Apparatus and method for protecting message data

Patent metadata

Field	Value
Publication number	US-9660811-B2
Application number	US-201514659024-A
Country	US
Kind code	B2
Filing date	Mar 16, 2015
Priority date	Sep 14, 2012
Publication date	May 23, 2017
Grant date	May 23, 2017

Abstract

Disclosed is a method for protecting message data. In the method, the message data is padded with padding bits generated based on a deterministic function performed on the message data. The padded message data is compressed to generate compressed data. A length of the compressed data is dependent on the padding bits. The compressed data is encrypted to generate encrypted message data.

First claim

What is claimed is:

1. A method for protecting message data, comprising:
generating a function output value using a deterministic function performed on the message data, wherein the deterministic function includes a hash function;
generating a compression parameter value from selected bits of the function output value, wherein a number of bits representing the compression parameter value is less than a number of bits representing the function output value;
compressing the message data using a compression algorithm to generate compressed data, wherein the compressed data is variably compressed by the compression algorithm such that a length of the compressed data is dependent on the compression parameter value; and
encrypting the compressed data to generate encrypted message data.

2. The method of claim 1 , wherein the compression parameter value is a maximum chain length value.

3. The method of claim 1 , wherein compressing the message data comprises:
padding the message data with a number of padding bits selected based on the deterministic function to generate padded message data; and
generating the compressed data by using the compression algorithm on the padded message data.

4. The method of claim 3 , wherein the padding bits are prefixed to the message data.

5. The method of claim 3 , wherein the padding bits are constrained to allow an end of the padding bits to be determined by a receiver.

6. A remote station, comprising:
means for generating a function output value using a deterministic function performed on message data, wherein the deterministic function includes a hash function;
means for generating a compression parameter value from selected bits of the function output value, wherein a number of bits representing the compression parameter value is less than a number of bits representing the function output value;
means for compressing the message data using a compression algorithm to generate compressed data, wherein the compressed data is variably compressed by the compression algorithm such that a length of the compressed data is dependent on the compression parameter value; and
means for encrypting the compressed data to generate encrypted message data.

7. The remote station of claim 6 , wherein the compression parameter value is a maximum chain length value.

8. The remote station of claim 6 , wherein the means for compressing the message data comprises:
means for padding the message data with a number of padding bits selected based on the deterministic function to generate padded message data; and
means for generating the compressed data by using the compression algorithm on the padded message data.

9. The remote station of claim 8 , wherein the padding bits are prefixed to the message data.

10. The remote station of claim 8 , wherein the padding bits are constrained to allow an end of the padding bits to be determined by a receiver.

11. A remote station, comprising:
a processor, implemented as hardware, configured to:
generate a function output value using a deterministic function performed on message data, wherein the deterministic function includes a hash function;
generate a compression parameter value from selected bits of the function output value, wherein a number of bits representing the compression parameter value is less than a number of bits representing the function output value;
compress the message data using a compression algorithm to generate compressed data, wherein the compressed data is variably compressed by the compression algorithm such that a length of the compressed data is dependent on the compression parameter value; and
encrypt the compressed data to generate encrypted message data.

12. The remote station of claim 11 , wherein the compression parameter value is a maximum chain length value.

13. The remote station of claim 11 , wherein the processor is further configured to:
pad the message data with a number of padding bits selected based on the deterministic function to generate padded message data; and
generate the compressed data by using the compression algorithm on the padded message data.

14. The remote station of claim 13 , wherein the padding bits are prefixed to the message data.

15. The remote station of claim 13 , wherein the padding bits are constrained to allow an end of the padding bits to be determined by a receiver.

16. A non-transitory computer-readable medium, comprising:
code for causing a computer to generate a function output value using a deterministic function performed on message data, wherein the deterministic function includes a hash function;
code for causing a computer to generate a compression parameter value from selected bits of the function output value, wherein a number of bits representing the compression parameter value is less than a number of bits representing the function output value;
code for causing a computer to compress the message data using a compression algorithm to generate compressed data, wherein the compressed data is variably compressed by the compression algorithm such that a length of the compressed data is dependent on the compression parameter value; and
code for causing a computer to encrypt the compressed data to generate encrypted message data.

17. The non-transitory computer-readable medium of claim 16 , wherein the compression parameter value is a maximum chain length value.

18. The non-transitory computer-readable medium of claim 16 , further comprising:
code for causing a computer to pad the message data with a number of padding bits selected based on the deterministic function to generate padded message data; and
code for causing a computer to generate the compressed data by using the compression algorithm on the padded message data.

19. The non-transitory computer-readable medium of claim 18 , wherein the padding bits are prefixed to the message data.

20. The non-transitory computer-readable medium of claim 18 , wherein the padding bits are constrained to allow an end of the padding bits to be determined by a receiver.

21. The method of claim 1 , wherein the deterministic function is performed on the message data no more than one time to generate the function output value.

Assignees

• Qualcomm Inc

Inventors

• Jacobson David
• Brumley Billy

Classifications

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• H04L63/1475

  Passive attacks, e.g. eavesdropping or listening without modification of the traffic monitored · CPC title

• H04L9/3242 Primary

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title

• H04L63/123

  received data contents, e.g. message integrity · CPC title