Patent Publication Number: US-4484025-A

Title: System for enciphering and deciphering data

Description:
BACKGROUND OF THE INVENTION 
     The present invention relates to a system for enciphering and deciphering data for transmission between a transmitter and a receiver, where the terms encipher and decipher are synonymous with encrypt and decrypt respectively. In particular, it relates to a system wherein clear data texts are enciphered at the transmitter end of the system and deciphered at the receiver end. Enciphering and deciphering are effected by the same set of instructions, the instructions being executed by cipher computers responsive to a cipher program stored at the transmitter and at the receiver. That is, the program of the cipher computers is determined by a secret key stored at the transmitter and at the receiver. 
     Such a system is disclosed, for example, in German Offenlegungsschrift No. 2,943,726, a large number of these systems being on the market. In general, they include cipher computers that operate according to special algorithms and are realized by digital circuits in the form of large-scale integrated circuits (LSI). A disadvantage of such systems is that only those having the same cipher algorithm can work together. 
     With the introduction of increasingly extensive communications networks, including international networks, there is an increasing demand for enciphered information exchanges. While standardization of the cipher algorithms would be one solution to the problem, it appears unlikely that each standardization will be realized for some time, one reason being that ciphering devices employing different kinds of cipher algorithms have already been introduced into commercial use. 
     It is an object of the present invention to provide a cipher system which permits the wide exchange of enciphered information without requiring standardization of the cipher algorithms, and which makes possible the continued use of already available ciphering devices. 
     SUMMARY OF THE INVENTION 
     The cipher system according to the invention permits the wide exchange of enciphered information over a primary transmission channel without requiring the standardized use of a uniform cipher algorithm. A further advantage is that ciphering devices already on the market can be used. 
     In accordance with the present invention, a system and method are provided for transmitting enciphered data between first and second terminals over a data transmission channel. The system comprises a transmitter located at the first terminal, a receiver located at the second terminal and cipher computers located at each of the first and second terminals. At least one of the cipher computers is programmable and has a program memory. Storage means are provided for storing a program code, and means are further provided for transmitting the program code to the programmable computer for storage in its program memory. The data transmitted between the first and second terminals is enciphered in accordance with the cipher program code and the cipher key stored in the program memory of the programmable computer. 
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS 
     FIG. 1 is a block diagram showing the basic elements of one embodiment of the invention wherein a cipher algorithm is transmitted from a cipher equipment at a receiving terminal to a programmable cipher computer at the transmitting terminal. 
     FIG. 2 is a block diagram showing another embodiment of the invention which employs a control center for initiating transmission of a program code containing the cipher algorithm to the programmable cipher computer. 
    
    
     DESCRIPTION OF THE PREFERRED EMBODIMENTS 
     Referring to FIG. 1, there is shown one embodiment of the invention wherein a transmitter 10 and programmable cipher computer 12 are located at a terminal 1 of a communications system, and a receiver 14 and cipher equipment 16 at the other terminal 2. In a practical communications system, a receiver would also be provided at terminal 1 and a transmitter at terminal 2, but these have been omitted to avoid complicating the description. Also, the cipher equipment at terminal 2 could be programmable. 
     The cipher equipment 16 at terminal 2 comprises a conventional firmware enciphering computer and may be a microprocessor such as the commercially available type 8085 manufactured by INTEL Corporation having a cipher program storage 18 for storing a cipher algorithm. The cipher algorithm is introduced into the cipher program storage 18 by insertion of preprogrammed read-only-memories (ROM) or electrically programmable read-only-memories (PROM). The cipher equipment 16 may be a fixed wired digital circuit made up of integrated circuits and need not be programmable microcomputer system. 
     The cipher algorithm is transmitted from the cipher program storage 18 over a data transmission channel 20 to the program memory 22 of the programmable cipher computer 12. The programmable cipher computer 12 may also be a type 8085 microprocessor manufactured by INTEL Corporation. The cipher algorithm transmitted from the cipher program storage 18 of cipher equipment 16 via channel 20 is stored in program memory 22 and used to encipher the clear input data provided by input device 24 to transmitter 10. Alternatively, the cipher algorithm can be transmitted over the data transmission channel 26 linking transmitter 10 and receiver 14. More specifically, the algorithm for enciphering and deciphering contained in the cipher program may for instance be the &#34;Data Encryption Standard&#34;, described in FIPS PUB 46, U.S. Department of Commerce/National Bureau of Standards, Jan. 15, 1977, published by the NATIONAL TECHNICAL SERVICES, U.S. Department of Commerce, Springfield, Va. 22161. 
     In another embodiment of the invention, the programmable cipher computer 12 is provided with a long-term memory 28 for storage of a plurality of different cipher programs which can be called up for storage in the program memory 22 as required. An advantage of this arrangement is that when there is a second data connection with another terminal, such as terminal 2, it is unnecessary to retransmit the entire cipher program. The long-term memory can, in a primitive form, be a punched tape reader into which the cipher program at terminal 2 is fed by the use of a punched tape, but normally the long-term memory consists of preprogrammed read-only memories or a magnetic storage device. 
     Transmission of a cipher program can also be initiated at the programmable cipher computer 12 by means of a cipher request initiator 29. This permits the transmitting terminal 1 to request that the cipher algorithm be transmitted from the receiving terminal 2 prior to transmission. 
     The cipher programs are stored in the long-term memory in binary form normally in the machine code used by the programmable cipher computer 12 to execute the cipher program, and are transferred into the program memory 22 for instance by a serial byte-to-byte transmission controlled by the computer 12. This transfer is initiated by the cipher equipment 12 after reception of a bit sequence from cipher computer 16 containing the information as to which cipher program from long-term memory 28 is to be used. 
     Still another embodiment of the invention is shown in FIG. 2 wherein a control center 30 is provided at a central location which can be actuated through a public telephone system 32. The desired cipher program can be made available by dialing the user number or, in some cases, an added user identification. (The term &#34;dialing&#34; includes all forms of telephone actuation systems including dial and push-button systems. Also, connections between terminals and the control center may be by wire, microwave radio, satellite, etc.) By dialing the control center 30, the cipher equipment 16 at terminal 2 can be instructed to transmit the cipher algorithm from the cipher program storage 18 to the programmable cipher computer 12. A cipher program storage 34 can also be located in the control center for storage of the cipher programs and distribution to the programmable cipher computers at the various terminals. This is advantageous because the centrally located control center can be reached automatically when the user number is dialed and the cipher programs stored in the cipher program storage 34 called up for distribution as required. 
     If the cipher program used by equipment 16 is not available in the storage 34 of control center 30, the control center sends a bit sequence to equipment 16 which initiates transmission of the contents of its cipher program storage 18 via line 20 to the program memory 22 of computer 12 and, for actualization of the storage 34, also to the control center 30. 
     Valuable transmission time can be saved if the programmable cipher computer is equipped with a long-term memory 28 in which the various cipher programs are stored and from which the corresponding cipher program can be provided to the programmable cipher computer upon call-up by the control center 30 by means of a short identifying signal. The control center 30 is actuated to transfer the proper cipher program from the cipher program storage 34 to computer 12 by a bit sequence, which has been transmitted from the cipher computer to the control center 30 containing identification codes of both the transmitter 10 and the addressed receiver 14. 
     A condition which the system must satisfy is that the various code programs per se need not be kept secret, are permitted to be made public and in part can even be publicized, as disclosed in German Auslegeschrift No. 2,558,206, German Offenlegungsschriften Nos. 2,715,631 and 2,231,849 and in &#34;Data Encryption Standard&#34;--FIPS PUB 46 by the U.S. National Bureau of Standards, Jan. 15, 1977. As discussed in these publications, the key constitutes the actual element which is to be kept secret and must therefore be delivered to the user by secure means. That is, it must be protected against unauthorized access by third parties. The mere knowledge of the cipher algorithm by a third party does not provide him with a starting point for unauthorized deciphering. 
     It will be understood that the above description of the present invention is susceptible to various modifications, changes and adaptations, and the same are intended to be comprehended within the meaning and range of equivalents of the appended claims.