VoIP voice encryption protection method, node and system

Abstract

The invention discloses a VoIP voice encryption protection method, a node and a system, wherein the method comprises the following steps: leading core super-nodes of two parties in communication to respectively generate random numbers; leading one core super-node of the two parties in communication to select an encryption algorithm for common use according to the encryption algorithms respectively used by the two parties in communication; leading the core super-nodes of the two parties in communication to generate a network negotiation key according to the selected encryption algorithm and the generated two random numbers; and leading the two parties in communication to carry out encryption on call data according to the network negotiation key. The invention can improve the safety of calls in a DSN network and solve the technical defect that the prior art utilizes encryption protection in each hop link, and a relay node of each hop can thus obtain original plaintext information of call information, thereby being unsafe.

Description

technical field [0001] The present invention relates to a VoIP (Voice over Internet Protocol, hereinafter referred to as VoIP) technology in a core network in the communication field, and in particular to a VoIP voice encryption protection method, node and system. Background technique [0002] In the prior art, in order to ensure the security of voice calls, the following three methods are generally used: in the 3G network, user data is protected by confidentiality, and security protection measures are adopted for communication between network entities. Instant messaging software, such as "Skype" and "QQ", basically use end-to-end encryption to ensure the confidentiality and security of communication. The traditional VoIP protocol also provides corresponding security mechanisms, such as the H.323 protocol cluster and the SIP protocol provide end-to-end security protection. [0003] Distributed Service Network (DSN) is a new generation of operable and manageable distributed ...

AI Technical Summary

Problems solved by technology

[0005] Although the existing VoIP protocol also provides a corresponding security mechanism, that is, end-to-end algorithm protection or protection between each hop link, the end-to-end algorithm protection makes it impossible to meet the legal interception requirements, and the use of each The encryption protection between hop links will cause the relay node of each hop to obtain the original plaintext information of these call information

If the existing VoIP mechanism is simply used in the DSN network, it cannot meet the VoIP call characteristics in the DSN network, that is, it cannot meet the core network's control requirements for VoIP sessions, and cannot guarantee the security of user session information

Images