Secure mobile telephony

A system for end to end encrypted mobile telephony, the system comprising:

• a tamper resistant and tamper evident integrated circuit adapted to be coupled to a commodity mobile phone, the integrated circuit comprising a cryptographic engine, a programmable processor, a first cryptographic key and a nonvolatile memory protected by the first cryptographic key;
• and
• software associated with the integrated circuit configured to be installed in the commodity mobile phone, the software, when installed in the commodity mobile phone, configured to operate in conjunction with the integrated circuit to, when the commodity mobile phone receives a call from a calling phone:
• send a signal to the calling phone indicating that the commodity mobile phone is capable of cooperating to provide an encrypted connection;
• authenticate itself to the calling phone;
• and
• establish an encrypted connection with the calling phone, whereby voice communications between the commodity mobile phone and the calling phone are encrypted end to end.

A method of establishing an encrypted end to end phone call from a commodity mobile phone provisioned with software and a detachable tamper resistant and tamper evident integrated circuit, the integrated circuit comprising a cryptographic engine, a programmable processor, a first cryptographic key and a nonvolatile memory protected by the first cryptographic key, the method comprising:

• receiving, in response to a connection placed from the commodity mobile phone to a destination phone, a signal from the destination phone, the signal indicating that the destination phone is capable of cooperating to provide an encrypted connection;
• authenticating, using the software and the integrated circuit, the destination phone;
• and
• establishing an encrypted connection with the destination phone, whereby voice communications between the commodity mobile phone and the destination phone are encrypted end to end.

A method of establishing an encrypted end to end phone call placed from a calling phone to a commodity mobile phone provisioned with software and a detachable tamper resistant and tamper evident integrated circuit, the integrated circuit comprising a cryptographic engine, a programmable processor, a first cryptographic key and a nonvolatile memory protected by the first cryptographic key, the method comprising:

• sending, by the commodity mobile phone and in response to a connection placed to the commodity mobile phone from the calling phone, a signal indicating that the commodity mobile phone is capable of cooperating to provide an encrypted connection;
• authenticating, using the software and the integrated circuit, the commodity mobile phone to the calling phone;
• and
• establishing an encrypted connection with the commodity mobile phone, whereby voice communications between the commodity mobile phone and the calling phone are encrypted end to end.

A system for end to end encrypted mobile telephony, the system comprising:

• a tamper resistant and tamper evident integrated circuit adapted to be coupled to a commodity mobile phone, the integrated circuit comprising a cryptographic engine, a programmable processor, a first cryptographic key and a nonvolatile memory, at least a portion of which is at least partially protected by the first cryptographic key;
• and
• software associated with the integrated circuit configured to be installed in the commodity mobile phone, the software, when installed in the commodity mobile phone, configured to operate in conjunction with the integrated circuit to, when a user of the commodity mobile phone initiates a connection to a destination phone using a connection technique of the commodity mobile phone:
• retrieve a record associated with the destination phone, the record reflecting that an encrypted connection may be established, the record being previously stored as a result of a prior connection between the commodity mobile phone and the destination phone;
• establish a connection to the destination phone;
• authenticate the destination phone;
• and
• provide end to end encrypted voice communications between the commodity mobile phone and the destination phone.

A method of establishing an encrypted end to end phone call from a commodity mobile phone provisioned with software and a detachable tamper resistant and tamper evident integrated circuit, the integrated circuit comprising a cryptographic engine, a programmable processor, a first cryptographic key and a nonvolatile memory protected by the first cryptographic key, the method comprising:

• retrieving, in response to a user of the commodity mobile phone initiating a connection to a destination phone using a connection technique of the commodity mobile phone, a record associated with the destination phone, the record reflecting that an encrypted connection may be established, the record being previously stored as a result of a prior connection between the commodity mobile phone and the destination phone;
• establishing a connection to the destination phone;
• authenticating the destination phone;
• and
• providing end to end encrypted voice communications between the commodity mobile phone and the destination phone.

A non-transitory computer readable medium containing instructions adapted to be installed in a commodity mobile phone provisioned with a detachable tamper resistant and tamper evident integrated circuit, wherein the integrated circuit comprises a cryptographic engine, a programmable processor, a first cryptographic key and a nonvolatile memory protected by the first cryptographic key, the instructions adapted to cause the commodity mobile phone to:

• retrieve, in response to a user of the commodity mobile phone initiating a connection to a destination phone using a connection technique of the commodity mobile phone, a record associated with the destination phone, the record reflecting that an encrypted connection may be established, the record being previously stored as a result of a prior connection between the commodity mobile phone and the destination phone;
• establish a connection to the destination phone;
• authenticate the destination phone;
• and
• provide end to end encrypted voice communications between the commodity mobile phone and the destination phone.