Secure voice signaling gateway

• US 7,822,017 B2
• Filed: 11/18/2004
• Issued: 10/26/2010
• Est. Priority Date: 11/18/2004
• Status: Active Grant

• Current Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Original Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Inventors: D'Souza, Scott David, Le Moigne, Olivier
• Primary Examiner(s): Gauthier, Gerald
• Application Number:
  US10/990,472
• Publication Number:
  US 20060104261A1
• Time in Patent Office: 2,168 Days
• Field of Search: 370/352, 370/389, 370/338, 380/270, 380/278, 455/436, 455/423, 455/428, 709/238, 709/246, 713/150, 713/151, 713/153, 713/154, 713/185, 713/202, 726/13, 726/22, 379/88.23, 379/219, 704/270.1
• US Class Current: 370/352
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0414 during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04Q 3/0025 Provisions for signalling

Abstract

Systems and methods of providing secure signaling for voice communications over a public switched voice network (PSTN) are described. The call signaling is received at a first secure voice signaling gateway (SVSG) in which it is encrypted utilizing a security key. The encrypted payload is tunneled from the first SVSG to a second SVSG at a destination network element. The destination SVSG decrypts the payload and passes it on to the destination. According to the invention the communication can be either masqueraded in which the address of the first SVSG is given as the origin or non-masqueraded in which the actual original of the voice communication is retained.

Claims

1. A method of providing secure voice signaling communications between first and second network elements over a packet public switched telephone network (PSTN) comprising:

encrypting a signaling packet payload at the first network element utilizing a security key defining an association between the first and second network elements, wherein the first network element receives the signaling packet payload from a transmission device through a link using SS7 protocols;

transmitting the encrypted packet payload from the first element to the second element through a link only using SS7 protocols; and

decrypting the packet payload at the second network element utilizing the security key.

2. The method as defined in claim I of claim 1, wherein the signaling packet payload and an associated header are encrypted at the first network element and decrypted at the second network element.

3. The method as defined in of claim 2, wherein an address of the first network element is included in the encrypted packet and identifies the point of origin thereof.

4. The method as defined in claim I of claim 1, wherein Global Title Translation (GTT) is performed at the first element to determine which network element in the packet network to send the packet.

5. The method as defined in of claim 3, wherein the encrypted packet is a MTP3 packet.

6. The method as defined in of claim 1, further comprising:

the step of determining whether to discard, encrypt and transmit, or transmit without encryption, received signaling packets.

7. The method as defined in of claim 6, wherein the step of determining is based on a policy which includes criteria, source and destination addresses in the packet network.

8. The method of claim 1, wherein the link using only using SS7 protocols comprises a series of connections, wherein each connection uses only SS7 protocols.

9. An apparatus for providing secure voice signaling communications between first and second network elements over a packet public switched telephone network (PSTN) comprising:

means for encrypting a signaling packet payload at the first network element utilizing a security key defining an association between the first and second network elements, wherein the first network element receives the signaling packet payload from a transmitting device through a link using SS7 protocols;

means for transmitting the encrypted packet payload from the first element to the second element through a link only using SS7 protocols; and

means for decrypting the packet payload at the second network element utilizing the security key.

10. The apparatus as defined in of claim 9, wherein said first and second network elements are secure voice signaling gateway (SVSG) devices.

11. The apparatus as defined in of claim 10, wherein the secure communication is provided by tunneling voice signaling traffic from a first SVSG to a second SVSG through a link using only SS7 protocols.

12. The apparatus as defined in of claim 11, wherein the security key is one of:

a shared secret key;

a public key infrastructure, and

an Internet key exchange.

13. The apparatus of claim 9, wherein the link using only using SS7 protocols comprises a series of connections, wherein each connection uses only SS7 protocols.

14. A secure voice signaling gateway (SVSG) for integration in an SS7 network for providing secure voice signaling communication over a packet public switched telephone network (PSTN), the SVSG comprising:

a first interface for receiving the voice signaling communication through a link using SS7 protocols;

encryption means for encrypting a signaling packet payload of the signaling communication utilizing a security key; and

a transmitting means to transmit the encrypted signaling packet payload via a second interface through a link using only SS7 protocols to an associated SVSG.

15. The SVSG as defined in of claim 14 implemented in a stand alone unit.

16. The SVSG as defined in of claim 14 integrated into voice telephony equipment.

17. The SVSG of claim 14, wherein the link using only using SS7 protocols comprises a series of connections, wherein each connection uses only SS7 protocols.

18. A secure voice signaling gateway (SVSG) for integration in an SS7 network used in providing secure voice signaling communication over a packet public switched telephone network (PSTN), the SVSG comprising:

a first interface for receiving an encrypted signaling packet payload of a voice signaling communication through a link using only SS7 protocols;

decryption means for decrypting the encrypted signaling packet payload; and

a transmitting means to transmit the decrypted signaling packet payload via a second interface to an end system through a link using SS7 protocols.

19. The SVSG as defined in of claim 18 implemented in a stand alone unit.

20. The SVSG as defined in of claim 18 integrated into voice telephony equipment.

21. The SVSG of claim 18, wherein the link using only using SS7 protocols comprises a series of connections, wherein each connection uses only SS7 protocols.