Method For Locking on to Encrypted Communication Connections in a Packet-Oriented Network
OwnerJens-Uwe Busser, Gerald Liebeinventors
Life of this patent
Estimating the term…
Abstract
There is described a method for locking on or legal interception of encrypted communication connections, preferably in a peer-to-peer network. If all users in a communication network have a digital certificate, a good authentication and an end-to-end encryption of communication data is possible. A modification of network elements is disclosed to nevertheless provide legal tapping from authorized positions. The above can be used on a special tapping mode, in which the keys for all incoming and outgoing messages are provided to an authorized control position.
Claims21
-14. (canceled)
A method for locking on to an encrypted communication connection, comprising:
- providing a packet-oriented communication system;
- using an end-to-end encryption for a communication between a first network element and a second network element;
- establishing a session key between the first network element and the second network element;
- encrypting a message content with the session key;
- encrypting the session key with a public key assigned to the second network element;
- creating a message comprising the encrypted message content and the encrypted session key;
- transmitting the message from the first network element to the second network element;
- switching to a tapping mode by the first network element based upon a prompting of a third network element;
- and
- encrypting the session key with a public key assigned to the third network element.
A network element, comprising:
- an encryption device for an end-to-end encryption;
- an establishing system to establish a session key for an encrypted communication with a further network element;
- a changing device to change the network element into a tapping mode;
- and
- an attaching device to attach an encryption of the session key with a public key assigned to a third network element.
A network element, comprising:
- an encrypted communication connection to a packet-oriented communication system;
- a session key for a communication between the network element and a second network element;
- a second public key assigned to the second network element;
- a third public key assigned to a third network element;
- and
- a message comprising an encrypted message content based on the session key, an encrypted session key based on the second public key, and an encrypted session key based on the third public key.
Dependencies are inferred from the claim text.