Methods and apparatus for synchronizing decryption state with remote encryption state

Patent metadata

Field	Value
Publication number	US-9722976-B1
Application number	US-201514841276-A
Country	US
Kind code	B1
Filing date	Aug 31, 2015
Priority date	Feb 26, 2015
Publication date	Aug 1, 2017
Grant date	Aug 1, 2017

Abstract

Methods and apparatus for supporting secure packet communications, e.g., SRTP, which use implicit index numbers for synchronization and sequencing of received packets. The secure communications methods and apparatus having an adaptive index learning mode of operation and a non-adaptive index learning mode of operation. The adaptive index learning mode of operation being used to determine a correct estimated sequence number roll over counter number and the implicit index number for one of a plurality of secure packets received when an adaptive index learning process condition is satisfied.

First claim

What is claimed is:

1. A secure communications method, the method comprising:
receiving signaling information corresponding to a secure real time packet stream;
receiving a plurality of encrypted secure real time packets, said plurality of packets being a part of the secure real time packet stream, said secure real time packet stream using an implicit packet index for sequencing of packets in said secure real time packet stream, said implicit packet index being generated from a sequence number and a sequence number roll over counter number, said sequence number for each of said plurality of packets being included in each of said packets, said roll over counter number for each of said plurality of packets not being included with said packets;
determining, based at least in part on the received signaling information, whether an adaptive index learning mode of operation or a second mode of operation is to be used for processing packets in said secure real time packet stream, said second mode of operation being a mode of operation in which a step performed in said adaptive mode of operation is bypassed; and
wherein when it is determined that said adaptive index learning mode of operation is to be used storing in memory an indication that the adaptive index learning mode of operation is to be used and using an adaptive index learning process to determine a correct sequence number roll over counter number for one of said plurality of received packets, said indication that the adaptive index learning mode of operation is to be used that is stored in said memory is a flag stored in said memory that is set.

2. The method of claim 1 further including:
after determining said correct sequence number roll over counter number for one of said plurality of received packets storing in said memory an indication that said adaptive index learning mode of operation is not to be used; and
switching to the non-adaptive mode of operation for processing packets in said secure real time packet stream.

3. The method of claim 1 wherein when it is determined that said adaptive index learning mode of operation is not to be used storing in said memory an indication that the adaptive index learning mode of operation is not to be used.

4. The method of claim 3 further including operating in said second mode of operation to process the received plurality of packets and determining the correct sequence number roll over counter number for packets being processed when it is determined that the adaptive index learning mode of operation is not to be used.

5. The method of claim 1 wherein the indication that the adaptive index learning mode of operation is not to be used that is stored in said memory is the flag stored in said memory that is cleared.

6. The method of claim 1 wherein said signaling information includes at least one of the following: session control signaling information, call flow signaling information or decryption device status signaling information.

7. The method of claim 6 wherein said plurality of encrypted secure real time packets are part of a Voice Over Internet Protocol call.

8. The method of claim 1 , wherein said signaling information includes a control signal indicating a switchover of the processing of said packet stream from an active decryption device to a standby decryption device, said standby decryption device receiving said packet after said switchover.

9. The method of claim 1 , wherein said plurality of encrypted secure real time packets are part of a Voice Over Internet Protocol call received at a standby Session Border Controller and wherein determining, based at least in part on the received signaling information, whether said adaptive index learning mode of operation or said second mode of operation is to be used for processing packets in said secure real time packet stream includes determining that said adaptive index learning mode of operation is to be used when said signaling information includes status information indicating that an active Session Border Controller servicing said VOIP call has failed.

10. The method of claim 1 ,
wherein said plurality of encrypted secure real time packets are part of a Voice Over Internet Protocol call; and
wherein determining, based at least in part on the received signaling information, whether said adaptive index learning mode of operation or said second mode of operation is to be used for processing packets in said secure real time packet stream includes determining that said adaptive index learning mode of operation is to be used when said signaling information includes call flow signaling information indicating that said VOIP call is resuming after having been placed on hold.

11. The method of claim 1 ,
wherein said plurality of encrypted secure real time packets are part of a Voice Over Internet Protocol call; and
wherein determining, based at least in part on the received signaling information, whether said adaptive index learning mode of operation or said second mode of operation is to be used for processing packets in said secure real time packet stream includes determining that said adaptive index learning mode of operation is to be used when said signaling information includes status information indicating that the processing of said VOIP call is to be switched from an active Session Border Controller servicing said VOIP call to a standby Session Border Controller.

12. The method of claim 11 , wherein no mirroring of sequence number roll over counter number information is performed between the active Session Border Controller and the standby Session Border Controller.

13. A device comprising:
a receiver configured to receive signaling information corresponding to a secure real time packet stream and receive a plurality of encrypted secure real time packets, said plurality of packets being a part of the secure real time packet stream, said secure real time packet stream using an implicit packet index for sequencing of packets in said secure real time packet stream, said implicit packet index being generated from a sequence number and a sequence number roll over counter number, said sequence number for each of said plurality of packets being included in each of said packets, said roll over counter number for each of said plurality of packets not being included with said packets;
a processor that determines, based at least in part on the received signaling information, whether an adaptive index learning mode of operation or a second mode of operation is to be used for processing packets in said secure real time packet stream, said second mode of operation being a mode of operation in which a step performed in said adaptive mode of operation is bypassed;
memory, said memory storing an indication that the adaptive index learning mode of operation is to be used when the processor determines that said adaptive index learning mode of operation is to be used, the indication that the adaptive index learning mode of operation is to be used that is stored in said memory is a flag stored in said memory that is set in response to a determination by the processor that said adaptive index learning mode of operation is to be used; and
wherein said processor uses an adaptive index learning process to determine a correct sequence number roll over counter number for one of said plurality of received packets, when said processor determines that said adaptive index learning mode of operation is to be used.

14. The device of claim 13 , wherein said memory stores an indication that said adaptive index learning mode of operation is not to be used after determining said correct sequence number roll over c

Assignees

• Sonus Networks Inc

Inventors

• Li Shiping
• Motagi Prashant
• Khederian Gregory Paul

Classifications

• H04M7/006

  Networks other than PSTN/ISDN providing telephone service, e.g. Voice over Internet Protocol (VoIP) , including next generation networks with a packet-switched transport layer (H04L65/00 takes precedence; aspects not specific to the type of network H04M3/00; special services in those networks H04M3/42) · CPC title

• G06N99/005

  Physics · mapped topic

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04W12/08

  Access security · CPC title

• H04L65/60

  Network streaming of media packets · CPC title