[go: up one dir, main page]

CN100471313C - A code division multiple access CDMA system and a method for transmitting dual-tone multi-frequency information - Google Patents

A code division multiple access CDMA system and a method for transmitting dual-tone multi-frequency information Download PDF

Info

Publication number
CN100471313C
CN100471313C CNB2005101358594A CN200510135859A CN100471313C CN 100471313 C CN100471313 C CN 100471313C CN B2005101358594 A CNB2005101358594 A CN B2005101358594A CN 200510135859 A CN200510135859 A CN 200510135859A CN 100471313 C CN100471313 C CN 100471313C
Authority
CN
China
Prior art keywords
mouth
dual
key
tone multifrequency
information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CNB2005101358594A
Other languages
Chinese (zh)
Other versions
CN1878399A (en
Inventor
黄汉砚
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to CNB2005101358594A priority Critical patent/CN100471313C/en
Priority to PCT/CN2006/002932 priority patent/WO2007051415A1/en
Publication of CN1878399A publication Critical patent/CN1878399A/en
Application granted granted Critical
Publication of CN100471313C publication Critical patent/CN100471313C/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Mobile Radio Communication Systems (AREA)
  • Telephonic Communication Services (AREA)

Abstract

本发明涉及一种在CDMA中实现对双音多频信息进行加密传送的方法,通过在呼叫建立时、呼叫过程中、呼叫切换后,扩展互操作性规范协议中的参数,从而使基站控制器(或目标基站控制器)与移动交换中心之间的A1p链路中所传输的信令可携带双音多频加密控制信息。移动交换中心将该密钥传送给媒体网关(或目标媒体网关),媒体网关(或目标媒体网关)恢复出该密钥。则基站控制器(目标基站控制器)和媒体网关(或目标媒体网关)可使用该相同的密钥对需传送或已接收到的双音多频信息进行加解密。本发明通过在基站控制器和媒体网关之间加密传送的双音多频信息,可提高A2p口中传送双音多频信息的安全性,从而提高运营商的服务满意度。

The invention relates to a method for encrypted transmission of dual-tone multi-frequency information in CDMA, by expanding the parameters in the interoperability specification protocol when the call is established, during the call, and after the call is switched, so that the base station controller The signaling transmitted in the A1p link between (or the target base station controller) and the MSC may carry DTMF encrypted control information. The mobile switching center transmits the key to the media gateway (or the target media gateway), and the media gateway (or the target media gateway) recovers the key. Then the base station controller (target base station controller) and media gateway (or target media gateway) can use the same key to encrypt and decrypt the DTMF information to be transmitted or received. The invention can improve the security of transmitting the dual-tone multi-frequency information in the A2p interface by encrypting the dual-tone multi-frequency information transmitted between the base station controller and the media gateway, thereby improving the service satisfaction of operators.

Description

The method of a kind of CDMA systems and transmission dual-tone multifrequency information
Technical field
The present invention relates to moving communicating field, specifically, relate to a kind of mobile communication system and reach the method that transmits dual-tone multifrequency information therein.
Background technology
Press the standardized partnership projects 2 (3GPP2 of 3G (Third Generation) Moblie, Third GenerationPartnership Project 2) division of tissue, code division multiple access (Code Division Multiple Access, CDMA) network from the IS-95 system to the evolution of CDMA2000 series, go through stage 0 (Phase0), stage 1 (Phase1), stage 2 (Phase2) and stages such as (Phase3) in stage 3, finally realize CDMA2000 all-IP (ALL-IP) network.
As in the stage 2 of taking over from the past and setting a new course for the future, signaling and carrying is separated, the principle of Access Network and the evolution of core net independence manifests.Stage 2 is subdivided into step 1 (STEP1), step 2 (STEP2) and step n (STEPn) again.Particularly, in step 2, mobile switching centre/the Visited Location Registor of second generation mobile communication (2G) network (Mobile Switch Center/Visited Location Register, MSC/VLR) be split into mobile switching center emulation entity (Mobile Switch Center Emulation, MSCe), media gateway (Media GateWay, MGW) and Media Resource Function Processor (MultimediaResource Function Processor, MRFP) these three network elements, wherein, this mobile switching center emulation entity has the similar function with mobile switching centre, also can directly be called mobile switching centre.Also increased home location register emulation (Home Location Register Emulation in addition newly, network element such as HLRe), finish and comprise 2G base station sub-system (BaseStation Subsystem, BSS) and the access of NodeB subsystem (BSS/RNC), realize and public switch telephone network (public switched telephonenetwork, PSTN), public land mobile network (Public Land Mobile Network, PLMN) and Internet Protocol (Internet Protocol, IP) intercommunication of network, provide traditional travelling carriage (MobileStation, MS) Ye Wu support.
As Fig. 1, show a kind of brief configuration schematic diagram of CDMA Access Network.Wherein, MS generally partly is made up of base band, intermediate frequency and radio frequency etc.Baseband portion is responsible for the forwarding control of radiofrequency signal and baseband signal, and intermediate frequency connects baseband portion and radio frequency part, and radio frequency part is responsible for the transmission and the reception of wireless signal.MS can be for such as mobile phone, PDA (Personal Digital Assistant, personal digital assistant) etc.
(Base Station Contro1ler BSC) is a part of base station system to base station controller, functions such as RRM such as the main system information broadcasting of BSC, switching, local resource distribution, user's control.
MGW provides the transmission and the function of exchange of speech business, circuit domain data services related, realizes the Business Stream conversion between Radio Access Network circuit domain and omnibus circuit switching network (PSTN, ISDN), other mobile network (GSM, CDMA etc.), the packet network.MGW equipment provides the packet switching function, can satisfy the development need of wireless network to complete IP network by upgrading.
Wherein, BSC sets up the A1p link by A1p mouth and MSCe, and BSC is by transmitting signaling between this A1p link and the MSCe.BSC is connected through IP network with MGW by the A2p mouth, and this A2p mouth is used for bearer service.And get in touch by the H248 link between MSCe and the MGW, described H248 is a kind of MGCP.
The business that collects the digits of cdma system (for example dial operator's service number, the automatic speech prompting input language is selected) adopts dual-tone multifrequency, and (Dual Tone Multi-Frequency DTMF) realizes that number transmits.Under the framework that the cdma system calling is controlled with carrying separates, after realizing A mouth IPization, the A2p mouth of BSC is to use IP or real time streaming transport protocol (IP/RTP) bag to carry out that DTMF information transmits, the mode that transmits is followed RFC dual-tone multifrequency agreement, and the Dual Tone Multifrequency information that generally will transmit abbreviates 2833 information as.In RTP bag, dual-tone multifrequency information is that plain code transmits, and the DTMF information of the reality that is easy to be tackled by packet catcher and parses wherein to be comprised like this, will cause user's the divulging a secret of confidential information (as the account No. password).
In the IPization A mouth of existing CDMA consensus standard was handled, the A2p mouthpiece carried foundation and must use RFC dual-tone multifrequency agreement to carry out the transmission of DTMF information.As in Fig. 1.Behind call through, the user is button in MS, and institute dials the number and can at first be sent to BSC (steps A) in wireless side by out-of-band signalling; And BSC at first is being converted into this key information DTMF information, and by the IP/RTP bag this DTMF information is sent to MGW (step B) at the A2p of BSC mouth, and this load mode is a plaintext standard dual-tone multifrequency mode.Because what the A2p mouth connected is IP network, the grouping bag is very easily tackled, and obtains wherein DTMF information, thus intercepting mobile subscriber confidential information.
Summary of the invention
The invention provides a kind of CDMA systems and transmit the method for multitone multifrequency information therein, can improve the fail safe of the DTMF information that the A2p mouth transmitted.
According to an aspect of the present invention, provide a kind of method that in CDMA systems, transmits dual-tone multifrequency information, comprising following steps: (a) carry out the key information exchange between base station controller and the mobile switching center emulation entity; (b) described mobile switching center emulation entity sends to media gateway with the shared key of described A mouth, and described media gateway obtains described A mouth and shares key; (c) transmit the dual-tone multifrequency information that adopts the shared key of described A mouth to encrypt between described base station controller and the described media gateway.
In method of the present invention, described step (a) specifically comprises: (a1) transmit the relevant signaling that carries the dual-tone multifrequency ciphering control message between base station controller and the mobile switching center emulation entity, wherein, the transmit leg of described relevant signaling generates described dual-tone multifrequency ciphering control message, includes in the described dual-tone multifrequency ciphering control message described A mouth is shared A mouth key information after key carries out encryption, described A mouth is shared the first cryptographic algorithm title that key carries out the second cryptographic algorithm title of encryption and is used for dual-tone multifrequency information is encrypted; (a2) recipient of described relevant signaling the A mouth that dual-tone multifrequency information is encrypted of being used for that obtains described A mouth key information correspondence is shared key.
In method of the present invention, the transmit leg of described relevant signaling generates the dual-tone multifrequency ciphering control message and comprises: the transmit leg of described relevant signaling is shared described A mouth with key and is utilized one second cryptographic algorithm to encrypt the described A mouth key information of generation with pre-configured A mouth control key; In described dual-tone multifrequency ciphering control message, carry described A mouth key information, the described first cryptographic algorithm title and the described second cryptographic algorithm title; The shared key of A mouth that is used for dual-tone multifrequency information is encrypted that the recipient of described relevant signaling obtains described A mouth key information correspondence comprises: after the recipient of described relevant signaling obtains described A mouth key information, utilize described second cryptographic algorithm and pre-configured A mouth control key to be decrypted, obtain described A mouth and share key.
In method of the present invention, described step (b) specifically comprises: described mobile switching center emulation entity utilizes described A mouth to share key and generates dual-tone multifrequency cryptographic attributes information, and described dual-tone multifrequency cryptographic attributes information sent to media gateway, described dual-tone multifrequency cryptographic attributes information comprise the described first cryptographic algorithm title, to described A mouth share key carry out after the encryption and H248 mouth key information; Described media gateway is shared according to described H248 mouth key information and to described A mouth and is obtained described A mouth in the 3rd cryptographic algorithm title that key carries out encryption and share key.
In method of the present invention, described mobile switching center emulation entity utilizes described A mouth to share key and generates dual-tone multifrequency cryptographic attributes information, comprising: described mobile switching center emulation entity adopts described A mouth to share key and encrypts the described H248 mouth key information of generation with pre-configured H248 mouth control key with the 3rd cryptographic algorithm; In described dual-tone multifrequency cryptographic attributes information, carry H248 mouth key information, the 3rd cryptographic algorithm title and the described first cryptographic algorithm title; Described media gateway obtains described A mouth according to described H248 mouth key information and shares key, comprise: after described media gateway receives described dual-tone multifrequency cryptographic attributes information, adopt pre-configured H248 mouth control key, described H248 mouth key information is decrypted calculating with the 3rd cryptographic algorithm, obtains described A mouth and share key.
In method of the present invention, described step (a) can also specifically comprise: (a1) ' between described base station controller and mobile switching center emulation entity, transmit the relevant signaling carry the dual-tone multifrequency ciphering control message, wherein, the transmit leg of described relevant signaling generates described dual-tone multifrequency ciphering control message, includes the first cryptographic algorithm title that the A mouth is shared key and is used for dual-tone multifrequency information is encrypted in the described dual-tone multifrequency ciphering control message; (a2) ' recipient of described relevant signaling obtains the shared key of described A mouth from described dual-tone multifrequency ciphering control message.
In method of the present invention, described step (b) specifically comprises: described mobile switching center emulation entity utilizes described A mouth to share key and generates dual-tone multifrequency cryptographic attributes information, and described dual-tone multifrequency cryptographic attributes information sent to media gateway, described dual-tone multifrequency cryptographic attributes information comprises the described first cryptographic algorithm title and described A mouth is shared key; Described media gateway obtains described A mouth and shares key.
In method of the present invention, described step (c) specifically comprises: described base station controller and described media gateway use described A mouth to share key, utilize described first cryptographic algorithm to encrypt transmission to dual-tone multifrequency information, and adopt the shared key of described A mouth and first cryptographic algorithm to be decrypted in the opposite end.
In method of the present invention, described dual-tone multifrequency ciphering control message is carried in the A2p bear format characteristic parameter in the relevant signaling of inter-operability specification agreement after the expansion; In the H248 signaling of described dual-tone multifrequency cryptographic attributes information-bearing after expansion.
In method of the present invention, behind the call setup and after direct-cut operation took place, described mobile switching center emulation entity was the serving mobile switching center artificial physical; Described base station controller is the switch aim base station controller; Described media gateway is the target medium gateway after the switching.
In method of the present invention, described dual-tone multifrequency cryptographic attributes information is sent to media gateway for setting up or during the carrying attribute modification carrying, by the mobile switching center emulation entity it is carried at the H248 carrying and sets up in request message or the carrying attribute modification request message and send to media gateway.
In method of the present invention, the described described relevant signaling that carries described dual-tone multifrequency ciphering control message transmits in call setup or calling procedure, and described relevant signaling is that CM call management service request message, call message, bearer update request message, assignment are finished message, value-added service request message, handoff request acknowledgment message, call request message, assignment request message, value-added service notification message, service announcements message, bearer update solicitation message, bearer update response message or handoff request message.
In method of the present invention, described first cryptographic algorithm, second cryptographic algorithm and the 3rd cryptographic algorithm are symmetric encipherment algorithm.Described first cryptographic algorithm, second cryptographic algorithm and the 3rd cryptographic algorithm are identical cryptographic algorithm; Perhaps described first cryptographic algorithm, second cryptographic algorithm and the 3rd cryptographic algorithm are different cryptographic algorithm.
The present invention provides a kind of mobile communication system on the other hand, comprises base station controller, mobile switching center emulation entity and media gateway; Described base station controller is used for sending or carrying from the reception of mobile switching center emulation entity to the mobile switching center emulation entity the relevant signaling of dual-tone multifrequency ciphering control message; The first cryptographic algorithm title that includes A mouth key information in the described dual-tone multifrequency ciphering control message and be used for dual-tone multifrequency information is encrypted; And when carrying out the dual-tone multifrequency message transmission, utilize the shared key of A mouth of described first cryptographic algorithm and A mouth key information correspondence that dual-tone multifrequency information is handled with media gateway; Described mobile switching center emulation entity is used for sending or carrying from the base station controller reception to base station controller the relevant signaling of dual-tone multifrequency ciphering control message; Utilize the A mouth of the A mouth key information correspondence in the described dual-tone multifrequency ciphering control message to share key generation dual-tone multifrequency cryptographic attributes information, and dual-tone multifrequency cryptographic attributes information is sent to media gateway; Described dual-tone multifrequency cryptographic attributes information comprises described first cryptographic algorithm title and H248 mouth key information; Described media gateway is used for obtaining the A mouth according to this H248 mouth key information and shares key; Use the shared key of this A mouth and first cryptographic algorithm that dual-tone multifrequency information is handled.
In system of the present invention, described dual-tone multifrequency ciphering control message is carried in the A2p bear format characteristic parameter in the relevant signaling of inter-operability specification agreement after the expansion, in the H248 signaling of described dual-tone multifrequency cryptographic attributes information-bearing after expansion.
Implement of the present invention dual-tone multifrequency information to be encrypted the method for transmission, have following beneficial effect: by set up when calling out, in the calling procedure or after calling out switching, the A2p bear format characteristic parameter of expansion IOS agreement and expansion H248 agreement.And by between base station controller (or target base station controller) and the mobile switching center emulation entity, carry out the key information exchange between mobile switching center emulation entity and the media gateway (or target medium gateway), make media gateway (or target medium gateway) end obtain to hold identical key with base station controller (or target base station controller).Utilize this key that the dual-tone multifrequency information in the A2p mouth is encrypted transmission then.Can guarantee on the A2p mouth, to carry out the fail safe that dual-tone multifrequency information transmits, thereby ensure mobile subscriber's interests, improve the service satisfaction of operator.
Description of drawings
Fig. 1 is the brief configuration schematic diagram of a kind of CDMA Access Network of the prior art;
Fig. 2 is the simplified diagram of a kind of CDMA Access Network of embodiment of the present invention;
Fig. 3 is the present invention realizes dual-tone multifrequency information is encrypted first embodiment of transmission when the CDMA call setup or in the calling procedure a flow chart;
Fig. 4 is the present invention realizes dual-tone multifrequency information is encrypted second embodiment of transmission in CDMA call setup or calling procedure a flow chart.
Fig. 5 is that a kind of the realization after CDMA switches of the present invention encrypted the flow chart of transmission to dual-tone multifrequency information.
Embodiment
The A2p cause for gossip of the present invention in CDMA is existing encrypts transmission to dual-tone multifrequency information, can improve the fail safe of the DTMF information that the A2p mouth transmitted.The present invention can be applicable in as shown in Figure 2 the cdma system.
Comprise base station controller (BSC), media gateway (MGW) and mobile switching center emulation entity (MSCe) in the described system.Wherein, BSC is by transmitting signaling between A1p link and the MSCe.BSC is connected through IP network with MGW by the A2p mouth.And get in touch by the H248 link between MSCe and the MGW.
Described BSC is used for sending or carrying from the MSCe reception to MSCe the relevant signaling of dual-tone multifrequency ciphering control message; The first cryptographic algorithm title that includes A mouth key information in the described dual-tone multifrequency ciphering control message and be used for dual-tone multifrequency information is encrypted; And when carrying out the dual-tone multifrequency message transmission, utilize the shared key of A mouth of described first cryptographic algorithm and A mouth key information correspondence that dual-tone multifrequency information is handled with MGW.
Described MSCe is used for sending or carrying from the BSC reception to BSC the relevant signaling of dual-tone multifrequency ciphering control message; Utilize the A mouth of the A mouth key information correspondence in the described dual-tone multifrequency ciphering control message to share key generation dual-tone multifrequency cryptographic attributes information, and dual-tone multifrequency cryptographic attributes information is sent to MGW; Described dual-tone multifrequency cryptographic attributes information comprises described first cryptographic algorithm title and H248 mouth key information;
Described MGW is used for obtaining the A mouth according to this H248 mouth key information and shares key; Use the shared key of this A mouth and first cryptographic algorithm that dual-tone multifrequency information is handled.
Among the present invention, expansion inter-operability specification (Interoperability Specification, IOS) parameter of specific signaling in the agreement, thereby when call setup, in the calling procedure and after calling out switching, make the signaling portability dual-tone multifrequency ciphering control message (include at least and be used for dual-tone multifrequency information is carried out encrypted secret key) that is transmitted in the A1p link between BSC (or target BS C) and MSCe, by the H248 link between MSCe and the MGW (or target MGW), make MGW (or target MGW) obtain this key.Then BSC (or target BS C) can use identical key to carry out the encryption and decryption of dual-tone multifrequency information with MGW (or target MGW).Wherein, the IOS agreement is the standard general designation that definition inserts side and network side mouth in the cdma system.In to this key transport process, also can carry out encryption to this key.
Now in conjunction with Fig. 3, among the present invention when the call setup or the concrete steps of first embodiment in the calling procedure describe.At first, in step S30, parameter in the signaling in the needs expansion IOS agreement (for example, can expand A2p bear format characteristic parameter (A2p Bearer Format-SpecificParameters)), and definition extend information, represent that this A2p mouth has cryptographic capabilities, and specify concrete encryption algorithm type and the information such as key that adopted.For example, in one embodiment, extend information comprises following content:
Extended ID: can adopt the type information of 1 byte, for example, value is 2, expression dual-tone multifrequency ciphering control message;
Extension length: can adopt 1 byte length information to represent;
Concrete spreading parameter: can adopt 1 byte length information to represent.Wherein, adopt 1 bit information to represent whether to use dual-tone multifrequency to encrypt indication, when this bit value be " 0 ", represent that this is called out not use dual-tone multifrequency to encrypt, represent when this bit value that this is called out during for " 1 " and use dual-tone multifrequency encryption;
Adopt 3 bit informations to represent encryption algorithm type, this cryptographic algorithm must be a symmetry algorithm, class as, in one embodiment of the invention, represent to adopt RC4 cryptographic algorithm, other value temporarily to keep when " 000 " to this 3 bit value;
Other 4 bit informations: the temporary transient reservation;
Other 4~8 byte information are used for representing A mouth key information (A-SHARE-DATA), and it shares key (CALL-KEY) for this calling dual-tone multifrequency after encrypting, and length is relevant with algorithm.
Above-mentionedly only show in the one embodiment of the invention, a kind of example of expanding A2p bear format characteristic parameter, the invention is not restricted to this, those skilled in the art should derive more extended method from the present invention, for example can expand other the parameter in the IOS signaling.
The first embodiment of the present invention is also expanded the H248 agreement, definition Session Description Protocol (SessionDescription Protocol, SDP) the dual-tone multifrequency cryptographic attributes of form is so that the H428 link side of MSCe and MGW has the ability of encrypting from the BSC key to being received.In the present embodiment, the form of this dual-tone multifrequency cryptographic attributes can be " a=encrypt_params: the key (H248-SHARE-DATA) after the cryptographic algorithm title is encrypted ", and this form comprises three parts.For example for the RC4 algorithm, its dual-tone multifrequency cryptographic attributes may show as " a=encrypt_params:rc4 a6Z*op1K ", and wherein " a6Z*op1K " is 32 keys after encrypting.Certainly, in different embodiment, this key can be different.
Then in step S31, begin calling procedure is expanded.Set in advance A mouth control key (A1P-KEY) between BSC and the MSCe; Between MGW and MSCe, set in advance H248 mouth control key (H248-KEY).
In step S32, when call setup or in the calling procedure, between BSC and MSCe, transmit the relevant signaling that carries the dual-tone multifrequency ciphering control message.In the present invention, be to carry the dual-tone multifrequency ciphering control message in the A2p bear format characteristic parameter in relevant signaling, represent that this time calling need carry out dual-tone multifrequency and encrypt.The order of described information can comprise such as: described relevant signaling is that call management service request (CM Service Request) message, call (Paging Response) message or bearer update request (Bearer Update Response) message, assignment are finished message, value-added service request (AdditionalService Request) message or handoff request and replied (Handoff Request Acknowledge) message.Exchange flow process and the normal beared information exchange flow process of protocol definition of above-mentioned each message between BSC and MSCe is identical.Wherein, the cryptographic algorithm that include A mouth key information (A-SHARE-DATA) in this dual-tone multifrequency ciphering control message, is adopted information such as (calling second cryptographic algorithm in the following text), this second cryptographic algorithm is a symmetrical algorithm (as the RC4 algorithm), this described A mouth key information (A-SHARE-DATA) is to share key (CALL-KEY) by described A mouth to utilize this second cryptographic algorithm to encrypt with described A mouth control key (A1P-KEY), it all is inequality in per call that described A mouth is shared key (CALL-KEY), for example, it can produce at random.
In this embodiment, between BSC and MSCe, transmit the relevant signaling that carries the dual-tone multifrequency ciphering control message and have two kinds of situations, a kind of is as the key distribution main body by BSC, promptly send the signaling that carries the dual-tone multifrequency control information to MSCe by BSC, wherein, described A mouth is shared key (CALL-KEY) by this BSC generation; Another kind be by MSCe as the key distribution main body, promptly send the signaling carry the dual-tone multifrequency ciphering control message to BSC by MSCe, wherein, described A mouth is shared key (CALL-KEY) and is produced by this MSCe.
In step S33, this signaling receiving terminal (MSCe or BSC) is after receiving above-mentioned dual-tone multifrequency ciphering control message, calculate (decrypting process) by pre-configured A mouth control key (A1P-KEY) and described second cryptographic algorithm of A mouth key information (A-SHARE-DATA) employing in the dual-tone multifrequency ciphering control message, obtain the A mouth and share key (CALL-KEY).
In step S34, MSCe uses H248 mouth control key (H248-KEY) that A mouth this generation or that deciphering is come out is shared key (CALL-KEY) and encrypts with the 3rd cryptographic algorithm, generates H248 mouth key information (H248-SHARE-DATA).
In step S35, MSCe is when carrying foundation or carrying attribute modification, set up in request message or the carrying attribute modification request message in H248 carrying dual-tone multifrequency cryptographic attributes information (its form can be " a=encrypt_parans: cryptographic algorithm title H248-SHARE-DATA ") is sent to, the cryptographic algorithm name is called the title of the 3rd cryptographic algorithm herein.
In step S36, after MGW receives this dual-tone multifrequency cryptographic attributes information, adopt H248 mouth control key (H248-KEY), be decrypted calculating (adopting described the 3rd cryptographic algorithm) with the H248 mouth key information (H248-SHARE-DATA) in the received dual-tone multifrequency cryptographic attributes information, obtain the A mouth and share key (CALL-KEY).Like this, MGW just obtained with BSC in identical A mouth share key (CALL-KEY).
In following step S37, BSC, MGW just can use identical A mouth to share key (CALL-KEY), carry out the encryption and decryption of dual-tone multifrequency information.For example, behind call through, the user is button in MS, and institute dials the number and can at first be sent to BSC in wireless side by out-of-band signalling; And BSC at first is being converted into this key information DTMF information, and share key (CALL-KEY) with the A mouth in BSC this DTMF information is encrypted, and the DTMF information after the A2p mouth will be encrypted by the IP/RTP bag sends to MGW in the mode of dual-tone multifrequency.And after the DTMF information after MGW receives this encryption, share key with acquired A mouth, and it is decrypted, obtain the DTMF information after the deciphering.In like manner the MGW bearer service that also it can be sent to BSC is encrypted, and is decrypted at the BSC end again.Wherein, dual-tone multifrequency information is carried out enciphering/deciphering and can adopt first cryptographic algorithm.
Above-mentioned described first cryptographic algorithm, second cryptographic algorithm and the 3rd cryptographic algorithm can be identical cryptographic algorithm, can be mutually different cryptographic algorithm also, in practicing, can select for use flexibly as required.When selecting different cryptographic algorithm for use, can in the exhibition parameter, increase the indication of algorithm title, to be used for key is encrypted and the algorithm title that dual-tone multifrequency information is encrypted is transmitted simultaneously, then can support three cryptographic algorithm different fully, promptly in above-mentioned example, carry the first cryptographic algorithm title that is used for the described second cryptographic algorithm title that the shared key of A mouth is encrypted and is used for dual-tone multifrequency information is encrypted in the dual-tone multifrequency ciphering control message that between BSC and MSCe, transmits; Be used for the first cryptographic algorithm title that this A mouth is shared described the 3rd cryptographic algorithm title that key encrypts and is used for dual-tone multifrequency information is encrypted and carry in the dual-tone multifrequency cryptographic attributes information that between MSCe and MGW, transmits.Like this, MGW just can adopt the 3rd cryptographic algorithm to recover to share key with described A mouth, and adopt described first cryptographic algorithm that dual-tone multifrequency information is carried out encryption and decryption work after receiving this dual-tone multifrequency cryptographic attributes information.
And in Fig. 4, show the second embodiment of the present invention.In general, in real networking, the network (as above-mentioned A1p signaling, H248 signaling link) that is used for the signaling transmission is more stricter than the transmission network control of beared information, also safer, so in Fig. 4, when A1p mouth and H248 mouth carry out key (being that the A mouth is shared key) exchange, need not key is encrypted transmission, can carry out plaintext and transmit, also can satisfy the application of more environment.Its concrete steps are described as follows:
In step S40, need the parameter in the signaling in the expansion IOS agreement, its extended method can be referring to this narration to first embodiment of invention, in this spreading number, only need carry and be used for algorithm title that dual-tone multifrequency information is encrypted and the information such as key that adopted, and need not to carry the algorithm title that this key is encrypted.
And expansion H248 agreement, definition Session Description Protocol (Session Description Protocol, SDP) the dual-tone multifrequency cryptographic attributes of form.The form of this dual-tone multifrequency cryptographic attributes can be " a=encrypt_params: cryptographic algorithm title key ", and this form comprises three parts.For example for the RC4 algorithm, its dual-tone multifrequency cryptographic attributes may show as " a=encrypt_params:rc4 a6Z*oplK ", and wherein " a6Z*oplK " is 32 keys after encrypting.
In step S41, during call setup or in the calling procedure, transmit the relevant signaling that carries the dual-tone multifrequency ciphering control message between BSC and the MSCe; For example carry the dual-tone multifrequency ciphering control message in the relevant parameter (as A2p bear format characteristic parameter) in relevant signaling, represent that this time calling need carry out dual-tone multifrequency and encrypt.Wherein, include in this dual-tone multifrequency ciphering control message the A mouth share key (CALL-KEY), cryptographic algorithm information such as (first cryptographic algorithm) that the dual-tone multifrequency information encryption is adopted, it all is inequality in per call that described A mouth is shared key (CALL-KEY), for example, it can produce at random.In this embodiment, between BSC and MSCe, transmit the relevant signaling that carries the dual-tone multifrequency ciphering control message and have two kinds of situations, a kind of is as the key distribution main body by BSC, promptly send the signaling that carries the dual-tone multifrequency ciphering control message to MSCe by BSC, wherein, described A mouth is shared key (CALL-KEY) by this BSC generation; Another kind be by MSCe as the key distribution main body, promptly send the signaling carry the dual-tone multifrequency ciphering control message to BSC by MSCe, wherein, described A mouth is shared key (CALL-KEY) and is produced by this MSCe.
In step S42, the recipient of this signaling (as MSCe or BSC) takes out wherein shared key (CALL-KEY) of A mouth and the described first cryptographic algorithm name information after receiving above-mentioned dual-tone multifrequency ciphering control message.And utilize its A mouth that produces or obtain to share ciphering key ALL-KEY at the MSCe end) (its form is for " a=encrypt_params: cryptographic algorithm title key); wherein; the cryptographic algorithm name is called the first cryptographic algorithm title, key is shared key (CALL-KEY) for the A mouth to generate a dual-tone multifrequency cryptographic attributes information.
In step S43, MSCe sets up or during the carrying attribute modification carrying, and sets up in request message or the carrying attribute modification request message in the H248 carrying this dual-tone multifrequency cryptographic attributes information (its form can be " a=encrypt_params: cryptographic algorithm title H248-SHARE-DATA ") is sent to MGW.
In step S44, after MGW receives this dual-tone multifrequency cryptographic attributes information, obtain the A mouth and share the key (CALL-KEY) and the first cryptographic algorithm title.BSC, MGW just can use identical A mouth to share key (CALL-KEY), adopt first cryptographic algorithm that the dual-tone multifrequency information that transmits or receive is carried out encryption and decryption.
In the present invention, behind call setup, can determine to use new A mouth to share key.Its key transport process and above-mentioned two embodiment are similar.Be summarized as follows, between BSC and MSCe, transmit the message (for example bearer update response message) that carries A mouth key information; Hold the new A mouth that decrypts in this A mouth key information to share key at MSCe or BSC; MSCe sends the dual-tone multifrequency cryptographic attributes message that includes the shared key of this A mouth to MGW in bearing modification message, wherein, can share key to this A mouth and carry out encryption; Then MGW obtains the shared key of (may need deciphering) this new A mouth; So far, BSC gets access to identical new A mouth with MGW and shares key, just can use new A mouth to share key need dual-tone multifrequency information that transmit or that received is carried out the encryption and decryption processing.
As shown in Figure 5, show and switch the flow chart that the back exchanges key among the present invention.Behind call setup, and take place then to need to make target BS C can obtain identical encryption key under the situation of direct-cut operation with target MSC e.
In step S51, configuration A mouth control key between target BS C and the service MSCe, this A mouth control key can be identical or different with the A mouth control key before switching; Configuration H248 mouth control key between target MGW and the service MSCe, this H248 mouth control key can be identical or different with the H248 mouth control key before switching.
In step S52, between target BS C and service MSCe, transmit the relevant signaling carry the dual-tone multifrequency ciphering control message.In the present invention, be to carry the dual-tone multifrequency ciphering control message in the A2p bear format characteristic parameter in relevant signaling.Described information order can comprise such as call request message (Paging Request), assignment request message (Assignment Request), value-added service notification message (Additional Service Notification), service announcements message (Service Notification), bearer update solicitation message (Bearer Update Required), bearer update response message (Bearer UpdateResponse) or handoff request message (Handoff Request).Exchange flow process and the normal beared information exchange flow process of protocol definition of above-mentioned each message between BSC and MSCe is identical.Wherein, the cryptographic algorithm that include A mouth key information in this dual-tone multifrequency ciphering control message, is adopted information such as (calling second cryptographic algorithm in the following text), this second cryptographic algorithm is a symmetrical algorithm (as the RC4 algorithm), this described A mouth key information is to utilize this second cryptographic algorithm to encrypt by shared key of described A mouth and described A mouth control key, the A mouth that is adopted before described A mouth is shared key and switched is shared key can be identical, also can be different.
In this embodiment, between target BS C and service MSCe, transmit the relevant signaling carry the dual-tone multifrequency ciphering control message and have two kinds of situations, a kind of is as the key distribution main body by target BS C, promptly send the signaling that carries the dual-tone multifrequency ciphering control message to service MSCe by target BS C, wherein, the shared key of described A mouth is produced by this target BS C; Another kind be by service MSCe as the key distribution main body, promptly send the signaling carry the dual-tone multifrequency ciphering control message to target BS C by service MSCe, wherein, described A mouth is shared key and is produced by this service MSCe.
In step S53, this signaling receiving terminal (service MSCe or target BS C) is after receiving above-mentioned dual-tone multifrequency ciphering control message, adopt described second cryptographic algorithm to calculate (decrypting process) by pre-configured A mouth control key and the A mouth key information in the dual-tone multifrequency ciphering control message, obtain the A mouth and share key.
In step S54, service MSCe uses H248 mouth control key that A mouth this generation or that deciphering is come out is shared key and encrypts with the 3rd cryptographic algorithm, generates H248 mouth key information.
In step S55, service MSCe is when carrying foundation or carrying attribute modification, in H248 carrying attribute modification request message dual-tone multifrequency cryptographic attributes information (its form can be " a=encrypt_params: cryptographic algorithm title H248 mouth control key ") is sent to target MGW, the cryptographic algorithm name is called the title of the 3rd cryptographic algorithm herein.
In step S56, after target MGW receives this dual-tone multifrequency cryptographic attributes information, adopt H248 mouth control key, be decrypted calculatings (adopting described the 3rd cryptographic algorithm), obtain the shared key of A mouth with H248 mouth key information in the received dual-tone multifrequency cryptographic attributes information.Like this, target MGW just obtained with target BS C in identical A mouth share key.
In following step S57, target BS C, target MGW just can use identical key, need dual-tone multifrequency information that transmit or that received is carried out encryption and decryption handle.
Equally, in this embodiment, when between service MSCe and target BS C, between service MSCe and the target MGW, carrying out key (being that the A mouth is shared key) exchange, need not to key encrypt transmissions (such as, with the transmission of plaintext form).This process and embodiment shown in Figure 4 are similar, not at this detailed description.
A kind of method that in CDMA, realizes dual-tone multifrequency information is encrypted transmission provided by the present invention, by set up when calling out, in the calling procedure or after calling out switching, the A2p bear format characteristic parameter of expansion IOS agreement and expansion H248 agreement.And by between BSC (or target BS C) and the MSCe, carry out the key information exchange between MSCe and the MGW (or target MGW), make MGW (or target MGW) end obtain to hold identical key with BSC (or target BS C).Utilize this key that the dual-tone multifrequency information in the A2p mouth is encrypted transmission then.Can guarantee on the A2p mouth, to carry out the fail safe that DTMF information transmits, thereby ensure mobile subscriber's interests, improve the service satisfaction of operator.

Claims (16)

1, a kind of method that transmits dual-tone multifrequency information in CDMA systems is characterized in that, comprising:
(a) carry out the exchange that the A mouth is shared key between base station controller and the mobile switching center emulation entity, wherein, described A mouth is shared key and is used for dual-tone multifrequency information is encrypted or deciphered;
(b) described mobile switching center emulation entity sends to media gateway with the shared key of described A mouth, and described media gateway obtains described A mouth and shares key;
(c) between described base station controller and described media gateway, transmit the dual-tone multifrequency information that adopts the shared key of described A mouth to encrypt.
2, method according to claim 1 is characterized in that, described step (a) specifically comprises:
(a1) between described base station controller and mobile switching center emulation entity, transmit the relevant signaling that carries the dual-tone multifrequency ciphering control message, wherein, the transmit leg of described relevant signaling generates described dual-tone multifrequency ciphering control message, includes in the described dual-tone multifrequency ciphering control message described A mouth is shared A mouth key information after key carries out encryption, described A mouth is shared the first cryptographic algorithm title that key carries out the second cryptographic algorithm title of encryption and is used for dual-tone multifrequency information is encrypted;
(a2) recipient of described relevant signaling the A mouth that dual-tone multifrequency information is encrypted of being used for that obtains described A mouth key information correspondence is shared key.
3, method according to claim 2 is characterized in that,
The transmit leg of described relevant signaling generates described dual-tone multifrequency ciphering control message and comprises: the transmit leg of described relevant signaling is shared described A mouth with key and is utilized described second cryptographic algorithm to encrypt the described A mouth key information of generation with pre-configured A mouth control key; In described dual-tone multifrequency ciphering control message, carry described A mouth key information, the described first cryptographic algorithm title and the described second cryptographic algorithm title;
The shared key of A mouth that is used for dual-tone multifrequency information is encrypted that the recipient of described relevant signaling obtains described A mouth key information correspondence comprises: after the recipient of described relevant signaling obtains described A mouth key information, utilize described second cryptographic algorithm and pre-configured A mouth control key to be decrypted, obtain described A mouth and share key.
4, method according to claim 3 is characterized in that, described step (b) specifically comprises:
Described mobile switching center emulation entity utilizes described A mouth to share key and generates dual-tone multifrequency cryptographic attributes information, and described dual-tone multifrequency cryptographic attributes information sent to media gateway, described dual-tone multifrequency cryptographic attributes information comprises the described first cryptographic algorithm title, described A mouth is shared key carries out the H248 mouth key information after the encryption and described A mouth is shared the 3rd cryptographic algorithm title that key carries out encryption;
Described media gateway obtains described A mouth according to described H248 mouth key information and shares key.
5, method according to claim 4 is characterized in that,
Described mobile switching center emulation entity utilizes described A mouth to share key and generates dual-tone multifrequency cryptographic attributes information, comprising: described mobile switching center emulation entity adopts described A mouth to share key and encrypts the described H248 mouth key information of generation with pre-configured H248 mouth control key with described the 3rd cryptographic algorithm; In described dual-tone multifrequency cryptographic attributes information, carry described H248 mouth key information, described the 3rd cryptographic algorithm title and the described first cryptographic algorithm title;
Described media gateway obtains described A mouth according to described H248 mouth key information and shares key, comprise: after described media gateway receives described dual-tone multifrequency cryptographic attributes information, adopt pre-configured H248 mouth control key, described H248 mouth key information is decrypted calculating with the 3rd cryptographic algorithm, obtains described A mouth and share key.
6, method according to claim 1 is characterized in that, described step (a) specifically comprises:
(a1) ' between described base station controller and mobile switching center emulation entity, transmit the relevant signaling that carries the dual-tone multifrequency ciphering control message, wherein, the transmit leg of described relevant signaling generates described dual-tone multifrequency ciphering control message, includes the first cryptographic algorithm title that the A mouth is shared key and is used for dual-tone multifrequency information is encrypted in the described dual-tone multifrequency ciphering control message;
(a2) ' recipient of described relevant signaling obtains the shared key of described A mouth from described dual-tone multifrequency ciphering control message.
7, method according to claim 6 is characterized in that, described step (b) specifically comprises:
Described mobile switching center emulation entity utilizes described A mouth to share key and generates dual-tone multifrequency cryptographic attributes information, and described dual-tone multifrequency cryptographic attributes information sent to media gateway, described dual-tone multifrequency cryptographic attributes information comprises the described first cryptographic algorithm title and described A mouth is shared key;
Described media gateway obtains described A mouth and shares key.
According to claim 3 or 6 described methods, it is characterized in that 8, described step (c) specifically comprises:
Described base station controller and described media gateway use described A mouth to share key, utilize described first cryptographic algorithm to encrypt transmission to dual-tone multifrequency information, and adopt the shared key of described A mouth and first cryptographic algorithm to be decrypted in the opposite end.
According to claim 3 or 6 described methods, it is characterized in that 9, described dual-tone multifrequency ciphering control message is carried in the A2p bear format characteristic parameter in the relevant signaling of inter-operability specification agreement after the expansion; In the H248 signaling of described dual-tone multifrequency cryptographic attributes information-bearing after expansion.
10, according to claim 3 or 6 described methods, it is characterized in that, behind the call setup and after direct-cut operation took place, described mobile switching center emulation entity was the serving mobile switching center artificial physical; Described base station controller is the switch aim base station controller; Described media gateway is the target medium gateway after the switching.
11, according to claim 4 or 7 described methods, it is characterized in that, described dual-tone multifrequency cryptographic attributes information is sent to media gateway for setting up or during the carrying attribute modification carrying, by the mobile switching center emulation entity it is carried at the H248 carrying and sets up in request message or the carrying attribute modification request message and send to media gateway.
12, method according to claim 11, it is characterized in that, the described described relevant signaling that carries described dual-tone multifrequency ciphering control message transmits in call setup or calling procedure, and described relevant signaling is a CM call management service request message, call message, the bearer update request message, message is finished in assignment, the value-added service request message, handoff request acknowledgment message, call request message, assignment request message, the value-added service notification message, service announcements message, the bearer update solicitation message, bearer update response message or handoff request message.
According to claim 4 or 5 described methods, it is characterized in that 13, described first cryptographic algorithm, second cryptographic algorithm and the 3rd cryptographic algorithm are symmetric encipherment algorithm.
14, method according to claim 13 is characterized in that, described first cryptographic algorithm, second cryptographic algorithm and the 3rd cryptographic algorithm are identical cryptographic algorithm; Perhaps described first cryptographic algorithm, second cryptographic algorithm and the 3rd cryptographic algorithm are different cryptographic algorithm.
15, a kind of CDMA systems comprises base station controller, mobile switching center emulation entity and media gateway; It is characterized in that,
Described base station controller is used for sending or carrying from the reception of mobile switching center emulation entity to the mobile switching center emulation entity the relevant signaling of dual-tone multifrequency ciphering control message; The first cryptographic algorithm title that includes A mouth key information in the described dual-tone multifrequency ciphering control message and be used for dual-tone multifrequency information is encrypted; And when carrying out the dual-tone multifrequency message transmission, utilize the shared key of A mouth of described first cryptographic algorithm and A mouth key information correspondence that dual-tone multifrequency information is handled with media gateway;
Described mobile switching center emulation entity is used for sending or carrying from the base station controller reception to base station controller the relevant signaling of dual-tone multifrequency ciphering control message; Utilize the A mouth of the A mouth key information correspondence in the described dual-tone multifrequency ciphering control message to share key generation dual-tone multifrequency cryptographic attributes information, and dual-tone multifrequency cryptographic attributes information is sent to media gateway; Described dual-tone multifrequency cryptographic attributes information comprises described first cryptographic algorithm title and H248 mouth key information;
Described media gateway is used for obtaining the A mouth according to this H248 mouth key information and shares key; Use the shared key of this A mouth and first cryptographic algorithm that dual-tone multifrequency information is handled.
16, system according to claim 15, it is characterized in that, described dual-tone multifrequency ciphering control message is carried in the A2p bear format characteristic parameter in the relevant signaling of inter-operability specification agreement after the expansion, in the H248 signaling of described dual-tone multifrequency cryptographic attributes information-bearing after expansion.
CNB2005101358594A 2005-11-01 2005-12-20 A code division multiple access CDMA system and a method for transmitting dual-tone multi-frequency information Expired - Fee Related CN100471313C (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CNB2005101358594A CN100471313C (en) 2005-11-29 2005-12-20 A code division multiple access CDMA system and a method for transmitting dual-tone multi-frequency information
PCT/CN2006/002932 WO2007051415A1 (en) 2005-11-01 2006-11-01 Mobile communication system, and information transmitting method and device wherein

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
CN200510101949 2005-11-29
CN200510101949.1 2005-11-29
CNB2005101358594A CN100471313C (en) 2005-11-29 2005-12-20 A code division multiple access CDMA system and a method for transmitting dual-tone multi-frequency information

Publications (2)

Publication Number Publication Date
CN1878399A CN1878399A (en) 2006-12-13
CN100471313C true CN100471313C (en) 2009-03-18

Family

ID=37510651

Family Applications (1)

Application Number Title Priority Date Filing Date
CNB2005101358594A Expired - Fee Related CN100471313C (en) 2005-11-01 2005-12-20 A code division multiple access CDMA system and a method for transmitting dual-tone multi-frequency information

Country Status (1)

Country Link
CN (1) CN100471313C (en)

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101043476B (en) * 2007-03-12 2010-05-19 华为技术有限公司 Method, device and system for preventing user information from being eavesdropped
CN101282284B (en) * 2007-04-02 2011-08-10 中兴通讯股份有限公司 Gateway-across dual-tone multi-frequency conveying method and apparatus
CN101394642A (en) * 2007-09-17 2009-03-25 华为技术有限公司 A method, device and system for reporting link abnormality information
CN101499867B (en) * 2008-02-02 2010-12-08 中兴通讯股份有限公司 Method for ciphering multimedia broadcast content
CN103888985A (en) * 2012-12-21 2014-06-25 华为技术有限公司 Information transmission method, media gateway and base station controller

Also Published As

Publication number Publication date
CN1878399A (en) 2006-12-13

Similar Documents

Publication Publication Date Title
JP4047580B2 (en) Key conversion system and method
US8037297B2 (en) Network and node for providing a secure transmission of mobile application part messages
EP2357858B1 (en) Enhanced security design for cryptography in mobile communication systems
EP1878285B1 (en) Fast user plane establishment in a telecommunications network
TWI332345B (en) Security considerations for the lte of umts
US9554271B2 (en) Generating keys for protection in next generation mobile networks
CN102315932B (en) Telecommunication systems and encryption of control messages in such systems
CN101163003A (en) System and method for authenticating network for terminal when SIM card use UMTS terminal and UMTS system
WO2012024903A1 (en) Method for encrypting voice calls in mobile communication network, and system, terminal, and network side thereof
CN101431812B (en) Method, system and device for processing circuit-switched domain services
WO2012024905A1 (en) Method, terminal and ggsn for encrypting and decrypting data in mobile communication network
CN100471313C (en) A code division multiple access CDMA system and a method for transmitting dual-tone multi-frequency information
CN100550721C (en) A kind of method and system of end-to-end wireless encryption communication
WO2007051415A1 (en) Mobile communication system, and information transmitting method and device wherein
KR100594022B1 (en) Data encryption method and decryption method in radio link control layer of wireless network system
KR20070086008A (en) System, terminal, method and software for communicating messages

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
C17 Cessation of patent right
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20090318

Termination date: 20121220