Call encryption systems and methods

Patent metadata

Field	Value
Publication number	US-2016366115-A1
Application number	US-201514734939-A
Country	US
Kind code	A1
Filing date	Jun 9, 2015
Priority date	Jun 9, 2015
Publication date	Dec 15, 2016
Grant date	—

Abstract

Techniques described herein may be used to encrypt a telephone call between users. User devices (e.g., smart phones) may be connected to encryption relay devices that operate as relays between headsets worn by the user and the user devices. As information passes from the headset toward a corresponding user device, an encryption relay device may encrypt the information before the information reaches the user device so that the user device transmits encrypted call information to the other user participating in the call. When encrypted information is received, and travels from the user device to the headset, the encryption relay device may decrypt the information before it reaches the headset. Thus, the techniques described herein provide an end-to-end encryption solution to telephone calls.

First claim

What is claimed is:

1 . A method performed by an encryption relay device, comprising:
detecting, by the an encryption relay device, a call between a user device, connected to the encryption relay device, and another user device, which is connected to a second encryption relay device; inserting, by the encryption relay device, audio signals within the call, the audio signals encoding information used to perform a key exchange with the second encryption relay device to exchange one or more encryption keys for the call receiving, by the encryption relay device and from the user device, encrypted call information corresponding to the call; decrypting, by the encryption relay device, the encrypted call information based on the one or more encryption keys, to obtain a decrypted version of call audio; receiving, by the encryption relay device, call information originating from a user of the user device; encrypting, by the encryption relay, the call information originating from the user, based on the one or more encryption keys; and communicating, by the encryption relay device, the encrypted call information, originating from the user, to the user device to relay the encrypted call information, originating from the user, as part of the call.

2 . The method of claim 1 , wherein:
the encryption relay device is connected to the user device via a first short-range wireless interface, and the encryption relay device is connected to a headset device via a second short-range wireless interface.

3 . The method of claim 1 , further comprising:
storing the one or more encryption keys; and deleting the one or more encryption keys in response to a command from the user to clear a memory of the computing device.

4 . The method of claim 1 , further comprising:
generating an encryption key for encrypting and decrypting call information based on a physical arrangement of manually programmable features of the encryption relay device.

5 . The method of claim 1 , further comprising:
receiving call information, originating from the other user device, that includes a timestamp; determining a duration of time defined by a difference between the timestamp and a current time; and determining whether a third-party device is participating in the call based on the duration of time.

6 . The method of claim 1 , further comprising:
receiving an audio signal originating from the second encryption relay device; detecting an identity certificate embedded in the audio signal; and authenticating the second encryption relay device based on a comparison of information included in the identity certificate with a manufacturer public key stored locally by the encryption relay device.

7 . The method of claim 1 , further comprising:
performing a Diffie Hellman procedure to determine a symmetric encryption key between the encryption relay device and the second encryption relay device.

8 . The method of claim 1 , further comprising:
clearing a memory of the encryption relay device based on an input from the user; creating an encryption key based on a dial code physically programmed into the encryption relay device by the user; using the encryption key to perform an audio CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) procedure to verify whether a third party device is participating in the call.

9 . The method of claim 1 , wherein the audio signals within the call are ultrasonic audio signals.

10 . An encryption relay device comprising circuitry to:
detect a call between a user device, connected to the encryption relay device, and another user device, which is connected to a second encryption relay device; insert audio signals within the call, the audio signals encoding information used to perform a key exchange with the second encryption relay device to exchange one or more encryption keys for the call receive, from the user device, encrypted call information corresponding to the call; decrypt the encrypted call information based on the one or more encryption keys, to obtain a decrypted version of call audio; receive call information originating from a user of the user device; encrypt the call information originating from the user, based on the one or more encryption keys; and communicate the encrypted call information, originating from the user, to the user device to relay the encrypted call information, originating from the user, as part of the call.

11 . The computing device of claim 10 , wherein:
the encryption relay device is connected to the user device via a first short-range wireless interface, and the encryption relay device is connected to a headset device via a second short-range wireless interface.

12 . The computing device of claim 10 , wherein the circuitry further to:
storing the one or more encryption keys; and deleting the one or more encryption keys in response to a command from the user to clear a memory of the computing device.

13 . The computing device of claim 10 , wherein the circuitry further to:
generate an encryption key for encrypting and decrypting call information based on a physical arrangement of manually programmable features of the encryption relay device.

14 . The computing device of claim 10 , wherein the circuitry further to:
receive call information, originating from the other user device, that includes a timestamp; determine a duration of time defined by a difference between the timestamp and a current time; and determine whether a third-party device is participating in the call based on the duration of time.

15 . The computing device of claim 10 , wherein the circuitry further to:
receive an audio signal originating from the second encryption relay device; detect an identity certificate embedded in the audio signal; and authenticate the second encryption relay device based on a comparison of information included in the identity certificate with a manufacturer public key stored locally by the encryption relay device.

16 . The computing device of claim 10 , wherein the circuitry further to:
performing a Diffie Hellman procedure to determine a symmetric encryption key between the encryption relay device and the second encryption relay device.

17 . The computing device of claim 10 , wherein the circuitry further to:
clear a memory of the encryption relay device based on an input from the user; create an encryption key based on a dial code physically programmed into the encryption relay device by the user; use the encryption key to perform an audio CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) procedure to verify whether a third party device is participating in the call.

18 . A computing device comprising circuitry to:
detect, via a first interface, a call involving the computing device; insert, via the first interface, audio signals within the call, the audio signals encoding information used to perform a key exchange, to exchange one or more encryption keys for the call; receive, via the first interface, encrypted call information corresponding to the call; decrypt, via an encryption module, the encrypted call information based on the one or more encryption keys, to obtain a decrypted version of call audio; receive, via a second interface, call information originating from a user; encrypt, via the encryption module, the call information originating from the user, based on the one or more encryption keys; and communicate, via the first information, the encrypted call informati

Assignees

• Verizon Patent & Licensing Inc

Inventors

• Khalid Mohammad Raheel
• Caceres Manuel Enrique
• Caldeira De Andrada Mauricio Pati
• Berman Paul

Classifications

• H04L9/0819 Primary

  Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) (network architectures or network communication protocols for key distribution in a packet data network H04L63/062) · CPC title

• H04L9/0816

  Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use · CPC title

• H04L2209/80

  Wireless · CPC title

• H04L9/0841

  involving Diffie-Hellman or related key agreement protocols · CPC title

• H04L63/0471

  applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding · CPC title