SYSTEM AND METHOD FOR END-TO-END ENCRYPTION AND SECURITY INDICATION AT AN ENDPOINT

• US 20150304288A1
• Filed: 08/09/2012
• Published: 10/22/2015
• Est. Priority Date: 03/23/2012
• Status: Active Grant

• Current Assignee: Arlington Technologies, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Avaya Incorporated
• Inventors: Meloche, Jean, Teutsch, Heinz, Yajnik, Shalini, BALASAYGUN, Mehmet
• Granted Patent: US 9,356,917 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Disclosed herein are systems, methods, and non-transitory computer-readable storage media for implementing real-time transport control protocol to obtain an end-to-end encryption and security status of a communication session. The system collects real-time transport control protocol messages associated with a communication session, wherein the real-time transport control protocol messages are generated by devices in the communication session, and wherein the real-time transport control protocol messages include security information associated with the communication session. Then, based on the real-time transport control protocol messages, the system determines a security status associated with the communication session. The system can also generate an indication of the security status associated with the communication session. Further, the system can generate an indication of the security status of a communication session on a per participant basis.

Claims

1. A method comprising:

collecting, via a processor, real-time transport control protocol messages associated with a communication session, wherein the real-time transport control protocol messages are generated by devices in the communication session, and wherein the real-time transport control protocol messages comprise security information associated with the communication session; and

based on the real-time transport control protocol messages, determining a security status associated with the communication session.

2. The method of claim 1, further comprising generating an indication of the security status, wherein the indication comprises at least one of an alert, a sound, an image, a diagram, a report, a display, a response, a message, a visual representation, a multimedia presentation, an announcement, a description, and a summary.

3. The method of claim 2, wherein the indication is based on a display scheme.

4. The method of claim 1, wherein the real-time transport control protocol messages are collected from at least one of a centralized device and a regional collecting device, and wherein the real-time transport control protocol messages are transmitted from the at least one of the centralized device and the regional collecting device to a device in the communication session in response to at least one of a query and a triggering event.

5. The method of claim 1, further comprising displaying a representation of the security status.

6. The method of claim 1, wherein the security status comprises at least one of an encryption status, an encryption strength, playout device characteristics, and a security level.

7. The method of claim 1, wherein the security status is an end-to-end security status of the communication session.

8. The method of claim 1, wherein the security status corresponds to a device associated with a participant in the communication session.

9. The method of claim 1, further comprising, based on the real-time transport control protocol messages, determining a respective security status for each participant in the communication session.

10. The method of claim 1, wherein each of the devices in the communication session relays a respective real-time transport control protocol message from the real-time transport control protocol messages along the communication session.

11. The method of claim 1, wherein the real-time transport control protocol messages are configured to propagate along the communication session.

12. The method of claim 1, wherein the real-time transport control protocol messages further comprise instructions for relaying the real-time transport control protocol messages.

13. The method of claim 1, wherein collecting the real-time transport control protocol messages is based on a triggering event.

14. The method of claim 1, wherein the real-time transport control protocol messages further comprise at least one of a differentiated services trace, a global session identifier, a transcoding and gain table, a signal strength, a topology, an access mode, a real-time transport control protocol packet, encryption information, hardware information, hop-by-hop information, and information related to network characteristics.

15. A system comprising:

a processor; and

a memory having stored therein instructions which, when executed by the processor, cause the processor to perform a method comprising;

collecting real-time transport control protocol messages associated with a communication session, wherein the real-time transport control protocol messages are generated by devices in the communication session, and wherein the real-time transport control protocol messages comprise security information associated with the communication session; and

based on the real-time transport control protocol messages, determining a security status associated with the communication session.

16. The system of claim 15, wherein the memory further stores instructions which result in the method further comprising generating an indication of the security status associated with the communication session.

17. The system of claim 15, wherein the real-time transport control protocol messages are configured to propagate along the communication session.

18. A non-transitory computer-readable storage medium having stored therein instructions which, when executed by a processor, cause the processor to perform a method comprising:

collecting real-time transport control protocol messages associated with a communication session, wherein the real-time transport control protocol messages are generated by devices in the communication session, and wherein the real-time transport control protocol messages comprise security information associated with the communication session; and

based on the real-time transport control protocol messages, determining a security status associated with the communication session.

19. The non-transitory computer-readable storage medium of claim 18, the instructions which, when executed by the processor, cause the processor to perform a method further comprising generating an indication of the security status associated with the communication session.

20. The non-transitory computer-readable storage medium of claim 18, wherein the real-time transport control protocol messages are configured to propagate along the communication session.