Signature specification for encrypted packet streams
Methods, systems, and products are disclosed for specifying a signature for an encrypted packet stream. One method receives the encrypted stream of packets, and encryption obscures the contents of a packet. A signature for insertion into the stream of packets is specified, and the signature identifies a type of data encrypted within the stream of packets. The signature identifies the contents of the packet despite the encryption obscuring the contents.
1. A method, comprising:
receiving an encrypted stream of packets, wherein data included in the encrypted stream of packets is obscured by encryption;
specifying a signature for the encrypted stream of packets; and
identifying an application type of the data included in the encrypted stream of packets using the signature, wherein the receiving, specifying and identifying are performed on at least one processor;
wherein the signature is based on at least one of size of the packets and timing between the packets;
wherein specifying the signature comprises specifying at least one packet for insertion into the encrypted stream of packets, the at least one packet having a size that identifies the application type of the data.
2. A method according to claim 1 , wherein specifying the signature comprises establishing a periodic timing interval between at least two of the packets included in the encrypted stream of packets, the periodic timing interval identifying the application type of the data.
3. A method according to claim 1 , wherein specifying the signature comprises establishing the size for each of the packets in the encrypted stream of packets included in the encrypted stream of packets, the size for each packet identifying the application type of the data.
4. A method according to claim 1 , wherein specifying the signature comprises establishing a pattern of packet sizes.
5. A method according to claim 1 , further comprising changing the signature.
6. A method according to claim 1 , further comprising communicating the signature to a communications device.
7. A method according to claim 1 , further comprising specifying the signature as identifying Voice Over Internet Protocol data as the application type of the data included in the encrypted stream of packets.
8. A method according to claim 1 , wherein specifying the signature comprises specifying a packet for time-based insertion into the encrypted stream of packets, the packet having a size that identifies the application type of the data.
9. A method according to claim 1 wherein specifying the signature comprises establishing a pattern of timing intervals between the packets included in the encrypted stream of packets, the pattern of the timing intervals identifying the application type of the data included in the encrypted stream of packets.
10. A system, comprising:
a communications module stored in a memory device, and
a processor communicating with the memory device;
the communications module being configured to receive an encrypted stream of packets including data obscured by encryption; and
the communications module being configured to specify a signature for the encrypted stream of packets, the signature identifying an application type of the data included in the encrypted stream of packets;
wherein the signature is based on at least one of size of the packets and timing between the packets;
wherein the communications module is configured to specify at least one packet for insertion into the encrypted stream of packets, the at least one packet having a size that identifies the application type of the data included in the encrypted stream of packets.
11. A system according to claim 10 , wherein the communications module is configured to establish a periodic timing interval between at least two of the packets included in the encrypted stream of packets, the periodic timing interval identifying the application type of the data.
12. A system according to claim 10 , wherein the communications module is configured to establish the size for each of the packets in the encrypted stream of packets, the size for each of the packets in the encrypted stream of packets identifying the application type of the data in the encrypted stream of packets.
13. A system according to claim 10 , wherein the communications module is configured to establish a pattern of packet sizes in the encrypted stream of packets, the pattern of packet sizes identifying the application type of the data in the encrypted stream of packets.
14. A system according to claim 10 , wherein the communications module is configured to change the signature.
15. A system according to claim 10 , wherein the communications module is configured to communicate the signature to a communications device.
16. A system according to claim 10 , wherein the communications module is configured to specify the signature as identifying Voice Over Internet Protocol as the application type of the data included in the encrypted stream of packets.
17. A system according to claim 10 , wherein the communications module is configured to specify a packet for time-based insertion into the encrypted stream of packets, the packet having a size that identifies the application type of the data included in the encrypted stream of packets.
18. A system according to claim 10 , wherein the communications module is configured to establish a pattern of timing intervals, the pattern of the timing intervals identifying the application type of the data included in the encrypted stream of packets.
19. A computer program product embodied in a non-transitory computer readable medium comprising instructions for:
receiving an encrypted stream of packets, wherein data included in the encrypted stream of packets is obscured by encryption; and
specifying a signature for the encrypted stream of packets;
identifying an application type of the data included in the encrypted stream of packets using the signature;
wherein the signature is based on at least one of size of the packets and timing between the packets;
wherein specifying the signature comprises specifying at least one packet for insertion into the encrypted stream of packets, the at least one packet having a size that identifies the application type of the data.
20. A computer program product according to claim 19 , wherein specifying the signature comprises establishing a periodic timing interval between at least two packets included in the encrypted stream of packets, the periodic timing interval identifying the type of data encrypted within the stream of packets.
21. A computer program product according to claim 19 , further comprising specifying a signature as identifying Voice Over Internet Protocol as the application type of the data included in the encrypted stream of packets.
22. A computer program product according to claim 19 , wherein specifying the signature comprises specifying a packet for time-based insertion into the encrypted stream of packets, the packet having a size that identifies the application type of the data included in the encrypted stream of packets.
23. A computer program product according to claim 19 , wherein specifying the signature comprises establishing a timing interval between at least two packets included in the encrypted stream of packets, the timing interval identifying the application type of the data included in the encrypted stream of packets.