WO2006066455A1

WO2006066455A1 - A method for achieving session with different plain and security level in the communication network

Info

Publication number: WO2006066455A1
Application number: PCT/CN2004/001497
Authority: WO
Inventors: Xianli Hu; Dengjun Su; Ming Ni; Jiwen Lu
Original assignee: Zte Corporation
Priority date: 2004-12-22
Filing date: 2004-12-22
Publication date: 2006-06-29

Abstract

The invention discloses a method for achieving the session of the different plain and security levels in the communication network. The terminal device of this network can support the communication at one or plurality of security levels. The method comprises: registering the security parameter of a set or plurality sets of the security levels corresponding to the session plain and security level what each terminal user had in the core control device of said network; the terminal users originate the call to said core control device, wherein there is the security parameter corresponding to the current session plain and security level specified by said user in the call request; said core control device controls the call of plain and security level based on the security parameter in the call request and the security parameter registered by the called party user. The invention permits to set the different manners of plain and security interacted with the other users based on the requirement for the different situations, the core control device controls the call based on the plain and security level setted by the user.

Description

Method for realizing different secret level calls in a communication network

Technical field

The present invention relates to the field of communications, and in particular, to a method for implementing different confidentiality level calls of end users under an architecture based on an IP communication network. Background technique

With the development of Internet and broadband technologies, Voice over IP (VOIP) technology has gained more and more applications in enterprise networks and public networks. However, due to the openness of IP networks, VOIP technology has some security issues, such as voice data IP packets being sniffed and monitored; user accounts and device spoofing, and so on.

For these security issues, the VOIP system needs to encrypt the user's signaling and media streams to prevent unauthorized users from stealing information from legitimate users. During the call, if the media stream is encrypted, the call is called a secret message, otherwise it is called a clear message.

At present, in the security system of a communication system, the usual practice is that the user terminal and the system device agree in advance on the authentication algorithm authentication parameter and the service encryption mode, and the communication security manner between the user terminal and the system device is based on these prior agreements. The setup proceeds. However, with this method, once the communication mode between the user terminal and the system device is set, the user cannot change the communication mode by himself; if the user needs to change the security mode of the communication, it must be re-agreed through the network management operation of the network system device. It is cumbersome to modify the corresponding parameters of the user terminal and the system device. Summary of the invention

The object of the present invention is to provide a method for implementing different levels of confidentiality calls in a communication network, so as to allow users to make calls at different levels of confidentiality according to different occasions, and the core control device performs call control according to the level of confidentiality set by the user. , thus automatically achieving the secret level of the call requested by the user.

In order to achieve the above object, the technical solution adopted by the present invention is: A method for implementing different levels of confidentiality in a communication network, wherein the terminal device of the network has the capability of supporting one or more confidential communication, the method comprising: registering each terminal user in a core control device of the network One or more sets of security parameters corresponding to the call privacy level; the terminal user initiates a call to the core control device, where the call request includes a security parameter corresponding to the current call privacy level specified by the terminal user; The core control device performs control of the corresponding secret level call according to the security parameter in the call request and the security parameter registered by the called user.

Preferably, the step of registering one or more sets of security parameters of each terminal user further comprises: the terminal user initiating a registration request to the core control device; the terminal user setting the security of the call privacy level The parameter is added to the message sent to the core control device during the registration process, and the core control device performs registration on the terminal user according to the subscription information of the terminal user and the information about the authentication in the security parameter. When the registration authentication operation is successful, the core control device registers the security parameter of the terminal user's current call privacy level into the call privacy level attribute table of the terminal user.

The message is a registration request message or other non-registration request message. Preferably, the step of registering one or more sets of security parameters of each terminal user further comprises: adding, by the terminal user, a security parameter of a call privacy level to a message sent to the core control device after successful registration Sending; the core control device processes the message correspondingly, and registers the security parameter carried in the terminal to the call privacy level attribute table of the terminal user.

Preferably, the step of registering one or more sets of security parameters of each terminal user further comprises: pre-registering a security parameter of a default call privacy level in the core control device.

Preferably, the step of the core control device performing control of the corresponding secret level call further comprises: determining, by the core control device, whether the primary called user is legal according to the primary called user identifier in the call request; When the requested primary and called users are both legitimate: the core control device obtains, according to the called user identifier, each group of security parameters registered by the called user in the core control device; according to the security parameters in the call request and The security parameters of each group registered by the called user determine whether the call confidentiality level between the primary and the called user is compatible; when the call confidentiality level between the primary and the called user is compatible, the primary called user is Establish a corresponding level of confidentiality If the call confidentiality level between the calling and called users is incompatible, the core control device determines whether the security parameter of the primary called user includes permission to establish a secret message with the other party through the intermediary resource, if included, The host and the called user establish a secret message through the intermediary resource; if not, the core control device determines whether the security parameter of the calling party and the called user is allowed to establish a clear message with the other party, and if so, the calling party and the called user Establish a clear message; if not, the call fails.

Preferably, the step of determining, by the core control device, whether the primary and the called user is legal is further: the core control device determines, according to the called user identifier, whether the called user is registered, and if the called user is not registered, determining the called user If the called user is already registered, the core control device determines whether to allow the calling party and the called party to establish a call according to the service status of the calling party and the called party. If the called party is not allowed to establish a call, the calling party and the called party do not. legitimate.

Preferably, when the call confidentiality level between the calling and called users is compatible, the step of establishing a corresponding secret level call between the calling and called users further comprises: the core control device initiating a call to the called user a call request; after receiving the response from the called user, the core control device controls the negotiation between the calling and the called user for the encryption parameter; the core control device controls the media connection between the calling and the called user, and the main Call the user to enter the secret call.

Preferably, the step of establishing a secret message between the calling and called users through the intermediate resource further comprises: the core control device initiating a call request to the called user; and the core control device receiving the response of the called user Allocating an intermediary resource, and obtaining an encryption parameter corresponding to the intermediary resource; the core control device separately controls negotiation between the calling user and the intermediary resource, and between the called user and the intermediary resource; the core control device The media connection between the calling and called users is established through the intermediary resource, and the main called user enters the secret call.

Preferably, the step of establishing a clear call between the calling and called users further comprises: the core control device initiating a call request to the called user; after receiving the response from the called user, the core control device controls the main A media connection is established between the called user terminals, and the calling party and the called user enter the call.

By adopting the invention, the user can flexibly retrieve various encryption methods (including no encryption) according to requirements, and specifically, the invention has the following advantages:

1. The core control device allows the end user to have more than one set of security parameters corresponding to the level of confidentiality. Number

2. The core control device allows the user to set its own confidential state through the terminal device according to different environmental needs;

3. The user can decide the mode of interaction with other users, and the core control device performs call control according to the level of confidentiality set by the user;

4. The core control device provides call control services between user terminals using different encryption methods;

5. The operator can provide users with hierarchical secure communication services. DRAWINGS

1 is a flow chart of a method for implementing different secret level calls in a communication network, in accordance with one embodiment of the present invention;

2 is a flow chart showing an end user registration process in the method of FIG. 1 according to an embodiment of the present invention;

3 is a flow diagram of a control process for a core control device to perform a corresponding clear level call in the method of FIG. 1 in accordance with one embodiment of the present invention. detailed description

The above and other objects, features and advantages of the present invention will become apparent from the <RTIgt

The present invention is proposed in an IP network system architecture based on softswitch technology, wherein a session between two terminals is established through a softswitch, if the media stream of the call between the two terminals is encrypted , the call is called a secret message, otherwise it is called a clear speech. For a terminal with encryption function, it is possible to change a single communication method in the past, and to establish a clear voice or a different level of secret message with another terminal according to different occasions.

The idea of allowing the end user to establish a clear message or a different secret level with another terminal according to different occasions or needs is realized by allowing the user to indicate the secret level of the call when the call is initiated. The level of the call, here called the secret level, is set by a set of security parameters. The set of security parameters sets the encrypted communication mode used by the terminal device, including at least the media encryption mode information. In addition, the security parameter may further include information such as an authentication algorithm and an authentication parameter.

1 is a flow diagram of a method of implementing different secret level calls in a communication network, in accordance with one embodiment of the present invention.

In this embodiment, at least a core control device exists in the IP network architecture based on the softswitch technology, which may be a media gateway controller S; a calling user terminal device O; a called user terminal device T; a gateway G; Terminal devices O and T have the ability to locally encrypt and decrypt communication content.

As shown in FIG. 1, in step 105, each terminal user registers security parameters corresponding to the respective call privacy levels in the media gateway controller S.

In this embodiment, since the terminal user is allowed to set a plurality of call privacy levels, there are multiple sets of security parameters corresponding to the plurality of clearness levels, so in the core control device S, each terminal user is established. The corresponding call privacy level attribute table records the security parameters corresponding to all the call privacy levels set by the terminal user in the call privacy level attribute table. When each terminal user needs to register or add a new secret level, the new security level security parameter can be added to the established message and sent to the media gateway controller S for registration. In this embodiment, the registration of the security parameters of the secret level is implemented by the process of the terminal device registering with the media gateway controller S.

2 is a flow diagram of an end user registering in the method of FIG. 1 in accordance with one embodiment of the present invention. Now, taking a certain user terminal device U as an example, the step 105 of registering the security level security parameter in Fig. 1 will be described in detail with reference to the user terminal registration process shown in Fig. 2.

As shown in FIG. 2, first in step 201, the user sets a security parameter of the level of confidentiality that the terminal device U complies with in the subsequent call on the terminal device U. When the user terminal U initiates a registration request, the security parameter set by the user is included in the registration message. These security parameters include media encryption mode, authentication algorithm, authentication parameters, and whether to allow a clear call or use an intermediary resource to make a call when the primary and called terminal devices are incompatible. It should be noted that, in this embodiment, the format of the registration message is not specified, because the embodiment is only an exemplary description, and the message format and the message of the registration message used by the terminal device to send the security parameter are The capacity is related to the requirements of the specific core control device (such as the media gateway controller) and the protocol supported by the terminal device user.

In step 202, the terminal device U initiates a registration request to the media gateway controller S, and sends a registration message containing the security parameters to the media gateway controller S.

At step 203, the media gateway controller S authenticates the terminal device U. In this step, the media gateway controller S obtains the user identifier and the security parameters therein from the registration message, so as to find the corresponding user subscription service information, and sends an authentication message to the terminal device U accordingly. The media gateway controller S authenticates the terminal device U based on the subscription information of the user and the authentication requirement of the corresponding encryption method in the security parameter. It should be noted that the authentication message interaction is only schematically represented in FIG. 2, and the actual authentication message interaction process needs to be determined according to the actual authentication algorithm.

In step 204, after the authentication is passed, the media gateway controller S sets the current visibility level registration status of the terminal device U according to the security parameters carried in the registration message, and records the security parameters in the call privacy level of the terminal device U. In the attribute table, a registration success message is sent to the terminal device U. On the other hand, if the authentication fails, the media gateway controller S will send a registration failure message to the terminal device U, and include a specific failure reason in the registration failure message.

Once the terminal device is successfully registered, the Media Gateway Controller S can provide services for it. Returning to Figure 1, in step 110, the end user initiates a call request and indicates the level of confidentiality of the call. In this step, the terminal user can specify the desired call secret level when the call is requested, and the security parameter corresponding to the secret level is automatically sent as a parameter of the call request message along with the call request. Among these security parameters, it may include the secret mode to initiate the call; when the called terminal device does not support the secret call, whether to adopt the call failure mode, or the clear call mode, and the like. The specific parameter form is related to the specific media gateway controller S and the terminal's call protocol. When the user dials, a call request with security parameters is sent to the Media Gateway Controller S.

Next, at step 115, the media gateway controller S performs control of the corresponding secret level call. 3 is a flow diagram of control of a media gateway controller S in a method of FIG. 1 to perform a corresponding secret level call, in accordance with an embodiment of the present invention. Now, referring to Figure 3, the calling user terminal device The call request between the O and the called user terminal device T is taken as an example to describe the detailed process of the media gateway controller S performing the control of the corresponding secret level call.

In Fig. 3, steps 301 and 302 have been described in step 110 of Fig. 1, but for the consistency of the flow in Fig. 3, a brief description will be made here. The calling user terminal O initiates a call to the called user terminal T, wherein the desired secret level of the call is indicated in the call request, and a call request with the corresponding security parameter is sent to the media gateway controller S.

In step 303, after receiving the call request, the media gateway controller S analyzes the security parameter of the call confidentiality level and the calling and called user identifier in the call request message.

In step 304, the media gateway controller S determines whether the called user is registered according to the called user identifier. If the called user is not registered, the call fails and the call processing is exited.

In step 305, the media gateway controller S obtains the service information of the calling and called users according to the identity of the calling party and the called party, and determines whether the service information of the calling party and the called user is allowed to establish a call between the calling user O and the called user T. For example, if the calling user O is forbidden to call out due to arrears, or the calling user O is in the blacklist of the called user T, the call is not allowed to be established. If the call is not allowed between the primary and the called users, the call fails and the call processing is exited.

In step 306, the media gateway controller S determines the calling user O and the called party according to the service information of the calling user O and the called user T and the security parameters corresponding to the call confidentiality level registered in the media gateway controller S. Whether the user T's level of confidentiality is compatible, so that the call is controlled by the corresponding level of confidentiality. The compatibility of the confidentiality level means that the media encryption mode corresponding to the current secret level of the calling user O and the called user T is the same, or exists in the call privacy level attribute table of the called user T and the calling user O current. The confidentiality level of the media encryption method is the same as the secret level. The media gateway controller S processes according to the judgment result according to the following principles:

(1) If the level of confidentiality is compatible, go to steps 30610 - 30613:

At step 30610, the media gateway controller S initiates a call request message to the called user terminal T. The call request message contains the security parameters of the calling user O;

In step 30611, the called terminal T sends an off-hook response message to the media gateway controller S. In step 30612, the media gateway controller S controls the negotiation of the encryption parameters between the calling user terminal device O and the called user terminal device T. ; In step 30713, after the encryption parameter negotiation is successful, the media gateway controller S controls the media connection between the calling user terminal device O and the called user terminal device T to establish a communication state through the gateway G, and enters a call state.

(2) If the confidentiality level is not compatible, but the calling user terminal O and the called user terminal T are allowed to establish a secret message through the intermediary resource, step 30620 - 30625 is performed:

It should be noted that the "intermediary resources" are introduced to meet the calls between users of different levels of confidentiality. In the present invention, the intermediary resource has two functions: First, the intermediary resource participates in the negotiation of the call key. For the calling party, the intermediary resource simulates the called party with the same level as the calling party, and the called party In the case, the intermediary resource simulates the calling party with the same level as the called party. The second function is to adapt and convert the communication content between the calling party and the called party.

In step 30620, the media gateway controller S initiates a call request message to the called user terminal T, where the call request message includes the security parameter of the calling user 0;

In step 30621, the called user terminal T sends an off-hook response message to the media gateway controller S.

In step 30622, the media gateway controller S allocates an intermediary resource for the call; in step 30623, the media gateway controller S obtains the encryption parameter corresponding to the allocated mediation resource, and in step 30624, controls the calling user terminal O and The intermediate resource, the called user terminal T and the intermediate resource perform negotiation of the encryption parameter;

In step 30625, after the encryption parameter negotiation is successful, the media gateway controller S controls the media connection between the calling user terminal O and the called user terminal T through the gateway G and the intermediary resource to enter the call state. Mediation resources can be allocated from the gateway or independently of the gateway.

(3) If the confidentiality level is incompatible and the call is not allowed to be established through the intermediate resource, but the calling user terminal O and the called user terminal T are allowed to establish a clear voice, steps 30630-30632 are performed: In step 30630, the media gateway controller S initiating a call request message to the called user terminal T, where the call request message includes the security parameter of the calling user O;

In step 30631, the called user terminal T sends an off-hook response message to the media gateway controller S.

At step 30632, the media gateway controller S controls the calling user terminal O and the called user terminal. Terminal T establishes a media connection through gateway G and enters a call state.

(4) If none of the above conditions are met, the call fails and the call control process is exited. The preferred embodiment of the present invention has been described in detail above. It should be noted that, in the case of confidential level compatibility, the media gateway controller may also allocate a corresponding intermediary resource to the called user to establish a call; The timing can be selected if the user is willing to answer the question. For example, after the incoming message is displayed on the called user terminal device, after the user presses the answer button, the user can also select the previous call; If the call setup is successful or not, the media gateway controller needs to notify the calling terminal device user of the call state; whether the call is successfully established or the secret call is successfully established, the media gateway controller can According to the policy setting, it is decided whether to notify the called terminal device user of the call state; in the case that the secret call setup fails, it is decided according to the corresponding policy setting whether to notify the called terminal device user of the call state.

Claims

Rights request

A method for implementing different levels of confidentiality in a communication network, the terminal device of the network having the capability of supporting one or more confidential communication, the method comprising:

Registering one or more sets of security parameters corresponding to the call confidentiality level of each terminal user in the core control device of the network;

The terminal user initiates a call to the core control device, where the call request includes a security parameter corresponding to the current call privacy level specified by the terminal user; the core control device according to the security parameter in the call request and The security parameters registered by the called user are controlled by the corresponding secret level call.

2. The method according to claim 1, wherein the security parameter comprises a media encryption mode, an authentication algorithm, an authentication parameter, and whether a clear call or use is allowed when the primary and the called terminal device are incompatible. The intermediary resource makes a call.

The method according to claim 2, wherein the step of registering one or more sets of security parameters of each terminal user further comprises:

The terminal user initiates a registration request to the core control device;

The terminal user adds the set security parameter of the call privacy level to the message sent to the core control device during the registration process for sending;

The core control device performs a registration authentication operation on the terminal user according to the subscription information of the terminal user and the information about the authentication in the security parameter;

When the registration authentication operation is successful, the core control device registers the security parameter of the terminal user's call privacy level into the call privacy level attribute table of the terminal user.

4. The method of claim 3, wherein the message is a registration request message or other non-registration request message.

The method of claim 2, wherein the step of registering one or more sets of security parameters of each end user further comprises: The terminal user adds the security parameter of the call privacy level to the message sent to the core control device after the registration is successful, and sends the message;

The core control device processes the message correspondingly, and registers the security parameter carried therein into the call privacy level attribute table of the terminal user.

The method according to claim 3 or 5, wherein the step of registering one or more sets of security parameters of each terminal user further comprises: pre-registering a default call in the core control device Security parameters at the secret level.

The method according to claim 2, 3 or 5, wherein the step of the core control device performing call control of a corresponding secret level further comprises: the core control device according to the main in the call request The called user ID determines whether the calling party and the called user are legitimate;

When the calling and called users of the call request are both legal:

The core control device obtains, according to the called user identifier, each set of security parameters registered by the called user in the core control device;

Determining whether the call confidentiality level between the calling party and the called user is compatible according to the security parameter in the call request and each group of security parameters registered by the called user;

When the call confidentiality level between the calling and called users is compatible, a call of a corresponding secret level is established between the primary and the called users;

When the confidentiality level of the call between the calling and called users is incompatible, the core control device determines whether the security parameter of the primary called user includes permission to establish a secret message with the other party through the intermediary resource, and if so, the primary called party The user establishes a secret message through the intermediary resource. If not, the core control device determines whether the security parameter of the calling party and the called user is allowed to establish a clear voice with the other party. If yes, the calling party and the called user establish a clear message. If not included, the call fails.

The method according to claim 7, wherein the step of determining, by the core control device, whether the calling party and the called user are legitimate further comprises:

The core control device determines, according to the called user identifier, whether the called user is registered, and if the called user is not registered, determining that the called user is illegal; If the called user is already registered, the core control device determines whether to allow the calling party and the called party to establish a call according to the service information of the calling party and the called party. If the called party is not allowed to establish a call, the calling party and the called party are not legal.

9. The method according to claim 7, wherein when the call-to-speech level between the calling and called users is compatible, the step of establishing a corresponding secret level call between the called and called users is performed. Further includes:

The core control device initiates a call request to the called user;

After receiving the response from the called user, the core control device controls the negotiation between the calling and the called user to perform encryption parameters;

The core control device controls a media connection between the calling and called users, and the primary called user enters a secret call.

10. The method according to claim 7, wherein the step of establishing a secret message between the calling and called users through the intermediary resource further comprises:

The core control device initiates a call request to the called user;

After receiving the response from the called user, the core control device allocates an intermediate resource, and obtains an encryption parameter corresponding to the intermediary resource;

The core control device controls the negotiation of the encryption parameters between the calling user and the intermediation resource, and between the called user and the intermediation resource, respectively;

The core control device controls a media connection between the calling and called users through the intermediary resource, and the primary called user enters the secret call.

The method according to claim 7, wherein the step of establishing a clear call between the calling and called users further comprises:

The core control device initiates a call request to the called user;

After receiving the response from the called user, the core control device controls a media connection between the calling and called user terminals, and the primary called user enters the call.

The method according to claim 7 or 9, wherein the confidentiality level compatibility means that the media encryption mode corresponding to the current secret level of the calling party and the user is the same, or the call of the called user is clear. The secret level attribute table exists in the presence of the calling user. The former secret level media encryption method has the same level of confidentiality.

The method according to claim 1, wherein the terminal user specifies a secret level of the current call in the call request different from each group of security parameters registered in the core control device. Confidential level.

14. The method according to claim 1, wherein the communication network adopts an IP network architecture, and the core control device adopts a soft switching technology.