Internet protocol telephony security architecture

Abstract

A system is provided in which a client / server / network can implement a key management session when the server initiates the key management session utilizing a nonce. The nonce allows a wakeup or trigger message to be conveyed to the client such that a service attack on the server can be avoided when a false nonce is received by the server with an AP request message. Thus the server can disregard AP request messages that are not accompanied by a nonce stored by the server. The method can be implemented through circuitry, electrical signals and code to accomplish the acts described in the method.

Description

[0001] This application claims priority from co-pending PCT Application No. PCT / US00 / 09318 filed on Apr. 7, 2000 entitled, “Built-in Manufacturer's Certificates for a Cable Telephony Adapter to Provide Device and Service Certification,” which claims priority from U.S. application Ser. No. 60 / 128,772 entitled, “Internet Protocol Telephony Security Architecture” filed on Apr. 9, 1999, as well as PCT Application No. PCT / US00 / 02174 filed on Jan. 28, 2000 entitled “Key Management for Telephone Calls to Protect Signaling and Call Packets Between CTA's,” all of which are hereby incorporated by reference for all that they disclose and for all purposes.BACKGROUND [0002] This invention relates generally to network security, and more particularly, to a system for providing key management between a server and a client, e.g., in a telephony or an IP telephony network. [0003] In networks that are based on a client / server configuration, there is a need to establish a secure channel between the ser...

AI Technical Summary

Benefits of technology

"The invention is a system for managing keys in a client / server network. It involves a server, a client, and a trusted third party. The server initiates a key management session with the client by sending a trigger message and a nonce to the client. The client responds with a response message that includes a return nonce. The server checks if the response message is valid by comparing the nonce values. This system ensures secure key management in a network."

Problems solved by technology

Such an approach would add overhead to a server, requiring it to maintain cryptographic state for each of the clients.

Otherwise, the process would be open to denial of service attacks—since some provisioning exchanges can be forged.

Images