Virtual private switched telecommunications network

• US 20050025302A1
• Filed: 07/23/2003
• Published: 02/03/2005
• Est. Priority Date: 07/23/2002
• Status: Abandoned Application

• Current Assignee: SecureLogix Corporation
• Original Assignee: SecureLogix Corporation
• Inventors: Pickens, Keith S., Heilmann, Craig, Schmid, Greg, Smith, Kirk E.
• Application Number:
  US10/625,311
• Publication Number:
  US 20050025302A1
• Time in Patent Office: Days
• US Class Current: 379/221.150
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04M 2207/35 virtual private networks
• CPC Class Codes: H04M 3/16 with lock-out or secrecy provision in party-line systems
• CPC Class Codes: H04M 7/0093 signalling arrangements in networks
• CPC Class Codes: H04M 7/129 Details of providing call progress tones or announcements
• CPC Class Codes: H04M 7/1295 Details of dual tone multiple frequency signalling

Abstract

A system and method to provide secure communication across the untrusted public switched telephone network includes a set of rules in a security policy which are implemented by a virtual private switched telecommunications network (VPSTN). The VPSTN provides for intercepting voice calls and modifying their set-up to include a request for bearer capability to support a data call.

Claims

1. A system for providing secure communication of a voice call placed across a PSTN through a telephony resource, wherein a voice call is understood to refer to a call using a bearer service that is circuit mode, with either 64 Kbps information transfer rate or 64 Kbps information transfer rate adapted to 56 Kbps, that uses unrestricted or restricted digital information transfer capability, said system comprising:

a security policy including rules defining a voice call to be conducted in a secure mode;

a VPSTN for implementing said rules in said security policy and initiating encryption of the voice call using a secure mode selected from a predetermined set of secure modes and placing the call across the PSTN;

said VPSTN including an in-line device for intercepting and modifying the set-up of a voice call identified by said security policy to be conducted in a secure mode;

said modification of said call set-up including changing said call set-up from a request for bearer capability to support a voice call to a call set-up including a request for bearer capability to support a data call, said data call being understood to refer to a call using a bearer service that is circuit mode, with speech or 3.1 kHz audio information transfer capability and user information layer 1 protocol G.711 mu-law or A-law.

2. The system as defined in claim 1 wherein said VPSTN also provides for initiating an encryption of the voice call using another secure mode selected from said predetermined set of secure modes and placing another data call should a prior attempt to place the call across the PSTN as a data call fail.

3. The system as defined in claim 2 wherein said VPSTN also provides for initiation of encryption of the voice call in a voice call secure mode should all attempts at placing the call across the PSTN as a data call fail.

4. A method for providing secure communication of a voice call placed across a PSTN through a telephony resource, wherein a voice call is understood to refer to a call using a bearer service that is circuit mode, with either 64 Kbps information transfer rate or 64 Kbps information transfer adapted to 56 Kbps, that uses unrestricted or restricted digital information transfer capability, said method comprising the steps of:

establishing a security policy including rules which define a voice call to be conducted in a secure mode;

using a VPSTN to implement said rules in said security policy and initiating encryption of the voice call using a secure mode selected from a predetermined set of secure modes and placing the call across the PSTN, said VPSTN including an in-line device for intercepting and modifying the set-up of a voice call identified by said security policy to be conducted in a secure mode;

said step of using a VPSTN to modify said set-up of those voice calls identified by said security policy to be conducted in a secure mode includes changing said set-up from a request for bearer capability to support a voice call to a call set-up including a request for bearer capability to support a data call, said data call being understood to refer to a call using a bearer service that is circuit mode, with speech or 3.1 audio kHz audio information transfer capability and user information layer 1 protocol G.711 mu-law or A-law.

5. The method as defined in claim 4 wherein said VPSTN also provides for initiating an encryption of the voice call using another secure mode selected from said predetermined set of secure modes and placing another data call should a prior attempt to place the call across the PSTN as a data call fail.

6. The method as defined in claim 5 wherein said VPSTN also provides for initiation of encryption of the voice call in a voice call secure mode should all attempts at placing the call across the PSTN as a data call fail.