System and method for securing telecommunications traffic data

• US 10,257,168 B2
• Filed: 05/06/2016
• Issued: 04/09/2019
• Est. Priority Date: 11/09/2013
• Status: Active Grant

• Current Assignee: Uniscon Universal Identity Control Gmbh (T?V S?d AG)
• Original Assignee: Uniscon Universal Identity Control Gmbh (T?V S?d AG)
• Inventors: Jager, Hubert
• Primary Examiner(s): Truong, Thanhnga B
• Application Number:
  US15/148,501
• Publication Number:
  US 20160255057A1
• Time in Patent Office: 1,068 Days
• Field of Search: 713168, 713153, 370338, 370410, 711170, 705 79, 455466, 455433, 380 30
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/1475 Passive attacks, e.g. eavesdropping or listening without modification of the traffic monitored
• CPC Class Codes: H04L 63/308 retaining data, e.g. retaining successful, unsuccessful communication attempts, internet access, or e-mail, internet telephony, intercept related information or call content
• CPC Class Codes: H04L 9/008 involving homomorphic encryption
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic

Abstract

A method and system are provided for securing telecommunications traffic data. A method is provided for transmitting messages via a telecommunications network between a number of subscribers by means of a telecommunications service, wherein the telecommunications service receives at least one first message of individual first size from at least one first subscriber to the telecommunications service that is intended for at least one second subscriber of the telecommunications service. In reaction to receiving a message, the telecommunications service sends at least one second message to the at least one second subscriber, wherein the at least one second message obtains a second size. The first size cannot be conclusively deduced from the second size.

Claims

1. A method for transmission of messages (N1, N2) via a telecommunications network between a number of subscribers (T1, T2) by means of a telecommunications service (5, 10), wherein

the telecommunications service (5, 10) receives a first message (N1) of individual first size (s1) of at least one first subscriber (T1) of the telecommunications service (10), which is designated for at least one second subscriber (T2) of the telecommunications service,

the telecommunications service (5, 10), in response to the receipt of the first message (N1), sends a second message (N2) to the at least one second subscriber (T2), wherein the second message (N2) has a second size (s2), the second size having a relation (M) to the first size (s1) which is irreversibly unique, such that the size of the first message (N1) cannot unambiguously be deduced from the size of the second message (N2),

the relation (M) represents a mapping rule, according to which the first size (s1) is mapped to a size category from a predetermined number (L) of size categories, wherein each size category comprises more than one first size (s1), and wherein the second size (s2) obtains a value (sk) from that size category, to which the first size (s1) is mapped, and

the at least one second message (N2) has the same payload as the first message (N1).

2. The method of claim 1, wherein the value (sk) corresponds to the maximum value (skmax) of the size category.

3. The method of claim 2, wherein the number (L) of the size categories is one, and the value (sk) corresponds to the maximum size (s1_max) of the first message (N1).

4. The method of claim 1, wherein the first message (N1) is assigned to address information with respect to the at least one second subscriber (T2) only in encrypted form, which preferably only can be decrypted by the telecommunications service (10).

5. The method of claim 1, wherein the second message (N2) is assigned to information with respect to the first subscriber (T1) only in encrypted form, which preferably only can be decrypted by the at least one second subscriber (T2).

6. The method of claim 1, wherein the telecommunications service (10) operates in a secured environment (U).

7. The method of claim 1, wherein the first message (N1) is encrypted in a homomorphous manner, and the second message (N2) is also encrypted in a homomorphous manner, wherein preferably the encryption cannot be modified by the telecommunications service (10).