Communication device for providing security in a group communication network

• US 7,069,031 B2
• Filed: 11/08/2001
• Issued: 06/27/2006
• Est. Priority Date: 03/03/2000
• Status: Expired due to Term

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Maggenti, Mark, Rosen, Eric, Crockett, Douglas M.
• Primary Examiner(s): Urban, Edward F.
• Assistant Examiner(s): NGUYEN, THUAN T
• Application Number:
  US10/007,115
• Publication Number:
  US 20020055366A1
• Time in Patent Office: 1,692 Days
• Field of Search: 455/517, 455/11.1, 455/518, 455/519, 455/520, 455/527, 455/73, 455/550.1, 455/553.1, 455/561, 455/522, 455/41.2, 455/41.3, 455/13.4, 455/15
• US Class Current: 455/517
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 65/1046 Call controllers; Call servers
• CPC Class Codes: H04L 65/403 Arrangements for multi-party communication, e.g. for conferences data switching systems for conference H04L12/18; arrangements for connecting several subscribers to a common circuit, i.e. affording conference facilities H04M3/56; television conferencing systems H04N7/15
• CPC Class Codes: H04L 65/4061 Push-to services, e.g. push-to-talk or push-to-video
• CPC Class Codes: H04W 4/10 Push-to-Talk [PTT] or Push-On-Call services
• CPC Class Codes: H04W 76/45 for Push-to-Talk [PTT] or Push-to-Talk over cellular [PoC] services

Abstract

A method and apparatus for providing security in a group communication network provides for receiving an encryption key, encrypting media for transmission to a controller using the received encryption key, the encrypted media being directed to another communication device, and communicating the encrypted media to the controller. In one embodiment, the communicating includes wireless communication. The method and apparatus further provides for receiving encrypted media from a controller and blocking the encrypted media if the communication device is not enabled to receive encrypted-media transmission, or if the media is not encrypted based on an encryption key previously specified by the communication device. In another aspect, the communication device is a push-to-talk (PTT) device.

Claims

1. In a communications device, a method for providing security in a group communication network, the method comprising:

receiving an encryption key;

encrypting media for transmission to a controller using the received encryption key, the encrypted media being directed to another communication device;

communicating the encrypted media to the controller, the communicating including wireless communication; and

wherein encrypted traffic includes additional headers used to;

synchronize an encryption/decryption process;

accommodate late synchronization; and

confirm that a sender and receiver are using identical traffic encryption keys and support secure communications and if the communication device receives media traffic that is not encrypted on a net for which it is configured to encrypt or if the traffic is not decrypted correctly, the communication device signals an alert and mutes traffic.

2. The method of claim 1, wherein the receiving includes receiving the encryption key from a security module in the network.

3. The method of claim 1, wherein the communication device is a push-to-talk (PTT) wireless communication device.

4. The method of claim 1, further comprising:

receiving encrypted media from a controller; and

blocking the encrypted media if the communication device is not enabled to receive encrypted-media transmission.

5. The method of claim 1, further comprising:

receiving encrypted media from a controller; and

blocking the encrypted media if the media is not encrypted based on an encryption key previously specified by the communication device.

6. In a communications device, a computer-readable medium embodying a method for providing security in a group communication network, the method comprising:

receiving an encryption key;

encrypting media for transmission to a controller using the received encryption key, the encrypted media being directed to another communication device;

communicating the encrypted media to the controller, the communicating including cellular communication; and

wherein encrypted traffic includes additional headers used to;

synchronize an encryption/decryption process;

accommodate late synchronization; and

confirm that a sender and receiver are using identical traffic encryption keys and support secure communications and if the communication device receives media traffic that is not encrypted on a net for which it is configured to encrypt or if the traffic is not decrypted correctly, the communication device signals an alert and mutes traffic.

7. The method of claim 6, further comprising:

receiving encrypted media from a controller; and

blocking the encrypted media if the communication device is not enabled to receive encrypted-media transmission.

8. The method of claim 6, further comprising:

receiving encrypted media from a controller; and

blocking the encrypted media if the media is not encrypted based on an encryption key previously specified by the communication device.

9. A communication device for providing security in a group communication network, comprising:

means for receiving an encryption key;

means for encrypting media for transmission to a controller using the received encryption key, the encrypted media being directed to another communication device;

means for communicating the encrypted media to the controller, the communicating including cellular communication; and

wherein encrypted traffic includes additional headers used to;

synchronize an encryption/decryption process;

accommodate late synchronization; and

confirm that a sender and receiver are using identical traffic encryption keys and support secure communications and if the communication device receives media traffic that is not encrypted on a net for which it is configured to encrypt or if the traffic is not decrypted correctly, the communication device signals an alert and mutes traffic.

10. The communication device of claim 9, further comprising:

means for receiving encrypted media from a controller; and

means for blocking the encrypted media if the communication device is not enabled to receive encrypted-media transmission.

11. The communication device of claim 9, further comprising:

means for receiving encrypted media from a controller; and

means for blocking the encrypted media if the media is not encrypted based on an encryption key previously specified by the communication device.

12. A communication device for providing security in a group communication network, the communication device comprising:

a receiver to receive an encryption key;

a processor to encrypt media for transmission to a controller using the received encryption key, the processor being communicatively coupled to the receiver;

a transmitter communicatively coupled to the processor to communicate the encrypted media to the controller, the communicating including wireless communication; and

wherein encrypted traffic includes additional headers used to;

synchronize an encryption/decryption process;

accommodate late synchronization; and

confirm that a sender and receiver are using identical traffic encryption keys and support secure communications and if the communication device receives media traffic that is not encrypted on a net for which it is configured to encrypt or if the traffic is not decrypted correctly, the communication device signals an alert and mutes traffic.

13. The communication device of claim 12, wherein the communication device is a push-to-talk (PTT) cellular communication device.

14. The communication device of claim 12, further comprising:

a receiver to receive encrypted media from a controller; and

a processor to block the encrypted media if the communication device is not enabled to receive encrypted-media transmission.

15. The encryption key previously specified by the communication device of claim 14, wherein the communication device is a push-to-talk (PTT) device.

16. The communication device of claim 12 further comprising:

a receiver to receive encrypted media from a controller; and

a processor to block the encrypted media if the media is not encrypted based on an encryption key previously specified by the communication device.

17. The communication device of claim 16, wherein the communication device is a push-to-talk (PTT) device.