Marquardt

Ronald L Shaffer, Ii

Timothy G Woodward

Ronald L Shaffer

A protective canopy is intended for use over existing structures undergoing roofing replacement or repairs, for the protection of workers from direct sunlight and inclement weather. An upper surface is comprised of a weatherproof tarpaulin. The tarpaulin is anchored along edge portions to the ground surface using guy lines, and supported by a plurality of adjustable poles which are positioned upon the roof surface.

Roofing tent

A sending device generates a first and a second KMM, wherein the first KMM includes a first KEK and a KMM encryption key, and the second KMM includes a set of symmetric encryption keys. The sending device further encrypts the set of symmetric encryption keys using the first KEK; encrypts the first KEK and the KMM encryption key using a first public key of a receiving device; and encrypts the second KMM using the KMM encryption key to generate an encrypted second KMM before sending the first KMM and the encrypted second KMM to the receiving device. The receiving device decrypts the first KEK and the KMM encryption key using a first private key that corresponds to the first public key; and decrypts the encrypted second KMM using the KMM encryption key to obtain the encrypted set of symmetric keys.

Methods and device for secure transfer of symmetric encryption keys

Disclosed is a method for encrypted communications. A first IPsec endpoint selects a security association (SA) from a security association database (SAD) by using a selector and then extracts an indexing parameter from SA. The indexing parameter is used to determine an active key location from a key storage database (KSD). Data packets are then encrypted using a key from the active key location. The first IPsec endpoint also forms a security parameter index (SPI) in a header of the data packet by using a keyID from the active key location and transmits the encrypted data packet with the header indicating the SPI to a second IPsec endpoint.

Method and apparatus for encrypted communications using IPsec keys

A transmitting device () generates a message (). The message has a message length () and comprises message data (). A key input () is identified, and a message authentication key () is derived based on the key input and the message length. Based on the message authentication key and the message data, a message authentication code () is derived, which is used to authenticate the message.

Method for authenticating a message

The following describes an apparatus for and method of providing a secure method of downloading a program into a processor (101) from a device (103) external to the processor (101). The program may be encrypted (207) prior to its entry into the external device (103). The program may also have authentication information added (203 and 207) to it. Authentication information may be provided on an unencrypted and/or an encrypted program. The processor (101) decrypts (307) and/or successfully authenticates (311) the program before allowing the program to be executed by the processor (101).

Apparatus and method of reading a program into a processor

The method generally includes the steps of receiving (201) a message (100) comprising a message indicator (101) and a plurality of encrypted blocks (103 through 111). When at least one block of the plurality of encrypted blocks is received with error, a second message is transmitted (215), which second message requests a retransmission of the at least one block. Upon receiving the retransmission of the at least one block without error, a keystream is generated (219) from the message indicator and the at least one block is decrypted using the keystream.

Decryption of retransmitted data in an encrypted communication system

An apparatus for and method of correcting errors in a received signal comprised of a rate-one orthogonal convolutional code generated by an LFSR involved feeding (403) a received signal into a multiple-stage shift register (201). Estimates of one of the stages of the shift register are performed by estimators (203, 205, 207, 209, 211, 213, and 215) and are based on the outputs of several of the other stages of the shift register (201). These estimates are combined on a bit-by-bit basis to provide a corrected received signal, which is used as the output of the shift register (201).

Method and apparatus for correcting errors using multiple estimates

A method of decrypting retransmitted parts of a message includes receiving (201) a message comprising encryption synchronization and a plurality of encrypted blocks. Until a first block of the plurality of encrypted blocks is received with error, a first keystream is generated (205) from the encryption synchronization and at least one of the plurality of encrypted blocks, and, using the first keystream, the plurality of encrypted blocks, received without error before the first block of the plurality of encrypted blocks is received with error, is decrypted (207). A priming block is determined (211) from the message. When the first block of the plurality of encrypted blocks is received with error, a second message is transmitted (219) requesting a retransmission of the first block. Upon receiving the retransmission of the first block without error, a second keystream is generated (223) from the priming block and the retransmission of the first block and decrypting the retransmission of the first block is decrypted (225) using the second keystream.

A key management system for encryption keys removes the effect of secure communications loss during a rekey period in a secure communications system. Use of key indexes to partition encryption keys into usable subgroups such that during a rekey period, continuous secure communications are maintained throughout the entire secure communications system.

Key management in encryption systems

In a communication system that includes a plurality of communication units, a communication resource allocator, and a limited number of transceivers that transceive information amongst the plurality of communication units via a limited number of communication resources, at least some of the information is transceived utilizing encryption means. To enhance the security of the communication system multiple keys are employed wherein a first communication unit transmits information identifying a particular key of the plurality of keys. Upon receiving the identifying information, at least a second communication unit looks up the particular key that is represented by the identifying information. Once the key is determined, it is loaded into a cryptographic circuit of the second communication unit enabling the second communication unit to receive encrypted messages from the first communication unit.

Key variable identification method

A method for recovering from encryption key variable loss, either inadvertent or the result of tampering. A predetermined key encryption key is encrypted with itself at the time when keys are first loaded, and the resultant key loss key is stored in non-volatile memory. This key loss key acts as a key encryption key for decryption of new shadow and traffic keys.

Method for recovering from encryption key variable loss

A method of message authentication in an encrypted communication system with over-the-channel rekeying features the ability of a communication unit (107) to authenticate (1709) a rekeying message (701) from a key management controller (101) using a message number (1517A) comparison, thereby preventing outside interference from unauthorized rekeying message transmissions.

Authentication of rekey messages in a communication system

This key management system effectively solves the key distribution problems of distance, time, operator error, and security risk by transferring encryption keys with appropriate system information between a key management controller (101) and a remote keyloader (109). The keyloader (109) is then coupled to a communication device to transfer (327) the keys and receive (329) identification information from the communication device. The keyloader (109) then sends (323) the information to the key management controller (101) that controls the distribution of the encryption keys and collection of the communication device identifications.

Key management system

Formation and sending of rekeying messages (305, 415, 515, and 605) in an encrypted communication system with over-the-channel rekeying of communication units is performed by a KMC, key management controller (101). The KMC (101) forms messages to provide new keys (1541), zeroization information (1549), and key indexing information (1543) to communication units (107), and to provide keyloader upload data (1563). Acknowledgments and rekey requests are also handled between the KMC (101) and communication units (107).

Formation of rekey messages in a communication system

A single sync field (501) and multiple messages or message segments (503, 507, 511, and 515) are chained (407) together and encrypted (407) as a whole. When this encrypted chained message is received, it is decrypted as a whole (605), or in part (613) by setting up (609) and filling (611) a holding register with the encryption state of the encrypting device.

Growing community of inventors

Arlington Heights, IL, United States of America

Michael W Bright