WO2016082401A1

WO2016082401A1 - Conversation method and apparatus, user terminal and computer storage medium

Info

Publication number: WO2016082401A1
Application number: PCT/CN2015/075398
Authority: WO
Inventors: 任斌; 钟安利
Original assignee: 中兴通讯股份有限公司
Priority date: 2014-11-25
Filing date: 2015-03-30
Publication date: 2016-06-02
Also published as: CN105704711A

Abstract

Provided are a conversation method and apparatus, a user terminal and a computer storage medium. The conversation method comprises: in a process of voice conversation between a first user terminal and a second user terminal, verifying the identity of the second user terminal, so as to obtain a verification result; when the verification result is that the identity verification is successful, maintaining the voice conversation; and when the verification result is that the identity verification is unsuccessful, ending the voice conversation.

Description

Call method, device, user terminal and computer storage medium

Technical field

Embodiments of the present invention relate to call security technologies in the field of communications, and in particular, to a call method, apparatus, user terminal, and computer storage medium.

Background technique

With the rapid development of telecommunication services, various voice call functions have become very popular. In the telecommunication service, the caller ID service will be used, and the called party will judge the identity of the other party according to the phone number displayed by the caller, but now there is a kind of Illegal technology will modify the calling number in the network, control the caller ID number of the called party, disguise the phone number as a number trusted by the called party, and achieve the purpose of deceiving the called party, so it involves a major interest relationship. During the voice call, it is unreliable to trust the other party based solely on the caller ID.

Summary of the invention

The purpose of the embodiments of the present invention is to provide a method, a device, a user terminal, and a computer storage medium, which can prevent user identity from being tampered with and ensure call security.

The solution provided by the embodiment of the present invention is as follows:

The embodiment of the invention provides a method for calling, which is applied to a first user terminal, and includes:

During the process of performing a voice call between the first user terminal and a second user terminal, verifying the identity of the second user terminal to obtain a verification result;

And maintaining the voice call when the verification result is that the identity verification is successful;

When the verification result is that the authentication fails, the voice call is ended.

Preferably, the verifying the identity of the second user terminal, and obtaining a verification result includes:

Interacting with the second user terminal and an authentication center to obtain a signed digital certificate, after the signed digital certificate is applied by the second user terminal from the authentication center to the first digital certificate, using the authentication The private key of the center is obtained by signing the first digital certificate, and is saved to a server of the authentication center;

The first digital certificate is verified by using the root certificate of the certificate authority. If the verification is successful, the verification result is that the identity verification is successful. Otherwise, the verification result is that the identity verification fails.

Generating a first data;

Transmitting the first data to the second user terminal, so that the second user terminal can use the private key of the second user terminal to sign the first data, and obtain a signed data. And sending the signed data to the first user terminal;

Receiving the signed data;

Decrypting the signed data by using a public key of the second user terminal to obtain second data;

Determining whether the second data is the same as the first data. If the same, the verification result is that the authentication is successful. Otherwise, the verification result is an identity verification failure.

Preferably, the verifying the identity of the second user terminal is specifically performed by using a voice link used by the voice call.

Preferably, the method further comprises:

When the verification result is that the authentication is successful, generating a random number as a password, the password is used to encrypt and decrypt the voice data that is exchanged between the first user terminal and the second user terminal by using the voice link. ;

Encrypting the password by using a public key of the first user terminal to obtain a first ciphertext;

Transmitting the first ciphertext to the first user terminal, so that the first user terminal is capable of receiving the first ciphertext, and using the private key of the first user terminal to the first ciphertext The password is restored after decryption.

The embodiment of the invention further provides a call device, which is applied to a first user terminal, and includes:

The verification module is configured to verify the identity of the second user terminal and obtain a verification result during a voice call between the first user terminal and a second user terminal;

a maintaining module configured to maintain the voice when the verification result is that the authentication is successful call;

And ending the module, configured to end the voice call when the verification result is that the authentication fails.

Preferably, the verification module comprises:

An acquiring unit, configured to interact with the second user terminal and an authentication center to obtain a signed digital certificate, where the signed digital certificate is applied by the second user terminal from the authentication center to the first digital certificate And signing the first digital certificate by using a private key of the authentication center, and saving the first digital certificate to a server of the authentication center;

The verification unit is configured to use the root certificate of the certificate authority to verify the first digital certificate. If the verification is successful, the verification result is that the identity verification succeeds. Otherwise, the verification result is an identity verification failure.

Preferably, the verification module comprises:

Generating a unit configured to generate a first data;

a sending unit, configured to send the first data to the second user terminal, so that the second user terminal can use the private key of the second user terminal to sign the first data, and obtain a signed data, and transmitting the signed data to the first user terminal;

a receiving unit, configured to receive the signed data;

The decrypting unit is configured to use the public key of the second user terminal to decrypt the signed data to obtain second data;

The determining unit is configured to determine whether the second data is the same as the first data. If the same, the verification result is that the identity verification succeeds. Otherwise, the verification result is an identity verification failure.

Preferably, the verifying the identity of the second user terminal is performed by using a voice link used by the voice call.

Preferably, the method further comprises:

a generating module, configured to generate a random number as a password when the verification result is successful, and the password is used to encrypt and decrypt the voice chain between the first user terminal and the second user terminal Voice data for road interaction;

The encryption module is configured to use the public key of the first user terminal to encrypt the password to obtain a first ciphertext;

a sending module, configured to send the first ciphertext to the first user terminal, so that the first user terminal can receive the first ciphertext, and use the private key of the first user terminal The first ciphertext is decrypted and restored to obtain the password.

An embodiment of the present invention further provides a user terminal including the foregoing call device.

The embodiment of the invention further provides a computer storage medium, wherein the computer storage medium stores executable instructions, and the executable instructions are used to execute the call method described above.

As can be seen from the above, the embodiments of the present invention have at least the following beneficial effects:

The user can end the call when it is determined that there is a problem with the identity of the peer call user, thereby preventing the user identity from being tampered and ensuring the call security.

DRAWINGS

1 is a flow chart showing the steps of a signal mixing output method according to an embodiment of the present invention;

2 shows the main functions of a trusted authentication center in accordance with a preferred embodiment of the present invention;

3 is a diagram of generating a certificate according to a preferred embodiment of the present invention;

4 is a connection relationship of each node in an actual application according to a preferred embodiment of the present invention;

5 is a software implementation principle of the present invention for an intelligent call terminal according to a preferred embodiment of the present invention;

6 is a data encryption and transmission process during a call according to a preferred embodiment of the present invention;

FIG. 7 is a process of identity authentication and password negotiation before a call is established according to a preferred embodiment of the present invention; FIG.

FIG. 8 is a structural block diagram of a signal mixing output device according to an embodiment of the present invention.

detailed description

The embodiments of the present invention will be described in detail below with reference to the drawings and specific embodiments.

1 is a flow chart showing the steps of a signal mixing output method according to an embodiment of the present invention. Referring to FIG. 1, an embodiment of the present invention provides a method for ensuring call security, including the following steps:

Step 101: During the voice call between the first user terminal and a second user terminal, verify the identity of the second user terminal, and obtain a verification result.

Step 102: When the verification result is that the identity verification is successful, maintaining the voice call.

Step 103: When the verification result is that the identity verification fails, the voice call ends.

The method is applied to a first user terminal.

It can be seen that, in the above manner, the user can end the call when determining that there is a problem with the identity of the peer call user, thereby preventing the user identity from being tampered and ensuring the call security.

The user terminal is, for example, a mobile phone.

In the embodiment of the present invention, the verifying the identity of the second user terminal, and obtaining a verification result may be implemented in multiple manners, as follows:

The verifying the identity of the second user terminal, and obtaining a verification result may include:

Generating a first data;

Receiving the signed data;

The private key and the public key of the second user terminal may be pre-stored in the second user terminal and the first user terminal, respectively, or may be respectively performed by the second user terminal and the first user. The terminal is obtained from the certification center.

In the embodiment of the present invention, the verifying the identity of the second user terminal may be performed by using a voice link used by the voice call.

Preferably, it may further comprise:

In order to make the embodiments of the present invention more clearly understood, the preferred embodiments of the embodiments of the present invention are provided below.

The preferred embodiment provides a method for preventing call spoofing and call eavesdropping based on a digital certificate.

The preferred embodiment relates to a method for ensuring the security of a voice telephone call, preventing camouflage or spoofing of the caller number when answering the call, and preventing the call content from being eavesdropped, and more specifically, verifying the identity of both parties by using digital certificate technology. And negotiate the call key before the call starts, encrypt the call content, and ensure the security of the call content.

Digital certificate technology is widely used in the field of computer security. The principle of cryptography can be used to uniquely confirm the identity of the owner of a digital certificate. Therefore, digital certificate technology can be used to confirm the identity of the other party during a telephone call.

In addition to the risk of caller number spoofing, there is still the possibility of eavesdropping during the voice call exchange. The call will involve company secrets or personal privacy, if the call content is eavesdropped by a third party. It will cause losses to the caller. If the content of the call is encrypted, even if the call data is obtained, the content cannot be obtained. When the encryption is performed, there is a problem of key reliability. The asymmetric encryption technology using the digital certificate can negotiate a reliable password.

The preferred embodiment utilizes cryptographic principles to ensure that the identity of both parties to the call is trusted in the use of telecommunications voice services, as well as ensuring the confidentiality of the content of the call.

The preferred embodiment adopts the following technical solutions, first establishing a trusted authentication center, referred to as CA, which is responsible for the generation of digital certificates, and issuance, certificate downloading, and certificate cancellation. An identity-sensitive group, each of whom can apply for a digital certificate at the CA. The certificate mainly contains information such as the certificate ID, telephone number, expiration date, and identity of the holder. Each certificate corresponds to a pair of RSA encryption algorithm keys, the public key is disclosed in the certificate, and the private key is only held by the certificate owner. When the call is connected, both the calling party and the called party need to use the certificate's key for authentication and negotiate the encrypted password of the subsequent call.

The preferred embodiment is mainly implemented by a certificate authority (CA) and a phone terminal. The CA includes a certificate generation module, a certificate storage module, a certificate download module, and a certificate cancellation module. The phone terminal is an identity authentication module and a key negotiation module. And a pulse code modulation (PCM, Pulse Code Modulation) encryption module.

The basic steps are as follows:

Step A: Establish a digital certificate authority (CA), and expose the certificate and encryption public key of the CA;

Step B: The user applies for a digital certificate through the CA, and signs the certificate with the private key of the CA;

Step C: save the certificate to the CA server, and publicize the user's digital certificate and public key;

Step D: User A calls B through any operator or way;

Step E: B phone rings to display the caller number of A;

Step F: After the phone is connected, A sends its own certificate ID to B through the voice channel of the PCM, and B also sends the certificate ID to A;

Step G: Both A and B download the certificate of the other party through the CA according to the certificate ID of the other party, and obtain the public key of the other party.

Step H: After obtaining the certificate of the other party, A and B use the root certificate of the CA to verify each other's certificate; if the verification fails, the call ends immediately;

Step I: A generates a random number R.A, and adds B's telephone number N.B to the random number. (R.A+N.B), sent to B;

Step J: After receiving (R.A+N.B), B signs it with its own private key, and sends the signature result SIGN-(R.A+N.B) to A;

Step K: After receiving the SIGN-(R.A+N.B) signature result of B, A uses B's public key for verification, and compares with the original (R.A+N.B), if the wrong call ends;

Step L: B generates a random number R.B, and adds A's telephone number N.A to a random number (R.B+N.A), and sends it to A;

Step M: After receiving (R.B+N.A), A signs it with its own private key, and sends the signature result SIGN-(R.B+N.A) to B;

Step N: After receiving the SIGN-(R.B+N.A) signature result of A, B uses the public key of A to verify, and compares with the original (R.B+N.A), if the wrong call ends;

Step O: B generates a random number KEY, which is encrypted with the public key of A to generate a ciphertext Pub.A-KEY, which is sent to A;

Step P: A decrypts the Pub.A-KEY with its own private key, and restores the KEY;

Step Q: Both A and B have completed the authentication, and have the negotiated password KEY, subsequent call, A will encrypt the original voice PCM data of the local end with KEY and then send it to the network. After receiving the encrypted data, B decrypts it with KEY. The original PCM is obtained, and then the original voice data can be played to obtain the voice of the A end; likewise, B sends the original PCM data of the local end to the A with the KEY encryption, and after receiving the A, the KEY is decrypted to obtain the original PCM, and then Play to get the voice of the B end.

Compared with related technologies, the problem of caller ID fraud can only rely on the alert of the called user and the supervision of the operator, but there is no way to completely solve the problem in principle. By using this method, the identity of both parties of the call can be absolutely trusted. For the problem of call eavesdropping, it is very insecure for the ordinary fixed telephone network, and the voice data on the entire network is plain text, at any time. Can be eavesdropped. For the currently developed mobile network, the network encodes the physical channel to achieve security effects, but if the operator's core network part is controlled by criminals, there is also the risk of eavesdropping. Smartphones will also be embedded in eavesdropping software. At present, Trojans can only be checked by anti-virus software, but if the virus database is not updated in time, a new Trojan will be implanted for eavesdropping. Using this method, the entire PCM path is obtained from the hardware. The voice signal will be encrypted immediately, until the peer end is converted into a voice signal before decryption, so the entire network path is transmitted in ciphertext, from which node to eavesdrop, the acquired data can not restore the voice signal, so All of the above eavesdropping problems can be solved.

The preferred embodiments are given below in conjunction with the accompanying drawings, and the usage scenarios and design principles of the preferred embodiment are described in detail:

As shown in Figure 2, the certificate authority needs to be responsible for certificate generation, certificate download, certificate storage, and certificate logout. Users join the trusted group and need to apply for digital certificates in the CA. As shown in Figure 3, the CA submits information according to the user. The phone number, which generates a standard X.509 certificate format, is signed with the CA's private key, and the generated certificate can be distributed to the user and retained on the CA storage server. If the user quits the trusted group, the certificate needs to be revoked. The CA needs to mark the certificate in the storage server and is logged out. During use, the user can return a certificate to the certificate file according to the certificate ID, or the error message that the certificate does not exist or has been logged out.

As shown in Figure 4, the two call users and the CA need to communicate with each other during the establishment of the call. The end user and the CA communication need to be connected via the internet, and the Wi-Fi connection of the mobile phone or the 3G/4G data service can be used. The identity authentication and password negotiation before establishing a secure voice channel need to pass through the original PCM voice channel;

As shown in FIG. 5, the software of the present invention is divided into two parts in the smart terminal, one is certificate authentication and password negotiation, and is implemented in the application layer by an application processor (AP, Application Processor), and the other is a voice encryption part. The kernel is implemented by the AP. The AP and some baseband processors (BP, Baseband Processor) can collect the phone recording and send it through the network. Therefore, the encryption module is placed in the kernel part, and the sound card device driver collects the PCM voice. It will be encrypted immediately, so the voice data collected through the application layer is encrypted. Certificate authentication and password negotiation are used to verify the identity of the other party. If the identity untrusted call ends immediately, after the identity authentication is completed, the encrypted password is negotiated with the other party. After obtaining the password, the password is passed to the kernel's encryption module to encrypt and decrypt the PCM data. After the successful acquisition of the password shown in Figure 6, the voice data is transmitted through the microphone to collect the voice signal, which is converted into a digital signal by hardware. The software driver obtains the PCM data and encrypts it immediately. After the encryption, the data length does not change, so the original data is still used. The format and rate are sent to the network for delivery. After the other party receives the encrypted data, it is processed in the kernel. Decrypting, decrypting to obtain the original PCM data, and the sound card driver transfers the PCM data to the hardware to restore the voice signal;

As shown in FIG. 7, the entire detailed process of the present invention in the application, according to the foregoing, the certification center CA is established, and both A and B apply for a certificate at the CA, and both A and B have a RAS private corresponding to their own certificate. Key password. A dials B's phone, B rings, and answers the call. At this point, the original PCM voice link has been opened, and the subsequent A/B data exchanges all pass through this link.

The method of transmitting data through the PCM voice channel by both A/B parties: after the two parties are connected, there will be two-way PCM transmission and reception channels, A->B and B->A. The data to be sent is encapsulated starting with 0x7E and in the general way ending with 0x7E. The last byte of a set of data is used as a CRC check. If the checksum is incorrect, a retransmission mechanism is required. With 0x7E only in the authentication and password negotiation phase, there is no need to wrap the data with 0x7E after the password negotiation is completed. It is to be noted that the present invention is only suitable for delivering voice-coded uncompressed and lossless communication networks.

Certificate download and verification: A sends the certificate ID to B, and B also sends its own certificate ID to A. B sends a certificate request to download the A to the CA. The CA first queries the certificate according to the certificate ID. If it does not exist, the error is sent. Then check whether the certificate is logged out. If it is logged out, it returns an error. If the certificate exists and is legal, then B returns A's certificate file. After B gets the certificate file of A, it uses the CA's public key to verify the certificate. If the certificate verification fails, exit the call. Then extract the phone number in the certificate and compare it with the caller number. If the phone number and the caller number in the certificate do not match, the call ends. A verify the certificate and telephone number of B in the same manner as above;

Authentication: Through the above method, A and B get the legal certificate of the other party, A then generates the random number RA, and sends the data of the number NB of the B and B to B, and the signature result is SIGN (R. A+NB) is sent to A, and A uses B's certificate to verify the signature result. If the signature is correct, B's identity is legal. Similarly, B generates a random number RB, sends it and A's number NA composition data to A, A signs it and sends the signature result SIGN(R.B+NA) to B, and B uses A's certificate to perform the signature result. Verify that if the signature is correct, the identity of A is legal.

Password negotiation: A generates a random number KEY and encrypts it with B's public key and sends it to B and B. Its decryption acquires KEY;

To make a secure call: After both parties get the KEY, use KEY to encrypt the PCM stream to be sent to the other party. Using DES or AES algorithm, the obtained ciphertext length is equal to the original PCM data length, so the network transmission method does not need to be done. Any changes are still transmitted in accordance with the previous code rate and method. The receiver receives the ciphertext of the same length at a constant rate, decrypts it with the KEY, acquires the original PCM data, and then converts it into the original sound signal.

FIG. 8 is a structural block diagram of a signal mixing output device according to an embodiment of the present invention. Referring to FIG. 8 , an embodiment of the present invention further provides a device for ensuring call security, including:

a maintaining module configured to maintain the voice call when the verification result is that the authentication is successful;

The device is applied to a first user terminal.

In the embodiment of the present invention, the verification module may include:

Generating a unit configured to generate a first data;

a sending unit, configured to send the first data to the second user terminal, so that The second user terminal can use the private key of the second user terminal to sign the first data, obtain a signed data, and send the signed data to the first user terminal;

a receiving unit, configured to receive the signed data;

In the embodiment of the present invention, the verifying the identity of the second user terminal may be performed by using a voice link used by the voice call. .

Preferably, it may further comprise:

Referring to Figure 5, the modules in the device can be implemented by a processor (CPU), a microprocessor (MCU).

An embodiment of the present invention further provides a user terminal, where the user terminal includes the foregoing device for ensuring call security.

The embodiment of the invention further provides a computer storage medium, wherein the computer storage medium stores executable instructions, and the executable instructions are used to execute the call method shown in FIG.

A person skilled in the art can understand that all or part of the steps of implementing the above method embodiments may be completed by using hardware related to the program instructions. The foregoing program may be stored in a computer readable storage medium, and the program is executed when executed. The steps of the foregoing method embodiments are included; and the foregoing storage medium includes: a mobile storage device, a random access memory (RAM, Random) A variety of media that can store program code, such as Access Memory), Read-Only Memory (ROM), disk, or optical disk.

Alternatively, the above-described integrated unit of the present invention may be stored in a computer readable storage medium if it is implemented in the form of a software function module and sold or used as a standalone product. Based on such understanding, the technical solution of the embodiments of the present invention may be embodied in the form of a software product in essence or in the form of a software product, which is stored in a storage medium and includes a plurality of instructions for making A computer device (which may be a personal computer, server, or network device, etc.) performs all or part of the methods described in various embodiments of the present invention. The foregoing storage medium includes various media that can store program codes, such as a mobile storage device, a RAM, a ROM, a magnetic disk, or an optical disk.

The above is only a specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or substitutions within the technical scope of the present invention. It should be covered by the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the appended claims.

Claims

A method of securing calls, including:

During the process of performing a voice call between the first user terminal and a second user terminal, verifying the identity of the second user terminal to obtain a verification result;

And maintaining the voice call when the verification result is that the identity verification is successful;

When the verification result is that the authentication fails, the voice call is ended.
The method of claim 1, wherein the verifying the identity of the second user terminal, obtaining a verification result comprises:

Interacting with the second user terminal and an authentication center to obtain a signed digital certificate, after the signed digital certificate is applied by the second user terminal from the authentication center to the first digital certificate, using the authentication The private key of the center is obtained by signing the first digital certificate, and is saved to a server of the authentication center;

The first digital certificate is verified by using the root certificate of the certificate authority. If the verification is successful, the verification result is that the identity verification is successful. Otherwise, the verification result is that the identity verification fails.
The method of claim 1, wherein the verifying the identity of the second user terminal, obtaining a verification result comprises:

Generating a first data;

Transmitting the first data to the second user terminal, so that the second user terminal uses the private key of the second user terminal to sign the first data, and obtains a signed data, and Transmitting the signed data to the first user terminal;

Receiving the signed data;

Decrypting the signed data by using a public key of the second user terminal to obtain second data;

Determining whether the second data is the same as the first data. If the same, the verification result is that the authentication is successful. Otherwise, the verification result is an identity verification failure.
The method of claim 1 wherein said verifying said identity of said second user terminal is performed over a voice link employed by said voice call.
The method of claim 4, further comprising:

When the verification result is that the authentication is successful, generating a random number as a password, the password is used to encrypt and decrypt the voice data that is exchanged between the first user terminal and the second user terminal by using the voice link. ;

Encrypting the password by using a public key of the first user terminal to obtain a first ciphertext;

Transmitting the first ciphertext to the first user terminal, so that the first user terminal is capable of receiving the first ciphertext, and using the private key of the first user terminal to the first ciphertext The password is restored after decryption.
A device for ensuring the security of a call, comprising:

The verification module is configured to verify the identity of the second user terminal and obtain a verification result during a voice call between the first user terminal and a second user terminal;

a maintaining module configured to maintain the voice call when the verification result is that the authentication is successful;

And ending the module, configured to end the voice call when the verification result is that the authentication fails.
The apparatus of claim 6 wherein said verification module comprises:

An acquiring unit, configured to interact with the second user terminal and an authentication center to obtain a signed digital certificate, where the signed digital certificate is applied by the second user terminal from the authentication center to the first digital certificate And signing the first digital certificate by using a private key of the authentication center, obtaining and saving the server to the server of the authentication center;

The verification unit is configured to use the root certificate of the certificate authority to verify the first digital certificate. If the verification is successful, the verification result is that the identity verification succeeds. Otherwise, the verification result is an identity verification failure.
The apparatus of claim 6 wherein said verification module comprises:

Generating a unit configured to generate a first data;

a sending unit, configured to send the first data to the second user terminal, so that the second user terminal uses the private key of the second user terminal to sign the first data, and obtain a Post-signature data, and sending the signed data to the first user terminal;

a receiving unit, configured to receive the signed data;

The decrypting unit is configured to use the public key of the second user terminal to decrypt the signed data to obtain second data;

The determining unit is configured to determine whether the second data is the same as the first data. If the same, the verification result is that the identity verification succeeds. Otherwise, the verification result is an identity verification failure.
The method of claim 6, wherein said verifying the identity of said second user terminal is performed by a voice link employed by said voice call.
The apparatus according to claim 9, further comprising:

a generating module, configured to generate a random number as a password when the verification result is successful, and the password is used to encrypt and decrypt the voice chain between the first user terminal and the second user terminal Voice data for road interaction;

The encryption module is configured to use the public key of the first user terminal to encrypt the password to obtain a first ciphertext;

a sending module, configured to send the first ciphertext to the first user terminal, so that the first user terminal can receive the first ciphertext, and use the private key of the first user terminal The first ciphertext is decrypted and restored to obtain the password.
A user terminal comprising the communication device according to any one of claims 6 to 10.
A computer storage medium having stored therein executable instructions for performing the method of calling according to any one of claims 1 to 5.