CN108271132B

CN108271132B - Voice encryption telephone calling method

Info

Publication number: CN108271132B
Application number: CN201611261223.9A
Authority: CN
Inventors: 韩东林; 王彦明
Original assignee: China Mobile Communications Group Co Ltd; China Mobile Group Ningxia Co Ltd
Current assignee: China Mobile Communications Group Co Ltd; China Mobile Group Ningxia Co Ltd
Priority date: 2016-12-30
Filing date: 2016-12-30
Publication date: 2021-05-04
Anticipated expiration: 2036-12-30
Also published as: CN108271132A

Abstract

The invention provides a voice encryption telephone calling method and a voice encryption telephone calling system, which are used for completing voice encryption telephone calling indication on a signaling plane and unifying 3G and 4G encryption telephone calling flows by a calling processing method for carrying out key negotiation on a media plane. The method and the device can realize that the 4G encryption terminal dials the encrypted voice telephone to the 3G encryption terminal, meet the requirement that a 4G encryption telephone user dials the encrypted telephone to a 3G encryption telephone user, and improve user experience.

Description

Voice encryption telephone calling method

Technical Field

The invention relates to the technical field of information security of mobile communication systems, in particular to a voice encryption telephone calling method.

Background

At present, in order to improve the security of voice telephone of users and ensure that the content of the call between the calling and called users is not intercepted by attackers, traditional telecom operators and many communication and internet companies provide voice encryption telephones. The end-to-end voice encryption telephone is a technology for encrypting and decrypting voice, and can realize the encryption transmission of voice signals in an air interface and a core network, thereby increasing the security of voice communication of a user.

On the basis of the traditional voice telephone, the voice encryption telephone acquires a session key through negotiation between a calling terminal and a called terminal by a key negotiation technology, and performs end-to-end whole-course encryption on the conversation content by using the negotiated session key. The session key is disposable, and after the conversation is finished, the session key is deleted immediately. The voice encryption telephone is carried out between the two encryption mobile phones, and the encryption mobile phone and the common non-encryption mobile phone cannot communicate with each other.

In recent years, circuit domain voice encryption telephones based on a 3G network and voice encryption telephones based on a 4G network are introduced by domestic operators. The voice encryption telephone can be carried out between two 3G encryption terminals or two 4G encryption terminals, and cannot be carried out between a 3G circuit domain encryption terminal and a 4G encryption terminal.

Disclosure of Invention

The present invention overcomes or at least partially solves the above-identified problems by providing a voice encrypted telephone call method and system.

According to an aspect of the present invention, there is provided a voice encryption phone call method, including:

step 1, receiving encrypted call request information of a 4G call terminal, mapping the call request information into initial address request information, adding a first encryption indicating bit in the initial address request information, and sending the initial address request information to a 3G called terminal;

step 2, the 3G called terminal confirms that the called terminal supports encrypted calling, adds a second encryption indicating bit in the address full information and sends the address full information to the 4G calling terminal;

step 3, the 4G calling terminal confirms that the 3G called terminal supports encrypted calling based on the second encryption indicating bit; and the 4G calling terminal and the 3G called terminal carry out encrypted conversation.

The application provides a voice encryption telephone calling method, which is a call processing method for completing voice encryption telephone calling indication on a signaling plane and performing key negotiation on a media plane to unify 3G and 4G encryption telephone calling flows. The method and the device can realize that the 4G encryption terminal dials the encrypted voice telephone to the 3G encryption terminal, meet the requirement that a 4G encryption telephone user dials the encrypted telephone to a 3G encryption telephone user, and improve user experience.

Drawings

Fig. 1 is a schematic overall flow chart of a voice encryption telephone call method according to an embodiment of the present invention;

fig. 2 is a flow chart illustrating a method for a voice encrypted telephone call according to an embodiment of the present invention.

Detailed Description

The following detailed description of embodiments of the present invention is provided in connection with the accompanying drawings and examples. The following examples are intended to illustrate the invention but are not intended to limit the scope of the invention.

In order to improve the security of voice telephone of users and ensure that the contents of the call between the calling and called users are not intercepted by attackers, traditional telecom operators and many communication and internet companies have introduced voice encryption telephones. The end-to-end voice encryption telephone is a technology for encrypting and decrypting voice, and can realize the encryption transmission of voice signals in an air interface and a core network, thereby increasing the security of voice communication of a user.

The 3G circuit domain voice encryption telephone is a voice encryption telephone based on a 3G CDMA network. The calling party initiates an encrypted call to the called party, and the telephone is connected through the network in a common plaintext telephone mode to call to the called party. After the called party answers, the calling and called encryption terminals firstly establish a plaintext voice channel on the media surface, indicate the call as an encrypted call through the channel, and then negotiate a session key for the call. After the key agreement is successful, the user can start the encrypted call.

In the system, the encrypted call indication is transmitted through a media plane, and the key agreement is realized through the media plane.

The 4G voice encryption telephone is a voice encryption telephone based on a 4G VoLTE network. The calling party initiates an encrypted call to the called party, and the telephone is connected through the network in an encrypted telephone mode and calls the called party. After the called user answers, the encryption terminal of the calling and the called establishes a plaintext voice channel on the media surface, and then starts the session key negotiation directly through the channel. After the key agreement is successful, the user can start the encrypted call.

Unlike 3G circuit domain voice encryption telephones, the encrypted call indication of 4G voice encryption telephones is transmitted through a signaling plane, and the key agreement is realized through a media plane.

In order to realize 4G to 3G voice encryption telephone calls, the patent proposes a call processing method for completing voice encryption telephone call indication on a signaling plane and performing key negotiation on a media plane to unify 3G and 4G encryption telephone call flows. This puts new processing requirements on the network equipment, protocols and terminals of the encrypted telephone system, including the following:

1. when the core network MGCF network element maps the IMS SIP message and the No. 7 signaling, the mapping of the voice encryption telephone indication information can be completed.

2. The user part of the signaling message No. 7 needs to add a new bit indicator bit for indicating the encrypted call to the opposite end.

3. The 3G encryption terminal should support processing of improved signaling No. 7 (IAM and ACM), and be able to receive and respond to the encrypted phone indication information in the signaling plane.

4. The 4G encryption terminal should support processing the improved 180Ring message, and determine the state of the 3G encryption terminal according to the encryption call indication information therein.

Referring to fig. 1, in an embodiment of the present invention, an overall flow diagram of a voice encrypted telephone call method is shown. In general, the method comprises the following steps: step 1, receiving encrypted call request information of a 4G call terminal, mapping the call request information into initial address request information, adding a first encryption indicating bit in the initial address request information, and sending the initial address request information to a 3G called terminal; step 2, the 3G called terminal confirms that the called terminal supports encrypted calling, adds a second encryption indicating bit in the address full information and sends the address full information to the 4G calling terminal; step 3, the 4G calling terminal confirms that the 3G called terminal supports encrypted calling based on the second encryption indicating bit; and the 4G calling terminal and the 3G called terminal carry out encrypted conversation.

In another embodiment of the present invention, a voice encrypted telephone calling method further includes, before step 1:

s01, the 4G calling terminal sends the encrypted calling request information to the 4G VoLTE IMS core network.

In another embodiment of the present invention, a voice encrypted telephone calling method further includes, after S01:

s02, the proxy call session control module applies for the encrypted call request for conversation resources and sends the encrypted call request to the call session control module;

and S03, the call session control module confirms that the ENUM or DNS does not acquire the called address, and sends the encrypted call request to the media gateway control module through the exit gateway control module.

In another embodiment of the present invention, a method for calling a voice encrypted phone, where sending the initial address request message to a 3G called terminal in step 1 further includes: and sending the initial address request information to the 3G called terminal through a gateway mobile switching center and a visited mobile wireless office.

In another embodiment of the present invention, a voice encrypted telephone calling method further includes, after step 2: the 4G calling terminal and the media gateway control module perform resource reservation; and the media gateway control module sends a resource reservation completion message to the 3G called terminal.

In another embodiment of the present invention, a method for calling a voice encrypted phone, where sending the address complete information to the 4G calling terminal in step 2 further includes: sending the address full information to a media gateway control function module; and the media gateway control function module maps the address full information into 180Ring information and sends the 180Ring information to the 4G calling terminal.

In another embodiment of the present invention, a voice encryption telephone calling method, the step 3 of performing encryption communication between a 4G calling terminal and a 3G called terminal further includes: establishing a media channel between the 4G calling terminal and the 3G called terminal; the 4G calling terminal and the 3G called terminal exchange respective secret keys by using the media channel, and encrypt and decrypt conversation voice contents by using the secret keys; and the 4G calling terminal and the 3G called terminal carry out encrypted communication.

In another embodiment of the present invention, a method for voice encrypted telephone call, where the step 4G of reserving resources between the calling terminal and the media gateway control module further includes:

the media gateway control module returns a 183Session Progress message to the 4G calling terminal to perform media negotiation and resource reservation;

the 4G calling terminal performs media negotiation and resource reservation with the media gateway control module through PRACK or UPDATE;

and the media gateway control module receives the PRACK or UPDATE message, sends a 200OK confirmation message to the 4G calling terminal and sends a COT conduction detection message to the 3G called terminal.

In another embodiment of the present invention, a voice encryption telephone calling method, the step of establishing a media channel between the 4G calling terminal and the 3G called terminal further includes:

after the 3G called terminal is off-hook, the 3G called terminal sends a answering response message to the 4G calling terminal to prepare for establishing a media plane channel; the answering response message is mapped into a 200OK confirmation message by the media gateway control function module and is sent to the 4G calling terminal;

and after receiving the 200OK confirmation message, the 4G calling terminal sends a confirmation character to the media gateway control function module for confirmation.

Referring to fig. 2, in yet another embodiment of the present invention, a voice encrypted telephone call method is shown, comprising the following steps.

When the 4G calling encryption terminal UE A dials a voice encryption telephone to the 3G encryption terminal UE B, the INVITE message sent by the UE A to the 4G VoLTE IMS core network carries encryption telephone indication information to indicate that the call is an encryption call.

The calling SBC/P-CSCF (proxy call session control function) applies for the UE A for the call resources, and after the application is finished, the call request of the UE A is forwarded to the calling S-CSCF ().

After calling S-CSCF inquires ENUM/DNS to obtain called address, it sends INVITE message to BGCF (exit gateway control function), and then BGCF sends call to MGCF (media gateway control function).

The MGCF of the calling party maps the INVITE message to an IAM (initial address request message) message and then sends it to the called terminal UE B. Here, MGCF needs to add a new bit indicator to the user part of IAM message to indicate the current call to UE B as an encrypted call. The IAM message is forwarded to UE B via GMSC (gateway mobile switching center), VMSC (visited mobile radio office).

The calling MGCF returns 183Session Progress message to UE A for media negotiation and resource reservation.

Calling UE A carries out media negotiation and resource reservation with MGCF through PRACK or UPDATE. MGCF receives PRACK or UPDATE message sent by UE A, and sends 200OK confirmation message to UE A. And simultaneously, the MGCF sends a COT conduction detection message to the UE B to inform the called side terminal that the resources of the calling side are reserved, and the next operation can be carried out.

After receiving the COT message, the called terminal UE B rings to the user, and simultaneously returns the ACM ringing message to the UE A. Under the condition of supporting the voice encryption telephone call, the UE B needs to add a new bit indicator bit in the user part of the ACM message to indicate to the UE a that the UE B supports the voice encryption call.

Upon receiving the ACM message, the calling MGCF (media gateway control function) maps the ACM message to a 180Ring message. When the indication bit in the ACM message is used to determine that the call is a voice encrypted telephone call, the MGCF needs to add encrypted telephone indication information to the 180Ring message, and then sends the encrypted telephone indication information to the UE a.

After receiving the 180Ring message, UE A judges that UE B supports the voice encryption telephone call through the encryption telephone indication information carried in the message, UE A plays a Ring back tone to the user, and continues to carry out voice encryption telephone call connection.

After the called user picks up the phone, UE B sends ANM answering information to UE A to prepare for establishing a media plane channel. The ANM message is mapped by the MGCF of the calling party to a 200OK acknowledgement message and sent to UE a.

After receiving the 200OK acknowledgement message, UE a sends an ACK message to MGCF for acknowledgement.

A media channel between UE a and UE B is already established. By using the channel, UE A and UE B exchange respective keys, and encrypt and decrypt the voice telephone content of the user by using the keys.

And the 4G calling subscriber and the 3G called subscriber start encrypted conversation.

Finally, the method of the present application is only a preferred embodiment and is not intended to limit the scope of the present invention. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A voice encrypted telephone call method, comprising:

step 1, a 4G VoLTE IMS core network receives encrypted call request information of a 4G call terminal, a media gateway control module of a calling party maps the call request information into initial address request information, a first encryption indicating bit is added in the initial address request information, and the initial address request information is sent to a 3G called terminal;

step 2, the 3G called terminal confirms that the called terminal supports encrypted calling, adds a second encryption indicating bit in the address full information, and sends the address full information to the 4G calling terminal after mapping to 180Ring through the media gateway control module;

step 3, the 4G calling terminal confirms that the 3G called terminal supports encrypted calling based on the second encryption indicating bit; and the 4G calling terminal and the 3G called terminal carry out encrypted communication.

2. The method of claim 1, wherein step 1 is preceded by:

3. The method of claim 2, further comprising, after S01 and before step 1:

and S03, the call session control module confirms that the telephone number mapping ENUM or the domain name system DNS does not acquire the called address, and sends the encrypted call request to the media gateway control module through the exit gateway control module.

4. The method of claim 1, wherein the step 1 of sending the initial address request message to the 3G called terminal further comprises: and the media gateway control module sends the initial address request information to the 3G called terminal through a gateway mobile switching center and a visited mobile wireless office.

5. The method of claim 1, further comprising, after step 1 and before step 2: the 4G calling terminal and the media gateway control module perform resource reservation; and the media gateway control module sends a resource reservation completion message to the 3G called terminal.

6. The method of claim 1, wherein the step 2 of transmitting the address complete information to the 4G call terminal further comprises: sending the address full information to the media gateway control function module; and the media gateway control function module maps the address full information into the 180Ring information and sends the 180Ring information to the 4G calling terminal.

7. The method of claim 1, wherein the step 3 of the 4G calling terminal making encrypted call with the 3G called terminal further comprises: establishing a media channel between the 4G calling terminal and the 3G called terminal; the 4G calling terminal and the 3G called terminal exchange respective keys by using the media channel, and encrypt and decrypt conversation voice contents by using the keys; and the 4G calling terminal and the 3G called terminal carry out encrypted communication.

8. The method of claim 5, wherein said step 4G of the calling terminal reserving resources with the media gateway control module further comprises:

the 4G calling terminal performs the media negotiation and the resource reservation with the media gateway control module through PRACK or UPDATE;

9. The method of claim 7, wherein the step of establishing a media channel between the 4G calling terminal and the 3G called terminal further comprises: