CN105813035A - Method and system for identifying secure voice service and network device - Google Patents

Abstract

The invention discloses a method and system for identifying secret voice service and a network device. The method comprises steps of transmitting information carrying secure voice service type information to an MSC by a caller mobile terminal during a conversation, transmitting the service information with the secure voice service type information to an AS by the MSC by the information carrying the secure voice service type, and enabling the AS to determine that the conversation is an encrypted conversation according to the secure voice service type information. The invention also discloses a system and network device for realizing the method.

Description

A method, system and network equipment for identifying confidential voice services

technical field

The invention relates to the technical field of mobile communication system information security, in particular to a method, system and network equipment for identifying confidential voice services.

Background technique

The end-to-end encrypted call is divided into two types according to the way of initiating the encrypted call service: one is to initiate the call in the encrypted call mode, and the other is to initiate the call in the clear call mode, and then switch between the clear call and the encrypted call after the call . In-band end-to-end encrypted calls fall into the latter category.

In the prior art, a TD-SCDMA encrypted mobile phone uses an in-band end-to-end key negotiation method to conduct encrypted calls. The process of initiating an encrypted call is completely consistent with that of a clear call, and the called number and service type parameters carried in the encrypted call signaling are also completely consistent with those carried in the clear call signaling. Therefore, the operator network cannot distinguish a call Is it plain or secret.

Contents of the invention

In order to solve existing technical problems, embodiments of the present invention provide a method, system and network equipment for identifying confidential voice services.

An embodiment of the present invention provides a method for identifying a confidential voice service, the method comprising:

When the call is in progress, the calling mobile terminal sends a message carrying confidential voice service type information to the MSC;

The message carrying the confidential voice service type information is used for the MSC to send the service information including the confidential voice service type information to the application server AS, so that the AS determines the The call is an encrypted call.

Wherein, the message carrying the confidential voice service type information at least includes: connection establishment (Setup) signaling and connection management request (CMRequest) signaling.

Wherein, the confidential voice service type is represented by a default supplementary service code.

The embodiment of the present invention also provides a method for identifying a confidential voice service, the method comprising:

When the call is in progress, the MSC sends the service information including the confidential voice service type information to the AS after receiving the message carrying the confidential voice service type information sent by the calling mobile terminal;

Wherein, the service information is used for the AS to determine that this call is an encrypted call.

In one embodiment, after the mobile terminal activates the secure voice service, the method further includes:

The MSC saves the numbers of the mobile terminals that have activated the confidential voice service sent by the AS;

After the MSC detects the call initiated by the mobile terminal that has activated the confidential voice service, it sends the service information including the type information of the confidential voice service to the AS.

The embodiment of the present invention also provides a method for identifying a confidential voice service, the method comprising:

When the call is in progress, the AS receives the service information containing the confidential voice service type information sent by the MSC, and determines that the call is an encrypted call according to the confidential voice service type information;

Wherein, the confidential voice service type information is carried in the message sent by the calling mobile terminal to the MSC.

In one embodiment, after the mobile terminal activates the secure voice service, the method further includes:

The AS sends the number of the mobile terminal that has opened the confidential voice service to the MSC for storage;

Wherein, the number of the mobile terminal that has subscribed to the confidential voice service is used by the MSC to detect whether the mobile terminal that initiates the call is a mobile terminal that has subscribed to the secure voice service.

The embodiment of the present invention also provides a mobile terminal, the mobile terminal includes: a configuration module and a sending module; wherein,

The configuration module is used to carry the confidential voice service type information in the message sent to the MSC when the call is in progress, and forward it to the sending module;

The sending module is configured to send the message carrying the confidential voice service type information forwarded by the configuration module to the MSC;

Wherein, the message carrying the confidential voice service type information is used for the MSC to send the service information including the confidential voice service type information to the application server AS, so that the AS can determine according to the confidential voice service type information This call is an encrypted call.

The embodiment of the present invention also provides an MSC, the MSC includes: a receiving module and a sending module; wherein, when the call is in progress,

The receiving module is configured to trigger the sending module after receiving the message carrying the confidential voice service type information sent by the calling mobile terminal;

The sending module is configured to send the service information including the confidential voice service type information to the AS after being triggered by the receiving module;

Wherein, the service information is used for the AS to determine that this call is an encrypted call.

In one embodiment, the MSC further includes: a storage module; after the mobile terminal activates the confidential voice service,

The storage module is used to store the number of the mobile terminal that has opened the confidential voice service sent by the AS; correspondingly,

The receiving module is also used to send the number of the mobile terminal that has activated the confidential voice service sent by the AS to the storage module; it is also used to detect the call initiated by the mobile terminal that has activated the confidential voice service After that, trigger the sending module;

The sending module is further configured to send service information including confidential voice service type information to the AS.

The embodiment of the present invention also provides an application server AS, the AS includes: a receiving module and a processing module; wherein, when the call is in progress,

The receiving module is configured to receive service information including confidential voice service type information sent by the MSC, and send the service information to the processing module;

The processing module is configured to determine that the current call is an encrypted call according to the confidential voice service type information;

Wherein, the confidential voice service type information is carried in the message sent by the calling mobile terminal to the MSC.

In one embodiment, the AS further includes: a sending module; after the mobile terminal activates the confidential voice service,

The sending module is configured to send the number of the mobile terminal that has opened the confidential voice service to the MSC;

Wherein, the number of the mobile terminal that has subscribed to the confidential voice service is used by the MSC to detect whether the mobile terminal that initiates the call is a mobile terminal that has subscribed to the secure voice service.

The embodiment of the present invention also provides a system for identifying a confidential voice service, the system includes: the above-mentioned mobile terminal, MSC and AS.

In the method, system and network equipment for identifying a confidential voice service provided by the embodiments of the present invention, when a call is in progress, the calling mobile terminal sends a message carrying the type information of the confidential voice service to the Mobile Switching Center (MSC); The message of voice service type information is used for the MSC to send the service information including the confidential voice service type information to an application server (AS), so that the AS determines that the call is encrypted according to the confidential voice service type information call. The embodiment of the present invention solves the problem that the existing operator network cannot distinguish between clear voice and encrypted voice, enables the operator to provide differentiated services for users according to user subscription attributes, and enhances the operator's control over services. In addition, in the embodiment of the present invention, the MSC synchronizes the service information including the confidential voice service type information to the AS in a bypass mode, which has no influence on the voice call flow and has good applicability.

Description of drawings

In the drawings (which are not necessarily drawn to scale), like reference numerals may describe like parts in different views. Similar reference numbers with different letter suffixes may indicate different instances of similar components. The drawings generally illustrate the various embodiments discussed herein, by way of example and not limitation.

Fig. 1 is the implementation flowchart of the method for identifying confidential voice service described in the embodiment of the present invention;

2 is a schematic diagram of a system architecture for identifying a confidential voice service according to an embodiment of the present invention;

FIG. 3 is a flow chart of realizing a method for identifying a confidential voice service according to another embodiment of the present invention;

4 is a schematic structural diagram of a system for identifying confidential voice services according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of an MSC according to an embodiment of the present invention;

FIG. 6 is a schematic structural diagram of the AS described in the embodiment of the present invention;

FIG. 7 is a schematic structural diagram of a mobile terminal according to an embodiment of the present invention.

detailed description

In the embodiment of the present invention, when the call is in progress, the calling mobile terminal sends a message carrying the information of the confidential voice service type to the MSC; the message carrying the information of the confidential voice service type is used for the MSC to include the The service information of the confidential voice service type information is sent to the AS, so that the AS determines that the current call is an encrypted call according to the confidential voice service type information.

The present invention will be described in further detail below in conjunction with the accompanying drawings and specific embodiments.

Fig. 1 is the implementation flowchart of the method for identifying confidential voice services described in the embodiment of the present invention, as shown in Fig. 1, the method includes:

Step 101: When the call is in progress, the calling mobile terminal sends a message carrying confidential voice service type information to the MSC;

Step 102: The MSC sends the service information including the confidential voice service type information to the AS;

Step 103: The AS determines that the current call is an encrypted call according to the confidential voice service type information.

In the embodiment of the present invention, the message carrying the confidential voice service type information at least includes: connection establishment (Setup) signaling and connection management request (CMRequest) signaling. For example: if the calling mobile terminal carries the confidential voice service type information in the Setup signaling, the bearcapability field informationtransfercapability in the Setup signaling is filled with the confidential voice service; if the calling mobile terminal carries the confidential voice service type information When the information is carried in the CMRequest signaling, the CMservicetype field is filled in as a confidential voice service. Certainly, the message carrying the confidential voice service type information may be other messages besides the above signaling.

In the embodiment of the present invention, the confidential voice service type may be represented by a default supplementary service code. For example: a value can be selected from the default supplementary service code SS-Code::='11110000'B~'11111111'B in the 3GPP protocol as the type value of the confidential voice service.

In the embodiment of the present invention, the service information sent by the MSC includes, in addition to the confidential voice service type information, information such as numbers of the calling mobile terminal and the called mobile terminal.

The embodiment of the present invention solves the problem that the existing operator network cannot distinguish between clear voice and encrypted voice, enables the operator to provide differentiated services for users according to user subscription attributes, and enhances the operator's control over services. In addition, in the embodiment of the present invention, the MSC synchronizes the service information including the confidential voice service type information to the AS in a bypass mode, which has no influence on the voice call flow and has good applicability.

In one embodiment, the method further includes: the AS sends the number of the mobile terminal that has opened the confidential voice service to the MSC for storage; correspondingly,

After the MSC detects the call initiated by the mobile terminal that has activated the confidential voice service, it sends service information including the type information of the confidential voice service to the AS. Therefore, network traffic can be saved, consumption of network resources can be reduced, and system performance can be improved.

Of course, in actual application, the AS may not send the number of the mobile terminal that has opened the confidential voice service to the MSC, but as long as the MSC receives a call from the mobile terminal (whether it is an encrypted call or not), it will send the corresponding service number to the MSC. The information is sent to the AS.

The embodiment of the present invention also provides a method for identifying a confidential voice service, the method comprising:

When the call is in progress, the calling mobile terminal sends a message carrying confidential voice service type information to the MSC;

The message carrying the confidential voice service type information is used for the MSC to send the service information including the confidential voice service type information to the application server AS, so that the AS determines the The call is an encrypted call.

The embodiment of the present invention also provides a method for identifying a confidential voice service, the method comprising:

When the call is in progress, the MSC sends the service information including the confidential voice service type information to the AS after receiving the message carrying the confidential voice service type information sent by the calling mobile terminal;

Wherein, the service information is used for the AS to determine that this call is an encrypted call.

In one embodiment, after the mobile terminal activates the secure voice service, the method further includes:

The MSC saves the number of the mobile terminal that has activated the secure voice service sent by the AS; after detecting the call initiated by the mobile terminal that has activated the secure voice service, it sends the service information including the type information of the secure voice service to the AS.

The embodiment of the present invention also provides a method for identifying a confidential voice service, the method comprising:

When the call is in progress, the AS receives the service information containing the confidential voice service type information sent by the MSC, and determines that the call is an encrypted call according to the confidential voice service type information;

Wherein, the confidential voice service type information is carried in the message sent by the calling mobile terminal to the MSC.

In one embodiment, after the mobile terminal activates the secure voice service, the method further includes:

The AS sends the number of the mobile terminal that has opened the confidential voice service to the MSC for storage;

The number of the mobile terminal that has activated the confidential voice service is used by the MSC to detect whether the mobile terminal that initiated the call is a mobile terminal that has activated the secure voice service.

In the embodiment of the present invention, an AS can be added on the basis of the original voice service system architecture, so as to achieve the purpose of the network distinguishing whether a call is a clear voice call or an encrypted voice call. The specific architecture is shown in Figure 2. On the network side, the system introduces AS to realize the function of distinguishing clear and secret calls, so that operators can provide users with differentiated services according to user subscription attributes, and enhance the operator's control over services.

Fig. 3 is the implementation flowchart of the method for identifying the confidential voice service of another embodiment of the present invention, as shown in Fig. 3, comprising:

Step 301: the calling mobile terminal MSA sends a connection management request (CMRequest) message to the network side, and the message may carry confidential voice service type information;

Step 302: The network side initiates the authentication and encryption process with the calling mobile terminal MSA;

Step 303: After the calling mobile terminal MSA receives the service acceptance message or the encryption is completed, it sends a Setup message to the network side (MSC/VLR), wherein the Setup message can carry confidential voice service type information, and the network side receives the setup message. , send the service information containing the confidential voice service type information to the AS (not shown in Figure 3), and the AS determines whether this call is an encrypted call; after that, the MSC calls back the calling mobile terminal MSA Process (CallProceeding) message;

Step 304: After the AS determines that the call is a confidential voice service, the MSC processes it according to the basic voice service logic: according to the number of the MSB of the called mobile terminal, it queries the called HLR for routing information, and the HLR sends the call to the called mobile terminal. The VLR obtains the roaming number; after the MSC obtains the called mobile station roaming number (MSRN), it knows that the called user is a local office user, and directly initiates a paging process to the called TMSIB according to the called location area;

Step 305: the network side receives the called paging response (PagingResponse) message, and initiates the authentication and encryption process with the called mobile terminal MSB;

Step 306: the network side sends a Setup message to the called MSB;

Step 307: after MSC receives the call confirmation (callconfirmed) message of called mobile terminal MSB, send channel allocation message to UTRAN;

Step 308: the network side waits for an alerting (Alerting) message from the called MSB, and after receiving it, transmits the message to the calling mobile terminal MSA;

Step 309: the network side waits for the called mobile terminal MSB to go off-hook, i.e. connect (Connect) message, after receiving, transmit the message to the calling mobile terminal MSA;

Step 310: After receiving the Connect message, the calling mobile terminal MSA sends a ConnectACK to the network side, and the network side sends a ConnectACK to the called user;

Step 311: The voice channel between the calling and called mobile terminals is established. Afterwards, the communication parties start identity authentication and key negotiation in the voice channel; after the key exchange is completed, the communication parties share the session key of the call, and the calling and called mobile terminals start to encrypt the communication content with the session key.

The embodiment of the present invention also provides a system for identifying confidential voice services, as shown in Figure 4, the system includes: calling mobile terminal 40, MSC41 and application server AS42;

The calling mobile terminal 40 is configured to send a message carrying confidential voice service type information to the MSC;

The MSC41 is configured to send the service information including the confidential voice service type information to the AS;

The AS42 is configured to determine that the current call is an encrypted call according to the confidential voice service type information.

In the embodiment of the present invention, the message carrying the confidential voice service type information at least includes: connection establishment (Setup) signaling and connection management request (CMRequest) signaling. For example: if the calling mobile terminal carries the confidential voice service type information in the Setup signaling, the bearcapability field informationtransfercapability in the Setup signaling is filled with the confidential voice service; if the calling mobile terminal carries the confidential voice service type information When the information is carried in the CMRequest signaling, the CMservicetype field is filled in as a confidential voice service. Certainly, the message carrying the confidential voice service type information may be other messages besides the above signaling.

In the embodiment of the present invention, the confidential voice service type may be represented by a default supplementary service code. For example: a value can be selected from the default supplementary service code SS-Code::='11110000'B~'11111111'B in the 3GPP protocol as the type value of the confidential voice service.

In the embodiment of the present invention, the service information sent by the MSC includes, in addition to the confidential voice service type information, information such as numbers of the calling mobile terminal and the called mobile terminal.

The embodiment of the present invention solves the problem that the existing operator network cannot distinguish between clear voice and encrypted voice, enables the operator to provide differentiated services for users according to user subscription attributes, and enhances the operator's control over services. In addition, in the embodiment of the present invention, the MSC synchronizes the service information including the confidential voice service type information to the AS in a bypass mode, which has no influence on the voice call flow and has good applicability.

In one embodiment, the AS42 is also used to send the number of the mobile terminal that has opened the confidential voice service to the MSC; correspondingly,

The MSC41 is also used to save the number of the mobile terminal that has activated the confidential voice service sent by the AS, and after detecting the call initiated by the mobile terminal that has activated the confidential voice service, it will include the security voice service type The service information of the message is sent to the AS. Therefore, network traffic can be saved, consumption of network resources can be reduced, and system performance can be improved.

Of course, in actual application, the AS may not send the number of the mobile terminal that has opened the confidential voice service to the MSC, but as long as the MSC receives a call from the mobile terminal (whether it is an encrypted call or not), it will send the corresponding service number to the MSC. The information is sent to the AS.

In the embodiment of the present invention, the physical interface between the MSC and the AS can be the existing general man-machine communication control interface of the MSC, using TCP/IP, and its working protocol stack is: TCP/IPISO/IEC802.2, ISO/ IEC802.3.

The embodiment of the present invention also provides an MSC. As shown in FIG. 5, the MSC 41 includes: a receiving module 411 and a sending module 412; wherein, when a call is in progress,

The receiving module 411 is configured to trigger the sending module after receiving the message carrying the confidential voice service type information sent by the calling mobile terminal;

The sending module 412 is configured to send the service information including the confidential voice service type information to the AS after being triggered by the receiving module;

Wherein, the service information is used for the AS to determine that this call is an encrypted call.

In one embodiment, the MSC further includes: a storage module 413, configured to store the numbers of the mobile terminals that have activated the confidential voice service sent by the AS; correspondingly,

The receiving module 411 is further configured to send the number of the mobile terminal that has activated the confidential voice service sent by the AS to the storage module; After calling, trigger the sending module;

The sending module 412 is further configured to send service information including confidential voice service type information to the AS.

The embodiment of the present invention also provides an AS. As shown in FIG. 6, the AS42 includes: a receiving module 421 and a processing module 422; wherein, when a call is in progress,

The receiving module 421 is configured to receive service information including confidential voice service type information sent by the MSC, and send the service information to the processing module;

The processing module 422 is configured to determine that the current call is an encrypted call according to the confidential voice service type information;

Wherein, the confidential voice service type information is carried in the message sent by the calling mobile terminal to the MSC.

In one embodiment, the AS42 further includes: a sending module 423, configured to send the number of the mobile terminal that has activated the confidential voice service to the MSC;

Wherein, the number of the mobile terminal that has subscribed to the confidential voice service is used by the MSC to detect whether the mobile terminal that initiates the call is a mobile terminal that has subscribed to the secure voice service.

The embodiment of the present invention also provides a mobile terminal. The mobile terminal is the calling mobile terminal 40 described above. As shown in FIG. 7, the mobile terminal 40 includes: a configuration module 401 and a sending module 402; wherein,

The configuration module 401 is used to carry the confidential voice service type information in the message sent to the MSC when the call is in progress, and forward it to the sending module;

The sending module 402 is configured to send the message carrying the confidential voice service type information forwarded by the configuration module to the MSC;

Wherein, the message carrying the confidential voice service type information is used for the MSC to send the service information including the confidential voice service type information to the application server AS, so that the AS can determine according to the confidential voice service type information This call is an encrypted call.

Those skilled in the art should understand that the embodiments of the present invention may be provided as methods, systems, or computer program products. Accordingly, the present invention can take the form of a hardware embodiment, a software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) having computer-usable program code embodied therein.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a An apparatus for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the protection scope of the present invention.

Claims (13)

1. A method for identifying confidential voice services, characterized in that the method comprises: When the call is in progress, the calling mobile terminal sends a message carrying confidential voice service type information to the MSC; The message carrying the confidential voice service type information is used for the MSC to send the service information including the confidential voice service type information to the application server AS, so that the AS determines the The call is an encrypted call. 2. The method according to claim 1, wherein the message carrying the confidential voice service type information at least includes: connection establishment Setup signaling and connection management request CMRequest signaling. 3. The method according to claim 1, characterized in that the type of the confidential voice service is represented by a default supplementary service code. 4. A method for identifying confidential voice services, characterized in that the method comprises: When the call is in progress, the MSC sends the service information including the confidential voice service type information to the AS after receiving the message carrying the confidential voice service type information sent by the calling mobile terminal; Wherein, the service information is used for the AS to determine that this call is an encrypted call. 5. The method according to claim 4, characterized in that, after the mobile terminal opens the confidential voice service, the method further comprises: The MSC saves the numbers of the mobile terminals that have activated the confidential voice service sent by the AS; After the MSC detects the call initiated by the mobile terminal that has activated the confidential voice service, it sends the service information including the type information of the confidential voice service to the AS. 6. A method for identifying confidential voice services, characterized in that the method comprises: When the call is in progress, the AS receives the service information containing the confidential voice service type information sent by the MSC, and determines that the call is an encrypted call according to the confidential voice service type information; Wherein, the confidential voice service type information is carried in the message sent by the calling mobile terminal to the MSC. 7. The method according to claim 6, characterized in that, after the mobile terminal opens the confidential voice service, the method further comprises: The AS sends the number of the mobile terminal that has opened the confidential voice service to the MSC for storage; Wherein, the number of the mobile terminal that has subscribed to the confidential voice service is used by the MSC to detect whether the mobile terminal that initiates the call is a mobile terminal that has subscribed to the secure voice service. 8. A mobile terminal, characterized in that the mobile terminal comprises: a configuration module and a sending module; wherein, The configuration module is used to carry the confidential voice service type information in the message sent to the MSC when the call is in progress, and forward it to the sending module; The sending module is configured to send the message carrying the confidential voice service type information forwarded by the configuration module to the MSC; Wherein, the message carrying the confidential voice service type information is used for the MSC to send the service information including the confidential voice service type information to the application server AS, so that the AS can determine according to the confidential voice service type information This call is an encrypted call. 9. A kind of MSC, it is characterized in that, this MSC comprises: receiving module and sending module; Wherein, when conversation is carried out, The receiving module is configured to trigger the sending module after receiving the message carrying the confidential voice service type information sent by the calling mobile terminal; The sending module is configured to send the service information including the confidential voice service type information to the AS after being triggered by the receiving module; Wherein, the service information is used for the AS to determine that this call is an encrypted call. 10. The MSC according to claim 9, further comprising: a storage module; after the mobile terminal opens a confidential voice service, The storage module is used to store the number of the mobile terminal that has opened the confidential voice service sent by the AS; correspondingly, The receiving module is also used to send the number of the mobile terminal that has activated the confidential voice service sent by the AS to the storage module; it is also used to detect the call initiated by the mobile terminal that has activated the confidential voice service After that, trigger the sending module; The sending module is further configured to send service information including confidential voice service type information to the AS. 11. An application server AS, characterized in that the AS includes: a receiving module and a processing module; wherein, when a call is in progress, The receiving module is configured to receive service information including confidential voice service type information sent by the MSC, and send the service information to the processing module; The processing module is configured to determine that the current call is an encrypted call according to the confidential voice service type information; Wherein, the confidential voice service type information is carried in the message sent by the calling mobile terminal to the MSC. 12. The AS according to claim 11, characterized in that, the AS further comprises: a sending module; after the mobile terminal activates the confidential voice service, The sending module is configured to send the number of the mobile terminal that has opened the confidential voice service to the MSC; Wherein, the number of the mobile terminal that has subscribed to the confidential voice service is used by the MSC to detect whether the mobile terminal that initiates the call is a mobile terminal that has subscribed to the secure voice service. 13. A system for identifying confidential voice services, characterized in that the system comprises: the mobile terminal as claimed in claim 8, the MSC as claimed in claim 9 or 10, and the AS as claimed in claim 11 or 12.