WO2015030696A1

WO2015030696A1 - Method for transmitting information from one autonomous mobile communication terminal to another

Info

Publication number: WO2015030696A1
Application number: PCT/UA2014/000032
Authority: WO
Inventors: Петр Олегович СИДОР
Original assignee: Sydor Petro Olegovich
Priority date: 2013-09-02
Filing date: 2014-03-17
Publication date: 2015-03-05
Also published as: UA109180C2

Abstract

The invention relates to means for securely transmitting data in mobile communication networks. Claimed is a method for transmitting voice and other information from one autonomous mobile communication terminal to another with the subsequent establishment of a crypto-secure channel, including initiating a connection from an original terminal, transmitting accessible or necessary services, and transmitting data between subscribers by means of said services, wherein the connection is initiated via CSD or HSCSD or IxRTT channels with the help of a radio module or a modem, and is located on the physical layer of the OSI model; then, a point-to-point connection is established using a V.110 protocol or a V.34 protocol, the next step involves providing for the operation of a plurality of network-level protocols in a single communications channel by means of establishing a PPP connection, then, using IP and TCP protocols or IPX and SPX protocols to establish a VPN connection using symmetric encryption or asymmetric encryption and public key transmission, after which, service transmission, and data transmission using the accessible services, are carried out.

Description

METHOD FOR TRANSFER OF INFORMATION FROM ONE AUTONOMOUS MOBILE COMMUNICATION TERMINAL TO ANOTHER

The invention relates to a secure transmission of data and voice information in mobile communication networks.

During this period of time, the secure transmission of information is carried out using two types of crypto-protected systems. One of these systems is a hardware system based on specialized ASIC microcircuits that represent a subspecies of speech information encoding devices (scramblers). To protect information in such modern systems, hardware encoding solutions (scramblers) are used as additional or standard modules for existing terminals in the form of separate structural devices.

(http://en.wikipedia.org/wiki/% DO% Al% DO% VA% D1% 80% DO% B5% D0% BC% DO% 1% DO% BB% DO% B5% D1% 80 )

Closest to the proposed solution is a method of transmitting voice and other information from one autonomous mobile communication terminal to another with the subsequent establishment of a crypto-secure channel, including initiating a connection from the source terminal, transferring available or necessary services, and transferring data between subscribers through these services. This method is implemented using software and hardware systems, Blackberry MVS, operating by transmitting data channels as data services or IP telephony services (H.323 or SIP) using an encrypted private channel through GRPS data channels, EDGE, EVDO, HSDPA, LTE.

(http: //us.blackberry om / b ^^

The disadvantages of such methods for the secure transmission of information include the following.

The relatively high cost of specialized microcircuits (ASICs) and the complexity of circuitry solutions make crypto-secure terminals tied to a specific manufacturer. When changing algorithms or keys, or increasing cryptographic strength, ASIC modules require full or partial replacement, changing the internal software of specialized modules (systems) in highly specialized service centers, has a high cost and complexity of maintenance, as well as a high cost of deployment and maintenance of the system as a whole. The complexity and volume of the processed information, as well as the existing level and cost of specialized ASIC chips, leads to the limited, ultra-high cost and non-proliferation of crypto-protected systems, the complexity of their modernization and maintenance.

The basis of the invention is the task to simplify and reduce the cost of technology for the confidential transmission of voice and other information by using existing digital voice channels.

The problem is solved in that in the method of transmitting voice and other information from one autonomous mobile communication terminal to another with the subsequent establishment of a crypto-secure channel, including initiating a connection from the source terminal, transferring available or necessary services and transferring data between subscribers through these services, according to the proposed solutions, the connection is initiated through the channels CSD or HSCSD, or lxRTT with using a radio module or modem, it is located on the physical level of the OSI model, after which a point-to-point connection is established using the V.1 10 or V. 34 protocols, the next step ensures the operation of several network layer protocols on one communication channel by establishing a PPP connection, then using IP and TCP or IPX and SPX protocols, a VPN connection is established using symmetric encryption or asymmetric encryption and public key transfer, after which services are transferred and data is transferred pnymi services.

The transfer of crypto-protected information using the proposed method is carried out using hardware and software, since mobile and stationary terminals that currently exist are used. Such transmission of information does not require the construction of new functional units; the existing infrastructure of telecom operators is used. The use of existing voice channels (digital) for transmission is combined with the flexibility of implementation and ease of maintenance of others. Unlike analogs, services of high-speed data transmission at subscriber terminals do not require an information processing server and VPN tunnels. When using the proposed method of data transfer, each mobile subscriber terminal is a self-sufficient participant in crypto-secure communication.

The proposed method of transmitting information is explained by the drawings.

In FIG. 1 presents a schematic diagram of the transmission of information by the proposed method.

In FIG. 2 presents one of the options for implementing the proposed method (mobile terminal - mobile terminal). Ha FIG. 3 shows a second embodiment of the proposed method (mobile terminal - stationary terminal).

1 - mobile terminal; 2 - network of a mobile operator; 3 - networks with inter-operator connections; 4 - radio communication subsystem (base stations); 5 - subsystem of fixed communication PSTN.

The proposed method is carried out through the channels CSD (lxRTT) with the subsequent establishment of a crypto-protected channel, regardless of the carrier. The method includes the phases illustrated in FIG. one .

one . A connection via a radio module or modem is initiated from the source terminal via CSD (HSCSD) or lxRTT channels, which corresponds to the first phase and is located on the physical layer of the OSI model.

2. A point-to-point connection is established using the V.110 (V.120) protocols or the slow v.34 protocol when using public telephone networks (PSTN). Preferred is the use of V.1 10 (V.120) protocol and transparent asynchronous transfer mode. In this case, the time required to establish a connection can be reduced to 2 seconds. The phase is at the second (channel) level of the OSI model.

3. A PPP connection is established, allowing multiple network layer protocols to work on the same communication channel. With continued use of the network protocol IP (IPX), with predefined IP addresses (IPX). The third phase is at the link and network layer of the OSI model.

four . In the fourth phase, IP and TCP (IPX and SPX) are used to establish a VPN connection using symmetric or asymmetric encryption and transmitting public keys (certificates) in case of asymmetric encryption. When using certificates, the subscriber's identity is established. Using Symmetric encryption is enough CPU CPU resources. With high cryptographic strength or low computational performance of the CPU, using asymmetric encryption with a large key, the GPU module of the terminal is used. Thus, tasks of large volumes and complexity, involving great parallelism and intensive arithmetic in relatively uniform encryption algorithms, will be processed at the right speed. When using a GPU, the computational load on the CPU is sharply reduced and the necessary speed of computing, encrypting and decrypting information is achieved. The integrity and authenticity of the logical channel is checked. The transport layer is used when using symmetric encryption and the additional session layer of the OSI model when using asymmetric encryption (SSL, TLC).

5 . The fifth phase provides the transfer of available services or necessary services to start the transfer of user data. If the number and type of services is known and standardized in advance, then this phase is skipped.

6. The sixth phase provides data transfer from one subscriber to another with available services. For example, for voice information, SIP or H.323 protocols. The priority is to use the G.723.1 two-speed codec (5.3 Kbps and 6.4 Kbps). Higher transmission speeds provide better quality. At any moment, at the border of the frame, switching of the transmission rate is permissible. Using application A (annex A) adds to the encoder part of the classification of the input speech signal. This is VAD - voice activity detector. VAD determines what exactly is present at the input - speech or pause. During pauses, the bitstream decreases from 6.3 (or 5.3) Kbps up to 1 Kbps or less. At the time of pauses in the bit stream, information is transmitted about the structure of background noise so that the listener does not experience discomfort from pure pauses between phrases - there is a “comfortable” noise generator. Or any other of the low-speed codecs.

When using other services, it is necessary to take into account the low channel speed, which for the most part will be below 9.6 Kbps, even taking into account the compression of the second and fourth phases, as well as the delay in the digitization and transmission of information. The sixth phase is in the upper levels of the OSI model (Applied, Reflection, Session, Transport) depending on the services that are provided and the implementation of the software package.

Example 1 Transmission of voice and other information from one mobile terminal to another mobile terminal (see Fig. 2).

From the source mobile terminal, via CSD (HSCSD) or lxRTT channels, a connection is initiated via a radio module or modem to another mobile terminal. Next, a point-to-point connection is established using the V.110 (V.120) protocols, then a PPP connection is established, allowing several network layer protocols to work on a single communication channel. With continued use of the network protocol IP (IPX), with predefined IP addresses (IPX). Next, we use the IP and TCP protocol (IPX and SPX) to establish a VPN connection using symmetric or asymmetric encryption and transmitting public keys (certificates) in case of asymmetric encryption. Transfer of available services or necessary services to start transferring user data. Information data transfer from one subscriber to another is carried out by available services. For example, for voice information, protocols are used. SIP or H.323. The priority is to use the G.723.1 two-speed codec (5.3 Kbps and 6.4 Kbps). Higher transmission speeds provide better quality. At any moment, at the border of the frame, switching of the transmission rate is permissible.

Example 2 Transmission of voice and other information from one mobile terminal to a stationary terminal.

From the source mobile terminal, via CSD (HSCSD) or lxRTT channels, a connection is initiated via a radio module or modem to another stationary terminal. Next, a point-to-point connection is established using v.34 (v. Software when using the ISDN BRI from the stationary side), for its part, the stationary terminal uses regular public telephone networks (PSTN) instead of CSD (HSCSD) or lxRTT. Next, a PPP connection is established, allowing several network layer protocols to work on one communication channel. With continued use of the network protocol IP (IPX), with predefined IP addresses (IPX). Next, we use the IP and TCP protocol (IPX and SPX) to establish a VPN connection using symmetric or asymmetric encryption and transmitting public keys (certificates) in case of asymmetric encryption. Transfer of available services or necessary services to start transferring user data. Transfer of information data from one subscriber to another by available services. For example, for voice information, SIP or H.323 protocols. The priority is to use the G.723.1 two-speed codec (5.3 Kbps and 6.4 Kbps). Higher transmission speeds provide better quality. At any moment, at the border of the frame, switching of the transmission rate is permissible. Legend:

VCsd or VxRTT - technology for transmitting crypto-protected data and voice information in cellular communication networks;

GSM is an international standard for mobile digital cellular communication with channel separation according to the principle of time division;

CDMA - (cdma 2000 or w-cdma) - code-division multiple access cellular communication standard;

Voice VPN - virtual private voice channels in digital telephone exchanges; ASIC - a specialized chip for specific tasks (not multifunctional);

GRPS - data transmission technology in the GSM standard;

EDGE - GSM data transmission technology;

EVDO - data transmission technology in the CDMA standard;

HSDPA - third generation data transfer technology;

LTE - fourth generation data transmission technology;

PSTN (POTS) - general purpose telephone network;

VPN - technology for building private networks through public networks;

IP (TCP) - packet data transfer protocol;

IPX (SPX) - Novell's packet data protocol;

Blackberry MVS - technology (services) of connection with corporate IP

Automatic telephone exchange;

Blackberry BES (BIS) - a service for transferring protected traffic to corporate servers or to Blackberry servers;

CPU - Central processing unit, CPU (Central processing unit, CPU), multifunctional processor;

GPU - graphics processor (Graphics Proccesing Unit, GPU) - a separate device of a personal computer or game console, performs graphic rendering; VoIP - technology for transmitting voice and video data in packet data networks;

CSD - data transmission technology developed for GSM mobile terminals;

HSCSD - (English High-speed Circuit - switched Data) - a system based on the same principles as the CSD, but provides high-speed communications. Speed increased to 57.6 Kbps;

lxRTT - often abbreviated as 1x, this is a designation with reference to the operating mode of CDMA 2000, a wireless technology that is used in a CDMA cellular network. 1x means the number of channels used is 1.25 MHz wide, while RTT means radio transmission technologies. It is also called 3glx, IMT - CDMA Multi - carrier, or IS -2000.

V.34 - transmission protocol for modem communication in PSTN networks. Includes speeds V.32 and V.32bis;

V.110 - transmission protocol for modem communication in ISDN networks;

OSI - Open Systems Interconnection (OSI) model (ISO / IEC 7498-1) - 7 - level model of interaction in data transmission networks;

AES - symmetric encryption algorithm;

DES - symmetric encryption algorithm;

3DES - symmetric encryption algorithm;

RSA - asymmetric encryption algorithm;

GOST R 34.10-2001 - asymmetric encryption algorithm;

DSA - asymmetric encryption algorithm;

Diffie - hellman - asymmetric encryption algorithm;

H.323 - The H.323 standard of VoIP technology has been adopted by the International Telecommunication Union (ITU) to ensure the compatibility of components, protocols and procedures for point-to-point and multilateral transmission in real-time audio signals, video signals and data over packet-switched networks;

SIP - (Session Initiation Protocol) for VoIP - an application layer protocol, a proposed standard for the method of setting, changing and ending a user session, including multimedia elements such as video or voice, instant messages (instantmessaging);

BSC - Base Station Controller;

MSC - MSC (Center for Mobile Switching) is a specialized automatic telephone exchange that provides the ability to communicate with circuit switching, manage mobility and provide GSM services for mobile phones within its service area. This includes voice, data and fax, as well as SMS and call forwarding;

GMSC - Gateway MSC (Gate MSC, GMSC) - this is the MSC that processes calls coming from external networks;

BTS - base station of mobile communications;

ME - mobile terminal, contains a unique imei terminal number. SIM card, contains a unique imsi number.

Claims

Claim

A method of transmitting voice and other information from one autonomous mobile communication terminal to another with the subsequent establishment of a crypto-secure channel, including initiating a connection from the source terminal, transmitting available or necessary services and transferring data between subscribers through these services, characterized in that the connection is initiated via CSD channels either HSCSD or lxRTT using a radio module or modem and is located on the physical layer of the OSI model, after which a point-to-point connection is established using V.110 or V.34 protocols, the next step ensures the operation of several network layer protocols on one communication channel by establishing a PPP connection, then using the IP and TCP or IPX and SPX protocols, a VPN connection is established using symmetric encryption or asymmetric encryption and the transfer of public keys, after which they transfer services and transfer data with available services.