# US 2010/0166178 A1 · Method and system for securing packetized voice transmissions > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2010/0166178 A1 - Document ID: US20100166178A1 - Status: Published application - Kind: A1 - Application number: 12/542,127 - Filed: 2009-08-17 - Published: 2010-07-01 - Earliest claimed: 2008-12-31 - Assignees: Verizon Patent and Licensing Inc. - Inventors: David E. Berggren; Steven E. Belczyk - Web page: https://patentgrep.com/patent/US20100166178A1 ## CPC - H04L 9/065: {Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3} - H04L 9/14: using a plurality of keys or algorithms - H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)} - H04K 1/00: Secret communication - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 2209/26: Testing cryptographic entity, e.g. testing integrity of encryption key or encryption algorithm - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04K: SECRET COMMUNICATION; JAMMING OF COMMUNICATION ## Abstract An approach is provided for providing secure packetized voice transmissions. A public/private key pair is generated at a call device (or endpoint). An encrypted voice stream is received from another call device, where the encrypted voice stream was encrypted using a public key of the public/private key pair. This encrypted voice stream when received at the call device is decrypted using a private key of the public/private key pair. ## Claims ### Claim 1 A method comprising: generating, at a call device, a public/private key pair; receiving an encrypted voice stream from another call device, wherein the encrypted voice stream being encrypted using a public key of the public/private key pair; and decrypting, at the call device, the encrypted voice stream using a private key of the public/private key pair. ### Claim 2 (depends on 1) A method according to claim 1, further comprising: storing the private key of the public/private key pair at the call device. ### Claim 3 (depends on 1) A method according to claim 1, further comprising: providing the public key of the public/private key pair from the call device to the other call device. ### Claim 4 (depends on 3) A method according to claim 3, wherein providing the public key comprises: transmitting the public key from the call device to a public key warehouse, wherein the other call device can request the public key from the public key warehouse. ### Claim 5 (depends on 4) A method according to claim 4, wherein the private key does not become active until the public key is stored at the public key warehouse and tested. ### Claim 6 (depends on 1) A method according to claim 1, wherein the public/private key pair is generated using a key string entered into the call device by a user. ### Claim 7 (depends on 6) A method according to claim 6, wherein the public/private key pair is further generated using a password, and wherein the call device prompts the user for the password during initiation of a secured voice stream session with the other call device. ### Claim 8 (depends on 1) A method according to claim 1, wherein the public/private key pair expire after a predetermined period of time. ### Claim 9 An apparatus comprising: a public/private key generator configured to generate a public/private key pair; an endpoint configured to receive an encrypted voice stream from another endpoint, wherein the encrypted voice stream being encrypted using a public key of the public/private key pair; and a decrypter configured to decrypt the encrypted voice stream using a private key of the public/private key pair. ### Claim 10 (depends on 9) An apparatus according to claim 9, wherein the endpoint is configured to store the private key of the public/private key pair. ### Claim 11 (depends on 9) An apparatus according to claim 9, wherein the endpoint is configured to provide the public key of the public/private key pair to the other endpoint. ### Claim 12 (depends on 11) An apparatus according to claim 11, wherein the endpoint is configured to transmit the public key to a public key warehouse, wherein the other endpoint can request the public key from the public key warehouse. ### Claim 13 (depends on 12) An apparatus according to claim 12, wherein the private key does not become active until the public key is stored at the public key warehouse and tested. ### Claim 14 (depends on 9) An apparatus according to claim 9, wherein the public/private key generator is configured to generate the public/private key pair using a key string entered into the endpoint by a user. ### Claim 15 (depends on 14) An apparatus according to claim 14, wherein the public/private key generator is further configured to generate the public/private key pair using a password, and wherein the endpoint is configured to prompt the user for the password during initiation of a secured voice stream session with the other endpoint. ### Claim 16 A method comprising: receiving, a public key warehouse, a first request for a first public key from a first call device, wherein the first public key was generated as part of a first public/private key pair by the first call device; receiving, at the public key warehouse, a second request for a second public key from a second call device, wherein the first call device has initiated a secure telephony session with the second call device; and transmitting the second public key to the first call device and the first public key to the second call device for use in encrypting voice traffic associated with the secure telephony session. ### Claim 17 (depends on 16) A method according to claim 16, further comprising: storing, at the public key warehouse, the first public key of the first public/private key pair, wherein a first private key of the first public/private key pair does not become active until the first public key is stored at the public key warehouse and tested. ### Claim 18 (depends on 16) A method according to claim 16, further comprising: storing, at the public key warehouse, an expiration time of the public/private key pair. ### Claim 19 (depends on 16) A method according to claim 16, wherein the first and second public keys are assigned public key pointers for use in the retrieval of the first and second public keys, and wherein the public key pointers includes uniform resource identifiers (URIs) or uniform resource locators (URLs). ### Claim 20 (depends on 19) A method according to claim 19, wherein the first public key is tested by the first call device by downloading the public key using the URI from the public key warehouse and testing the downloaded public key with a newly generated private key.