Title of Invention	A METHOD FOR ENCRYPTING A WIRELESS TRANSMISSION AND A COMMUNICATION DEVICE
Abstract	A communication device (202) converts a bit stream to multiple symbols and provides encryption at a physical layer by shifting a phase of each symbol of the multiple symbols to produce multiple encrypted symbols wherein shifting comprises shifting a phase of each symbol that is associated with user data to produce a plurality of phase shifted symbols and not shifting a phase of each symbol that is associated with pilot data to produce a plurality of non-shifted symbols. Each encrypted symbol of the multiple encrypted symbols is modulated with an orthogonal subcarrier to produce at least one modulated subcarrier and the at least one modulated subcarrier is then transmitted via a wireless link.

Title of Invention

A METHOD FOR ENCRYPTING A WIRELESS TRANSMISSION AND A COMMUNICATION DEVICE

Abstract

A communication device (202) converts a bit stream to multiple symbols and provides encryption at a physical layer by shifting a phase of each symbol of the multiple symbols to produce multiple encrypted symbols wherein shifting comprises shifting a phase of each symbol that is associated with user data to produce a plurality of phase shifted symbols and not shifting a phase of each symbol that is associated with pilot data to produce a plurality of non-shifted symbols. Each encrypted symbol of the multiple encrypted symbols is modulated with an orthogonal subcarrier to produce at least one modulated subcarrier and the at least one modulated subcarrier is then transmitted via a wireless link.

Full Text	Cross-reference to Related Application(s) This application claims priority from provisional application serial no. 60/612,596, entitled "METHOD AND APPARATUS FOR ENCRYPTION OF OVER-THE-AIR COMMUNICATIONS IN A WIRELESS COMMUNICATION SYSTEM," filed September 23, 2004, which is commonly owned and incorporated herein by reference in its entirety. In addition, this application is related to U.S. Patent Application Serial No. 10/947,724, attorney docket no. CE12637R, filed on September 23, 2004. Field of the Invention The present invention relates generally to wireless communication systems, and more specifically to encryption of over-the-air communications in a wireless communication system. Background of the Invention In a typical wireless communication system, a session key is distributed among the transmitting and receiving communication devices when a communication session is set up. The session key is then used by the transmitting communication to perform Layer 2 or Layer 3 encryption on data transmitted over- the-air. No physical layer, that is, Layer 1, encryption is performed, that is, there is no encryption of the modulated waveform. In addition, typically only the user data is encrypted and not the pilot symbols and synchronization symbols, which symbols must be used as a reference for timing synchronization and fading recovery. The performance of Layer 2 or Layer 3 encryption leaves the data vulnerable to decryption by an intercepting communication device that either intercepts the session key or that decrypts the data by application of brute force. Therefore, a need exists for a method and apparatus that makes an air interface more secure against decryption by an undesired interceptor of a communication in a wireless communication system. Brief Description of the Accompanying Drawings FIG. 1 is a block diagram of a wireless communication system in accordance with an embodiment of the present invention. FIG. 2 is a block diagram of an architecture of the communication system of FIG. 1 in accordance with various embodiments of the present invention. FIG. 3 is a logic flow diagram illustrating an operation of a transmit side of the communication system of FIG. 2 in accordance with various embodiments of the present invention. FIG. 4 is a block diagram of a code word generator of the transmit side of FIG. 2 in accordance with an embodiment of the present invention. FIG. 5 is a logic flow diagram illustrating an operation of the code word generator of the transmit side of FIG. 2 in accordance with various embodiments of the present invention. FIG. 6 is a block diagram of a phase shifter of the transmit side of FIG. 2 in accordance with an embodiment of the present invention. FIG. 7 is a logic flow diagram illustrating an operation of the phase shifter of the transmit side of FIG. 2 in accordance with an embodiment of the present invention. FIG. 8 is a logic flow diagram illustrating an operation of a receive side of the communication system of FIG. 2 in accordance with various embodiments of the present invention. Detailed Description of the Invention To address the need for a method and apparatus that makes an air interface more secure against decryption by an undesired interceptor of a communication in a wireless communication system, a communication device is provided that converts a bit stream to multiple symbols and provides encryption at a physical layer by shifting a phase of each symbol of the multiple symbols to produce multiple encrypted symbols. Each encrypted symbol of the multiple encrypted symbols is modulated with an orthogonal subcarrier to produce at least one modulated subcarrier and the at least one modulated subcarrier is then transmitted via a wireless link. On a receive side, a receiving communication device receives the transmitted, encrypted symbols and provides decryption at a physical layer by shifting a phase of each encrypted symbol in correspondence with the phase used to encrypt the symbol at the transmit side. Generally, an embodiment of the present invention encompasses a method for encrypting a wireless transmission. The method includes receiving multiple symbols, shifting a phase of each symbol of the multiple symbols to produce multiple phase shifted symbols, modulating each phase shifted symbol of the multiple phase shifted symbols with an orthogonal subcarrier to produce at least one modulated subcarrier, and transmitting the at least one modulated subcarrier via a wireless link. Another embodiment of the present invention encompasses a method for receiving an encrypted wireless transmission. The method includes receiving at least one modulated subcarrier via a wireless link, demodulating the at least one modulated subcarrier to produce a plurality of encrypted symbols, and applying a phase shift to each encrypted symbol of the plurality of encrypted symbols to produce a plurality of decrypted symbols. Yet another embodiment of the present invention encompasses a communication device having a signal processing unit coupled to a transmitter section. The signal processing unit comprises a phase shifter that receives multiple symbols and applies a phase shift to each symbol of the multiple symbols to produce multiple phase shifted symbols. The signal processing unit further comprises an orthogonal modulator that receives the multiple phase shifted symbols and modulates each phase shifted symbol of the multiple phase shifted symbols with an orthogonal subcarrier to produce at least one modulated subcarrier. The transmitter section transmits the at least one modulated subcarrier via a wireless link. Still another embodiment of the present invention encompasses a communication device having a signal processing unit that includes an orthogonal modulator and that is coupled to a transmitter section. The orthogonal modulator comprises a serial-to-parallel converter that assigns each symbol of the multiple symbols to a frequency sub-band of multiple frequency sub-bands to produce multiple assigned symbols and a phase shifter module that produces multiple phase shifted symbols, wherein the phase shifter module comprises multiple phase shifters and wherein each phase shifter of the multiple phase shifters receives an assigned symbol of the multiple assigned symbols and shifts a phase of the assigned symbol to produce a phase shifted symbol. The orthogonal modulator further comprises a transformer that transforms each phase shifted symbol of the multiple phase shifted symbols to a time domain subcarrier associated with the symbol's frequency sub-band to produce multiple modulated time domain subcarriers, wherein the multiple modulated subcarriers are in a parallel form, and a parallel-to-serial converter that converts the multiple modulated subcarriers from a parallel form to a serial form to produce an output signal. The transmitter section transmits the multiple phase shifted symbols via a wireless link. Yet another embodiment of the present invention encompasses a communication device comprising a receiver section coupled to a signal processing unit. The receiver section receives a modulated carrier via a wireless link and downconverts the modulated carrier to produce a downconverted signal. The signal processing unit includes an orthogonal demodulator that receives the downconverted signal and demodulates the downconverted signal to produce a stream of encrypted symbols and a phase shifter that receives the stream of encrypted symbols and applies a phase shift to each symbol of the stream of encrypted symbols to produce a plurality of decrypted symbols. Still another embodiment of the present invention encompasses a communication device comprising a receiver section coupled to a signal processing unit. The receiver section receives a modulated carrier via a wireless link and downconverts the modulated carrier to produce a downconverted signal. The signal processing unit includes an orthogonal modulator that comprises a serial-to-parallel converter that assigns the downconverted signal to multiple time domain subcarriers and an inverse transformer that transforms each time domain subcarrier of the multiple time domain subcarriers to a frequency domain subcarrier to produce multiple encrypted symbols, wherein the multiple encrypted symbols are in a parallel form. The signal processing unit further includes a phase shifter module that produces multiple decrypted symbols, wherein the phase shifter module comprises multiple phase shifters and wherein each phase shifter of the multiple phase shifters receives an encrypted symbol of the multiple encrypted symbols and shifts a phase of the encrypted symbol to produce a decrypted symbol, and a parallel-to-serial converter that converts the multiple decrypted symbols from a parallel form to a serial form to produce a stream of decrypted symbols. The present invention may be more fully described with reference to FIGs. 1-8. FIG. 1 is a block diagram of a wireless communication system 100 in accordance with an embodiment of the present invention. Communications system 100 includes a base transceiver station (BTS) 102 that is capable of engaging in wireless communications with a mobile station (MS) 110, such as a cellular telephone, radiotelephone, or wireless data modem, via an air interface 104. Air interface 104 includes a forward link 108 that comprises traffic, pilot, paging, and signaling channels. Air interface 104 further includes a reverse link 106 that comprises traffic, access, and signaling channels. Preferably, communication system 100 is an Orthogonal Frequency Division Multiplexing (OFDM) communication system. OFDM is a wideband modulation scheme that divides a frequency bandwidth allocated for a communication session into multiple narrower frequency sub-bands. Each sub- band includes a radio frequency (RF) subcarrier, wherein each subcarrier is mathematically orthogonal to the RF subcarrier included in each of the other subchannels. The orthogonality of the subcarriers allows their individual spectra to overlap without causing interference with the other carriers. However, those who are of ordinary skill in the art realize that communication system 100 may operate in accordance with any wireless telecommunication system that uses an orthogonal modulation scheme for modulation of information onto a carrier and subsequent transmission of the modulated signal, such as a Code Division Multiple Access (CDMA) communication system, a CDMA 2000 communication system, a General Packet Radio Service (GPRS) communication system, or a Wideband CDMA (WCDMA) communication system. In CDMA, the subcarriers are not of different frequency but of different code domain. They are called Walsh codes in IS2000, and in UMTS they are called Orthogonal Vector Spreading Factors (OVSF). FIG. 2 is a block diagram of an architecture of communication system 100 in accordance with an embodiment of the present invention. On a transmit side of communications system 100, a transmitting communication device 202, such as BTS 102, receives a bit stream, converts the bit stream to a corresponding symbol stream, provides encryption at a physical layer by encrypting the symbol stream to produce an encrypted symbol stream, and transmits the encrypted symbol stream via an air interface, such as air interface 104. On a receive side of communications system 100, a receiving communication device 250, such as MS 110, receives the transmitted, encrypted symbol stream and provides decryption at a physical layer by decrypting the received symbols to recover the bits of the transmitted bit stream corresponding to each received data symbol. However, those who are of ordinary skill in the art realize that BTS 102 and MS 110 are each capable of operating as either a transmitting communication device or a receiving communication device with respect to the embodiments of the present invention. Each of transmitting communication device 202 and receiving communication device 250 includes a respective signal processing unit 204, 270, such as one or more microprocessors, microcontrollers, digital signal processors (DSPs), combinations thereof or such other devices known to those having ordinary skill in the art. Each of transmitting communication device 202 and receiving communication device 250 further includes a respective at least one memory device 240, 290 associated with the respective signal processing unit, such as random access memory (RAM), dynamic random access memory (DRAM), and/or read only memory (ROM) or equivalents thereof, that maintains data and programs that may be executed by the signal processing unit and that allow the signal processing unit to operate in communication system 100. Each of transmitting communication device 202 and receiving communication device 250 further maintains in their respective at least one memory device 240, 290 a session key that is exchanged by the transmitting and receiving communication devices during a set up of a communication session between the two devices as is know in the art. Each of transmitting communication device 202 and receiving communication device 250 may further maintain, in their respective at least one memory device 240, 290, a mobile serial number that is uniquely associated with MS 110. As those who are of ordinary skill in the art are aware, the various functions of signal processing units 204, 270 as described herein may alternatively be implemented in hardware circuitry, such as a programmable logic array (PLA) or an application specific integrated circuit (ASIC). Referring now to FIG. 3, a logic flow diagram 300 is depicted that illustrates an operation of transmit side 202 in communication system 100 in accordance with an embodiment of the present invention. Logic flow 300 begins (302) when a data source (not shown) provides input data in a binary format, such as bits, to an encoder 206. Encoder 206 encodes (304) the bit stream by applying an error correcting code, such as a forward error correction code (FEC), to the data. For example, encoder 206 may encode the data by use of a convolutional code such as a Viterbi coding algorithm, however, a block code may be used. Convolutional codes and block codes are well known in the art and will not be described in greater detail. The type of error correcting code used is not critical to the invention and those of ordinary skill in the art are aware of many types of error correction codes that may be applied to the data without departing from the spirit and scope of the present invention. Regardless, the output of encoder 206 includes information preferably represented in a binary data (bits) format. A bit stream output by encoder 206 is then provided to a symbol mapper 208. In another embodiment of the present invention, wherein the input data includes multiple data-types, such as user data, pilot data, and synchronization data, only the user data is encoded and the one or more other data-types, that is, the pilot data and the synchronization data, is not encoded. In such an embodiment, symbol mapper 208 may comprise multiple symbol mappers, wherein the user data is encoded before being provided to a first symbol mapper of the multiple symbol mappers and the other data-types are each directly conveyed to a respective other symbol mapper of the multiple symbol mappers. Symbol mapper 208, or each of the multiple symbol mappers when symbol mapper 208 comprises multiple symbol mappers, groups the bit stream received by the symbol mapper into groups of P bits (P-tuples) and maps (306) each P-tuple to a corresponding symbol to produce a symbol stream. To this end, a signal constellation that includes M possible symbols is defined within a multi- dimensional space, preferably a complex two-dimensional (I,Q) space. Each symbol comprises a point within the two-dimensional space, which point may be represented as a vector sum of two scaled basis vectors T and 'Q'. The respective amplitudes of the two basis vectors used to define a particular point may be thought of as two-dimensional coordinates of the point. In order to achieve the desired mapping, symbol mapper 208 assembles the binary values (bits) output by encoder 204 into a P-tuple. Each P-tuple is then used to select a symbol out of the M possible symbols, wherein M = 2P. In one embodiment, a MPSK modulation scheme, such as BPSK or QPSK, is applied to each P-tuple; however those who are of ordinary skill in the art realize that there are many types of multi- dimensional symbol mapping schemes, such as other MPSK schemes or a multiple quadrature amplitude modulation (MQAM) scheme, that may be used without departing from the spirit and scope of the present invention. Communication system 200 may further include an interleaving block on transmit side 202 that interleaves the symbols produced by the symbol mapper 208 in order to minimize the error producing impact of a bursty channel. In one embodiment of the present invention, block interleaving may be used wherein the symbol stream is read into the rows of a two-dimensional matrix and read out column-wise, resulting in the separation of any two adjacent symbols in the symbol stream. When the transmitted symbols are received and deinterleaved by the inverse interleaving block, any error bursts introduced by the channel are broken up, reducing the impact of the error and augmenting the ability of the forward error correction code to correct such errors. Symbol mapper 208 conveys the symbol stream to a phase shifter 210. Phase shifter 210 then encrypts (308) each symbol received by the phase shifter by shifting a phase of the symbol to produce an encrypted, phase shifted symbol. Signal processing unit 204 determines the phase shift based on a code word '9' output by a code word generator 212 coupled to phase shifter 210. Preferably, the code word is derived from one or more of the session key exchanged by transmit side 202 and receive side 250 when the communication session is set up and the mobile serial number that is uniquely associated with MS 110. When the communication session between transmitting communication device 202 and receiving communication device 250 is set up, signal processing units 204 initializes code word generator 212 by inputting the session key, typically a string of bits, or a string of bits derived from the session key, and/or the mobile serial number, or a string of bits derived from the mobile serial number, into code word generator 212. In correspondence with each symbol input into amplitude and phase adjuster 210, amplitude and phase adjuster 210 reads bits of the output of code word generator 212. Signal processing unit 204 then determines a phase shift based on the read bits. As is known in the art, data is transmitted over the air in groupings known as frames. After the communication session is set up, each time transmit side 202 starts a new frame, signal processing unit 204 re-initializes code word generator 212 so that the first, in time, symbols encrypted for embedding in the new frame are encrypted based on the re-initialized code word generator 212. The header of the new frame includes a New Frame Indicator (NFI), indicating that this is a new frame, and the NFI indicates to receiving communication device 250 that the receiving communication device should re-initialize its code word generator as well. Thus synchronization is maintained between the code word generators of transmit side 202 and receive side 250. Phase shifter 210 conveys the stream of encrypted, phase shifted symbols to an orthogonal modulator 214. When symbol mapper 208 comprises multiple symbol mappers that each maps a data-type of multiple data-types to a constellation of symbols, only the symbol mapper that produces a symbol stream based on user data conveys the produced symbol stream to phase shifter 210. Phase shifter 210 then shifts a phase of each symbol associated with user data to produce a stream of encrypted, that is, phase shifted, symbols that is conveyed to orthogonal modulator 214. Each of the other symbol mappers, which produces a symbol stream based associated with non-user data, bypasses phase shifter 210 and conveys the non-encrypted, that is, non-shifted, symbol stream directly to orthogonal modulator 214. Orthogonal Modulator 214 modulates each symbol received by the orthogonal modulator with an orthogonal subcarrier, such as one of multiple frequency sub-bands in an OFDM communication system or an orthogonal code or OVSF in a CDMA communication system. In one embodiment of the present invention, an OFDM embodiment, orthogonal modulator 214 comprises a serial- to-parallel (S/P) converter 216 coupled to a transformer 218, which transformer is further coupled to a parallel-to-serial (P/S) converter 220. In response to receiving each symbol, orthogonal modulator 214 routes the received symbol to S/P converter 216. S/P converter 216 assigns (310) each symbol to one of multiple ('N') orthogonal subcarriers, that is, frequency sub-bands, in effect converting the symbol stream received from phase shifter 210 from a serial to a parallel form and producing N parallel symbols, wherein N is the number of subcarriers contained in a frequency bandwidth allocated for a communication session. S/P converter 216 then applies the N parallel symbols to transformer 218. When the symbols received by orthogonal modulator 214 are associated with multiple data types, such as user data, pilot data, and synchronization data, S/P converter 216 assigns each symbol associated with a same data-type to an orthogonal subcarrier from a same set of one or more orthogonal subcarriers. That is, the symbols associated with user data may be assigned to one or more orthogonal subcarriers from a first set orthogonal subcarriers, the symbols associated with pilot data may be assigned to one or more orthogonal subcarriers from a second set of orthogonal subcarriers, and the symbols associated with synchronization data may be assigned to one or more orthogonal subcarriers from a third set of orthogonal subcarriers. Transformer 218 transforms (312) each symbol of the N parallel symbols, which symbol is assigned to a frequency sub-band, that is, a frequency domain subcarrier, to a time domain signal, that is, a time domain subcarrier, thereby producing multiple (N) modulated orthogonal time domain subcarriers, wherein each subcarrier corresponds to a sub-band included in the frequency band. The multiple orthogonal frequency sub-bands f„(t), n = 0, 1, ... , N-l can be thought of as sinusoids or complex exponentials of the form e^00™'1" for t e [0, Ttotai] where W is the available frequency bandwidth and W/N expresses the frequency spacing between subcarriers. As known in OFDM systems, the functionality of transformer 218 may be implemented with an inverse fast Fourier transform (IFFT), or alternatively with an inverse discrete Fourier transform (IDFT). The N parallel symbols are provided as input to the IFFT and the IFFT outputs N parallel time domain subcarriers of frequency f„, wherein each subcarrier of the N parallel subcarriers is modulated by a corresponding input symbol of the N parallel input symbols. The modulated time domain subcarriers constituting the IFFT output are then conveyed to P/S converter 220. In another embodiment of the present invention, phase shifter 210 may comprise a phase shifter module that is interposed between S/P converter 216 and transformer 218 instead of preceding the S/P converter. In such an embodiment, phase shifter 210 may comprise multiple phase shifters, PSi-PSN, wherein each phase shifter of the multiple phase shifters is associated with, and receives from S/ P converter 216, a symbol of the multiple ('N') parallel symbols output by the S/P converter. Each phase shifter of the multiple phase shifters PSI-PSN is further associated with a corresponding one of the multiple ('N') frequency sub-bands. In conjunction with each set of 'N' parallel symbols received by the multiple phase shifters PSi-PSN, each such phase shifter receives a code word 0 produced by code word generator 212 that is different from the code word provided to the other phase shifters of the multiple phase shifters PSI-PSN. In response to receiving a symbol and a code word, each phase shifter of the multiple phase shifters PSi-PSN encrypts the symbol by shifting a phase of the symbol, which phase shift is based on the code word, to produce an encrypted, phase shifted symbol. Each phase shifter PSI-PSN then applies the phase shifted symbol to transformer 218 for transformation from a corresponding frequency sub-band, that is, a frequency domain subcarrier, to a corresponding time domain signal, that is, a time domain subcarrier. In the embodiment of the present invention wherein symbol mapper 208 comprises multiple symbol mappers that each maps a different data-type to a constellation of symbols, only the assigned symbols output by S/P converter 216 that are associated with user data are conveyed to one of the multiple phase shifters PSrPSN. The other assigned symbols bypass phase shifter 210 and are conveyed by S/P converter 216 directly to transformer 218. Each phase shifter of multiple phase shifters PSI-PSN receives an assigned symbol associated with the user data and shifts a phase of the symbol to produce a phase shifted symbol that is conveyed to transformer 218. Transformer 218 then transforms each phase shifted symbol received from a phase shifter PSI-PSN from a corresponding frequency sub-band, that is, a frequency domain subcarrier, to a corresponding time domain signal, that is, a time domain subcarrier, to produce a modulated time domain subcarrier associated with the user data. Transformer 218 further transforms each non-phase shifted symbol received directly from S/P converter 216 from a corresponding frequency sub-band, that is, a frequency domain subcarrier, to a corresponding time domain signal, that is, a time domain subcarrier, to produce a modulated time domain subcarrier associated with the non-user data. The modulated time domain subcarriers resulting from the transformation of the multiple phase shifted and non-phase shifted symbols are then conveyed to P/S converter 220. P/S converter 220, preferably a multiplexer, converts (314) the time domain subcarriers received from transformer 218 from a parallel form to a serial form to produce a first output signal. P/S converter 220 conveys the first output signal to a cyclic prefix (C/P) adder 222 that appends (318) a guard band interval, or cyclic prefix, to the first output signal to produce a second output signal. Typically, the appending of a cyclic prefix comprises an appending of the last Tg seconds of each OFDM symbol as a prefix to itself. Preferably Tg is a preassigned length of 16 taps, or 0.8us; however, those of ordinary skill in the art realize that the preassigned length of the cyclic prefix is up to the designer of the system as the designer weighs the greater protection afforded by a longer cyclic prefix against the inefficiency of a longer prefix. C/P adder 222 conveys the second output signal to a transmitter section 230 of transmit side 202 that is coupled to signal processing unit 204. Transmitter section 230 includes a modulator 232 coupled to an amplifier 234. Transmitter section 230 routes the second output signal to modulator 232. Modulator 232 upconverts (320) the second output signal from a baseband frequency to a transmit frequency to produce an upconverted signal. The upconverted signal is conveyed to power amplifier (PA) 234 that amplifies (322) the signal to produce an amplified signal and transmits (324) the amplified signal via an antenna 236 and air interface 104. Logic flow 300 then ends (326). In another embodiment of the present invention, a CDMA embodiment, orthogonal modulator 214 may comprise at least one spreader instead of an S/P converter, transformer, and P/S converter. In such an embodiment, the at least one spreader spreads (316) the phase shifted symbol received from phase shifter 210 by an orthogonal spreading code, that is, a CDMA subcarrier, to produce the first output signal, that is, a stream of modulated, that is, spread, symbols. For example, orthogonal modulator 214 may comprise multiple serial spreaders, wherein one spreader of the multiple spreaders spreads each symbol with a long code and another spreader of the multiple spreaders spreads the symbol with a Walsh code or an OVSF. When the symbols conveyed to orthogonal modulator 214 comprises symbols associated with multiple data-types, the orthogonal modulator spreads each received symbol by an orthogonal spreading code assigned to the corresponding data-type to produce a modulated subcarrier. The spread symbols are then conveyed to transmitter section 230. That is, the symbols associated with user data may be spread by a first one or more orthogonal subcarriers, that is, spreading codes, the symbols associated with pilot data may be spread by a second one or more orthogonal subcarriers, and the symbols associated with synchronization data may be spread by a third one or more orthogonal subcarriers. In the CDMA embodiment, signal processing unit 204 may or may not include C/P adder 222 interposed between orthogonal modulator 214 and transmitter section 230, which C/P adder may add a prefix to the stream of spread symbols output by the orthogonal modulator. Referring now to FIGs. 4 and 5, an operation of code word generator 212 is illustrated in accordance with an embodiment of the present invention. FIG. 4 is a block diagram of code word generator 212 in accordance with an embodiment of the present invention. FIG. 5 is a logic flow diagram 500 illustrating a method by which code word generator 212 generates the code word '0' used by phase shifter 210 to shift a phase of the symbol received by the phase shifter in accordance with an embodiment of the present invention. Logic flow diagram 500 begins (502) when a circular buffer 414 of code word generator 212 is loaded (504) with a bit sequence that is used to produce the code word '8.' Circular buffer 514 is initially loaded when the communication session is set up and is reloaded each time transmitting communication device 202 starts a new frame. That is, as is known in the art, data is transmitted in frames. Each time a new frame is assembled by signal processing unit 204, the signal processing unit re-initializes circular buffer 414 so that the first, in time, symbols encrypted for embedding in the new frame are encrypted based on the re-initialized circular buffer. The header of the new frame includes a New Frame Indicator (NFI), indicating that this is a new frame, and the NFI indicates to receiving communication device 250 that the receiving communication device should re- initialize its circular buffer as well. Thus synchronization is maintained between the code word generators of the transmitting and receiving communication devices 202, 250. Preferably, circular buffer 414 is loaded with a bit sequence as follows. Signal processing unit 204 provides, and combiner 410 receives a first encryption key 402. Preferably first encryption key 402 is a dynamic, 16 bit key that is valid only for the duration of the call or for a single packet burst, such as a 16 bit key that is derived from a session key exchanged by transmitting communication device 202 and receiving communication device 250 during set up of the communication session and maintained in the at least one memory device 240. In one embodiment of the present invention, first encryption key 402 may be conveyed to combiner 410 via a mixer 406, where the first encryption key is spread by a first spreading code 404 that is maintained in each of the at least one memory devices 240, 290 of each of transmitting communication device 202 and receiving communication device 250. In another embodiment of the present invention, first encryption key 402 may be conveyed directly to combiner 410. Signal processing unit 204 further provides, and combiner 410 receives, a second encryption key 408. Preferably second encryption key 408 is a static, 48 bit key that is unique to MS 110, such as a mobile serial number, for example an Electronic Serial Number (ESN), uniquely associated with the MS and is maintained in the at least one memory device 240 of transmitting communication device 202. Combiner 410 combines the received first encryption key 402 and the received second encryption key 408 to produce a first code word 412 for input into circular buffer 414. Preferably code word 412 is 64 bits long, wherein the 16 most significant bits are derived from first encryption key 402 and the remaining 48 bits are derived from second encryption key 408. However, one of ordinary skill in the art realizes the algorithm used to combine first encryption key 402 and second encryption key 408 is not critical to the present invention and that any of a variety of algorithms may be used by combiner 410 to combine the first encryption key and the second encryption key without departing from the spirit and scope of the present invention. Combiner 410 may further comprise a concatenation function that concatenates one or more of first encryption key 402, second encryption key 408, or the combination of the first encryption key and the second encryption key, in order to produce a code word of a desired length, that is, a length appropriate for circular buffer 414. In another embodiment of the present invention, code word 412 may be derived from only one of first encryption key 402 or second encryption key 404, which key may be provided directly to circular buffer 414 or may be provided to the circular buffer via one or more of a concatenation function and a spreader, or multiplier. Circular buffer 414 converts first code word 412 to circular serial data. Preferably, circular buffer 414 is a shift left register, with the most significant bit (MSB) serialized first and the least significant bit (LSB) serialized last. Each time an MSB is read out of buffer 414, the buffer is sifted one position to the left and the MSB is loaded back into the buffer as a LSB. As a result, when the code word stored in the buffer reaches the LSB of the initially stored code word, the sequence will continue again with the MSB of the initially stored code word. A serial sequence is then read out (506) of circular buffer 414 and is routed to a code word expander 416 coupled to the buffer. Code word expander 416 expands (508) the serial sequence read out of circular buffer 414 to create a second, longer code word 418 of 128 bits from the 64 bit code word stored in circular buffer 414. Preferably, code word expander 416 is a one-half (¥£) convolutional encoder that is known in the art and is defined in Section 8.2.1.2.1.3 of the IEEE 802.16 standard. A one-half convolutional encoder adds redundancy to the serial sequence read out of buffer 414 to produce second code word 418 of 128 bits from a 64 bit code word stored in circular buffer 414. Code word expander 416 conveys second code word 418 to an Exclusive OR (XOR) gate 422. However, in another embodiment of the present invention, when the serial sequence read out of buffer 414 may be of a size that does not require expansion, code word generator may not include code word expander 416. In such an embodiment, the serial sequence read out of circular buffer 414 may be routed directly to Exclusive OR (XOR) gate 422. In addition to receiving code word 418, XOR gate 422 further receives a random or pseudo-noise (PN) sequence 420. XOR gate 420 XOR's (510) code word 418 with sequence 420 produce a third code word 424. By XOR'ing code word 418 with sequence 420, the code word '0' provided by code word generator 212 to phase shifter 210 is further randomized, thereby making the phase shift introduced by the phase shifter even harder to detect. Preferably sequence 420 is a pilot sequence that is used to spread a pilot signal, such as a pilot sequence defined by Section 8.3.3.4.2 or Section 8.4.9.4.1 of the IEEE 802.16 standard. Such pilot sequences typically comprise the properties of a good random sequence. However, one of ordinary skill in the art realizes that any random or PN sequence may be used here. XOR gate 422 conveys third code word 424 to a serial-to-parallel (S/P) buffer 426 that buffers (512) the code word. Signal processing unit 204 then reads (514) the code word out of S/P buffer 426 and routes the read code word 430 to a multiplier 434. In conjunction with each reading of the code word out of buffer 426, the multiplier further receives a subcarrier index 432 of multiple subcarrier indices, wherein each subcarrier index of the multiple subcarrier indices corresponds to a subcarrier of the multiple ('N') subcarriers. Multiplier 434 then multiplies (516) each code word 430 read out of buffer 426 by a subcarrier index 432 to produce a code word 436 that is associated with a subcarrier of the multiple ('N') subcarriers. By multiplying each code word received by multiplier 434 by a different subcarrier index value, which subcarrier index value is associated with a subcarrier assigned to the symbol that will be phase shifted based on the code word, code word generator 212 is able to introduce a phase shift to each symbol of the 'N' parallel symbols that is different from the phase shift introduced to the other symbols of the 'N' parallel symbols. This further increases the difficulty for an intercepting communication device to decrypt the encrypted symbols. For example, when phase shifter 210 comprises a phase shifter module that is interposed between S/P converter 216 and transformer 218, multiplier 434 may multiply a first code word output by S/P buffer 426 by a first subcarrier index 432. The resulting codeword is then conveyed to a first phase shifter PSi of the multiple phase shifters PSi-PSN. Multiplier 434 may then multiply the same code word, again output by S/P buffer 426, by a second subcarrier index 432 and convey the resulting codeword to a second phase shifter PS2 (not shown) of the multiple phase shifters PSI-PSN, and so on. Thus each code word conveyed to each phase shifter PSI-PSN is different than the code words conveyed to the other phase shifters. However, in another embodiment of the present invention and in order to reduce the complexity of code word generator 212, multiplier 434 may not be included in the code word generator and the code words 430 read out of buffer 426 may not be multiplied by corresponding subcarrier index values. Multiplier 434 then conveys each code word 436 to truncation function 438. Truncation function 438 truncates (518) each code word 436 to produce a truncated code word, which truncated code word is the code word '8' provided to phase shifter 210. The length of code word '0' is up to a designer of communication system 100 and should be a length appropriate for a level of granularity desired by the designer of communication system 100 for the phase shift introduced by phase shifter 210. Preferably, code word '0' is eight (8) bits; however one of ordinary skill in the art realizes that '8' may be any length. In another embodiment of the present invention, a length of each code word 430 read out of S/P buffer 426, or produced by multiplier 434, may be of a length appropriate for code word '8.' In such an embodiment, code word generator 212 may not include truncation function 438 as the code word may not need to be truncated to produce code word '0.' Logic flow diagram 500 then ends (520). Phase shifter 210 then uses the code word '0' to apply a phase shift to the symbol received by the phase shifter from symbol mapper 208. Referring now to FIGs. 6 and 7, an operation of a phase shifter 600, such as phase shifter 210, or when phase shifter 210 comprises multiple phase shifters PSi-PSN, each phase shifter of the multiple phase shifters PSi-PSN, is illustrated in accordance with an embodiment of the present invention. FIG. 6 is a block diagram of phase shifter 600 in accordance with an embodiment of the present invention. FIG. 7 is a logic flow diagram 700 illustrating a method executed by phase shifter 600 to implement a phase shift in the symbol received by the phase shifter in accordance with an embodiment of the present invention. Logic flow diagram 700 begins (702) when phase shifter 600 receives (704) a code word '0' from code word generator 212. Phase shifter 600 routes the received code word to a sine and cosine function generator 602. Based on the received code word, sine and cosine function generator 602 generates (706) a first value corresponding to a sine function 'sin a' and a second value corresponding to a cosine function 'cos a,' wherein 'a' is an angle corresponding to the code word '0' received from code word generator 212. For example, when '8' is an 'n' bit code word, then a = C x (36072"), wherein C corresponds to the value represented by the code word '9.' For example, suppose '8' is an eight (8) bit code word. Further, suppose that the code word '0' sourced by code word generator 212 to phase shifter 210 is '10001001.' This code word corresponds to a value of 137, and a is then equal to '137 x (3607256),' or approximately 192°. Sine and cosine function generator 602 then generates a first value corresponding to a sine of 192° and generates a second value corresponding to a cosine of 192°. Preferably, sine and cosine function generator 602 generates the values corresponding to 'sin a' and 'cos a' by reference to a lookup table maintained by at least one memory device 240. Sine and cosine function generator 602 then routes the first and second values, that is, 'sin a' and 'cos a,' to a quadrature encryptor 604. Quadrature encryptor 604 receives the first and second values, that is, 'sin a' and 'cos a,' from sine and cosine function generator 602. Quadrature encryptor 604 further receives (708) a symbol (Iin,Qin) produced by symbol mapper 208. Quadrature encryptor 604 then shifts (710) a phase of the symbol based on the 'sin a' and 'cos a' received from sine and cosine function generator 602 to produce an encrypted, phase shifted symbol (IOUt,Qout). More particularly, quadrature encryptor 604 produces phase shifted symbol (Iom,Qout) by executing the following formulas maintained in at least one memory device 240: Iom = (Iin x cos a) - (Qm x sin a), and Qout = (Iin x sin a) + (Qi„ x cos a). The phase shifted symbol (Iout,Qout) is then conveyed by phase shifter 600 to an orthogonal modulator, such as orthogonal modulator 214, or to a transformer, such as transformer 218, whichever is appropriate, and logic flow diagram 700 then ends (712). The receive side 250 of communication system 100 implements the reverse functions with respect to the transmit side 202. Referring now to FIG. 8, a logic flow diagram 800 is depicted that illustrates an operation of receive side 250 in accordance with an embodiment of the present invention. Logic flow 800 begins (802) when a signal received via an antenna 252 is routed to a receiver section 260, where a low noise amplifier (LNA) 262 amplifies (804) the received signal. LNA 262 then routes the amplified signal to a demodulator 264 that downconverts (806) the amplified signal from a transmit frequency to a baseband frequency. The baseband signal is then conveyed to the receive side signal processing unit 270. Signal processing unit 270 routes the baseband signal to a cyclic prefix (C/ P) remover 272 that removes (808) a cyclic prefix that had been appended to the signal. C/P remover 272 conveys the cyclic prefix-less signal to orthogonal demodulator 274. When the corresponding transmit side 202 does not include a C/ P adder, then signal processing unit 270 may route the baseband signal directly to orthogonal demodulator 274. Orthogonal demodulator 274 performs an inverse function to the function performed by orthogonal modulator 214. In one embodiment of the present invention, an OFDM embodiment, orthogonal demodulator 274 comprises an S/P converter 276 coupled to an inverse transformer 278, which inverse transformer is further coupled to a P/S converter 280. In such an embodiment, orthogonal demodulator 274 routes the cyclic prefix- less signal to S/P converter 276. S/P converter 276 converts (810) the downconverted, prefix-less signal from a serial to a parallel form, outputting N parallel modulated subcarriers. The N parallel modulated subcarriers are conveyed to inverse transformer 278, such as a discrete Fourier Transform (DFT) or a fast Fourier Transform (FFT), that transforms (812) each subcarrier of the N parallel modulated subcarriers from a time domain to a frequency domain based upon a corresponding orthogonal function of the N orthogonal functions used in transformer 218. That is, inverse transformer 278 transforms each encrypted symbol to a frequency domain sub-band, or subcarrier, associated with the symbol's time domain subcarrier to produce multiple encrypted symbols. The output of inverse transformer 278 includes 'N' parallel encrypted symbols based on the 'N' modulated subcarriers, wherein each symbol of the 'N' parallel encrypted symbols is drawn from the 'M' possible symbols of the constellation used on the transmit side 202. Transformer 278 conveys the 'N' parallel encrypted symbols to a P/S converter 280. P/S converter 280 converts (814) the 'N' parallel encrypted symbols from a parallel form to a serial form to produce a stream of encrypted symbols and conveys the symbol stream to a phase shifter 282. Phase shifter 282 decrypts (818) each encrypted symbol in the symbol stream by shifting a phase of the encrypted symbol in compensation for the phase shift added to the symbol by phase shifter 210, thereby producing multiple decrypted symbols. Phase shifter 282 then conveys each decrypted symbol to an inverse symbol mapper 286. In another embodiment of the present invention, wherein the transmitted data includes multiple data-types, such as user data, pilot data, and synchronization data, and only the user data is encrypted by a transmit side phase shifter, then only the symbols associated with the user data are conveyed by orthogonal demodulator to phase shifter 282. Phase shifter 282 decrypts each encrypted symbol, that is, the symbols associated with the user data, by shifting a phase of the encrypted symbol in compensation for the phase shift added to the symbol by phase shifter 210 to produce a stream of decrypted symbols that is conveyed to inverse symbol mapper 286. The symbols associated with me non-user data-types are not encrypted by the transmit side and therefore are in a non-encrypted format, that is, comprise a stream of non-encrypted symbols, when output by P/S converter 280. The non- encrypted symbols may then be used for synchronization and pilot interpolation purposes, whichever is appropriate, and may be discarded without being conveyed to inverse symbol mapper 286. Phase shifter 282 implements the phase shift of each encrypted symbol based on a same code word as the code word used to determine a phase shift in phase shifter 210, which code word is generated by a code word generator 284 coupled to phase shifter 282. For example, in one embodiment of the present invention, phase shifter 282 may subtract, from the phase of the symbol, a phase equivalent to the phase shift added to the symbol by phase shifter 210. In another embodiment of the present invention, phase shifter 282 may add a phase to the symbol that will complete a 360° rotation of the symbol around the complex plane, that is, may apply a phase shift approximately equal to '360° - 0'. For example, if phase shifter 210 applied a 192° phase shift to the symbol, then phase shifter 282 may apply a phase shift of approximately '360° - 192°,' or 168°, to the symbol. Code word generator 284 outputs code words that are synchronized with the code words output by code word generator 212. When the communication session between transmitting communication device 202 and receiving communication device 270 is first set up, signal processing unit 274 initializes code word generator 284 by inputting the session key, or a string of bits derived from the session key, and/or the mobile serial number, or a string of bits derived from the mobile serial number, into the code word generator. After the communication session is set up, each time receiving communication device 270 receives a new frame, signal processing unit 274 re-initializes code word generator 284 so that the first, in time, symbols decrypted from the new frame are decrypted based on the re-initialized code word generator. In another embodiment of the present invention, phase shifter 282 may comprise a phase shifter module that is interposed between inverse transformer 278 and P/S converter 280 instead of succeeding the P/S converter. In such an embodiment, phase shifter 282, similar to phase shifter 210, may comprise multiple phase shifters, PSI-PSN, wherein each phase shifter of the multiple phase shifters is associated with, and receives from inverse transformer 278, an encrypted symbol of the multiple ('N') parallel symbols output by the inverse transformer. Each phase shifter of the multiple phase shifters PSi-PSN is further associated with a corresponding one of the multiple ('N') subcarriers. In conjunction with each set of 'N' parallel symbols received by the multiple phase shifters PSi-PSN, each phase shifter PSi-PSN receives a code word '6" produced by code word generator 284 that is different from the code word provided to the other phase shifters PSI-PSN. In response to receiving a symbol and a code word, each phase shifter PSi-PSN decrypts the symbol by shifting a phase of the symbol based on the code word to produce a decrypted symbol. Each phase shifter PSi-PSN then applies the decrypted symbol to P/S converter 280 for conversion from a parallel form to a serial form. When the transmitted data includes multiple data-types, such as user data, pilot data, and synchronization data, only the encrypted symbols, that is, the symbols associated with the user data and which symbols are phase shifted by the transmit side, are conveyed by inverse transformer 278 to P/S converter 280 via a corresponding phase shifter PSI-PSN. The non-encrypted symbols, that is, the symbols that are associated with the one or more other data-types, for example, the pilot data and the synchronization data, and which symbols are not phase shifted by the transmit side, are conveyed directly by inverse transformer 278 to P/S converter 280. In other words, when the transmitted data includes multiple encrypted symbols associated with user data and multiple non-encrypted symbols associated with non-user data, such as pilot data or synchronization data, S/P converter 276 assigns the downconverted signal to multiple time domain subcarriers, wherein one or more time domain subcarriers of the multiple time domain subcarriers are associated with the user data and one or more time domain subcarriers of the multiple time domain subcarriers are associated with the pilot data. Inverse transformer 278 then transforms each time domain subcarrier associated with user data to a frequency domain subcarrier to produce multiple encrypted symbols and further transforms each time domain subcarrier associated with non-user data to a frequency domain subcarrier to produce multiple non- encrypted symbols. Inverse transformer 278 then conveys the encrypted symbols to phase shifter module 282, and more particularly to phase shifters PSI-PSN, and conveys the non-encrypted symbols to P/S converter 280. Each phase shifter PSI- PSN decrypts a received encrypted symbol by shifting a phase of the symbol based on a code word to produce a decrypted symbol and conveys the decrypted symbol to P/S converter 280. P/S converter 280 then converts the decrypted symbols received from phase shifter module 282 and the non-encrypted symbols received from inverse transformer 278 from a parallel format to a serial format. In yet another embodiment of the present invention, a CDMA embodiment, orthogonal demodulator 274 may comprise at least one despreader instead of an S/ P converter, inverse transformer, and P/S converter. In such an embodiment, the at least one despreader despreads (816) a received, encrypted symbol by applying an orthogonal spreading code, that is, a CDMA subcarrier, corresponding to the orthogonal spreading code used by orthogonal modulator 214, to demodulate the received signal and to produce a stream of demodulated, that is, despread, encrypted symbols. For example, orthogonal demodulator 274 may comprise multiple serial despreaders, wherein one despreader of the multiple despreaders despreads each symbol with a long code and another despreader of the multiple despreaders spreads the symbol with a Walsh code or an OVSF. Further, in the CDMA embodiment of the present invention, signal processing unit 274 may or may not include C/P remover 272. In the CDMA embodiment, orthogonal demodulator 274 then conveys each despread, encrypted symbol to phase shifter 282. As described in detail above, phase shifter 282 then decrypts (818) each despread, encrypted symbol by shifting a phase of the symbol in compensation for the phase shift added to the symbol by phase shifter 210, thereby producing multiple decrypted symbols. Inverse symbol mapper 286 produces a bit stream by recovering (820) the P-tuple corresponding to each decrypted symbol based on the symbol mapping scheme used by symbol mapper 208. That is, inverse symbol mapper 286 maps each symbol to a corresponding point in the constellation used by symbol mapper 208, thereby recovering the P-tuple corresponding to that point. Inverse symbol mapper 286 then conveys the recovered bit stream to a decoder 288. Decoder 288 decodes (822) the bit stream based on the error correction code applied by encoder 206 and conveys the decoded bit stream to a data sink (not shown), and logic flow 800 then ends (824). By shifting a phase of a symbol that is to be transmitted based on information known to the transmitting and receiving communication devices, communication system 100 provides encryption at a physical layer that makes an air interface more secure against decryption by an undesired interceptor of a communication. In one embodiment of the invention, a symbol mapper included in a transmitting communication device produces multiple symbols based on a received bit stream and a symbol mapping scheme. A phase shifter included in the transmitting communication device then shifts a phase of each symbol based on a code word to produce an encrypted symbol, which code word may be generated by a code word generator based on one or more encryption keys known to both the transmitting and receiving communication devices. The encrypted symbols are then transmitted via the air interface. In turn, the receiving communication device decrypts received, encrypted symbols by shifting each received, encrypted symbol by a phase corresponding to the phase used to encrypt the symbol, thereby producing a decrypted symbol. An inverse symbol mapper then recovers the bits corresponding to each decrypted symbol based on the symbol mapping scheme used by the transmitting device symbol mapper. While the present invention has been particularly shown and described with reference to particular embodiments thereof, it will be understood by those skilled in the art that various changes may be made and equivalents substituted for elements thereof without departing from the scope of the invention as set forth in the claims below. Furthermore, one of ordinary skill in the art realizes that the components and operations of the transmitting communication device and receiving communication device detailed herein are not intended to be exhaustive but are merely provided to enhance an understanding and appreciation for the inventive principles and advantages of the present invention, rather than to limit in any manner the invention. Accordingly, the specification and figures are to be regarded in an illustrative rather then a restrictive sense, and all such changes and substitutions are intended to be included within the scope of the present invention. Benefits, other advantages, and solutions to problems have been described above with regard to specific embodiments. However, the benefits, advantages, solutions to problems, and any element(s) that may cause any benefit, advantage, or solution to occur or become more pronounced are not to be construed as a critical, required, or essential feature or element of any or all the claims. As used herein, the terms "comprises," "comprising," or any variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Furthermore, unless otherwise indicated herein, the use of relational terms, if any, such as first and second, top and bottom, and the like are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. WE CLAIM: 1. A method for encrypting a wireless transmission comprising: receiving a plurality of symbols, wherein the plurality of symbols comprises symbols associated with user data and symbols associated with pilot data; shifting a phase of each symbol of the plurality of symbols to produce a plurality of phase shifted symbols, wherein shifting comprises shifting a phase of each symbol that is associated with user data to produce a plurality of phase shifted symbols and not shifting a phase of each symbol that is associated with pilot data to produce a plurality of non-shifted symbols; modulating each phase shifted symbol of the plurality of phase shifted symbols with a first orthogonal subcarrier and modulating each non shifted symbol of the plurality of non-shifted symbols with a second orthogonal subcarrier to produce a plurality of modulated subcarriers; and transmitting the plurality modulated subcarriers via a wireless link. 2. The method as claimed in claim 1, wherein the plurality of phase shifted symbols comprises a stream of phase shifted symbols and wherein modulating comprises: assigning each phase shifted symbol of the plurality of phase shifted symbols to a frequency sub-band of a plurality of frequency sub-bands; and transforming each phase shifted symbol to a time domain subcarrier associated with the phase shifted symbol's frequency sub-band to produce a plurality of modulated time domain subcarriers. 3. The method as claimed in claim 2, wherein the plurality of modulated time domain subcarriers are in a parallel form and wherein transmitting comprises: converting the plurality of modulated subcarriers from a parallel form to a serial form to produce an output signal; and transmitting the output signal via a wireless link. 4. The method as claimed in claim 1, wherein shifting comprises: assigning each user data symbol to a frequency sub-band of a plurality of frequency sub-bands to produce a plurality of assigned symbols; shifting a phase of each assigned user data symbol to produce a plurality of phase shifted user data symbols; and wherein modulating comprises transforming each phase shifted user data symbol to a time domain subcarrier associated with the phase shifted user data symbol's frequency sub-band to produce a plurality of modulated time domain subcarriers. 5. The method as claimed in claim 1, wherein shifting a phase comprises shifting a phase of each user data symbol based on a code word derived from at least one of a session key and a mobile serial number. 6. The method as claimed in claim 5, wherein shifting a phase comprises: generating a code word based on at least one of a session key and a mobile serial number; and for each user data symbol, generating a sin a and a cos a, wherein a is derived from the code word; and shifting a phase of the symbol based on the sin a and the cos a to produce a phase shifted user data symbol. 7. The method as claimed in claim 1, wherein shifting a phase comprises shifting a phase of each user data symbol based on a code word of a plurality of code words, and wherein the method comprises: loading a buffer with a bit sequence based on at least one of the session key and the mobile serial number; reading a serial sequence out of the buffer; exclusive or'ing the serial sequence with a different sequence to produce a code word; and multiplying the code word by each subcarrier index of a plurality of subcarrier indices to produce the plurality of code words. 8. A method for receiving an encrypted wireless transmission comprising: receiving a plurality of modulated subcarriers via a wireless link, wherein the plurality of subcarriers are orthogonal and wherein a first modulated subcarrier of the plurality of modulated subcarriers is associated with user data and a second modulated subcarrier of the plurality of modulated subcarriers is associated with user data; demodulating the first modulated subcarrier to produce a plurality of encrypted symbols and demodulating the second modulated subcarrier to produce a plurality of non-encrypted symbols; and decrypting the encrypted symbols by applying a phase shift to each encrypted symbol of the plurality of encrypted symbols to produce a plurality of decrypted symbols. 9. A communication device (202) comprising: a signal processing unit (204) comprising: a phase shifter (210, 600) adapted to receive a plurality of symbols and applies a phase shift to each symbol of the plurality of symbols to produce a plurality of phase shifted symbols, wherein the plurality of symbols comprises symbols associated with user data and symbols associated with pilot data and wherein shifting comprises shifting a phase of each symbol that is associated with user data to produce a plurality of phase shifted symbols and not shifting a phase of each symbol that is associated with pilot data to produce a plurality of non- shifted symbols.; an orthogonal modulator (214) adapted to receive the plurality of phase shifted symbols, receives the plurality of non-shifted symbols associated with pilot data, modulates each phase shifted symbol of the plurality of phase shifted symbols with a first orthogonal subcarrier, and modulates each non-shifted symbol of the plurality of non-shifted symbols with a second orthogonal subcarrier to produce a plurality of modulated subcarrier; and a transmitter section (230) coupled to the signal processing unit adapted to transmit the plurality of modulated subcarrier via a wireless link. 10. The communication device as claimed in claim 9, wherein the plurality of phase shifted symbols comprises a stream of phase shifted symbols and wherein the orthogonal modulator comprises: a serial-to-parallel converter (216) adapted to assign each phase shifted symbol of the plurality of phase shifted symbols to a frequency sub-band of a plurality of frequency sub-bands; and a transformer (218) adapted to transform each phase shifted symbol to a time domain subcarrier associated with the symbol's frequency sub-band to produce a plurality of modulated time domain subcarriers, wherein the plurality of modulated subcarriers are in a parallel form; and a parallel-to-serial converter (220) that converts the plurality of modulated subcarriers from a parallel form to a serial form to produce an output signal; and wherein the transmitter section transmits the at least one modulated subcarrier by transmitting the output signal via the wireless link. 11. The communication device as claimed in claim 9, comprising a code word generator (212) coupled to the phase shifter adapted to generate a plurality of code words based on at least one of a session key and a mobile serial number and wherein the phase shifter shifts a phase of each user data symbol based on a code word of the plurality of code words. 12. The communication device as claimed in claim 11, wherein the code word generator comprises: a buffer (414) adapted to store a bit sequence based on at least one of the session key and the mobile serial number; an Exclusive OR function (422) adapted to receive a serial sequence (418) based on the bit sequence stored in the buffer and exclusive OR's the serial sequence with a different sequence (420) to produce a code word (424); and a multiplier (434) adapted to multiply the code word by each subcarrier index (432) of a plurality of subcarrier indices to produce a plurality of code words (436). 13. The communication device as claimed in claim 11, wherein the phase shifter comprises: a sine and cosine function generator, for each symbol of the plurality of symbols, adapted to generate a sin a and a cos a, wherein a is derived from a code word of the plurality of code words; and a quadrature encryptor coupled to the sine and cosine function generator, for each user data symbol, adapted to shift a phase of the user data symbol based on the sin a and the cos a generated with respect to that symbol to produce a phase shifted user data symbol. 14. A communication device (202) comprising: a signal processing unit (204) having an orthogonal modulator that receives a plurality of symbols, wherein the plurality of symbols comprises a plurality of symbols associated with user data and a plurality of symbols associated with pilot data and that comprises: a serial-to-parallel converter (216) adapted to assign each symbol of the plurality of symbols to a frequency sub-band of a plurality of frequency sub-bands to produce a plurality of assigned symbols; a phase shifter module (210, 600) adapted to produce a plurality of phase shifted symbols, wherein the phase shifter module comprises a plurality of phase shifters and wherein each phase shifter of the plurality of phase shifters receives an assigned symbol of the plurality of assigned symbols associated with user data and shifts a phase of the assigned symbol to produce a phase shifted symbol; a transformer (218) adapted to receive the plurality of phase shifted symbols that are associated with the user data, receives the plurality of assigned, non-shifted symbols that are associated with pilot data, transforms each phase shifted symbol to a time domain subcarrier associated with the symbol's frequency sub-band to produce a plurality of modulated time domain subcarriers associated with the user data, and transform each non-shifted symbol to a time domain subcarrier associated with the symbol's frequency sub-band to produce a plurality of modulated time domain subcarriers that are associated with pilot data; a parallel-to-serial converter (220) adapted to convert the plurality of modulated subcarriers produced by the transformer from a parallel form to a serial form to produce an output signal; and a transmitter section (230) coupled to the signal processing unit adapted to transmit the plurality of phase shifted symbols via a wireless link. Abstract A Method For Encrypting A Wireless Transmission And Communication Device A communication device (202) converts a bit stream to multiple symbols and provides encryption at a physical layer by shifting a phase of each symbol of the multiple symbols to produce multiple encrypted symbols wherein shifting comprises shifting a phase of each symbol that is associated with user data to produce a plurality of phase shifted symbols and not shifting a phase of each symbol that is associated with pilot data to produce a plurality of non-shifted symbols. Each encrypted symbol of the multiple encrypted symbols is modulated with an orthogonal subcarrier to produce at least one modulated subcarrier and the at least one modulated subcarrier is then transmitted via a wireless link.

Full Text

Cross-reference to Related Application(s)
This application claims priority from provisional application serial no.
60/612,596, entitled "METHOD AND APPARATUS FOR ENCRYPTION OF
OVER-THE-AIR COMMUNICATIONS IN A WIRELESS COMMUNICATION
SYSTEM," filed September 23, 2004, which is commonly owned and incorporated
herein by reference in its entirety. In addition, this application is related to U.S.
Patent Application Serial No. 10/947,724, attorney docket no. CE12637R, filed on
September 23, 2004.
Field of the Invention
The present invention relates generally to wireless communication systems,
and more specifically to encryption of over-the-air communications in a wireless
communication system.
Background of the Invention
In a typical wireless communication system, a session key is distributed
among the transmitting and receiving communication devices when a
communication session is set up. The session key is then used by the transmitting
communication to perform Layer 2 or Layer 3 encryption on data transmitted over-
the-air. No physical layer, that is, Layer 1, encryption is performed, that is, there
is no encryption of the modulated waveform. In addition, typically only the user
data is encrypted and not the pilot symbols and synchronization symbols, which
symbols must be used as a reference for timing synchronization and fading
recovery.
The performance of Layer 2 or Layer 3 encryption leaves the data
vulnerable to decryption by an intercepting communication device that either
intercepts the session key or that decrypts the data by application of brute force.
Therefore, a need exists for a method and apparatus that makes an air interface

more secure against decryption by an undesired interceptor of a communication in
a wireless communication system.
Brief Description of the Accompanying Drawings
FIG. 1 is a block diagram of a wireless communication system in
accordance with an embodiment of the present invention.
FIG. 2 is a block diagram of an architecture of the communication system
of FIG. 1 in accordance with various embodiments of the present invention.
FIG. 3 is a logic flow diagram illustrating an operation of a transmit side of
the communication system of FIG. 2 in accordance with various embodiments of
the present invention.
FIG. 4 is a block diagram of a code word generator of the transmit side of
FIG. 2 in accordance with an embodiment of the present invention.
FIG. 5 is a logic flow diagram illustrating an operation of the code word
generator of the transmit side of FIG. 2 in accordance with various embodiments
of the present invention.
FIG. 6 is a block diagram of a phase shifter of the transmit side of FIG. 2 in
accordance with an embodiment of the present invention.
FIG. 7 is a logic flow diagram illustrating an operation of the phase shifter
of the transmit side of FIG. 2 in accordance with an embodiment of the present
invention.
FIG. 8 is a logic flow diagram illustrating an operation of a receive side of
the communication system of FIG. 2 in accordance with various embodiments of
the present invention.

Detailed Description of the Invention
To address the need for a method and apparatus that makes an air interface
more secure against decryption by an undesired interceptor of a communication in
a wireless communication system, a communication device is provided that
converts a bit stream to multiple symbols and provides encryption at a physical
layer by shifting a phase of each symbol of the multiple symbols to produce
multiple encrypted symbols. Each encrypted symbol of the multiple encrypted
symbols is modulated with an orthogonal subcarrier to produce at least one
modulated subcarrier and the at least one modulated subcarrier is then transmitted
via a wireless link. On a receive side, a receiving communication device receives
the transmitted, encrypted symbols and provides decryption at a physical layer by
shifting a phase of each encrypted symbol in correspondence with the phase used
to encrypt the symbol at the transmit side.
Generally, an embodiment of the present invention encompasses a method
for encrypting a wireless transmission. The method includes receiving multiple
symbols, shifting a phase of each symbol of the multiple symbols to produce
multiple phase shifted symbols, modulating each phase shifted symbol of the
multiple phase shifted symbols with an orthogonal subcarrier to produce at least
one modulated subcarrier, and transmitting the at least one modulated subcarrier
via a wireless link.
Another embodiment of the present invention encompasses a method for
receiving an encrypted wireless transmission. The method includes receiving at
least one modulated subcarrier via a wireless link, demodulating the at least one
modulated subcarrier to produce a plurality of encrypted symbols, and applying a
phase shift to each encrypted symbol of the plurality of encrypted symbols to
produce a plurality of decrypted symbols.

Yet another embodiment of the present invention encompasses a
communication device having a signal processing unit coupled to a transmitter
section. The signal processing unit comprises a phase shifter that receives multiple
symbols and applies a phase shift to each symbol of the multiple symbols to
produce multiple phase shifted symbols. The signal processing unit further
comprises an orthogonal modulator that receives the multiple phase shifted
symbols and modulates each phase shifted symbol of the multiple phase shifted
symbols with an orthogonal subcarrier to produce at least one modulated
subcarrier. The transmitter section transmits the at least one modulated subcarrier
via a wireless link.
Still another embodiment of the present invention encompasses a
communication device having a signal processing unit that includes an orthogonal
modulator and that is coupled to a transmitter section. The orthogonal modulator
comprises a serial-to-parallel converter that assigns each symbol of the multiple
symbols to a frequency sub-band of multiple frequency sub-bands to produce
multiple assigned symbols and a phase shifter module that produces multiple phase
shifted symbols, wherein the phase shifter module comprises multiple phase
shifters and wherein each phase shifter of the multiple phase shifters receives an
assigned symbol of the multiple assigned symbols and shifts a phase of the
assigned symbol to produce a phase shifted symbol. The orthogonal modulator
further comprises a transformer that transforms each phase shifted symbol of the
multiple phase shifted symbols to a time domain subcarrier associated with the
symbol's frequency sub-band to produce multiple modulated time domain
subcarriers, wherein the multiple modulated subcarriers are in a parallel form, and
a parallel-to-serial converter that converts the multiple modulated subcarriers from
a parallel form to a serial form to produce an output signal. The transmitter section
transmits the multiple phase shifted symbols via a wireless link.
Yet another embodiment of the present invention encompasses a
communication device comprising a receiver section coupled to a signal
processing unit. The receiver section receives a modulated carrier via a wireless

link and downconverts the modulated carrier to produce a downconverted signal.
The signal processing unit includes an orthogonal demodulator that receives the
downconverted signal and demodulates the downconverted signal to produce a
stream of encrypted symbols and a phase shifter that receives the stream of
encrypted symbols and applies a phase shift to each symbol of the stream of
encrypted symbols to produce a plurality of decrypted symbols.
Still another embodiment of the present invention encompasses a
communication device comprising a receiver section coupled to a signal
processing unit. The receiver section receives a modulated carrier via a wireless
link and downconverts the modulated carrier to produce a downconverted signal.
The signal processing unit includes an orthogonal modulator that comprises a
serial-to-parallel converter that assigns the downconverted signal to multiple time
domain subcarriers and an inverse transformer that transforms each time domain
subcarrier of the multiple time domain subcarriers to a frequency domain
subcarrier to produce multiple encrypted symbols, wherein the multiple encrypted
symbols are in a parallel form. The signal processing unit further includes a phase
shifter module that produces multiple decrypted symbols, wherein the phase shifter
module comprises multiple phase shifters and wherein each phase shifter of the
multiple phase shifters receives an encrypted symbol of the multiple encrypted
symbols and shifts a phase of the encrypted symbol to produce a decrypted
symbol, and a parallel-to-serial converter that converts the multiple decrypted
symbols from a parallel form to a serial form to produce a stream of decrypted
symbols.
The present invention may be more fully described with reference to FIGs.
1-8. FIG. 1 is a block diagram of a wireless communication system 100 in
accordance with an embodiment of the present invention. Communications system
100 includes a base transceiver station (BTS) 102 that is capable of engaging in
wireless communications with a mobile station (MS) 110, such as a cellular
telephone, radiotelephone, or wireless data modem, via an air interface 104. Air
interface 104 includes a forward link 108 that comprises traffic, pilot, paging, and

signaling channels. Air interface 104 further includes a reverse link 106 that
comprises traffic, access, and signaling channels.
Preferably, communication system 100 is an Orthogonal Frequency
Division Multiplexing (OFDM) communication system. OFDM is a wideband
modulation scheme that divides a frequency bandwidth allocated for a
communication session into multiple narrower frequency sub-bands. Each sub-
band includes a radio frequency (RF) subcarrier, wherein each subcarrier is
mathematically orthogonal to the RF subcarrier included in each of the other
subchannels. The orthogonality of the subcarriers allows their individual spectra to
overlap without causing interference with the other carriers. However, those who
are of ordinary skill in the art realize that communication system 100 may operate
in accordance with any wireless telecommunication system that uses an orthogonal
modulation scheme for modulation of information onto a carrier and subsequent
transmission of the modulated signal, such as a Code Division Multiple Access
(CDMA) communication system, a CDMA 2000 communication system, a
General Packet Radio Service (GPRS) communication system, or a Wideband
CDMA (WCDMA) communication system. In CDMA, the subcarriers are not of
different frequency but of different code domain. They are called Walsh codes in
IS2000, and in UMTS they are called Orthogonal Vector Spreading Factors
(OVSF).
FIG. 2 is a block diagram of an architecture of communication system 100
in accordance with an embodiment of the present invention. On a transmit side of
communications system 100, a transmitting communication device 202, such as
BTS 102, receives a bit stream, converts the bit stream to a corresponding symbol
stream, provides encryption at a physical layer by encrypting the symbol stream to
produce an encrypted symbol stream, and transmits the encrypted symbol stream
via an air interface, such as air interface 104. On a receive side of communications
system 100, a receiving communication device 250, such as MS 110, receives the
transmitted, encrypted symbol stream and provides decryption at a physical layer
by decrypting the received symbols to recover the bits of the transmitted bit stream

corresponding to each received data symbol. However, those who are of ordinary
skill in the art realize that BTS 102 and MS 110 are each capable of operating as
either a transmitting communication device or a receiving communication device
with respect to the embodiments of the present invention.
Each of transmitting communication device 202 and receiving
communication device 250 includes a respective signal processing unit 204, 270,
such as one or more microprocessors, microcontrollers, digital signal processors
(DSPs), combinations thereof or such other devices known to those having
ordinary skill in the art. Each of transmitting communication device 202 and
receiving communication device 250 further includes a respective at least one
memory device 240, 290 associated with the respective signal processing unit,
such as random access memory (RAM), dynamic random access memory
(DRAM), and/or read only memory (ROM) or equivalents thereof, that maintains
data and programs that may be executed by the signal processing unit and that
allow the signal processing unit to operate in communication system 100. Each of
transmitting communication device 202 and receiving communication device 250
further maintains in their respective at least one memory device 240, 290 a session
key that is exchanged by the transmitting and receiving communication devices
during a set up of a communication session between the two devices as is know in
the art. Each of transmitting communication device 202 and receiving
communication device 250 may further maintain, in their respective at least one
memory device 240, 290, a mobile serial number that is uniquely associated with
MS 110. As those who are of ordinary skill in the art are aware, the various
functions of signal processing units 204, 270 as described herein may alternatively
be implemented in hardware circuitry, such as a programmable logic array (PLA)
or an application specific integrated circuit (ASIC).
Referring now to FIG. 3, a logic flow diagram 300 is depicted that
illustrates an operation of transmit side 202 in communication system 100 in
accordance with an embodiment of the present invention. Logic flow 300 begins
(302) when a data source (not shown) provides input data in a binary format, such

as bits, to an encoder 206. Encoder 206 encodes (304) the bit stream by applying
an error correcting code, such as a forward error correction code (FEC), to the
data. For example, encoder 206 may encode the data by use of a convolutional
code such as a Viterbi coding algorithm, however, a block code may be used.
Convolutional codes and block codes are well known in the art and will not be
described in greater detail. The type of error correcting code used is not critical to
the invention and those of ordinary skill in the art are aware of many types of error
correction codes that may be applied to the data without departing from the spirit
and scope of the present invention. Regardless, the output of encoder 206 includes
information preferably represented in a binary data (bits) format. A bit stream
output by encoder 206 is then provided to a symbol mapper 208.
In another embodiment of the present invention, wherein the input data
includes multiple data-types, such as user data, pilot data, and synchronization
data, only the user data is encoded and the one or more other data-types, that is, the
pilot data and the synchronization data, is not encoded. In such an embodiment,
symbol mapper 208 may comprise multiple symbol mappers, wherein the user data
is encoded before being provided to a first symbol mapper of the multiple symbol
mappers and the other data-types are each directly conveyed to a respective other
symbol mapper of the multiple symbol mappers.
Symbol mapper 208, or each of the multiple symbol mappers when symbol
mapper 208 comprises multiple symbol mappers, groups the bit stream received by
the symbol mapper into groups of P bits (P-tuples) and maps (306) each P-tuple to
a corresponding symbol to produce a symbol stream. To this end, a signal
constellation that includes M possible symbols is defined within a multi-
dimensional space, preferably a complex two-dimensional (I,Q) space. Each
symbol comprises a point within the two-dimensional space, which point may be
represented as a vector sum of two scaled basis vectors T and 'Q'. The respective
amplitudes of the two basis vectors used to define a particular point may be
thought of as two-dimensional coordinates of the point. In order to achieve the
desired mapping, symbol mapper 208 assembles the binary values (bits) output by

encoder 204 into a P-tuple. Each P-tuple is then used to select a symbol out of the
M possible symbols, wherein M = 2P. In one embodiment, a MPSK modulation
scheme, such as BPSK or QPSK, is applied to each P-tuple; however those who
are of ordinary skill in the art realize that there are many types of multi-
dimensional symbol mapping schemes, such as other MPSK schemes or a multiple
quadrature amplitude modulation (MQAM) scheme, that may be used without
departing from the spirit and scope of the present invention.
Communication system 200 may further include an interleaving block on
transmit side 202 that interleaves the symbols produced by the symbol mapper 208
in order to minimize the error producing impact of a bursty channel. In one
embodiment of the present invention, block interleaving may be used wherein the
symbol stream is read into the rows of a two-dimensional matrix and read out
column-wise, resulting in the separation of any two adjacent symbols in the
symbol stream. When the transmitted symbols are received and deinterleaved by
the inverse interleaving block, any error bursts introduced by the channel are
broken up, reducing the impact of the error and augmenting the ability of the
forward error correction code to correct such errors.
Symbol mapper 208 conveys the symbol stream to a phase shifter 210.
Phase shifter 210 then encrypts (308) each symbol received by the phase shifter by
shifting a phase of the symbol to produce an encrypted, phase shifted symbol.
Signal processing unit 204 determines the phase shift based on a code word '9'
output by a code word generator 212 coupled to phase shifter 210. Preferably, the
code word is derived from one or more of the session key exchanged by transmit
side 202 and receive side 250 when the communication session is set up and the
mobile serial number that is uniquely associated with MS 110.
When the communication session between transmitting communication
device 202 and receiving communication device 250 is set up, signal processing
units 204 initializes code word generator 212 by inputting the session key,
typically a string of bits, or a string of bits derived from the session key, and/or the

mobile serial number, or a string of bits derived from the mobile serial number,
into code word generator 212. In correspondence with each symbol input into
amplitude and phase adjuster 210, amplitude and phase adjuster 210 reads bits of
the output of code word generator 212. Signal processing unit 204 then
determines a phase shift based on the read bits.
As is known in the art, data is transmitted over the air in groupings known
as frames. After the communication session is set up, each time transmit side 202
starts a new frame, signal processing unit 204 re-initializes code word generator
212 so that the first, in time, symbols encrypted for embedding in the new frame
are encrypted based on the re-initialized code word generator 212. The header of
the new frame includes a New Frame Indicator (NFI), indicating that this is a new
frame, and the NFI indicates to receiving communication device 250 that the
receiving communication device should re-initialize its code word generator as
well. Thus synchronization is maintained between the code word generators of
transmit side 202 and receive side 250.
Phase shifter 210 conveys the stream of encrypted, phase shifted symbols to
an orthogonal modulator 214. When symbol mapper 208 comprises multiple
symbol mappers that each maps a data-type of multiple data-types to a
constellation of symbols, only the symbol mapper that produces a symbol stream
based on user data conveys the produced symbol stream to phase shifter 210.
Phase shifter 210 then shifts a phase of each symbol associated with user data to
produce a stream of encrypted, that is, phase shifted, symbols that is conveyed to
orthogonal modulator 214. Each of the other symbol mappers, which produces a
symbol stream based associated with non-user data, bypasses phase shifter 210 and
conveys the non-encrypted, that is, non-shifted, symbol stream directly to
orthogonal modulator 214.
Orthogonal Modulator 214 modulates each symbol received by the
orthogonal modulator with an orthogonal subcarrier, such as one of multiple
frequency sub-bands in an OFDM communication system or an orthogonal code or

OVSF in a CDMA communication system. In one embodiment of the present
invention, an OFDM embodiment, orthogonal modulator 214 comprises a serial-
to-parallel (S/P) converter 216 coupled to a transformer 218, which transformer is
further coupled to a parallel-to-serial (P/S) converter 220. In response to receiving
each symbol, orthogonal modulator 214 routes the received symbol to S/P
converter 216. S/P converter 216 assigns (310) each symbol to one of multiple
('N') orthogonal subcarriers, that is, frequency sub-bands, in effect converting the
symbol stream received from phase shifter 210 from a serial to a parallel form and
producing N parallel symbols, wherein N is the number of subcarriers contained in
a frequency bandwidth allocated for a communication session. S/P converter 216
then applies the N parallel symbols to transformer 218. When the symbols received
by orthogonal modulator 214 are associated with multiple data types, such as user
data, pilot data, and synchronization data, S/P converter 216 assigns each symbol
associated with a same data-type to an orthogonal subcarrier from a same set of
one or more orthogonal subcarriers. That is, the symbols associated with user data
may be assigned to one or more orthogonal subcarriers from a first set orthogonal
subcarriers, the symbols associated with pilot data may be assigned to one or more
orthogonal subcarriers from a second set of orthogonal subcarriers, and the
symbols associated with synchronization data may be assigned to one or more
orthogonal subcarriers from a third set of orthogonal subcarriers.
Transformer 218 transforms (312) each symbol of the N parallel symbols,
which symbol is assigned to a frequency sub-band, that is, a frequency domain
subcarrier, to a time domain signal, that is, a time domain subcarrier, thereby
producing multiple (N) modulated orthogonal time domain subcarriers, wherein
each subcarrier corresponds to a sub-band included in the frequency band. The
multiple orthogonal frequency sub-bands f„(t), n = 0, 1, ... , N-l can be thought of
as sinusoids or complex exponentials of the form e^00™'1" for t e [0, Ttotai] where
W is the available frequency bandwidth and W/N expresses the frequency spacing
between subcarriers.

As known in OFDM systems, the functionality of transformer 218 may be
implemented with an inverse fast Fourier transform (IFFT), or alternatively with
an inverse discrete Fourier transform (IDFT). The N parallel symbols are provided
as input to the IFFT and the IFFT outputs N parallel time domain subcarriers of
frequency f„, wherein each subcarrier of the N parallel subcarriers is modulated by
a corresponding input symbol of the N parallel input symbols. The modulated time
domain subcarriers constituting the IFFT output are then conveyed to P/S
converter 220.
In another embodiment of the present invention, phase shifter 210 may
comprise a phase shifter module that is interposed between S/P converter 216 and
transformer 218 instead of preceding the S/P converter. In such an embodiment,
phase shifter 210 may comprise multiple phase shifters, PSi-PSN, wherein each
phase shifter of the multiple phase shifters is associated with, and receives from S/
P converter 216, a symbol of the multiple ('N') parallel symbols output by the S/P
converter. Each phase shifter of the multiple phase shifters PSI-PSN is further
associated with a corresponding one of the multiple ('N') frequency sub-bands. In
conjunction with each set of 'N' parallel symbols received by the multiple phase
shifters PSi-PSN, each such phase shifter receives a code word 0 produced by code
word generator 212 that is different from the code word provided to the other
phase shifters of the multiple phase shifters PSI-PSN. In response to receiving a
symbol and a code word, each phase shifter of the multiple phase shifters PSi-PSN
encrypts the symbol by shifting a phase of the symbol, which phase shift is based
on the code word, to produce an encrypted, phase shifted symbol. Each phase
shifter PSI-PSN then applies the phase shifted symbol to transformer 218 for
transformation from a corresponding frequency sub-band, that is, a frequency
domain subcarrier, to a corresponding time domain signal, that is, a time domain
subcarrier.
In the embodiment of the present invention wherein symbol mapper 208
comprises multiple symbol mappers that each maps a different data-type to a
constellation of symbols, only the assigned symbols output by S/P converter 216

that are associated with user data are conveyed to one of the multiple phase shifters
PSrPSN. The other assigned symbols bypass phase shifter 210 and are conveyed
by S/P converter 216 directly to transformer 218. Each phase shifter of multiple
phase shifters PSI-PSN receives an assigned symbol associated with the user data
and shifts a phase of the symbol to produce a phase shifted symbol that is
conveyed to transformer 218. Transformer 218 then transforms each phase shifted
symbol received from a phase shifter PSI-PSN from a corresponding frequency
sub-band, that is, a frequency domain subcarrier, to a corresponding time domain
signal, that is, a time domain subcarrier, to produce a modulated time domain
subcarrier associated with the user data. Transformer 218 further transforms each
non-phase shifted symbol received directly from S/P converter 216 from a
corresponding frequency sub-band, that is, a frequency domain subcarrier, to a
corresponding time domain signal, that is, a time domain subcarrier, to produce a
modulated time domain subcarrier associated with the non-user data. The
modulated time domain subcarriers resulting from the transformation of the
multiple phase shifted and non-phase shifted symbols are then conveyed to P/S
converter 220.
P/S converter 220, preferably a multiplexer, converts (314) the time domain
subcarriers received from transformer 218 from a parallel form to a serial form to
produce a first output signal. P/S converter 220 conveys the first output signal to a
cyclic prefix (C/P) adder 222 that appends (318) a guard band interval, or cyclic
prefix, to the first output signal to produce a second output signal. Typically, the
appending of a cyclic prefix comprises an appending of the last Tg seconds of each
OFDM symbol as a prefix to itself. Preferably Tg is a preassigned length of 16
taps, or 0.8us; however, those of ordinary skill in the art realize that the
preassigned length of the cyclic prefix is up to the designer of the system as the
designer weighs the greater protection afforded by a longer cyclic prefix against
the inefficiency of a longer prefix. C/P adder 222 conveys the second output
signal to a transmitter section 230 of transmit side 202 that is coupled to signal
processing unit 204. Transmitter section 230 includes a modulator 232 coupled to
an amplifier 234. Transmitter section 230 routes the second output signal to

modulator 232. Modulator 232 upconverts (320) the second output signal from a
baseband frequency to a transmit frequency to produce an upconverted signal. The
upconverted signal is conveyed to power amplifier (PA) 234 that amplifies (322)
the signal to produce an amplified signal and transmits (324) the amplified signal
via an antenna 236 and air interface 104. Logic flow 300 then ends (326).
In another embodiment of the present invention, a CDMA embodiment,
orthogonal modulator 214 may comprise at least one spreader instead of an S/P
converter, transformer, and P/S converter. In such an embodiment, the at least one
spreader spreads (316) the phase shifted symbol received from phase shifter 210
by an orthogonal spreading code, that is, a CDMA subcarrier, to produce the first
output signal, that is, a stream of modulated, that is, spread, symbols. For example,
orthogonal modulator 214 may comprise multiple serial spreaders, wherein one
spreader of the multiple spreaders spreads each symbol with a long code and
another spreader of the multiple spreaders spreads the symbol with a Walsh code
or an OVSF. When the symbols conveyed to orthogonal modulator 214 comprises
symbols associated with multiple data-types, the orthogonal modulator spreads
each received symbol by an orthogonal spreading code assigned to the
corresponding data-type to produce a modulated subcarrier. The spread symbols
are then conveyed to transmitter section 230. That is, the symbols associated with
user data may be spread by a first one or more orthogonal subcarriers, that is,
spreading codes, the symbols associated with pilot data may be spread by a second
one or more orthogonal subcarriers, and the symbols associated with
synchronization data may be spread by a third one or more orthogonal subcarriers.
In the CDMA embodiment, signal processing unit 204 may or may not include C/P
adder 222 interposed between orthogonal modulator 214 and transmitter section
230, which C/P adder may add a prefix to the stream of spread symbols output by
the orthogonal modulator.
Referring now to FIGs. 4 and 5, an operation of code word generator 212 is
illustrated in accordance with an embodiment of the present invention. FIG. 4 is a
block diagram of code word generator 212 in accordance with an embodiment of

the present invention. FIG. 5 is a logic flow diagram 500 illustrating a method by
which code word generator 212 generates the code word '0' used by phase shifter
210 to shift a phase of the symbol received by the phase shifter in accordance with
an embodiment of the present invention.
Logic flow diagram 500 begins (502) when a circular buffer 414 of code
word generator 212 is loaded (504) with a bit sequence that is used to produce the
code word '8.' Circular buffer 514 is initially loaded when the communication
session is set up and is reloaded each time transmitting communication device 202
starts a new frame. That is, as is known in the art, data is transmitted in frames.
Each time a new frame is assembled by signal processing unit 204, the signal
processing unit re-initializes circular buffer 414 so that the first, in time, symbols
encrypted for embedding in the new frame are encrypted based on the re-initialized
circular buffer. The header of the new frame includes a New Frame Indicator
(NFI), indicating that this is a new frame, and the NFI indicates to receiving
communication device 250 that the receiving communication device should re-
initialize its circular buffer as well. Thus synchronization is maintained between
the code word generators of the transmitting and receiving communication devices
202, 250.
Preferably, circular buffer 414 is loaded with a bit sequence as follows.
Signal processing unit 204 provides, and combiner 410 receives a first encryption
key 402. Preferably first encryption key 402 is a dynamic, 16 bit key that is valid
only for the duration of the call or for a single packet burst, such as a 16 bit key
that is derived from a session key exchanged by transmitting communication
device 202 and receiving communication device 250 during set up of the
communication session and maintained in the at least one memory device 240. In
one embodiment of the present invention, first encryption key 402 may be
conveyed to combiner 410 via a mixer 406, where the first encryption key is
spread by a first spreading code 404 that is maintained in each of the at least one
memory devices 240, 290 of each of transmitting communication device 202 and

receiving communication device 250. In another embodiment of the present
invention, first encryption key 402 may be conveyed directly to combiner 410.
Signal processing unit 204 further provides, and combiner 410 receives, a
second encryption key 408. Preferably second encryption key 408 is a static, 48
bit key that is unique to MS 110, such as a mobile serial number, for example an
Electronic Serial Number (ESN), uniquely associated with the MS and is
maintained in the at least one memory device 240 of transmitting communication
device 202.
Combiner 410 combines the received first encryption key 402 and the
received second encryption key 408 to produce a first code word 412 for input into
circular buffer 414. Preferably code word 412 is 64 bits long, wherein the 16 most
significant bits are derived from first encryption key 402 and the remaining 48 bits
are derived from second encryption key 408. However, one of ordinary skill in the
art realizes the algorithm used to combine first encryption key 402 and second
encryption key 408 is not critical to the present invention and that any of a variety
of algorithms may be used by combiner 410 to combine the first encryption key
and the second encryption key without departing from the spirit and scope of the
present invention. Combiner 410 may further comprise a concatenation function
that concatenates one or more of first encryption key 402, second encryption key
408, or the combination of the first encryption key and the second encryption key,
in order to produce a code word of a desired length, that is, a length appropriate for
circular buffer 414. In another embodiment of the present invention, code word
412 may be derived from only one of first encryption key 402 or second
encryption key 404, which key may be provided directly to circular buffer 414 or
may be provided to the circular buffer via one or more of a concatenation function
and a spreader, or multiplier.
Circular buffer 414 converts first code word 412 to circular serial data.
Preferably, circular buffer 414 is a shift left register, with the most significant bit
(MSB) serialized first and the least significant bit (LSB) serialized last. Each time

an MSB is read out of buffer 414, the buffer is sifted one position to the left and
the MSB is loaded back into the buffer as a LSB. As a result, when the code word
stored in the buffer reaches the LSB of the initially stored code word, the sequence
will continue again with the MSB of the initially stored code word.
A serial sequence is then read out (506) of circular buffer 414 and is routed
to a code word expander 416 coupled to the buffer. Code word expander 416
expands (508) the serial sequence read out of circular buffer 414 to create a
second, longer code word 418 of 128 bits from the 64 bit code word stored in
circular buffer 414. Preferably, code word expander 416 is a one-half (¥£)
convolutional encoder that is known in the art and is defined in Section 8.2.1.2.1.3
of the IEEE 802.16 standard. A one-half convolutional encoder adds redundancy
to the serial sequence read out of buffer 414 to produce second code word 418 of
128 bits from a 64 bit code word stored in circular buffer 414.
Code word expander 416 conveys second code word 418 to an Exclusive
OR (XOR) gate 422. However, in another embodiment of the present invention,
when the serial sequence read out of buffer 414 may be of a size that does not
require expansion, code word generator may not include code word expander 416.
In such an embodiment, the serial sequence read out of circular buffer 414 may be
routed directly to Exclusive OR (XOR) gate 422. In addition to receiving code
word 418, XOR gate 422 further receives a random or pseudo-noise (PN) sequence
420. XOR gate 420 XOR's (510) code word 418 with sequence 420 produce a
third code word 424. By XOR'ing code word 418 with sequence 420, the code
word '0' provided by code word generator 212 to phase shifter 210 is further
randomized, thereby making the phase shift introduced by the phase shifter even
harder to detect. Preferably sequence 420 is a pilot sequence that is used to spread
a pilot signal, such as a pilot sequence defined by Section 8.3.3.4.2 or Section
8.4.9.4.1 of the IEEE 802.16 standard. Such pilot sequences typically comprise the
properties of a good random sequence. However, one of ordinary skill in the art
realizes that any random or PN sequence may be used here.

XOR gate 422 conveys third code word 424 to a serial-to-parallel (S/P)
buffer 426 that buffers (512) the code word. Signal processing unit 204 then reads
(514) the code word out of S/P buffer 426 and routes the read code word 430 to a
multiplier 434. In conjunction with each reading of the code word out of buffer
426, the multiplier further receives a subcarrier index 432 of multiple subcarrier
indices, wherein each subcarrier index of the multiple subcarrier indices
corresponds to a subcarrier of the multiple ('N') subcarriers. Multiplier 434 then
multiplies (516) each code word 430 read out of buffer 426 by a subcarrier index
432 to produce a code word 436 that is associated with a subcarrier of the multiple
('N') subcarriers. By multiplying each code word received by multiplier 434 by a
different subcarrier index value, which subcarrier index value is associated with a
subcarrier assigned to the symbol that will be phase shifted based on the code
word, code word generator 212 is able to introduce a phase shift to each symbol of
the 'N' parallel symbols that is different from the phase shift introduced to the
other symbols of the 'N' parallel symbols. This further increases the difficulty for
an intercepting communication device to decrypt the encrypted symbols.
For example, when phase shifter 210 comprises a phase shifter module that
is interposed between S/P converter 216 and transformer 218, multiplier 434 may
multiply a first code word output by S/P buffer 426 by a first subcarrier index 432.
The resulting codeword is then conveyed to a first phase shifter PSi of the multiple
phase shifters PSi-PSN. Multiplier 434 may then multiply the same code word,
again output by S/P buffer 426, by a second subcarrier index 432 and convey the
resulting codeword to a second phase shifter PS2 (not shown) of the multiple phase
shifters PSI-PSN, and so on. Thus each code word conveyed to each phase shifter
PSI-PSN is different than the code words conveyed to the other phase shifters.
However, in another embodiment of the present invention and in order to reduce
the complexity of code word generator 212, multiplier 434 may not be included in
the code word generator and the code words 430 read out of buffer 426 may not be
multiplied by corresponding subcarrier index values.

Multiplier 434 then conveys each code word 436 to truncation function
438. Truncation function 438 truncates (518) each code word 436 to produce a
truncated code word, which truncated code word is the code word '8' provided to
phase shifter 210. The length of code word '0' is up to a designer of
communication system 100 and should be a length appropriate for a level of
granularity desired by the designer of communication system 100 for the phase
shift introduced by phase shifter 210. Preferably, code word '0' is eight (8) bits;
however one of ordinary skill in the art realizes that '8' may be any length. In
another embodiment of the present invention, a length of each code word 430 read
out of S/P buffer 426, or produced by multiplier 434, may be of a length
appropriate for code word '8.' In such an embodiment, code word generator 212
may not include truncation function 438 as the code word may not need to be
truncated to produce code word '0.' Logic flow diagram 500 then ends (520).
Phase shifter 210 then uses the code word '0' to apply a phase shift to the
symbol received by the phase shifter from symbol mapper 208. Referring now to
FIGs. 6 and 7, an operation of a phase shifter 600, such as phase shifter 210, or
when phase shifter 210 comprises multiple phase shifters PSi-PSN, each phase
shifter of the multiple phase shifters PSi-PSN, is illustrated in accordance with an
embodiment of the present invention. FIG. 6 is a block diagram of phase shifter
600 in accordance with an embodiment of the present invention. FIG. 7 is a logic
flow diagram 700 illustrating a method executed by phase shifter 600 to implement
a phase shift in the symbol received by the phase shifter in accordance with an
embodiment of the present invention.
Logic flow diagram 700 begins (702) when phase shifter 600 receives (704)
a code word '0' from code word generator 212. Phase shifter 600 routes the
received code word to a sine and cosine function generator 602. Based on the
received code word, sine and cosine function generator 602 generates (706) a first
value corresponding to a sine function 'sin a' and a second value corresponding to
a cosine function 'cos a,' wherein 'a' is an angle corresponding to the code word
'0' received from code word generator 212. For example, when '8' is an 'n' bit

code word, then a = C x (36072"), wherein C corresponds to the value represented
by the code word '9.' For example, suppose '8' is an eight (8) bit code word.
Further, suppose that the code word '0' sourced by code word generator 212 to
phase shifter 210 is '10001001.' This code word corresponds to a value of 137,
and a is then equal to '137 x (3607256),' or approximately 192°. Sine and cosine
function generator 602 then generates a first value corresponding to a sine of 192°
and generates a second value corresponding to a cosine of 192°. Preferably, sine
and cosine function generator 602 generates the values corresponding to 'sin a'
and 'cos a' by reference to a lookup table maintained by at least one memory
device 240. Sine and cosine function generator 602 then routes the first and
second values, that is, 'sin a' and 'cos a,' to a quadrature encryptor 604.
Quadrature encryptor 604 receives the first and second values, that is, 'sin
a' and 'cos a,' from sine and cosine function generator 602. Quadrature encryptor
604 further receives (708) a symbol (Iin,Qin) produced by symbol mapper 208.
Quadrature encryptor 604 then shifts (710) a phase of the symbol based on the 'sin
a' and 'cos a' received from sine and cosine function generator 602 to produce an
encrypted, phase shifted symbol (IOUt,Qout). More particularly, quadrature encryptor
604 produces phase shifted symbol (Iom,Qout) by executing the following formulas
maintained in at least one memory device 240:
Iom = (Iin x cos a) - (Qm x sin a), and
Qout = (Iin x sin a) + (Qi„ x cos a).
The phase shifted symbol (Iout,Qout) is then conveyed by phase shifter 600 to an
orthogonal modulator, such as orthogonal modulator 214, or to a transformer, such
as transformer 218, whichever is appropriate, and logic flow diagram 700 then
ends (712).
The receive side 250 of communication system 100 implements the reverse
functions with respect to the transmit side 202. Referring now to FIG. 8, a logic
flow diagram 800 is depicted that illustrates an operation of receive side 250 in

accordance with an embodiment of the present invention. Logic flow 800 begins
(802) when a signal received via an antenna 252 is routed to a receiver section
260, where a low noise amplifier (LNA) 262 amplifies (804) the received signal.
LNA 262 then routes the amplified signal to a demodulator 264 that downconverts
(806) the amplified signal from a transmit frequency to a baseband frequency. The
baseband signal is then conveyed to the receive side signal processing unit 270.
Signal processing unit 270 routes the baseband signal to a cyclic prefix (C/
P) remover 272 that removes (808) a cyclic prefix that had been appended to the
signal. C/P remover 272 conveys the cyclic prefix-less signal to orthogonal
demodulator 274. When the corresponding transmit side 202 does not include a C/
P adder, then signal processing unit 270 may route the baseband signal directly to
orthogonal demodulator 274. Orthogonal demodulator 274 performs an inverse
function to the function performed by orthogonal modulator 214. In one
embodiment of the present invention, an OFDM embodiment, orthogonal
demodulator 274 comprises an S/P converter 276 coupled to an inverse
transformer 278, which inverse transformer is further coupled to a P/S converter
280. In such an embodiment, orthogonal demodulator 274 routes the cyclic prefix-
less signal to S/P converter 276. S/P converter 276 converts (810) the
downconverted, prefix-less signal from a serial to a parallel form, outputting N
parallel modulated subcarriers. The N parallel modulated subcarriers are conveyed
to inverse transformer 278, such as a discrete Fourier Transform (DFT) or a fast
Fourier Transform (FFT), that transforms (812) each subcarrier of the N parallel
modulated subcarriers from a time domain to a frequency domain based upon a
corresponding orthogonal function of the N orthogonal functions used in
transformer 218. That is, inverse transformer 278 transforms each encrypted
symbol to a frequency domain sub-band, or subcarrier, associated with the
symbol's time domain subcarrier to produce multiple encrypted symbols. The
output of inverse transformer 278 includes 'N' parallel encrypted symbols based
on the 'N' modulated subcarriers, wherein each symbol of the 'N' parallel
encrypted symbols is drawn from the 'M' possible symbols of the constellation
used on the transmit side 202.

Transformer 278 conveys the 'N' parallel encrypted symbols to a P/S
converter 280. P/S converter 280 converts (814) the 'N' parallel encrypted
symbols from a parallel form to a serial form to produce a stream of encrypted
symbols and conveys the symbol stream to a phase shifter 282. Phase shifter 282
decrypts (818) each encrypted symbol in the symbol stream by shifting a phase of
the encrypted symbol in compensation for the phase shift added to the symbol by
phase shifter 210, thereby producing multiple decrypted symbols. Phase shifter
282 then conveys each decrypted symbol to an inverse symbol mapper 286.
In another embodiment of the present invention, wherein the transmitted
data includes multiple data-types, such as user data, pilot data, and synchronization
data, and only the user data is encrypted by a transmit side phase shifter, then only
the symbols associated with the user data are conveyed by orthogonal demodulator
to phase shifter 282. Phase shifter 282 decrypts each encrypted symbol, that is, the
symbols associated with the user data, by shifting a phase of the encrypted symbol
in compensation for the phase shift added to the symbol by phase shifter 210 to
produce a stream of decrypted symbols that is conveyed to inverse symbol mapper
286. The symbols associated with me non-user data-types are not encrypted by the
transmit side and therefore are in a non-encrypted format, that is, comprise a
stream of non-encrypted symbols, when output by P/S converter 280. The non-
encrypted symbols may then be used for synchronization and pilot interpolation
purposes, whichever is appropriate, and may be discarded without being conveyed
to inverse symbol mapper 286.
Phase shifter 282 implements the phase shift of each encrypted symbol
based on a same code word as the code word used to determine a phase shift in
phase shifter 210, which code word is generated by a code word generator 284
coupled to phase shifter 282. For example, in one embodiment of the present
invention, phase shifter 282 may subtract, from the phase of the symbol, a phase
equivalent to the phase shift added to the symbol by phase shifter 210. In another
embodiment of the present invention, phase shifter 282 may add a phase to the

symbol that will complete a 360° rotation of the symbol around the complex plane,
that is, may apply a phase shift approximately equal to '360° - 0'. For example, if
phase shifter 210 applied a 192° phase shift to the symbol, then phase shifter 282
may apply a phase shift of approximately '360° - 192°,' or 168°, to the symbol.
Code word generator 284 outputs code words that are synchronized with
the code words output by code word generator 212. When the communication
session between transmitting communication device 202 and receiving
communication device 270 is first set up, signal processing unit 274 initializes
code word generator 284 by inputting the session key, or a string of bits derived
from the session key, and/or the mobile serial number, or a string of bits derived
from the mobile serial number, into the code word generator. After the
communication session is set up, each time receiving communication device 270
receives a new frame, signal processing unit 274 re-initializes code word generator
284 so that the first, in time, symbols decrypted from the new frame are decrypted
based on the re-initialized code word generator.
In another embodiment of the present invention, phase shifter 282 may
comprise a phase shifter module that is interposed between inverse transformer
278 and P/S converter 280 instead of succeeding the P/S converter. In such an
embodiment, phase shifter 282, similar to phase shifter 210, may comprise
multiple phase shifters, PSI-PSN, wherein each phase shifter of the multiple phase
shifters is associated with, and receives from inverse transformer 278, an encrypted
symbol of the multiple ('N') parallel symbols output by the inverse transformer.
Each phase shifter of the multiple phase shifters PSi-PSN is further associated with
a corresponding one of the multiple ('N') subcarriers. In conjunction with each set
of 'N' parallel symbols received by the multiple phase shifters PSi-PSN, each phase
shifter PSi-PSN receives a code word '6" produced by code word generator 284
that is different from the code word provided to the other phase shifters PSI-PSN.
In response to receiving a symbol and a code word, each phase shifter PSi-PSN
decrypts the symbol by shifting a phase of the symbol based on the code word to
produce a decrypted symbol. Each phase shifter PSi-PSN then applies the

decrypted symbol to P/S converter 280 for conversion from a parallel form to a
serial form.
When the transmitted data includes multiple data-types, such as user data,
pilot data, and synchronization data, only the encrypted symbols, that is, the
symbols associated with the user data and which symbols are phase shifted by the
transmit side, are conveyed by inverse transformer 278 to P/S converter 280 via a
corresponding phase shifter PSI-PSN. The non-encrypted symbols, that is, the
symbols that are associated with the one or more other data-types, for example, the
pilot data and the synchronization data, and which symbols are not phase shifted
by the transmit side, are conveyed directly by inverse transformer 278 to P/S
converter 280. In other words, when the transmitted data includes multiple
encrypted symbols associated with user data and multiple non-encrypted symbols
associated with non-user data, such as pilot data or synchronization data, S/P
converter 276 assigns the downconverted signal to multiple time domain
subcarriers, wherein one or more time domain subcarriers of the multiple time
domain subcarriers are associated with the user data and one or more time domain
subcarriers of the multiple time domain subcarriers are associated with the pilot
data. Inverse transformer 278 then transforms each time domain subcarrier
associated with user data to a frequency domain subcarrier to produce multiple
encrypted symbols and further transforms each time domain subcarrier associated
with non-user data to a frequency domain subcarrier to produce multiple non-
encrypted symbols. Inverse transformer 278 then conveys the encrypted symbols
to phase shifter module 282, and more particularly to phase shifters PSI-PSN, and
conveys the non-encrypted symbols to P/S converter 280. Each phase shifter PSI-
PSN decrypts a received encrypted symbol by shifting a phase of the symbol based
on a code word to produce a decrypted symbol and conveys the decrypted symbol
to P/S converter 280. P/S converter 280 then converts the decrypted symbols
received from phase shifter module 282 and the non-encrypted symbols received
from inverse transformer 278 from a parallel format to a serial format.

In yet another embodiment of the present invention, a CDMA embodiment,
orthogonal demodulator 274 may comprise at least one despreader instead of an S/
P converter, inverse transformer, and P/S converter. In such an embodiment, the at
least one despreader despreads (816) a received, encrypted symbol by applying an
orthogonal spreading code, that is, a CDMA subcarrier, corresponding to the
orthogonal spreading code used by orthogonal modulator 214, to demodulate the
received signal and to produce a stream of demodulated, that is, despread,
encrypted symbols. For example, orthogonal demodulator 274 may comprise
multiple serial despreaders, wherein one despreader of the multiple despreaders
despreads each symbol with a long code and another despreader of the multiple
despreaders spreads the symbol with a Walsh code or an OVSF. Further, in the
CDMA embodiment of the present invention, signal processing unit 274 may or
may not include C/P remover 272. In the CDMA embodiment, orthogonal
demodulator 274 then conveys each despread, encrypted symbol to phase shifter
282. As described in detail above, phase shifter 282 then decrypts (818) each
despread, encrypted symbol by shifting a phase of the symbol in compensation for
the phase shift added to the symbol by phase shifter 210, thereby producing
multiple decrypted symbols.
Inverse symbol mapper 286 produces a bit stream by recovering (820) the
P-tuple corresponding to each decrypted symbol based on the symbol mapping
scheme used by symbol mapper 208. That is, inverse symbol mapper 286 maps
each symbol to a corresponding point in the constellation used by symbol mapper
208, thereby recovering the P-tuple corresponding to that point. Inverse symbol
mapper 286 then conveys the recovered bit stream to a decoder 288. Decoder 288
decodes (822) the bit stream based on the error correction code applied by encoder
206 and conveys the decoded bit stream to a data sink (not shown), and logic flow
800 then ends (824).
By shifting a phase of a symbol that is to be transmitted based on
information known to the transmitting and receiving communication devices,
communication system 100 provides encryption at a physical layer that makes an

air interface more secure against decryption by an undesired interceptor of a
communication. In one embodiment of the invention, a symbol mapper included
in a transmitting communication device produces multiple symbols based on a
received bit stream and a symbol mapping scheme. A phase shifter included in the
transmitting communication device then shifts a phase of each symbol based on a
code word to produce an encrypted symbol, which code word may be generated by
a code word generator based on one or more encryption keys known to both the
transmitting and receiving communication devices. The encrypted symbols are
then transmitted via the air interface. In turn, the receiving communication device
decrypts received, encrypted symbols by shifting each received, encrypted symbol
by a phase corresponding to the phase used to encrypt the symbol, thereby
producing a decrypted symbol. An inverse symbol mapper then recovers the bits
corresponding to each decrypted symbol based on the symbol mapping scheme
used by the transmitting device symbol mapper.
While the present invention has been particularly shown and described with
reference to particular embodiments thereof, it will be understood by those skilled
in the art that various changes may be made and equivalents substituted for
elements thereof without departing from the scope of the invention as set forth in
the claims below. Furthermore, one of ordinary skill in the art realizes that the
components and operations of the transmitting communication device and
receiving communication device detailed herein are not intended to be exhaustive
but are merely provided to enhance an understanding and appreciation for the
inventive principles and advantages of the present invention, rather than to limit in
any manner the invention. Accordingly, the specification and figures are to be
regarded in an illustrative rather then a restrictive sense, and all such changes and
substitutions are intended to be included within the scope of the present invention.
Benefits, other advantages, and solutions to problems have been described
above with regard to specific embodiments. However, the benefits, advantages,
solutions to problems, and any element(s) that may cause any benefit, advantage,
or solution to occur or become more pronounced are not to be construed as a

critical, required, or essential feature or element of any or all the claims. As used
herein, the terms "comprises," "comprising," or any variation thereof, are intended
to cover a non-exclusive inclusion, such that a process, method, article, or
apparatus that comprises a list of elements does not include only those elements
but may include other elements not expressly listed or inherent to such process,
method, article, or apparatus. Furthermore, unless otherwise indicated herein, the
use of relational terms, if any, such as first and second, top and bottom, and the
like are used solely to distinguish one entity or action from another entity or action
without necessarily requiring or implying any actual such relationship or order
between such entities or actions.

WE CLAIM:
1. A method for encrypting a wireless transmission comprising:
receiving a plurality of symbols, wherein the plurality of symbols
comprises symbols associated with user data and symbols associated with pilot
data;
shifting a phase of each symbol of the plurality of symbols to produce a
plurality of phase shifted symbols, wherein shifting comprises shifting a phase of
each symbol that is associated with user data to produce a plurality of phase shifted
symbols and not shifting a phase of each symbol that is associated with pilot data
to produce a plurality of non-shifted symbols;
modulating each phase shifted symbol of the plurality of phase shifted
symbols with a first orthogonal subcarrier and modulating each non shifted symbol
of the plurality of non-shifted symbols with a second orthogonal subcarrier to
produce a plurality of modulated subcarriers; and
transmitting the plurality modulated subcarriers via a wireless link.
2. The method as claimed in claim 1, wherein the plurality of phase shifted
symbols comprises a stream of phase shifted symbols and wherein modulating
comprises:
assigning each phase shifted symbol of the plurality of phase shifted
symbols to a frequency sub-band of a plurality of frequency sub-bands; and
transforming each phase shifted symbol to a time domain subcarrier
associated with the phase shifted symbol's frequency sub-band to produce a
plurality of modulated time domain subcarriers.
3. The method as claimed in claim 2, wherein the plurality of modulated time
domain subcarriers are in a parallel form and wherein transmitting comprises:
converting the plurality of modulated subcarriers from a parallel form to a
serial form to produce an output signal; and
transmitting the output signal via a wireless link.

4. The method as claimed in claim 1, wherein shifting comprises:
assigning each user data symbol to a frequency sub-band of a plurality of
frequency sub-bands to produce a plurality of assigned symbols;
shifting a phase of each assigned user data symbol to produce a plurality of
phase shifted user data symbols; and
wherein modulating comprises transforming each phase shifted user data
symbol to a time domain subcarrier associated with the phase shifted user data
symbol's frequency sub-band to produce a plurality of modulated time domain
subcarriers.
5. The method as claimed in claim 1, wherein shifting a phase comprises
shifting a phase of each user data symbol based on a code word derived from at
least one of a session key and a mobile serial number.
6. The method as claimed in claim 5, wherein shifting a phase comprises:
generating a code word based on at least one of a session key and a mobile
serial number; and
for each user data symbol,
generating a sin a and a cos a, wherein a is derived from the code word;
and
shifting a phase of the symbol based on the sin a and the cos a to produce a
phase shifted user data symbol.
7. The method as claimed in claim 1, wherein shifting a phase comprises
shifting a phase of each user data symbol based on a code word of a plurality of
code words, and wherein the method comprises:
loading a buffer with a bit sequence based on at least one of the session key
and the mobile serial number;
reading a serial sequence out of the buffer;
exclusive or'ing the serial sequence with a different sequence to produce a
code word; and

multiplying the code word by each subcarrier index of a plurality of
subcarrier indices to produce the plurality of code words.
8. A method for receiving an encrypted wireless transmission comprising:
receiving a plurality of modulated subcarriers via a wireless link, wherein
the plurality of subcarriers are orthogonal and wherein a first modulated subcarrier
of the plurality of modulated subcarriers is associated with user data and a second
modulated subcarrier of the plurality of modulated subcarriers is associated with
user data;
demodulating the first modulated subcarrier to produce a plurality of
encrypted symbols and demodulating the second modulated subcarrier to produce
a plurality of non-encrypted symbols; and
decrypting the encrypted symbols by applying a phase shift to each
encrypted symbol of the plurality of encrypted symbols to produce a plurality of
decrypted symbols.
9. A communication device (202) comprising:
a signal processing unit (204) comprising:
a phase shifter (210, 600) adapted to receive a plurality of symbols and
applies a phase shift to each symbol of the plurality of symbols to produce a
plurality of phase shifted symbols, wherein the plurality of symbols comprises
symbols associated with user data and symbols associated with pilot data and
wherein shifting comprises shifting a phase of each symbol that is associated with
user data to produce a plurality of phase shifted symbols and not shifting a phase
of each symbol that is associated with pilot data to produce a plurality of non-
shifted symbols.;
an orthogonal modulator (214) adapted to receive the plurality of phase
shifted symbols, receives the plurality of non-shifted symbols associated with pilot
data, modulates each phase shifted symbol of the plurality of phase shifted
symbols with a first orthogonal subcarrier, and modulates each non-shifted symbol
of the plurality of non-shifted symbols with a second orthogonal subcarrier to
produce a plurality of modulated subcarrier; and

a transmitter section (230) coupled to the signal processing unit adapted to
transmit the plurality of modulated subcarrier via a wireless link.
10. The communication device as claimed in claim 9, wherein the plurality of
phase shifted symbols comprises a stream of phase shifted symbols and wherein
the orthogonal modulator comprises:
a serial-to-parallel converter (216) adapted to assign each phase shifted
symbol of the plurality of phase shifted symbols to a frequency sub-band of a
plurality of frequency sub-bands; and
a transformer (218) adapted to transform each phase shifted symbol to a
time domain subcarrier associated with the symbol's frequency sub-band to
produce a plurality of modulated time domain subcarriers, wherein the plurality of
modulated subcarriers are in a parallel form; and
a parallel-to-serial converter (220) that converts the plurality of modulated
subcarriers from a parallel form to a serial form to produce an output signal; and
wherein the transmitter section transmits the at least one modulated
subcarrier by transmitting the output signal via the wireless link.
11. The communication device as claimed in claim 9, comprising a code word
generator (212) coupled to the phase shifter adapted to generate a plurality of code
words based on at least one of a session key and a mobile serial number and
wherein the phase shifter shifts a phase of each user data symbol based on a code
word of the plurality of code words.
12. The communication device as claimed in claim 11, wherein the code word
generator comprises:
a buffer (414) adapted to store a bit sequence based on at least one of the
session key and the mobile serial number;
an Exclusive OR function (422) adapted to receive a serial sequence (418)
based on the bit sequence stored in the buffer and exclusive OR's the serial
sequence with a different sequence (420) to produce a code word (424); and

a multiplier (434) adapted to multiply the code word by each subcarrier
index (432) of a plurality of subcarrier indices to produce a plurality of code words
(436).
13. The communication device as claimed in claim 11, wherein the phase
shifter comprises:
a sine and cosine function generator, for each symbol of the plurality of
symbols, adapted to generate a sin a and a cos a, wherein a is derived from a code
word of the plurality of code words; and
a quadrature encryptor coupled to the sine and cosine function generator,
for each user data symbol, adapted to shift a phase of the user data symbol based
on the sin a and the cos a generated with respect to that symbol to produce a phase
shifted user data symbol.
14. A communication device (202) comprising:
a signal processing unit (204) having an orthogonal modulator that receives
a plurality of symbols, wherein the plurality of symbols comprises a plurality of
symbols associated with user data and a plurality of symbols associated with pilot
data and that comprises:
a serial-to-parallel converter (216) adapted to assign each symbol of the
plurality of symbols to a frequency sub-band of a plurality of frequency sub-bands
to produce a plurality of assigned symbols;
a phase shifter module (210, 600) adapted to produce a plurality of phase
shifted symbols, wherein the phase shifter module comprises a plurality of phase
shifters and wherein each phase shifter of the plurality of phase shifters receives an
assigned symbol of the plurality of assigned symbols associated with user data and
shifts a phase of the assigned symbol to produce a phase shifted symbol;
a transformer (218) adapted to receive the plurality of phase shifted
symbols that are associated with the user data, receives the plurality of assigned,
non-shifted symbols that are associated with pilot data, transforms each phase
shifted symbol to a time domain subcarrier associated with the symbol's frequency
sub-band to produce a plurality of modulated time domain subcarriers associated

with the user data, and transform each non-shifted symbol to a time domain
subcarrier associated with the symbol's frequency sub-band to produce a plurality
of modulated time domain subcarriers that are associated with pilot data;
a parallel-to-serial converter (220) adapted to convert the plurality of
modulated subcarriers produced by the transformer from a parallel form to a serial
form to produce an output signal; and
a transmitter section (230) coupled to the signal processing unit adapted to
transmit the plurality of phase shifted symbols via a wireless link.

Abstract

A Method For Encrypting A Wireless Transmission
And Communication Device
A communication device (202) converts a bit stream to multiple symbols and
provides encryption at a physical layer by shifting a phase of each symbol of the
multiple symbols to produce multiple encrypted symbols wherein shifting
comprises shifting a phase of each symbol that is associated with user data to
produce a plurality of phase shifted symbols and not shifting a phase of each
symbol that is associated with pilot data to produce a plurality of non-shifted
symbols. Each encrypted symbol of the multiple encrypted symbols is modulated
with an orthogonal subcarrier to produce at least one modulated subcarrier and the
at least one modulated subcarrier is then transmitted via a wireless link.

Documents:

http://ipindiaonline.gov.in/patentsearch/GrantedSearch/viewdoc.aspx?id=I4HOKHo3NluHu8Tj+j9YAw==&loc=wDBSZCsAt7zoiVrqcFJsRw==

« Previous Patent

Next Patent »

Patent Number

272703

Indian Patent Application Number

787/KOLNP/2007

PG Journal Number

17/2016

Publication Date

22-Apr-2016

Grant Date

21-Apr-2016

Date of Filing

05-Mar-2007

Name of Patentee

MOTOROLA MOBILITY LLC

Applicant Address

600 NORTH US HIGHWAY 45, LIBERTYVILLE, IL 60048, UNITED STATES OF AMERICA

Inventors:

#	Inventor's Name	Inventor's Address
1	CROCKER, RONALD T	3N800, MEADOWRIDGE CIRCLE, ST. CHARLES, ILLINOIS 60175
2	LUZ, YUDA Y	2211, AVALON DRIVE BUFFALO GROVE, ILLINOIS 60089
3	HARRIS, JOHN M.	2232, N. KENMORE AVENUE #1 CHICAGO, ILLINOIS 60614

PCT International Classification Number

H04B 1/69

PCT International Application Number

PCT/US2005/032541

PCT International Filing date

2005-09-12

PCT Conventions:

#	PCT Application Number	Date of Convention	Priority Country
1	11/209,058	2005-08-22	U.S.A.
2	60/612,596	2004-09-23	U.S.A.