Real time switching from unsecured to secured signaling channel
AssigneeAvaya Management L.P.
InventorAnanda H P
Life of this patent
Estimating the term…
Abstract
Calls that can be secure (e.g., are conducted with end-to-end encryption) may originate with some or all of the call being unsecured. Then, upon a triggering event such as a user deciding that sensitive information will be discussed or a “sniffer” determining that the call is being monitored by a spoofed endpoint, triggers a transition of the call from an unsecure connection to a secure connection without terminating and reestablishing the call. Accordingly, an unsecure call, such as one utilizing Transmission Control Protocol (TCP) signaling and Real-Time Transport Protocol (RTP) and transitioned to Transport Layer Security (TLS) and Secure RTP (SRTP) to allow a previously unsecured call to become secured with end-to-end encryption.
Claims20
A method for securing an ongoing unsecured call, comprising:
- establishing a call via a network between a first endpoint and second endpoint, the call comprising a signaling path and a first data channel, wherein the signaling path comprises at least a portion not secured by end-to-end encryption;
- receiving a signal at the first endpoint to secure the call;
- in response to the signal, sending a first Session Initiation Protocol (SIP) message to the second endpoint;
- receiving, in response to the first SIP message, a second SIP message accepting the first SIP message;
- and
- in response to the second SIP message, transitioning the call from the first data channel to a second data channel, wherein the second data channel utilizes end-to-end encryption between the first endpoint and the second endpoint.
A system for securing an ongoing unsecured call, comprising:
- a first endpoint comprising a processor and a first network interface to a network;
- a second endpoint comprising a processor and a second network interface to the network, wherein the first endpoint and the second endpoint are engaged in a call, via the network, the call comprising a signaling path and a first data channel, wherein the signaling path comprises at least a portion not secured by end-to-end encryption, and wherein the call is initially established without end-to-end encryption;
- wherein one of the first endpoint or the second endpoint receives a signal to secure the call;
- wherein, in response to the signal, sending, by the one of the first endpoint or the second endpoint that received the signal, a first Session Initiation Protocol (SIP) message to one other of the first endpoint or the second endpoint;
- receiving, in response to the first SIP message, a second SIP message accepting the first SIP message;
- and
- in response to the second SIP message, transitioning the call from the first data channel to a second data channel, wherein the second data channel utilizes end-to-end encryption between the first endpoint and the second endpoint.
A communications endpoint, comprising:
- a processor comprising instructions maintained in a non-transitory memory;
- a network interface to a network for communicating thereon;
- and
- wherein the processor:
- receives a signal to secure a call, via the network, the call comprising a signaling path and a first data channel, wherein the signaling path comprises at least a portion not secured by end-to-end encryption, wherein the call comprises an exchange of data packets with a second endpoint, and wherein the call is absent end-to-end encryption;
- sends, in response to the signal, a first Session Initiation Protocol (SIP) message to the second endpoint;
- receives, in response to the first SIP message, a second SIP message accepting the first SIP message;
- and
- in response to the second SIP message, transitions the call from the first data channel to a second data channel, wherein the second data channel utilizes end-to-end encryption between a first endpoint and the second endpoint.
Dependencies are inferred from the claim text.