Patent ID: 8744083

Claim:
A method of providing in-band early encryption detection within a packet data network, the method comprising the following steps: i) transmitting, at a transmitter device of said packet data network, a plurality of data packets; ii) receiving, at a receiver device of said packet data network, said plurality of data packets; iii) determining, at said receiver, whether at least one of said data packets includes a predetermined pattern inserted into said packet at said transmitter of said packet data network, and upon finding said predetermined pattern in said at least one of said data packets, determining that said data packets are unencrypted, and otherwise: iv) decrypting said packet with one of a plurality of pre-configured ciphers, further determining whether said decrypted packet includes said predetermined pattern, and upon finding said predetermined pattern in said decrypted packet, determining that said data packets are encrypted and that the pre-configured cipher at the receiver matches a cipher at the transmitter, and decrypting subsequent packets with said pre-configured cipher prior to delivering said decrypted data packets; and v) in the event the predetermined pattern is not found performing step iv) for each remaining one of said plurality of pre-configured ciphers until no pre-configured ciphers remain whereupon said packet is discarded and security negotiations ensue between the transmitter and the receiver.