Virtual private switched telecommunications network

• US 6,879,671 B2
• Filed: 08/27/2003
• Issued: 04/12/2005
• Est. Priority Date: 08/27/2003
• Status: Expired due to Fees

• Current Assignee: SecureLogix Corporation
• Original Assignee: SecureLogix Corporation
• Inventors: Smith, Kirk E., Pickens, Keith S., Heilmann, Craig, Schmid, Greg
• Primary Examiner(s): Bui, Bing Q.
• Application Number:
  US10/649,204
• Publication Number:
  US 20050047570A1
• Time in Patent Office: 594 Days
• Field of Search: 379/112.39, 379/189, 379/198, 379/199, 379/200, 379/221.15, 379/901
• US Class Current: 379/189
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04M 2207/35 virtual private networks
• CPC Class Codes: H04M 2242/22 Automatic class or number identification arrangements
• CPC Class Codes: H04M 3/2218 Call detail recording
• CPC Class Codes: H04M 3/2281 Call monitoring, e.g. for law enforcement purposes; Call tracing; Detection or prevention of malicious calls
• CPC Class Codes: H04M 3/42059 Making use of the calling party identifier
• CPC Class Codes: H04M 3/42102 Making use of the called party identifier
• CPC Class Codes: H04M 7/009 in systems involving PBX or KTS networks

Abstract

A system and method to provide secure communication across the untrusted public switched telephone network includes a set of rules in a security policy which are implemented by a virtual private switched telecommunications network (VPSTN). The VPSTN provides for intercepting voice calls and modifying their set-up to include a request for bearer capability to support a data call.

Claims

1. A system for providing secure communication of a voice call placed across a PSTN as a data call, wherein secure is understood to refer to the use of encryption to provide privacy and security, a voice call is understood to refer to a call using a bearer service that is circuit mode, with speech or 3.1 kHz audio information transfer capability, and user information layer 1 protocol G.711 mu-law or A-law, and a data call is understood to refer to a call using a bearer service that is circuit mode, with either 64 Kbps information transfer rate or 64 Kbps information transfer rate adapted to 56 Kbps, that uses unrestricted or restricted digital information transfer capability, said system comprising:

a security policy including rules defining a call to be conducted in a secure mode;

a VPSTN for implementing said rules in said security policy and initiating encryption of the call using a secure mode selected from a predetermined set of secure modes and placing the call across the PSTN;

said VPSTN including an in-line device for intercepting, identifying, modifying, and forwarding the setup message of the call identified by said security policy to be conducted in a secure mode;

said identification of the call setup message including determining whether the call setup message includes a request for bearer capability to support a voice call;

said modification of the call setup message including changing the call setup message from a request for bearer capability to support a voice call to a call setup message with a request for bearer capability to support a data call;

said forwarding of the call setup message including passing the call setup message on toward the intended destination.

2. The system as defined in claim 1 wherein said VPSTN also provides for initiating an encryption of the voice call using another secure mode selected from said predetermined set of secure modes and placing another data call should a prior attempt to place the call across the PSTN as a data call fail.

3. The system as defined in claim 2 wherein said VPSTN also provides for initiation of encryption of the voice call in a voice secure mode should all attempts at placing the call across the PSTN as a data call fail.