USER EXPERIENCE AND METHOD FOR PROMOTING A LOW-ASSURANCE CALL TO A HIGH-ASSURANCE CALL ON A CALLING DEVICE

• US 20130343543A1
• Filed: 06/25/2013
• Published: 12/26/2013
• Est. Priority Date: 06/25/2012
• Status: Abandoned Application

• Current Assignee: DigiCert Incorporated
• Original Assignee: Mocana Corporation (DigiCert Incorporated)
• Inventors: BLAISDELL, James, WANG, Yingxian, CHEW, Soo-Fei
• Application Number:
  US13/926,753
• Publication Number:
  US 20130343543A1
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 65/1045 Proxies, e.g. for session initiation protocol [SIP]
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04L 65/65 Network streaming protocols, e.g. real-time transport protocol [RTP] or real-time control protocol [RTCP]
• CPC Class Codes: H04L 65/80 Responding to QoS
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/67 Risk-dependent, e.g. selecting a security level depending on risk profiles

Abstract

A low-assurance call on a mobile device to another device may be promoted to a high-assurance call using a user interface. The participants during the call do not need to hang up and start a new high-assurance call. A caller can swipe an icon up a slider, for example, and start a process of promoting the call. The initial low assurance call using SIP servers is terminated but this is transparent to the callers. Once the swipe is performed, a DTLS negotiation is performed between the devices. During this DTLS handshake, which is done directly between the device without involvement of the SIP servers, a key is exchanged. Only the calling devices are aware of this key which is used to encrypt media during the call. Screens on the calling devices show that the call is now high-assurance and security details of the call may also be displayed.

Claims

1. A method of promoting a first-level security call to a second-level security call, the method comprising:

executing the first-level security call between a first mobile device and a second device;

receiving input that the first-level security call is being promoted to a second-level security call;

terminating the first-level security call on the first device and on the second device;

initiating a security negotiation directly between the first device and the second device, wherein only the first device and the second device are involved in the negotiation;

generating a key during the security negotiation, wherein the key is only known to the first device and to the second device; and

initiating the second-level security call using the key to encrypt media in the second-level security call, wherein no external computing devices are utilized.

2. A method as recited in claim 1 wherein said input results from a caller performing an action on a display of the first device or on the second device.

3. A method as recited in claim 1 wherein the security negotiation is based on Datagram Transport Layer Security (DTLS).

4. A method as recited in claim 1 further comprising:

notifying a Session Initiation Protocol (SIP) server when the first-level security call is terminated.

5. A method as recited in claim 1 wherein initiating a security negotiation further comprises:

displaying on the first device a message that security parameters are being negotiated.

6. A method as recited in claim 1 wherein initiating the second-level security call further comprises:

changing an icon on the first device and on the second device indicating that the call is second-level security.

7. A method as recited in claim 1 further comprising:

displaying details of the second-level security call on the first device and on the second device.

8. A method as recited in claim 1 wherein the first-level security call is a low assurance call and the second-level security call is a high assurance call.

9. A device for making a voice-over-IP call, the device comprising:

means for executing a first-level security call to a second device;

means for receiving input that the first-level security call is being promoted to a second-level security call, said input resulting from a user action on the device;

means for terminating the first-level security call with the second device;

means for initiating a security negotiation directly with the second device, wherein only the device and the second device are involved in the negotiation;

means for generating a key during the security negotiation, wherein the key is only known to the device and to the second device; and

means for initiating the second-level security call using the key to encrypt media in the second-level security call, wherein no external computing devices are utilized.