Security Solution For Voice Over LTE Via GAN (VoLGA)

A Voice over Long-Term Evolution via Generic Access (VoLGA) Access Network Controller (VANC) adapted to provide security to VoLGA traffic with a User Equipment (UE) where the VANC is also in communication with a 3rd Generation Partnership Project (3GPP) circuit switched node, the VANC comprising:

• a processor;
• and
• a memory adapted to store processor-executable instructions where the processor is adapted to interface with the memory and execute the processor-executable instructions to:
• participate with the UE to establish therewith an unprotected Transmission Control Protocol (TCP) connection;
• calculate a pre-shared key using a key that was received during an authentication of the UE by the 3GPP circuit switched node using the unprotected TCP connection, where the UE also has the pre-shared key;
• and
• participate with the UE to establish therewith a Transport Layer Security (TLS) connection using the pre-shared key, where the TLS connection provides security to the VoLGA traffic associated with the UE.

A method implemented by a User Equipment (UE) for providing security for Voice over Long-Term Evolution via Generic Access (VoLGA), traffic with a VoLGA Access Network Controller (VANC) that is also in communication with a 3rd Generation Partnership Project (3GPP) circuit switched node, the method comprising the steps of:

• establishing an unprotected Transmission Control Protocol (TCP) connection with the VANC;
• calculating a pre-shared key using a key that was derived during an authentication with the 3GPP circuit switched node using the unprotected TCP connection, where the VANC also has the pre-shared key;
• and
• establishing a Transport Layer Security (TLS) connection with the VANC using the pre-shared key, where the TLS connection provides security to the VoLGA traffic associated with the VANC.

A User Equipment (UE), adapted to provide security for Voice over Long-Term Evolution via Generic Access (VoLGA) traffic with a VoLGA Access Network Controller (VANC) that is also in communication with a 3rd Generation Partnership Project (3GPP) circuit switched node, the UE comprising:

• a processor;
• and
• a memory adapted to store processor-executable instructions where the processor is adapted to interface with the memory and execute the processor-executable instructions to:
• establish an unprotected Transmission Control Protocol (TCP) connection with the VANC;
• calculate a pre-shared key using a key that was derived during an authentication with the 3GPP circuit switched node using the unprotected TCP connection, where the VANC also has the pre-shared key;
• and
• establish a Transport Layer Security (TLS) connection with the VANC using the pre-shared key, where the TLS connection provides security to the VoLGA traffic associated with the VANC.