# US 2010/0167692 A1 · Methods, systems, and apparatus for handling secure-voice-communication sessions > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2010/0167692 A1 - Document ID: US20100167692A1 - Status: Published application - Kind: A1 - Application number: 12/347,768 - Filed: 2008-12-31 - Published: 2010-07-01 - Earliest claimed: 2008-12-31 - Assignees: Verizon Corporate Resources Group LLC - Inventors: Thomas W. Haynes; Steven R. Rados - Web page: https://patentgrep.com/patent/US20100167692A1 ## CPC - H04M 1/68: Circuit arrangements for preventing eavesdropping - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 65/1063: Application servers providing network services (systems providing special services to telephonic subscribers H04M3/42) - H04L 65/1069: Session establishment or de-establishment - H04L 65/1079: {of unsolicited session attempts, e.g. SPIT} - H04M 3/205: {Eavesdropping prevention - indication of insecurity of line or network} - H04M 2201/14: Delay circuits; Timers - H04M 2203/609: Secret communication - H04M 2203/652: Call initiation triggered by text message - H04M: TELEPHONIC COMMUNICATION (circuits for controlling other apparatus via a telephone cable and not involving telephone switching apparatus G08) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An exemplary computing system may receive a first request from a first voice-communication device to establish a secure-voice-communication session with a second voice-communication device. The computing system may also receive a second request from the second voice-communication device to establish the secure-voice-communication session with the first voice-communication device. The computing system may establish the secure-voice-communication session between the first and second voice-communication devices. Corresponding methods, apparatus, and computer-readable media are also disclosed. ## Claims ### Claim 1 A method comprising: receiving, from a first voice-communication device, a first request to establish a secure-voice-communication session with a second voice-communication device; receiving, from the second voice-communication device, a second request to establish the secure-voice-communication session with the first voice-communication device; and establishing the secure-voice-communication session between the first and second voice-communication devices. ### Claim 2 (depends on 1) The method of claim 1, further comprising: holding the first request until the second request is received; and after receiving the second request, determining that the second request is associated with the first request. ### Claim 3 (depends on 1) The method of claim 1, further comprising: using a base network to handle at least one call-management task associated with the secure-voice-communication session, wherein unsecured-voice-communication sessions with the first voice-communication device are handled by the base network. ### Claim 4 (depends on 3) The method of claim 3, wherein using the base network to handle at least one call-management task associated with the secure-voice-communication session comprises using the base network to handle at least one setup task for the secure-voice-communication session. ### Claim 5 (depends on 4) The method of claim 4, wherein using the base network to handle at least one setup task comprises using the base network to prompt the second voice-communication device to send the second request. ### Claim 6 (depends on 5) The method of claim 5, wherein using the base network to prompt the second voice-communication device to send the second request comprises sending a text message to the second voice-communication device over the base network. ### Claim 7 (depends on 5) The method of claim 5, wherein using the base network to prompt the second voice-communication device to send the second request comprises calling the second voice-communication device over the base network. ### Claim 8 (depends on 4) The method of claim 4, wherein using the base network to handle at least one setup task comprises using the base network to handle at least one communication in a registration process for the first voice-communication device. ### Claim 9 (depends on 3) The method of claim 3, wherein: the base network comprises a wireless network; and using the base network to handle at least one call-management task comprises relying on the wireless network to handle at least one mobility-management task. ### Claim 10 (depends on 3) The method of claim 3, wherein using the base network to handle at least one call-management task comprises relying on the base network to manage presence information associated with the secure-voice-communication session. ### Claim 11 (depends on 1) The method of claim 1, wherein establishing the secure-voice-communication session between the first and second voice-communication devices comprises: authenticating the first voice-communication device; authenticating the second voice-communication device; requesting that a secure-media subsystem provision resources for the secure-voice-communication session; receiving, from the secure-media subsystem, connection information for the secure-voice-communication session; and sending security information and the connection information to the first and second voice-communication devices. ### Claim 12 (depends on 1) The method of claim 1, further comprising terminating an unsecured-voice-communication session in response to the first request, wherein terminating the unsecured-voice-communication session and establishing the secure-voice-communication session are performed in a manner that is transparent to a user of the first voice-communication device. ### Claim 13 (depends on 1) The method of claim 1, wherein the base network comprises a circuit-switched communication network. ### Claim 14 (depends on 1) The method of claim 1, tangibly embodied as computer-executable instructions on at least one computer-readable medium. ### Claim 15 A method comprising: establishing an unsecured-voice-communication session over a base network; during the unsecured-voice-communication session, receiving input that initiates a secure-voice-communication session; terminating the unsecured-voice-communication session; using the base network to handle at least one call-management task associated with the secure-voice-communication session; and connecting to the secure-voice-communication session. ### Claim 16 (depends on 15) The method of claim 15, wherein using the base network to handle at least one call-management task comprises using the base network to send a secure-application subsystem a first request to establish the secure-voice-communication session. ### Claim 17 (depends on 16) The method of claim 16, wherein the first request indicates that a second voice-communication device should be prompted to send the secure-application subsystem a second request to establish the voice-communication session with a first voice-communication device. ### Claim 18 (depends on 15) The method of claim 15, wherein using the base network to handle at least one call-management task comprises using the base network to handle at least one of: a mobility-management task; a presence-management task; a setup task; and a call-control task. ### Claim 19 A system comprising: a secure-session-setup module installed on a secure-application subsystem and programmed to: receive, from a first voice-communication device, a first request to establish a secure-voice-communication session with a second voice-communication device; receive, from a second voice-communication device, a second request to establish the secure-voice-communication session with the first voice-communication device; and establish the secure-voice-communication session between the first and second voice-communication devices. ### Claim 20 (depends on 19) The system of claim 19, further comprising: a first secure-communication module installed on the first voice-communication device and programmed to send the first request to the secure-application subsystem. ### Claim 21 (depends on 20) The system of claim 20, wherein the first request comprises a request to prompt the second voice-communication device to send the second request to the secure-application subsystem. ### Claim 22 (depends on 21) The system of claim 21, further comprising: a second secure-communication module installed on the second voice-communication device; wherein: the secure-session-setup module is programmed to use a base network to send a communication to the second secure-communication module to prompt the second secure-communication module to send the second request; and the second secure-communication module is programmed to respond to the communication by sending the second request to the secure-session-setup module. ### Claim 23 (depends on 19) The system of claim 19, further comprising: a secure-media subsystem communicatively coupled to the secure-session-setup module; wherein: the secure-session-setup module is programmed to send the secure-media subsystem a request to provision resources for the secure-voice-communication session; the secure-media subsystem is programmed to respond to the request to provision resources by sending Internet Protocol addresses and ports for the secure-voice-communication session to the secure-session-setup module; the secure-session-setup module is programmed to send the Internet Protocol addresses and ports for the secure-voice-communication session to the first and second voice-communication devices; the secure-session-setup module is programmed to create a session key and to send the session key to the first and second voice-communication devices; and the second voice-communication device is programmed to communicate with the first voice-communication device through the secure-media subsystem. ### Claim 24 (depends on 23) The system of claim 23, wherein the first voice-communication device is programmed to: communicate with the second voice-communication device using a secure transport protocol; receive encrypted voice data from the second voice-communication device; and decrypt the encrypted voice data. ### Claim 25 (depends on 19) The system of claim 19, wherein: the first voice-communication device is configured to use a base network to handle at least one call-management task associated with the secure-voice-communication session; and unsecured-voice-communication sessions with the first voice-communication device are handled by the base network.