Method and system for employing a fixed IP address based encryption device in a dynamic IP address based network
View Patent ↗A network operations center ( 130 ) provides secure communication between fixed IP address based encryption devices ( 114,154 ) in an enclave ( 110 ) and on a handheld communication device ( 150 ) deployed on a dynamic IP address based wireless carrier network ( 140 ). In communication from the enclave ( 110 ) to the handheld device ( 150 ) a fixed IP address based data packet ( 310 ) is obtained from the enclave ( 110 ) and encapsulated into a network data packet ( 320 ) which is provided over the wireless carrier network ( 140 ) to the handheld device ( 150 ) for decapsulating the fixed IP address based data packet ( 410 ) from the network data packet ( 320 ). In communication from the handheld device ( 150 ) to the enclave ( 110 ) a fixed IP address based data packet ( 710 ) is decapsulated from a network data packet ( 620 ) into which it has been encapsulated by the handheld device ( 150 ) and provided to the enclave ( 110 ).
1. A system for securely communicating data from an enclave to a handheld communication device deployed on a dynamic internet protocol address based wireless carrier network, the system implemented as an intermediate system provided between the enclave and the handheld communication device and comprising: means for obtaining from an enclave fixed internet protocol address based encryption device resident in the enclave a fixed internet protocol address based data packet containing a fixed source internet protocol address, a fixed destination internet protocol address, and encrypted data encrypted by the enclave fixed internet protocol address based encryption device; an encapsulator for encapsulating the fixed internet protocol address based data packet into a network data packet containing a network source internet protocol address, a network destination internet protocol address, and the encapsulated fixed internet protocol address based data packet; and means for providing the network data packet over the dynamic interact protocol address based wireless carrier network to the handheld communication device for decapsulating the fixed internet protocol address based data packet from the network data packet and providing the decapsulated fixed internet protocol address based data packet to a mobile fixed internet protocol address based encryption device resident on the handheld communication device for decryption of the encrypted data; wherein the fixed source internet protocol address is of the enclave fixed internet protocol address based encryption device and the fixed destination interact protocol address is of the mobile fixed internet protocol address based encryption device.
2. The system of claim 1 wherein at least one of the enclave fixed internet protocol address based encryption device and the mobile fixed internet protocol address based encryption device is an IPSec encryption device.
3. The system of claim 1 wherein at least one of the enclave fixed internet protocol address based encryption device and the mobile fixed internet protocol address based encryption device is a High Assurance Internet Protocol Encryptor.
4. The system of claim 1 wherein the network source internet protocol address is of the intermediate system and the network destination internet protocol address is of the handheld communication device.
5. A system for securely communicating data between an enclave and a handheld communication device deployed on a dynamic internet protocol address based wireless carrier network, the system implemented as an intermediate system provided between the enclave and the handheld communication device and comprising: means for obtaining from the handheld communication device over the dynamic internet protocol address based wireless carrier network a network data packet containing a network source internet protocol address, a network destination internet protocol address, and a fixed internet protocol address based data packet encapsulated within the network data packet by the handheld communication device, the fixed internet protocol address based data packet containing a fixed source internet protocol address, a fixed destination internet protocol address, and encrypted data encrypted by a mobile fixed internet protocol address based encryption device resident on the handheld communication device; an encapsulator for decapsulating the fixed internet protocol address based data packet from the network data packet; and means for providing the decapsulated fixed internet protocol address based data packet to the enclave for decryption of the encrypted data by an enclave fixed internet protocol address based encryption device resident in the enclave; wherein the fixed source internet protocol address is of the mobile fixed internet protocol address based encryption device and the fixed destination internet protocol address is of the enclave fixed internet protocol address based encryption device.
6. The system of claim 5 wherein at least one of the enclave fixed internet protocol address based encryption device and the mobile fixed internet protocol address based encryption device is an IPSec encryption device.
7. The system of claim 5 wherein at least one of the enclave fixed internet protocol address based encryption device and the mobile fixed internet protocol address based encryption device is a High Assurance Internet Protocol Encryptor.
8. The system of claim 5 wherein the network source internet protocol address is of the handheld communication device and the network destination internet protocol address is of the intermediate system.
9. A method of securely communicating data from an enclave to a handheld communication device deployed on a dynamic internet protocol address based Wireless carrier network, the method performed by an intermediate system provided between the enclave and the handheld communication device and comprising the steps of: obtaining from an enclave fixed internet protocol address based encryption device resident in the enclave a fixed internet protocol address based data packet containing a fixed source internet protocol address, a fixed destination internet protocol address, and encrypted data encrypted by the enclave fixed internet protocol address based encryption device; encapsulating the fixed internet protocol address based data packet into a network data packet containing a network source internet protocol address, a network destination internet protocol address, and the encapsulated fixed internet protocol address based data packet; and providing the network data packet over the dynamic internet protocol address based wireless carrier network to the handheld communication device for decapsulating the fixed internet protocol address based data packet from the network data packet and providing the decapsulated fixed internet protocol address based data packet to a mobile fixed internet protocol address based encryption device resident on the handheld communication device for decryption of the encrypted data; wherein the fixed source internet protocol address is of the enclave fixed internet protocol address based encryption device and the fixed destination internet protocol address is of the mobile fixed internet protocol address based encryption device.
10. The method of claim 9 wherein at least one of the enclave fixed internet protocol address based encryption device and the mobile fixed internet protocol address based encryption device is an IPSec encryption device.
11. The method of claim 9 wherein at least one of the enclave fixed internet protocol address based encryption device and the mobile fixed internet protocol address based encryption device is a High Assurance Internet Protocol Encryptor.
12. The method of claim 9 wherein the network source internet protocol address is of an intermediate system and the network destination internet protocol address is of the handheld communication device.
13. A method of securely communicating data to an enclave from a handheld communication device deployed on a dynamic internet protocol address based wireless carrier network, the method performed by an intermediate system provided between the enclave and the handheld communication device and comprising the steps of: obtaining from the handheld communication device over the dynamic internet protocol address based wireless carrier network a network data packet containing a network source internet protocol address, a network destination internet protocol address, and a fixed internet protocol address based data packet encapsulated within the network data packet by the handheld communication device, the fixed internet protocol address based data packet containing a fixed source internet protocol address, a fixed destination internet protocol address, and encrypted data encrypted by a mobile fixed internet protocol address based encryption device resident on the handheld communication device; decapsulating the fixed internet protocol address based data packet from the network data packet; and providing the decapsulated fixed internet protocol address based data packet to the enclave for decryption of the encrypted data by an enclave fixed internet protocol address based encryption device resident in the enclave; wherein the fixed source internet protocol address is of the mobile fixed internet protocol address based encryption device and the fixed destination internet protocol address is of the enclave fixed internet protocol address based encryption device.
14. The method of claim 13 wherein at least one of the enclave fixed internet protocol address based encryption device and the mobile fixed internet protocol address based encryption device is an IPSec encryption device.
15. The method of claim 13 wherein at least one of the enclave fixed internet protocol address based encryption device and the mobile fixed internet protocol address based encryption device is a High Assurance Internet Protocol Encryptor.
16. The method of claim 13 wherein the network source internet protocol address is of the handheld communication device and the network destination internet protocol address is of an intermediate system.