Method for securing an interceptible call end-to-end
AssigneeBull SAS
InventorAlexandre Marchese-Ribeaux
Life of this patent
Estimating the term…
Abstract
In order to secure interceptible calls end-to-end, an intermediate MIKEY server is used to allow an intermediate SIP server to communicate with a key-management server. The intermediate SIP server intercepts call elements when a call is initialized among a plurality of terminal devices. The intermediate SIP server supplies these intercepted elements to the intermediate MIKEY server, which then establishes a dialogue with the key-management server on the basis of these elements. The result of this dialogue is sent back to the intermediate SIP server, which records same as call metadata allowing direct or deferred use of the call content.
Claims4
A process for end-to-end securing of an interceptible communication between at least a first terminal device and a second terminal device, the process comprising:
- establishing the interceptible communication via a first intermediate server, which communicates using a session initiation protocol making it possible to exchange session keys, each terminal device of said at least the first terminal device and said second terminal device using a session key to encrypt communication data said each terminal device is transmitting,
- distributing the session keys by a key management server which communicates using a key management protocol,
- receiving an invitation message by the first intermediate server, transmitted by the first terminal device, according to the session initiation protocol, the invitation message inviting the second terminal device and comprising a ticket according to the key management protocol,
- receiving, by the first intermediate server, a message of acceptance of the invitation message comprising a result of processing of the ticket by the second terminal device,
- before transmitting the invitation message to the second terminal device, saving, by the first intermediate server, of the ticket received via the invitation message,
- before transmitting the message of acceptance to the first terminal device,
- producing, by the first intermediate server, a ticket decode request message comprising
- the ticket that is saved,
- result of processing of the ticket that is saved,
- transmitting, by the first intermediate server, the ticket decode request message bound for a second intermediate server, such that the second intermediate server receives the ticket decode request message,
- wherein the second intermediate server is between the first intermediate server and the key management server, and
- wherein the key management server comprises a communication interface, such that the communication interface connects the key management server to a public network,
- receiving, by the first intermediate server, a decode response comprising at least the session keys of the interceptible communication being established,
- storing, by the first intermediate server, the session keys by associating the session keys with communication metadata.
Dependencies are inferred from the claim text.