SYSTEM AND METHOD FOR SECURING TELECOMMUNICATIONS TRAFFIC DATA

• US 20160255057A1
• Filed: 05/06/2016
• Published: 09/01/2016
• Est. Priority Date: 11/09/2013
• Status: Active Grant

• Current Assignee: Uniscon Universal Identity Control Gmbh (T?V S?d AG)
• Original Assignee: Uniscon Universal Identity Control Gmbh (T?V S?d AG)
• Inventors: JGER, Hubert
• Granted Patent: US 10,257,168 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/1475 Passive attacks, e.g. eavesdropping or listening without modification of the traffic monitored
• CPC Class Codes: H04L 63/308 retaining data, e.g. retaining successful, unsuccessful communication attempts, internet access, or e-mail, internet telephony, intercept related information or call content
• CPC Class Codes: H04L 9/008 involving homomorphic encryption
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic

Abstract

A method and system are provided for securing telecommunications traffic data. A method is provided for transmitting messages via a telecommunications network between a number of subscribers by means of a telecommunications service, wherein the telecommunications service receives at least one first message of individual first size from at least one first subscriber to the telecommunications service that is intended for at least one second subscriber of the telecommunications service. In reaction to receiving a message, the telecommunications service sends at least one second message to the at least one second subscriber, wherein the at least one second message obtains a second size. The first size cannot be conclusively deduced from the second size.

Claims

1. A method for transmission of messages (N1, N2) via a telecommunications network between a number of subscribers (T1, T2) by means of a telecommunications service (5, 10), wherein

the telecommunications service (5, 10) receives at least a first message (N1) of individual first size (s1) of at least one first subscriber (T1) of the telecommunications service (10), which is designated for at least one second subscriber (T2) of the telecommunications service, and

the telecommunications service (5, 10), in response to the receipt of a message (N1), sends at least a second message (N2) to the at least one second subscriber (T2), wherein the at least one second message (N2) comprises a second size (s2), which has a relation (M) to the first size (s1), which is irreversibly unique.

2. The method of claim 1, wherein the relation (M) represents a mapping rule, according to which each size (s1) is mapped to a size category from a predetermined number (L) of size categories, wherein each size category comprises more than one first size (s1), and wherein the second size (s2) obtains a value (sk) from that size category, to which the first size (s1) is mapped, wherein the value (sk), in particular, corresponds to the maximum value (skmax) of the size category.

3. The method of claim 2, wherein the number (L) of the size categories is one, and the value (sk) corresponds to the maximum size (s1_max) of the first message (N1).

4. The method of claim 1, wherein the first message (N1) is assigned to address information with respect to the at least one second subscriber (T2) only in encrypted form, which preferably only can be decrypted by the telecommunications service (10).

5. The method of claim 1, wherein the second message (N2) is assigned to information with respect to the first subscriber (T1) only in encrypted form, which preferably only can be decrypted by the at least one second subscriber (T2).

6. The method of claim 1, wherein the telecommunications service (10) operates in a secured environment (U).

7. The method of claim 1, wherein the first message (N1) is encrypted in a homomorphous manner, and the second message (N2) is also encrypted in a homomorphous manner, wherein preferably the encryption cannot be modified by the telecommunications service (10).

8. The method of claim 1, wherein the at least one second message (N2) has the same payload as the at least one first message (N1).

9. A method for securing telecommunications traffic data, which during use of at least one telecommunications service (10) by a number of subscribers (T1, T2) is incurred at a telecommunications service provider (5) of the telecommunications service (10), wherein the telecommunications service (10) uses the method of claim 1.

10. A data processing system, which is configured for execution of the method of claim 1.