SYSTEMS AND METHODS FOR ENCRYPTED MOBILE VOICE COMMUNICATIONS

• US 20130252585A1
• Filed: 02/22/2013
• Published: 09/26/2013
• Est. Priority Date: 05/25/2006
• Status: Active Grant

• Current Assignee: CellTrust Corporation
• Original Assignee: CellTrust Corporation
• Inventors: Moshir, Sean, Moshir, Kevin, Khanban, Ali A., Lindsay, Joshua
• Granted Patent: US 8,862,129 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04M 3/42348 Location-based services which utilize the location information of a target
• CPC Class Codes: H04M 3/4938 comprising a voice browser which renders and interprets, e.g. VoiceXML
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

A method of establishing a registration between a mobile device and a server includes receiving at the server an SMS or MMS from a mobile device. The server receives the phone number of the mobile device, verifies the phone number of the mobile device against a whitelist to authorize a registration between the mobile device and the server, and verifies a secure identification code that is input at the mobile device. The secure identification code is provided to a user of the mobile phone before the mobile device is registered with the server. The secure identification code can be provided to the user via an administrator of the server. An encryption key established between the mobile device and the server can be used to provide or enhance encryption of a voice communication, such as a VoIP communication, made using the mobile device.

Claims

1. A method of establishing a registration between a mobile device and a server, the method comprising:

receiving at a server a short messaging service (SMS) or multimedia messaging service (MMS) message originated from a mobile device;

with the server, receiving the phone number of the mobile device;

with the server, verifying the phone number of the mobile device against a whitelist to authorize a registration between the mobile device and the server; and

with the server, verifying a secure identification code that is input at the mobile device, wherein the secure identification code is provided to a user of the mobile device before the mobile device is registered with the server.

2. The method of claim 1 wherein the secure identification code is provided to the user via an administrator of the server.

3. The method of claim 1 further comprising establishing an encryption key between the mobile device and the server.

4. The method of claim 3 wherein the encryption key is used to provide or enhance encryption of a voice communication made using the mobile device.

5. The method of claim 4 wherein the voice communication is a Voice over Internet Protocol (VoIP) communication.

6. The method of claim 3 further comprising renewing the encryption key based on one or more policies determined by an administrator of the server.

7. The method of claim 1 further comprising the step of taking one or more affirmative steps to facilitate routing of one or more messages between the mobile device and the server.

8. The method of claim 4 further comprising:

measuring network conditions of a mobile phone network used by the mobile device; and

based on the measured network conditions, selecting a suitable codec for handling at least one of secure calls, conferencing, video, audio, multimedia and streaming on the mobile phone network.

9. A method of establishing a registration between a server and a Voice over Internet Protocol (VoIP) application on a mobile device having an associated phone number, the method comprising:

at a mobile device, using a server public key to encrypt registration information, wherein the registration information includes at least one of a public key for a VoIP application and a secure identification code known to the server and provided to a user of the mobile device;

using a short messaging service (SMS) message or multimedia messaging service (MMS) message to send the encrypted registration information from the mobile device to the server, wherein the SMS or MMS message provides to the server the telephone number associated with the mobile device for comparison to telephone numbers known to the server;

wherein the encrypted registration information can be decrypted at the server using a server private key, and the secure identification code and the telephone number associated with mobile device can be verified by the server.

10. The method of claim of 9 wherein at least one of the encrypted registration information and decrypted registration information processed using symmetric encryption.

11. The method of claim 9 wherein the secure identification code is provided to the user of the mobile device via an administrator of the server.

12. The method of claim 9 further comprising:

if the secure identification code and phone number associated with the mobile device are verified, sending to the mobile device an encryption key for communication between the server and the VoIP application on the mobile device.

13. A method of secure mobile voice communication over a mobile phone network, the method comprising:

using a mobile device to send a short messaging service (SMS) message or multimedia messaging service (MMS) message to a server, wherein the phone number of the mobile device can be compared against a whitelist to authenticate the mobile device;

using the mobile device to send to the server a secure identification code associated with the user, wherein the secure identification code is used at the server to authenticate the user; and

establishing an encryption key for the purpose of communication between the voice communication application on the mobile device and the server.

14. The method of claim 13 wherein the voice communication application comprises a VoIP application.

15. A system for secure mobile voice communication, the system comprising:

a software module configured to run as an application on a mobile device, wherein the software module is configured to encrypt an SMS message or an MMS message via an encryption; and

a gateway comprising a server computer configured to communicate with the mobile device, wherein the gateway is configured to receive the encrypted message from the mobile device;

wherein the software module on the mobile device is configured to register with the gateway;

wherein the registration with the gateway comprises being a member of a whitelist and configuring at least one of the software module and the mobile device with a unique identification code provided to a user for input to the gateway via the mobile device;

wherein the whitelist comprises a list of at least one of the software module authorized to be registered with the gateway and the mobile device authorized to be registered with the gateway; and

wherein the registration with the gateway comprises an exchange of an encryption key for voice communication between the server and the mobile device.

wherein the gateway is configured to decrypt the encrypted message received from the mobile device.

16. The system of claim 15, wherein the encryption comprises at least one of symmetric and asymmetric encryption.

17. The system of claim 15 further comprising a network manager for measuring one or more network conditions on the mobile phone network, wherein the network manager is configured to select a codec based on the one or more measured network conditions and the codec is suitable for handling at least one of secure calls, conferencing, video, audio, multimedia and streaming on the mobile phone network.

18. The system of claim 15 wherein the voice communication is VoIP communication.

19. A method of establishing a registration between a server and an application on a mobile device, wherein the mobile device has an associated phone number, the method comprising:

with the application, creating registration information including at least one of a public key for the application, an associated phone number and a secure identification code;

with the mobile device, sending to the server the registration information;

receiving a code sent by the server to the application on the mobile device via a short messaging service (SMS) message or a multimedia messaging service (MMS) message; and

without user intervention, extracting the code from the SMS or MMS message and sending the code from the mobile device to the server.

20. The method of claim 19 wherein the registration information includes an encryption key for encrypting the SMS or MMS message before being sent by the server.

21. The method of claim 20 further comprising:

with the application, using a server public key to encrypt the registration information;

wherein the server can decrypt the registration information using a server private key.

22. The method of claim 21 wherein the application is downloaded to the mobile device via a mobile network.