Abstract:
Secure data transmission apparatus comprises a data translator for translating an input string of signals, each signal having incomplete information for identifying an alphanumeric character, into a first encryption key. A data encrypter receives a first encryption key, a choice of encryption algorithm and a message and outputs an encrypted message according to the selected algorithm. The apparatus may be applied whenever the user is confronted with telecommunications apparatus that provides a limited input capability and no means for encrypting a message for transmission to an end user. In this manner, for example, a user may authenticate their name for display on caller identification plus name apparatus and the called party can be assured, before answering their line, that the call is from the party having the displayed name.

Description:
BACKGROUND OF THE INVENTION 
     1. Technical Field 
     This invention relates to the field of encryption systems and applications thereof and, in particular, to a telecommunications application in which a user may encrypt information prior to secure transmission to a remote destination. 
     2. Description of the Background Art 
     Two key encryption systems are known in which a user of the encryption technique secures data to be transmitted such that upon reception a second key is used to decrypt the encrypted data. A pirate intercepting the transmitted data is unable to decrypt the encrypted data without having access to the second key. One such standard for Internet security is advanced by a number of On-line Internet services and RSA Data Security who would want to unify &#34;Secure HTTP&#34; (developed by Netscape) and SSI (developed by RSA). RSA in partnership with Cylink, the partnership known as PKP, holds U.S. Pat. Nos. 4,200,770; 4,218,582, 4,405,829, 4,424,414 and 4,995,082. These patents describe a private key/public key system where the user maintains a private key and shares a related public key with those with whom he is exchanging secure information. 
     The United States National Institute of Standards and Technologies, N.I.S.T., has also recommended a private key/public key standard related to the PKP proposal known as the DSS (digital signature standard algorithm) encryption/decryption algorithm, described and announced in the May 19, 1994, FIPS PUB 186. N.I.S.T. holds U.S. Pat. No. 5,231,668 to Kravitz on the digital signature algorithm. Given a message m, the message m along with a signature comprising a public key value and a hashing value s are transmitted to the far end where they are tested to verify the authenticity of the message. A pirate who does not know the private key cannot alter any &#34;signed&#34; message. 
     Many entities have proposed applications software packages that may be purchased for use on personal computers for the purpose of providing secure data transmission. An example of one such package is the AT&amp;T &#34;Secret Agent&#34; software package, a public key/private key form of encryption algorithm similar to the PKP proposal. Another package commonly used today is so-called pretty good encryption or PGP which is reasonably available to users. 
     There are many potential applications of two key encryption systems in data telecommunications generally. For example, these may be categorized as personal computer to personal computer, person to person, and telecommunications apparatus to telecommunications apparatus and combinations of these. For example, in an Internet link to a database service, the user typically is equipped with a personal computer and modem and the far end server is also represented by a computer. When a user is remote from their personal computer, the user, not having a keyboard or cursor, is limited to a limited keypad such as a two tone key pad or voice input. Also, the party to whom the user connects over telecommunications facilities may be equipped only with a caller identification display device. In these latter situations, for example, if the user is trying to assure the recipient that the data to be transmitted originated with the user, the facilities may be limited in how the user &#34;signs&#34; the data by encrypting it and identifying to the remote party how the data is encrypted and how to decrypt it. In many situations, a user would want to &#34;sign&#34; their name, credit card data, authorization for banking transactions and the like without having to resort to carrying around a personal computer with them. 
     Thus, all of the known proposals describe different forms of keys that may be used to encrypt data prior to transmission but fail to describe particular applications of such encryption techniques, for example, when the user is not equipped with a personal computer or other sophisticated equipment for transmitting data securely over telecommunications facilities. A user at a pay telephone terminal, for example, has limited means for encrypting data by &#34;signing&#34; it as his own to permit a recipient to verify its authenticity. 
     SUMMARY OF THE INVENTION 
     In accordance with the principles of the present invention, a user may carry with them or otherwise obtain access to, for example, by dial-up access and voice input, a translator for translating alphanumeric characters into tone sequences, for example, two tones, for coding an encryption key into signals that can be recognized by standard telecommunications equipment. Because so-called &#34;touch-tone&#34; signals comprise two tone values and only twelve different combinations from a three by four keypad matrix are possible, the device translates two such pairs of tones into up to 144 different alphanumeric characters. In that manner, a user may use the translator to enter alphanumeric encryption keys, control data and messages for secure transmission to a remote party. 
     The translator may perform an encryption function as well. In the alternative, the encryption function may be maintained remote from the user and in the telecommunications network. When a user wishes, for example, to transmit a message such as their name, credit card number or other data that they would wish to secure for transmission to a remote destination, the user enters their first encryption key of a two or more key encryption system followed by a code representing the encryption standard chosen and the data they wish to encrypt. In advance, the user is assumed to have shared their public key with the recipient of the message. If not, the public key may be entered by the user after the message. Each of the data strings may be separated by known characters such as # key entries. The encryption device capable of performing any of the known encryption techniques decodes the entered data, performs the encryption of the message and outputs the encrypted message followed a code value indicating the encryption method used, if necessary, and the public key, if necessary. The telecommunications system may receive the key, the control data and the message and forward these to the remote destination or to telecommunications apparatus that may require the data. The telecommunications apparatus at a terminating end may receive the data and authenticate the called party&#39;s identity and signature, provide the decrypted data and in an output to a display assure that the data is authentic by flashing or other authenticity indicator or provide the encrypted data and control data directly to the user&#39;s apparatus. Again, the device or the system accepts these data, encrypts or &#34;signs&#34; the message prior to transmission and forwards the message and the &#34;public key&#34; to the apparatus of the remote party or shared via the telecommunications network which can decrypt the message and authenticate the identity of the sender. 
     Other advantages and features of the present invention will become known from reading the detailed description of the invention which follows. 
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS 
     FIG. 1 is an overview of a telecommunications system in which the present invention may be used to advantage. 
     FIG. 2 is a block schematic diagram of translator apparatus. 
     FIG. 3 is a drawing showing one suggested form for entry of data of a first key, a selection, if necessary, of an encryption system, a message and a public key, if necessary. 
     FIG. 4 is a functional block diagram or flowchart of message encryption apparatus for receiving the data entered according to FIG. 3, encrypting the message portion according to the encryption selection and forwarding at least the encrypted message to a remote location. 
     FIG. 5 is a functional block diagram or flowchart of message decryption and sender authentication apparatus which may be provided by a user or shared via the telecommunications network. 
    
    
     DETAILED DESCRIPTION 
     Referring to FIG. 1, there is shown an overview of a telecommunications network in which the present invention may be utilized. The present invention may also find application in an Internet network environment, also described by FIG. 1. The problem of the present invention is described by way of first describing a typical personal computer to personal computer call. In this situation computer 2, for example, equipped with encryption software A (not shown) simply dials up computer 12 also equipped with the same package A. Package A may be pretty good encryption (PGP), a package offered by a software vendor or other package typically based on one of the many encryption algorithms available such as DSA, PKP or other algorithm choice. If both computers are similarly equipped, that is, the transmitting computer 2 has a full keyboard 2a and the receiving computer 12 has a display 12b and each has the software and knows their respective private and public keys, the transmission of a message should proceed without any problem. The choice of Internet or telecommunications network of an encrypted message is invisible to the message transmission. The computer addresses by E-Mail or dials by dial signaling the remote computer and, once the link is established, both computers can operate together to verify to the recipient at computer 12 that the message sent from computer 2 is authentic and originated from the sender. 
     On the other hand, apparatus 1 may be at the premises of another person or may be a pay telephone station. One who would want to send a personal message may be at a disadvantage on at least two counts. First, they may not have a keyboard like full keyboard 2a; they are limited by keypad la, typically, a 3×4 matrix of inputs. Secondly, they may have no encryption algorithm processor apparatus like computer 2. In making a call to a subscriber at terminal 14 or 12, the user at station 1 cannot identify themselves to the recipient as to their identity or sign any message. A database 11 is known for performing a translation of a dialed-in telephone number or credit card number to the name of the holder of that number or card. The name data can be sent through the public switched telephone network 9 and displayed on caller identification display device 14b. On the other hand, the sender may not be telling the truth or may inadvertently enter an otherwise valid entry for a phone number or card number. In this manner, a false name may appear on the recipient&#39;s caller identification display device 14b. 
     The present invention may be briefly described in principle as a solution to the limited terminal capabilities of apparatus 1 and 14. The present invention relates to providing translator apparatus for a user to enter data into a limited keyboard like keyboard 1a and place such data in encrypted form for transmission or in form for encryption at database 11. The translator apparatus may be portable or housed at database 11. The translator device accepts voice input or limited keypad input for outputting data representing an alphanumeric string. The translator is shown by FIG. 2. The output alphanumeric string is preferably output in the form represented by FIG. 3 comprising a first key, a selected encryption method choice, a message and a second key, if necessary. Then, a data encrypter shown by FIG. 4 that may be portable or located at database 11 receives the data output of the translator of FIG. 2, encrypts the message and forwards the encrypted message to destination terminal 14 or intelligent terminal or computer 12. If destined for terminal 14 with limited processing capability, the message can be intercepted at database 13 and provided as a verified, signed display at display 14b. 
     Translators for translating voice input to alphanumeric data output are generally known. A voice query unit 206 requests a response. A speech recognition device 201 receives speech input as a response and recognizes a vocabulary of utterances regardless of the person originating the utterance. The speech recognition device 201 including a controller 204 comprises a microphone which receives the signals, a processor 204 compares the signals with a database 203 and outputs the spoken utterance as a data signal via data generator 207. Typically, the utterance received is responsive to a voice initiated query from a simulated voice query unit 206. 
     Also, devices are known which accept input and, with increasing data input, can recognize the input as the input matching particular data in a database. Referring to FIG. 2, a data translator according to the present invention is shown. A touchtone (two tone) or dial pulse receiver 202 is shown. Secure database 205 may have a private key and other secure data included therein. The user may continue to &#34;dial&#34; in their key until not only the controller recognizes the key as a match but awaits entry of the entire key to verify the owner of the key. 
     If the user has not already predeposited their key in secure database 205, the user may enter keypad entries according to other schemes to record the entries despite the limited keypad size. In one such arrangement, two keypad entries signal a 1/144 code for entering alphanumeric characters. In another, since the keypad typically has at most one of four choices, for example, &#34;2&#34;, &#34;a,&#34; &#34;b&#34; or &#34;c,&#34; the user can efficiently signal the choice by entering the choice more than once and such as twice for &#34;a&#34;, three times for &#34;b&#34; and signaling the termination of the selection by a # sign. Other arrangements and codes have been developed as well for entering data by dial pulse or touchtone keypad. 
     Once the entered data is recognized by either entry and matching with a secure database 205 or by other means, the data is output by data generator 207 in appropriate format for reception by a data encrypter. The format should resemble the format of FIG. 3 a string of serial data which may be interrupted by spacers or of predetermined format. The first key which may comprise alphanumeric characters in predetermined sequence is output as data field 301. The first key 301 may be followed, if necessary, by an algorithm selection code 302 such as PGP for pretty good encryption or choice 1 of perhaps 10 or more choices (or another choice might be secret agent, SA or code choice 2). The message field 303 may have predetermined or practically unlimited length and should be terminated by a predetermined indicator of message termination such as a pound sign. The second key entry field 304 may be required depending on the algorithm choice and the assumed knowledge of the recipient. 
     FIG. 4 represents a block diagram of an encryption device according to the present invention. The device appears very close in structure to FIG. 2 because the functional requirements are practically identical. The data receiver 401 receives the data stream formatted according to FIG. 3, processor 402 reads the encryption method choice and looks to database 403 for the algorithm. Database 403 stores many, if not all, the possible algorithm choices and may be a shared network resource. Referring to FIG. 1, this database 403 as well as databases 203 and 205 of FIG. 2 may be located at known database 11 and associated with a telecommunications switch 5 or an Internet server 6. Data processor 402 performs the retrieved encryption algorithm on message data 303 and data generator 404, responsive to processor 402, outputs encrypted message data and control data. The control data may include the algorithm choice and the second key 304 depending on the circumstances. 
     Now referring again to FIG. 1, the output data of the data generator may be provided via database 11 through the Internet or the PSTN cloud to a terminating switch 10 and database 12. Referring to FIG. 5, there is shown message decrypter and signature authentication apparatus that may be shared by users of the telecommunications network. The apparatus comprises a message data receiver 501, a processor 502, a secure database for storing decryption algorithms by type and a data generator for outputting toward a display 14 (FIG. 1) decrypted data and an indication of signature verification. According to the present invention, the received data may be decrypted and verified at a location of database 13 to a called party via display 14b or displayed at terminal 12 on display 12b with local processing at terminal 12. For example, if the calling party has transmitted their name to the called party 14, the calling party&#39;s name can be verified as being the name of the caller on the called party&#39;s display 14b. In other words, not only is the entered name at terminal 1 displayed at terminal display 14b, the identity of the caller is verified by use of personal encryption performed by the translation/encryption apparatus of the present invention. The display 14b may be caused to show the decrypted message data, for example, caller identity data such as their phone number and name, and be caused to flash or change color or otherwise indicate that the signature to the data is authentic via true/false (T/F) data output of data generator 504 responsive to processor 502. 
     Thus there has been shown and described a secure telecommunications data transmission apparatus and method which provides a means for securing data when the user of the public switched telecommunications network is confronted with limited data transmission and encryption capabilities. Other variations may come to mind to the reader of the present application; for example, processors/controllers 204, 402 and 502 may be so-called secure processors and memories 205, 403 and 503 may be secure memories. Preferably, these may be integrated with their associated secure processors so that any attempts at theft of secure data such as private encryption keys and algorithms will result only in destruction of the secure elements themselves and no private data can be read at ports between processors and respective memories. United States patent applications and patents discussed herein should be deemed to be incorporated by reference as to their entire contents, especially, for any such contents deemed to be essential to an understanding of the present invention. The method and apparatus for secure data transmission described herein should only be deemed to be limited in its scope of invention by the claims which follow.