Chaotic cipher system and method for secure communication

1. A method for a data encryption device to perform network communications, the method comprising:

obtaining an indexed array of encryption keys, wherein the indexed array of encryption keys is shared with a data decryption device; obtaining a message to be encrypted; using a first random or pseudorandom number to determine an index;

obtaining a first key from the array of encryption keys, wherein the first key corresponds to the index;

selecting a second key from the plurality of encryption keys;

encrypting the message using the first key and a second random or pseudorandom number, wherein a first portion of the message is encrypted using the first key and wherein a second portion of the message is encrypted using a third key, the third key having a second index determined from the first index in a deterministic manner known to the data decryption device;

encrypting the index using the second key and a third random or pseudorandom number;

transmitting the encrypted message and the encrypted index to the data decryption device.

2. The method of claim 1 , further comprising modifying the first key to generate a modified first key corresponding to the index for use in subsequent network communications.

3. The method of claim 1 , wherein the indexed array of encryption keys is obtained from a master indexed array of encryption keys stored on the data encryption device using a predetermined key derivation procedure.

4. The method of claim 1 , further comprising combining the encrypted message and the encrypted index to form a ciphertext; and wherein the steps of transmitting the encrypted message and the encrypted index comprise transmitting the ciphertext.

5. The method of claim 4 , wherein the ciphertext further comprises added bits such that a length of the ciphertext is substantially equal to a predetermined ciphertext length.

6. The method of claim 5 , wherein the added bits comprise a random tail and wherein the ciphertext further comprises a checksum and a timestamp.

7. The method of claim 1 , further comprising generating a message authentication code for the encrypted message and the encrypted index; and transmitting the message authentication code to the data decryption device.

8. The method of claim 4 , wherein the second key is determined using information shared with the data decryption device.

9. The method of claim 1 , wherein the step of encrypting the message comprises inserting a group of randomly or pseudorandomly generated bits at a location of the message determined using the first key.

10. The method of claim 9 , wherein the length of the group of randomly or pseudorandomly generated bits is random or pseudorandom.

11. The method of claim 1 , wherein the step of encrypting the message comprises obtaining a first bit of the message and using the first key to determine a position of a second bit of the message and transposing the first bit with the second bit.

12. The method of claim 1 , wherein the step of encrypting the message further comprises using a third key, and wherein the third key is deterministically obtained from first key using a function known to the data decryption device.

13. The method of claim 1 , further comprising statistically smoothing the frequencies of the message characters using a statistic improvement function known to the data decryption device.

14. The method of claim 1 , wherein the first random or pseudorandom number is determined as an index of a key of the key array resulting in a statistically smooth encrypted message.

15. The method of claim 1 , wherein the indexed array of encryption keys is programmed onto the data encryption device prior to deploying the data encryption device.

16. The method of claim 1 , wherein the first key comprises a sequence of bits determined using a fourth random or pseudorandom number.

17. The method of claim 16 , wherein the step of encrypting the message is further performed using a biometric pattern, a telemetry datum, or a GPS coordinate.

18. The method of claim 16 , wherein the sequence of bits of the first key is further determined at a sending location using a first biometric pattern, a first telemetry datum, or a first GPS coordinate, and the sequence of bits of the first key is determined a receiving location using a different biometric pattern, a different telemetry datum, or a different GPS coordinate.

19. The method of claim 1 , wherein the array of encryption keys is shared with only a proper subset of a plurality of decryption devices that receive the encrypted message and the encrypted index.

20. The method of claim 1 , wherein the array of encryption keys is selected from a plurality of arrays of encryption keys wherein a first array of encryption keys is shared with a first decryption device and a second array of encryption keys is shared with a different decryption device.

21. The method of claim 20 , wherein the array of encryption keys is selected such that the different decryption device is unable to decrypt the encrypted message.

22. The method of claim 4 , further comprising encrypting the ciphertext using a transport encryption key array, wherein the transport encryption key array is shared with an intermediary decryption device.

23. The method of claim 22 , wherein the transport encryption key array is transmitted to the intermediary decryption device.

24. The method of claim 4 , wherein the step of receiving the message comprises receiving a second ciphertext encrypted using a transport encryption key array and decrypting the message from the second ciphertext using the transport encryption key array.

25. The method of claim 24 , wherein the message comprises a third ciphertext encrypted using a device encryption key array.

26. The method of claim 25 , wherein the transport encryption key array, the indexed array of encryption keys, and the device encryption key array are distinct.

27. The method of claim 24 , wherein the step of decrypting the message using the transport encryption key array comprises attempting to decrypt the message using multiple encryption key arrays selected from a plurality of encryption key arrays and the transport key array comprises a encryption key array that enables successful decryption.

28. The method of claim 27 , further comprising identifying a sending network device according to the transport encryption key array.

29. The method of claim 1 , wherein the step of encrypted the index is performed before the step of encrypted the message.

30. A communications device comprising: a non-transitory computer readable medium having computer executable logic embodied thereon, wherein the computer executable logic is configured to cause the communications device to perform the steps of:

obtaining an indexed array of encryption keys, wherein the indexed array of encryption keys is shared with a data decryption device;

obtaining a message to be encrypted;

using a first random or pseudorandom number to determine an index;

obtaining a first key from the array of encryption keys, wherein the first key corresponds to the index;

selecting a second key from the plurality of encryption keys;

encrypting the message using the first key and a second random or pseudorandom number, wherein a first portion of the message is encrypted using the first key and wherein a second portion of the message is encrypted using a third key, the third key having a second index determined from the first index in a deterministic manner known to the data decryption device;

encrypting the index using the second key and a third random or pseudorandom number;

transmitting the encrypted message and the encrypted index to the data decryption device.

31. The communications device of claim 30 , wherein a first portion of the message is encrypted using the first key and wherein a second portion of the message is encrypted using a third key, the third key having a second index determined from the first index in a deterministic manner known to the data decryption device.

32. The communications device of claim 30 , wherein the computer executable logic is further configured to cause the communications device to perform the step of modifying the first key to generate a modified first key corresponding to the index for use in subsequent network communications.

33. The communications device of claim 30 , wherein the computer executable logic is further configured to cause the communications device to perform the step of combining the encrypted message and the encrypted index to form a ciphertext; and wherein the steps of transmitting the encrypted message and the encrypted index comprise transmitting the ciphertext.

34. The communications device of claim 33 , wherein the ciphertext further comprises added bits such that a length of the ciphertext is substantially equal to a predetermined ciphertext length.

35. The communications device of claim 34 , wherein the computer executable logic is further configured to generate a message authentication code for the encrypted message and the encrypted index and transmit the message authentication code to the data decryption device.

36. The communications device of claim 34 , wherein the added bits comprise a random tail and wherein the ciphertext further comprises a checksum and a timestamp.

37. The communications device of claim 33 , wherein the second key is determined using information shared with the data decryption device.

38. The communications device of claim 30 , wherein the step of encrypting the message comprises inserting a group of randomly or pseudorandomly generated bits at a location of the message determined using the first key.

39. The communications device of claim 38 , wherein the length of the group of randomly or pseudorandomly generated bits is random or pseudorandom.

40. The communications device of claim 30 , wherein the step of encrypting the message comprises obtaining a first bit of the message and using the first key to determine a position of a second bit of the message and transposing the first bit with the second bit.

41. The communications device of claim 30 , wherein the step of encrypting the message further comprises using a third key, and wherein the third key is deterministically obtained from first key using a function known to the data decryption device.

42. The communications device of claim 30 , wherein the computer executable logic is further configured to cause the communications device to perform the step of statistically equalizing the frequencies of the message characters using a statistic improvement function known to the data decryption device.

43. The communications device of claim 30 , wherein the indexed array of encryption keys is programmed onto the data encryption device prior to deploying the data encryption device.

44. The communications device of claim 30 , wherein the first key comprises a sequence of bits determined using a fourth random or pseudorandom number.

45. The communications device of claim 44 , wherein the sequence of bits of the first key is further determined using a biometric pattern, a telemetry datum, or a GPS coordinate.

46. The communications device of claim 45 , wherein the sequence of bits of the first key is determined at a sending location using a first biometric pattern, a first telemetry datum, or a first GPS coordinate, and the sequence of bits of the first key is determined a receiving location using a different biometric pattern, a different telemetry datum, or a different GPS coordinate.

47. The communications device of claim 30 , wherein the array of encryption keys is shared with only a proper subset of a plurality of decryption devices that receive the encrypted message and the encrypted index.

48. The communications device of claim 30 , wherein the array of encryption keys is selected from a plurality of arrays of encryption keys wherein a first array of encryption keys is shared with a first decryption device and a second array of encryption keys is shared with a different decryption device.

49. The communications device of claim 48 , wherein the array of encryption keys is selected such that the different decryption device is unable to decrypt the encrypted message.

50. The communications device of claim 33 , wherein the computer executable logic is further configured to cause the communications device to perform the step of encrypting the ciphertext using a transport encryption key array, wherein the transport encryption key array is shared with an intermediary decryption device.

51. The communications device of claim 50 , wherein the transport encryption key array is transmitted to the intermediary decryption device.

52. The communications device of claim 33 , wherein the step of receiving the message comprises receiving a second ciphertext encrypted using a transport encryption key array and decrypting the message from the second ciphertext using the transport encryption key array.

53. The communications device of claim 52 , wherein the message comprises a third ciphertext encrypted using a device encryption key array.

54. The communications device of claim 53 , wherein the transport encryption key array, the indexed array of encryption keys, and the device encryption key array are distinct.

55. The communications device of claim 52 , wherein the step of decrypting the message using the transport encryption key array comprises attempting to decrypt the message using multiple encryption key arrays selected from a plurality of encryption key arrays and the transport key array comprises a encryption key array that enables successful decryption.

56. The communications device of claim 55 , wherein the computer executable logic is further configured to cause the communications device to perform the step of identifying a sending network device according to the transport encryption key array.

57. A method for a data decryption device to receive network communications, the method comprising:

obtaining an indexed array of encryption keys, wherein the indexed array of encryption keys is shared with a data encryption device;

obtaining an encrypted message, wherein the encrypted message was encrypted using the indexed array of encryption keys, wherein a first portion of the message is encrypted using the first key and wherein a second portion of the message is encrypted using a third key, the third key having a second index determined from the first index in a deterministic manner known to the data decryption device;

obtaining an encrypted index;

decrypting the encrypted index to obtain an index corresponding to a key of the array of encryption keys;

selecting the key from the array of encryption keys using the index;

decrypting the message using the key;

providing the decrypted message.

58. The method of claim 57 , wherein the step of decrypting the encrypted index is performed using a second key determined using information shared with the data encryption device.

59. The method of claim 57 , wherein the step of decrypting the message comprises removing a group of randomly or pseudorandomly generated bits at a location of the message determined using the key.

60. The method of claim 57 , wherein the step of decrypting the message further comprises obtaining a first bit of the encrypted message and using the key to determine a position of a second bit of the message and transposing the first bit with the second bit.

61. The method of claim 57 , further comprising obtaining a message authentication code derived from the encrypted message and encrypted index, and authenticating the encrypted message and encrypted index using the message authentication code.

62. The method of claim 57 , wherein the step of decrypting the message further comprises using a second key, and wherein the second key is deterministically obtained from first key using a function known to the data decryption device.

63. The method of claim 57 , wherein the first key comprises a sequence of bits determined using a random or pseudorandom number.

64. The method of claim 57 , wherein the step of decrypting the message is further performed using a biometric pattern, a telemetry datum, or a GPS coordinate.

65. The method of claim 63 , wherein the sequence of bits of the first key is further determined at a sending location using a first biometric pattern, a first telemetry datum, or a first GPS coordinate, and the sequence of bits of the first key is determined a receiving location using a different biometric pattern, a different telemetry datum, or a different GPS coordinate.