Method for payload encryption of digital voice or data communications

A process for transmitting real-time end-to-end encrypted voice and/or data communications, between at least a first digital device and a second device, comprising:

• a network portal for registering at least the first digital device and the second device;
• for providing the first digital device and the second device with at least first and second keys;
• receiving at the portal a request from the first digital device to communicate with the second device;
• for receiving authorization from the second device to set up a secure session with the first digital device;
• receiving voice and/or data messages in real-time which have been encrypted from the first digital device and the second device;
• decrypting at the portal, the encrypted messages in real-time with the keys provided to the first digital device and the second device;
• re-encrypting at the portal, the received messages in real-time which were decrypted from the first digital device and the second device with the provided keys;
• sending the re-encrypted messages to the first digital device and the second device;
• wherein the first digital device and the second device are capable of securely communicating with each other in real-time by encrypting and decrypting the messages sent to and received from the portal;
• The portal re-encrypts encrypted messages in real-time which were decrypted by the portal via keys in order to determine a header so that the messages can continue to be forwarded to intended receiver in real-time;
• The Portal dynamically assigns separate keys to each end point—for use of symmetric encryption between the end point and Portal;
• The Portal re-encrypts and routes to a destination in real-time with destination's keys whereas the received message is decrypted using source's key;
• There are six functions to the portal;
• The portal:
• a. Authenticates users
• b. Authorizes users
• c. Dynamically exchanges encryption keys once users are authorized and authenticated that is transparent to the users
• d. The Portal hides an identity of the users header, meaning origin and destination address
• e. The Portal handles comprise user location, call setup and tear down
• f. The portal that is a proxy server, serves as a “middle man” into ensuring that users have the correct encryption keys in order to operate a voice and/or data encrypted session;
• wherein the overall design comprises:
• 1. The Proxy is already running ready to accept incoming registration requests or call request for clients;
• 2. A client registers:
• a. When a client registers there is a SSL (TLS1) channel that is opened using both a client side and server side certificate so that the client can authenticate the server and the server can authenticate the client which is based on standard PKI (Public Key Infrastructure) practice;
• b. Once the channel is established the client registers their ‘phone number’ with the server and the server gives the client a dynamically generated key through the SSL connection to be used in the voice encryption;
• 3. Other clients register:
• a. Client 1 wishes to talk to client 2;
• Client 1 requests the Proxy to setup a call with Client 2;
• b. The Proxy searches for Client 2 and notifies Client 2 of a call;
• If client 2 accepts, the proxy notifies both clients to start flowing voice traffic through the Proxy;
• Each client takes their PCM (16bit 8000 Hz, 1 channel) data and compresses the data;
• Then the compressed data is encrypted with the key that the server assigned and sends it to the server;
• The Server decrypts with one client's key, re-encrypts with the other client's key and sends to the other client.

A non-transitory computer readable medium, for storing a computer program for transmitting real-time end-to-end encrypted voice and data communications between at least a first digital device and a second device, comprising:

• a code segment for registering at least the first digital device and the second device in real-time at a portal on a network;
• a code segment for providing the first digital device and the second device with at least first and second keys;
• a code segment for receiving at the portal a request from the first digital device to communicate in real-time with the second device;
• a code segment for receiving authorization from the second device to set up a secure session with the first digital device;
• a code segment for receiving encrypted messages from the first digital device and the second device;
• a code segment for decrypting the encrypted messages with the keys provided to the first digital device and the second device;
• a code segment for re-encrypting the received messages from the first digital device and the second device with the provided keys;
• a code segment for sending the re-encrypted messages, which were decrypted, to the first digital device and the second device;
• wherein the first digital device and the second device are capable of securely communicating with each other in real-time by encrypting and decrypting the messages sent to and received from the portal;
• The portal re-encrypts encrypted messages which were decrypted by the portal via keys-in order to determine a header so that the messages can continue to be forwarded to intended receiver;
• The Portal dynamically assigns separate keys to each end point—for use of symmetric encryption between the end point and Portal;
• The Portal re-encrypts and routes to a destination with destination's keys whereas the received message is decrypted using source's key;
• There are six functions to the portal;
• The portal:
• a. Authenticates users
• b. Authorizes users
• c. Dynamically exchanges encryption keys once users are authorized and authenticated that is transparent to the users
• d. The Portal hides an identity of the users header, meaning origin and destination address
• e. The Portal handles comprise user location, call setup and tear down
• f. The portal that is a proxy server, serves as a “middle man” into ensuring that users have the correct encryption keys in order to operate a voice and/or data encrypted session;
• wherein the overall design comprises:
• 1. The Proxy is already running ready to accept incoming registration requests or call request for clients;
• 2. A client registers:
• a. When a client registers there is a SSL (TLS1) channel that is opened using both a client side and server side certificate so that the client can authenticate the server and the server can authenticate the client which is based on standard PKI (Public Key Infrastructure) practice;
• b. Once the channel is established the client registers their ‘phone number’ with the server and the server gives the client a dynamically generated key through the SSL connection to be used in the voice encryption;
• 3. Other clients register:
• a. Client 1 wishes to talk to client 2;
• Client 1 requests the Proxy to setup a call with Client 2;
• b. The Proxy searches for Client 2 and notifies Client 2 of a call;
• If client 2 accepts, the proxy notifies both clients to start flowing voice traffic through the Proxy;
• Each client takes their PCM (16bit 8000 Hz, 1 channel) data and compresses the data;
• Then the compressed data is encrypted with the key that the server assigned and sends it to the server;
• The Server decrypts with one client's key, re-encrypts with the other client's key and sends to the other client.

A digital device, with a software installed , for transmitting real-time end-to-end encrypted voice and data communications to a second device which also has a software installed , comprising:

• an input device with a software installed, for inputting either a voice or data signal;
• a processor, with a software upgrade installed, responsive to the input device, for registering the digital device with a software installed, at a portal on a network in real-time;
• receiving a key at the portal;
• providing the portal with a request to communicate with the second device with a software installed;
• transmitting encrypted messages to the portal using the key received at the portal;
• receiving encrypted messages at the portal;
• decrypting encrypted messages received at the portal with the key;
• an output device for outputting the decrypted messages received at the portal;
• wherein the digital device is capable of securely communicating with the second device in real-time by encrypting and decrypting the messages sent to and received at the portal;
• The portal re-encrypts encrypted messages which were decrypted at the portal via keys in order to determine a header so that the messages can continue to be forwarded to intended receiver;
• The Portal dynamically assigns separate keys to each end point—for use of symmetric encryption between the end point and Portal. The Portal re-encrypts and routes to a destination with destination's keys whereas the received message is decrypted using source's key;
• There are six functions to the portal;
• The portal:
• a. Authenticates users
• b. Authorizes users
• c. Dynamically exchanges encryption keys once users are authorized and authenticated that is transparent to the users
• d. The Portal hides an identity of the users header, meaning origin and destination address
• e. The Portal handles comprise user location, call setup and tear down
• f. The portal that is a proxy server, serves as a “middle man” into ensuring that users have the correct encryption keys in order to operate a voice and/or data encrypted session;
• wherein the overall design comprises:
• 1. The Proxy is already running ready to accept incoming registration requests or call request for clients;
• 2. A client registers:
• a. When a client registers there is a SSL (TLS1) channel that is opened using both a client side and server side certificate so that the client can authenticate the server and the server can authenticate the client which is based on standard PKI (Public Key Infrastructure) practice;
• b. Once the channel is established the client registers their ‘phone number’ with the server and the server gives the client a dynamically generated key through the SSL connection to be used in the voice encryption;
• 3. Other clients register:
• a. Client 1 wishes to talk to client 2;
• Client 1 requests the Proxy to setup a call with Client 2;
• b. The Proxy searches for Client 2 and notifies Client 2 of a call;
• If client 2 accepts, the proxy notifies both clients to start flowing voice traffic through the Proxy;
• Each client takes their PCM (16bit 8000 Hz, 1 channel) data and compresses the data;
• Then the compressed data is encrypted with the key that the server assigned and sends it to the server;
• The Server decrypts with one client's key, re-encrypts with the other client's key and sends to the other client.

A non-transitory computer readable medium, for storing a computer program for transmitting real-time end-to-end encrypted voice and data communications from a digital device, with a code segment/software installed to another device, also with a code segment/software installed, comprising:

• a code segment for inputting either a speech/voice or text/data signal to an input device;
• a code segment, responsive to the input device, for registering the digital device, with a code segment/software installed, at a portal on a network;
• receiving a key at the portal;
• providing the portal with a request to communicate with the second device in real-time, with a code segment/software installed;
• transmitting encrypted messages to the portal using the key received at the portal;
• receiving encrypted messages at the portal;
• decrypting encrypted messages received at the portal with the key;
• and
• a code segment for outputting the decrypted messages received at the portal to an output device;
• wherein the digital device is capable of securely communicating in real-time with the another device by encrypting and decrypting the messages sent to and received from the portal;
• The portal re-encrypts encrypted messages which were decrypted by the portal via keys in order to determine the header so that the messages can continue to be forwarded to intended receiver;
• The Portal dynamically assigns separate keys to each end point—for use of symmetric encryption between the end point and the Portal;
• The Portal re-encrypts and routes to a destination with destination's keys whereas the received message is decrypted using source's key;
• There are six functions to the portal;
• The portal:
• a. Authenticates users
• b. Authorizes users
• c. Dynamically exchanges encryption keys once users are authorized and authenticated that is transparent to the users
• d. The Portal hides an identity of the users header, meaning origin and destination address
• e. The Portal handles comprise user location, call setup and tear down
• f. The portal that is a proxy server, serves as a “middle man” into ensuring that users have the correct encryption keys in order to operate a voice and/or data encrypted session;
• wherein the overall design comprises:
• 1. The Proxy is already running ready to accept incoming registration requests or call request for clients;
• 2. A client registers:
• a. When a client registers there is a SSL (TLS1) channel that is opened using both a client side and server side certificate so that the client can authenticate the server and the server can authenticate the client which is based on standard PKI (Public Key Infrastructure) practice;
• b. Once the channel is established the client registers their ‘phone number’ with the server and the server gives the client a dynamically generated key through the SSL connection to be used in the voice encryption;
• 3. Other clients register:
• a. Client 1 wishes to talk to client 2;
• Client 1 requests the Proxy to setup a call with Client 2;
• b. The Proxy searches for Client 2 and notifies Client 2 of a call;
• If client 2 accepts, the proxy notifies both clients to start flowing voice traffic through the Proxy;
• Each client takes their PCM (16bit 8000 Hz, 1 channel) data and compresses the data Then the compressed data is encrypted with the key that the server assigned and sends it to the server;
• The Server decrypts with one client's key, re-encrypts with the other client's key and sends to the other client.