Conversation encryption method, system and device, electronic equipment and storage medium

Abstract

The embodiment of the invention provides an encrypted call method, system and device, electronic equipment and a storage medium, and the method comprises the steps: receiving a call instruction for a second terminal, and judging whether the terminal type of the second terminal meets a preset condition or not in response to the call instruction; when the terminal type of the second terminal meets a preset condition, sending a first call request of a first communication protocol to the encrypted conversation service platform through a preset application program; obtaining a session key sent by the encrypted call service platform according to the first call request; sending a second call request of a second communication protocol to a second terminal through the encrypted call service platform based on the encrypted call signaling, so that the second terminal obtains a session key from the encrypted call service platform according to the second call request; and performing an encrypted call with the second terminal according to the session key. Therefore, encrypted communication can be carried out between the first communication protocol and the second communication protocol, the use requirement of a user is met, and the use experience of the user is improved.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to an encrypted call method, an encrypted call system, an encrypted call device, an electronic device and a computer-readable storage medium. Background Art

[0002] With the development of quantum secret communication technology, the security of data in the communication process can be effectively improved, the risk of information leakage can be reduced, and the user experience can be improved. However, in related technologies, seamless connection between different communication protocols cannot be achieved, such as communication between VoIP (Voice over Internet Protocol) and VoLTE (Voice over Long-Term Evolution). The user's usage needs and usage need to be improved. Summary of the invention

[0003] In view of the above problems, embodiments of the present invention are proposed to provide an encrypted call method, an encrypted call system, an encrypted call device, an electronic device and a computer-readable storage medium that overcome the above problems or at least partially solve the above problems.

[0004] In order to solve the above problem, an embodiment of the present invention discloses an encrypted call method, which is applied to a first terminal; the first terminal is deployed with a preset application, and the method includes:

[0005] receiving a call instruction for a second terminal, and determining, in response to the call instruction, whether a terminal type of the second terminal meets a preset condition;

[0006] When the terminal type of the second terminal meets the preset condition, sending a first call request to the secret call service platform through the preset application; the first call request includes a first application key request and a secret call signaling; the first call request is a call request of a first communication protocol;

[0007] Obtaining a session key sent by the secret conversation service platform according to the first key application request;

[0008] sending, by the secret call service platform, a second call request to the second terminal based on the secret call signaling, so that the second terminal obtains the session key from the secret call service platform according to the second call request; the second call request is a call request of a second communication protocol;

[0009] Encrypting the first communication data according to the session key to obtain first encrypted data, and sending the first encrypted data to the second terminal, so that the second terminal decrypts the first encrypted data according to the session key to obtain the first communication data;

[0010] The second encrypted data obtained by encrypting the second communication data by the second terminal according to the session key is acquired, and the second encrypted data is decrypted according to the session key to obtain the second communication data.

[0011] Optionally, the sending, by the secret call service platform based on the secret call signaling, the second call request to the second terminal includes:

[0012] forwarding the secret message signaling to the first gateway through the secret message service platform;

[0013] converting the encrypted speech signaling into a protocol signaling through the first gateway, and forwarding the protocol signaling to the second gateway;

[0014] The protocol signaling is forwarded to the multimedia subsystem through the second gateway, so that the multimedia subsystem sends a second call request to the second terminal through the protocol signaling.

[0015] Optionally, the first terminal is deployed with a quantum security shield; and the determining whether the terminal type of the second terminal meets a preset condition includes:

[0016] querying the service activation status of the second communication protocol of the second terminal and the connection condition of the second communication protocol through the quantum security shield;

[0017] Sending an online status query request of the first communication protocol for the second terminal to the service platform through the quantum security shield;

[0018] Obtaining a query result returned by the service platform according to the online status query request;

[0019] Determine whether the service activation state of the second communication protocol of the second terminal is activated, whether the connection condition of the second communication protocol satisfies the connection condition, and whether the query result is online;

[0020] When the service activation state of the second communication protocol of the second terminal is activated, the connection condition of the second communication protocol satisfies the connection condition, and the query result is online, it is determined that the terminal type of the second terminal satisfies the preset condition.

[0021] Optionally, the first terminal is deployed with a first user identity module; and the obtaining the session key sent by the secret call service platform according to the first key application request includes:

[0022] Obtaining a first encryption key sent by the secret call service platform according to the first key application request; the first encryption key is obtained by the secret call service platform determining a session key from a preset session key according to the first key application request, and encrypting the session key using the first key; the first key application request is obtained by the first terminal encrypting a session identifier according to the first key obtained in the first user identity module; the session identifier is an identifier predetermined by the first terminal and the second terminal;

[0023] The first encryption key is decrypted according to the first key to obtain a session key.

[0024] Optionally, the method further comprises:

[0025] When the service activation state of the second communication protocol of the second terminal is activated, the connection condition of the second communication protocol is not satisfied, and the query result is online, a call flow of the first communication protocol is performed on the second terminal.

[0026] Optionally, the method further comprises:

[0027] When the service activation state of the second communication protocol of the second terminal is not activated, determining whether the service state of the first communication protocol of the second terminal is activated;

[0028] When the service status of the first communication protocol of the second terminal is activated, a call flow of the first communication protocol is performed on the second terminal.

[0029] The embodiment of the present invention further discloses an encrypted call method, which is applied to a second terminal and includes:

[0030] Receiving a second call request sent to a secret call service platform based on secret call signaling; the secret call signaling is obtained by the secret call service platform from the first call request; the first call request is made by the first terminal receiving a call instruction to the second terminal, responding to the call instruction to determine whether the terminal type of the second terminal meets a preset condition, and when the terminal type of the second terminal meets the preset condition, sending it to the secret call service platform through a preset application; the preset application is deployed on the first terminal; the first call request includes a first application key request and a secret call signaling; the first call request is a call request of a first communication protocol; the second call request is a call request of a second communication protocol;

[0031] acquiring the session key from the secret call service platform according to the second call request;

[0032] Acquire first encrypted data encrypted by the first terminal according to the session key, and decrypt the first encrypted data according to the session key to obtain the first communication data; the session key of the first terminal is sent to the first terminal by the secret call service platform according to the first application key request;

[0033] The second communication data is encrypted according to the session key to obtain second encrypted data, and the second encrypted data is sent to the first terminal, so that the first terminal decrypts the second encrypted data according to the session key to obtain second communication data.

[0034] Optionally, the second terminal is deployed with a second user identity module; and obtaining the session key from the secret call service platform according to the second call request includes:

[0035] In response to the second call request, sending a second key application request to the secret call service platform;

[0036] Obtaining a second encryption key sent by the secret call service platform according to the second key application request; the second encryption key is obtained by the secret call service platform determining a session key from a preset session key according to the second key application request, and encrypting the session key using the second key; the second key application request is obtained by the second terminal encrypting a session identifier according to the second key obtained in the second user identity module; the session identifier is an identifier predetermined by the first terminal and the second terminal;

[0037] The second encryption key is decrypted according to the second key to obtain a session key.

[0038] The embodiment of the present invention also discloses an encrypted call system, which includes a first terminal, a second terminal and a secret call service platform; the first terminal is deployed with a preset application;

[0039] The first terminal is used to receive a call instruction for a second terminal, and respond to the call instruction to determine whether the terminal type of the second terminal meets a preset condition; when the terminal type of the second terminal meets the preset condition, send a first call request to the secret call service platform through the preset application; the first call request includes a first application key request and a secret call signaling; the first call request is a call request of a first communication protocol; when the terminal type of the second terminal meets the preset condition, obtain a session key sent by the secret call service platform according to the first application key request; encrypt the first communication data according to the session key to obtain the first encrypted data, and send the first encrypted data to the second terminal; decrypt the second encrypted data according to the session key to obtain the second communication data;

[0040] The secret call service platform is configured to send a session key to the first terminal according to the first key application request; and send a second call request to the second terminal based on the secret call signaling;

[0041] The second terminal is used to obtain the session key from the secret call service platform according to the second call request; the second call request is a call request of the second communication protocol; the first encrypted data is decrypted according to the session key to obtain the first communication data; the second communication data is encrypting according to the session key to obtain the second encrypted data, and the second encrypted data is sent to the first terminal.

[0042] Optionally, the system further includes: a first gateway, a second gateway and a multimedia subsystem;

[0043] The secret speech service platform is used to forward the secret speech signaling to the first gateway;

[0044] The first gateway is used to convert the encrypted speech signaling into a protocol signaling, and forward the protocol signaling to the second gateway;

[0045] The second gateway is used to forward the protocol signaling to the multimedia subsystem;

[0046] The multimedia subsystem is used to send a second call request to the second terminal through the protocol signaling.

[0047] Optionally, the first terminal is deployed with a quantum security shield;

[0048] The first terminal is used to query the service activation status of the second communication protocol of the second terminal and the connection condition of the second communication protocol through the quantum security shield; send an online status query request for the first communication protocol of the second terminal to the service platform through the quantum security shield; obtain the query result returned by the service platform according to the online status query request; determine whether the service activation status of the second communication protocol of the second terminal is in the activation state, whether the connection condition of the second communication protocol is to meet the connection condition, and whether the query result is in the online state; when the service activation status of the second communication protocol of the second terminal is in the activation state, the connection condition of the second communication protocol is to meet the connection condition, and the query result is in the online state, determine that the terminal type of the second terminal meets the preset condition.

[0049] Optionally, the first terminal is deployed with a first user identity module;

[0050] The first terminal is used to obtain the first encryption key sent by the secret call service platform according to the first key application request; the first encryption key is determined by the secret call service platform from the preset session key according to the first key application request, and the session key is encrypting with the first key; the first key application request is obtained by the first terminal encrypting the session identifier according to the first key obtained from the first user identity module; the session identifier is an identifier predetermined by the first terminal and the second terminal; the first encryption key is decrypted according to the first key to obtain the session key.

[0051] Optionally, the first terminal is further used to perform a call process of the first communication protocol on the second terminal when the service activation state of the second communication protocol of the second terminal is activated, the connection condition of the second communication protocol is not met, and the query result is online.

[0052] Optionally, the first terminal is also used to determine whether the service status of the first communication protocol of the second terminal is activated when the service activation status of the second communication protocol of the second terminal is not activated; when the service status of the first communication protocol of the second terminal is activated, the call process of the first communication protocol is performed on the second terminal.

[0053] Optionally, the second terminal is deployed with a second user identity module;

[0054] The second terminal is used to respond to the second call request and send a second key application request to the secret call service platform; obtain the second encryption key sent by the secret call service platform according to the second key application request; the second encryption key is determined by the secret call service platform from the preset session key according to the second key application request, and the session key is encrypting using the second key; the second key application request is obtained by the second terminal encrypting the session identifier according to the second key obtained in the second user identity module; the session identifier is an identifier predetermined by the first terminal and the second terminal; the second encryption key is decrypted according to the second key to obtain the session key.

[0055] The embodiment of the present invention further discloses an encrypted call device, which is applied to a first terminal; the first terminal is deployed with a preset application program, and the device includes:

[0056] A first determination module, configured to receive a call instruction for a second terminal, and determine, in response to the call instruction, whether a terminal type of the second terminal meets a preset condition;

[0057] A first sending module, configured to send a first call request to the secret call service platform through the preset application program when the terminal type of the second terminal meets the preset condition; the first call request includes a first application key request and a secret call signaling; the first call request is a call request of a first communication protocol;

[0058] A first acquisition module, configured to acquire a session key sent by the secret conversation service platform according to the first key application request;

[0059] A second sending module, configured to send a second call request to the second terminal based on the secret call signaling through the secret call service platform, so that the second terminal obtains the session key from the secret call service platform according to the second call request; the second call request is a call request of a second communication protocol;

[0060] A third sending module is used to encrypt the first communication data according to the session key to obtain first encrypted data, and send the first encrypted data to the second terminal, so that the second terminal decrypts the first encrypted data according to the session key to obtain the first communication data;

[0061] The second acquisition module is used to acquire second encrypted data obtained by encrypting second communication data by the second terminal according to the session key, and decrypt the second encrypted data according to the session key to obtain second communication data.

[0062] Optionally, the second sending module includes:

[0063] A first forwarding submodule, configured to forward the secret speech signaling to a first gateway via the secret speech service platform;

[0064] A second forwarding submodule, configured to convert the encrypted speech signaling into a protocol signaling through the first gateway, and forward the protocol signaling to a second gateway;

[0065] The third forwarding submodule is used to forward the protocol signaling to the multimedia subsystem through the second gateway, so that the multimedia subsystem sends a second call request to the second terminal through the protocol signaling.

[0066] Optionally, the first terminal is deployed with a quantum security shield; and the first judgment module includes:

[0067] A query submodule, used to query the service activation status of the second communication protocol of the second terminal and the connection condition of the second communication protocol through the quantum security shield;

[0068] A first sending submodule, configured to send an online status query request of a first communication protocol for the second terminal to a service platform through the quantum security shield;

[0069] A first acquisition submodule, used to obtain the query result returned by the service platform according to the online status query request;

[0070] a judgment submodule, configured to judge whether the service activation status of the second communication protocol of the second terminal is activated, whether the connection condition of the second communication protocol satisfies the connection condition, and whether the query result is online;

[0071] The determination submodule is used to determine that the terminal type of the second terminal meets the preset condition when the service activation state of the second communication protocol of the second terminal is the activation state, the connection condition of the second communication protocol meets the connection condition, and the query result is the online state.

[0072] Optionally, the first terminal is deployed with a first user identity module; the first acquisition module includes:

[0073] a second acquisition submodule, configured to acquire a first encryption key sent by the secret call service platform according to the first key application request; the first encryption key is obtained by the secret call service platform determining a session key from a preset session key according to the first key application request, and encrypting the session key using the first key; the first key application request is obtained by the first terminal encrypting a session identifier according to the first key obtained in the first user identity module; the session identifier is an identifier predetermined by the first terminal and the second terminal;

[0074] The first decryption submodule is used to decrypt the first encryption key according to the first key to obtain a session key.

[0075] Optionally, the device further comprises:

[0076] The first calling module is used to perform a calling process of the first communication protocol on the second terminal when the service activation state of the second communication protocol of the second terminal is activated, the connection condition of the second communication protocol is not satisfied, and the query result is online.

[0077] Optionally, the device further comprises:

[0078] A second judgment module is used to judge whether the service status of the first communication protocol of the second terminal is activated when the service activation status of the second communication protocol of the second terminal is not activated;

[0079] The second calling module is used to perform a calling process of the first communication protocol on the second terminal when the service status of the first communication protocol of the second terminal is activated.

[0080] The embodiment of the present invention further discloses an encrypted communication device, which is applied to a second terminal and includes:

[0081] A receiving module, used for receiving a second call request sent to a secret call service platform based on secret call signaling; the secret call signaling is obtained by the secret call service platform from the first call request; the first call request is made by the first terminal receiving a call instruction to the second terminal, responding to the call instruction to determine whether the terminal type of the second terminal meets the preset conditions, and when the terminal type of the second terminal meets the preset conditions, sending it to the secret call service platform through a preset application; the preset application is deployed on the first terminal; the first call request includes a first application key request and a secret call signaling; the first call request is a call request of a first communication protocol; the second call request is a call request of a second communication protocol;

[0082] A third acquisition module, configured to acquire the session key from the secret call service platform according to the second call request;

[0083] a fourth acquisition module, configured to acquire first encrypted data encrypted by the first terminal according to the session key for the first communication data, and decrypt the first encrypted data according to the session key to obtain the first communication data; the session key of the first terminal is sent to the first terminal by the secret call service platform according to the first application key request;

[0084] The fourth sending module is used to encrypt the second communication data according to the session key to obtain second encrypted data, and send the second encrypted data to the first terminal, so that the first terminal decrypts the second encrypted data according to the session key to obtain second communication data.

[0085] Optionally, the third acquisition module includes:

[0086] A second sending submodule, configured to respond to the second call request and send a second key application request to the secret call service platform;

[0087] a third acquisition submodule, configured to acquire a second encryption key sent by the secret call service platform according to the second key application request; the second encryption key is obtained by the secret call service platform determining a session key from a preset session key according to the second key application request, and encrypting the session key using the second key; the second key application request is obtained by the second terminal encrypting a session identifier according to the second key obtained in the second user identity module; the session identifier is an identifier predetermined by the first terminal and the second terminal;

[0088] The second decryption submodule is used to decrypt the second encryption key according to the second key to obtain a session key.

[0089] The present invention also discloses a device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the above-mentioned encrypted call method when executing the computer program.

[0090] The present invention also discloses a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the encrypted call method as described above are implemented.

[0091] The embodiments of the present invention include the following advantages:

[0092] In an embodiment of the present invention, a first terminal receives a call instruction for a second terminal, and determines whether the terminal type of the second terminal meets a preset condition in response to the call instruction. When the terminal type of the second terminal meets the preset condition, a first call request is sent to a secret call service platform through a preset application, wherein the first call request includes a first application key request and secret call signaling, and the first call request is a call request of a first communication protocol, and then a session key sent by the secret call service platform according to the first application key request is obtained, and then a second call request is sent to the second terminal through the secret call service platform based on the secret call signaling, so that the second terminal obtains the session key from the secret call service platform according to the second call request; the second call request is a call request of a second communication protocol, the first communication data is encrypted according to the session key to obtain the first encrypted data, and the first encrypted data is sent to the second terminal, so that the second terminal decrypts the first encrypted data according to the session key to obtain the first communication data, obtains the second encrypted data encrypted by the second terminal according to the session key, and decrypts the second encrypted data according to the session key to obtain the second communication data. Therefore, after the first terminal sends a call request of the first communication protocol, the second terminal receives the call request of the second communication protocol through the secret call signaling, thereby realizing seamless connection between the first communication protocol and the second communication protocol, meeting the user's usage needs, and improving the user's usage experience. In addition, by obtaining the key of the secret call service platform and encrypting the communication data between the first communication protocol and the second communication protocol through the key, the communication data is securely protected, effectively preventing the risk of malicious interception and eavesdropping. BRIEF DESCRIPTION OF THE DRAWINGS

[0093] Figure 1 is a flowchart of a method for encrypting a call provided by an embodiment of the present invention;

[0094] Figure 2 is a flowchart of another method for encrypting a call provided by an embodiment of the present invention;

[0095] Figure 3 is a flowchart of another method for encrypting a call provided by an embodiment of the present invention;

[0096] Figure 4 is a structural block diagram of an encrypted call system provided by an embodiment of the present invention;

[0097] Figure 5 It is a structural block diagram of an encrypted communication device provided by an embodiment of the present invention;

[0098] Figure 6 It is a structural block diagram of another encrypted communication device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0099] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0100] In the related technology, it is not possible to achieve seamless connection between different communication protocols, such as communication between VoIP and VoLTE, and the user's usage needs and usage need to be improved. In order to solve the above technical problems, the present invention provides an encrypted call method, wherein a first terminal receives a call instruction for a second terminal, and judges whether the terminal type of the second terminal meets a preset condition in response to the call instruction. When the terminal type of the second terminal meets the preset condition, a first call request is sent to a secret call service platform through a preset application, wherein the first call request includes a first application key request and a secret call signaling, and the first call request is a call request of a first communication protocol, and then a session key sent by the secret call service platform according to the first application key request is obtained, and then a second call request is sent to the second terminal through the secret call service platform based on the secret call signaling, so that the second terminal obtains the session key from the secret call service platform according to the second call request; the second call request is a call request of a second communication protocol, the first communication data is encrypted according to the session key to obtain the first encrypted data, and the first encrypted data is sent to the second terminal, so that the second terminal decrypts the first encrypted data according to the session key to obtain the first communication data, obtains the second encrypted data encrypted by the second terminal according to the session key, and decrypts the second encrypted data according to the session key to obtain the second communication data. Thereby, seamless connection between the first communication protocol and the second communication protocol can be achieved, and encrypted communication can be performed between the first communication protocol and the second communication protocol, thereby meeting the user's usage needs and improving the user's usage experience.

[0101] Reference Figure 1 , shows a flowchart of a method for encrypting a call provided by an embodiment of the present invention, the method is applied to a first terminal, the first terminal is deployed with a preset application, and the method may specifically include the following steps:

[0102] Step 101: receiving a call instruction for a second terminal, and determining in response to the call instruction whether the terminal type of the second terminal meets a preset condition.

[0103] In an embodiment of the present invention, the first terminal may be deployed with a preset application, which may be a secret letter application. The user may dial the second terminal through the dial pad of the preset application, enter the phone number of the second terminal on the dial pad in the preset application, and click Call or Confirm. The first terminal may receive a call instruction for the second terminal, and then the first terminal may respond to the call instruction to determine whether the terminal type of the second terminal meets the preset condition.

[0104] In one embodiment, a first terminal is deployed with a quantum security shield; judging whether a terminal type of a second terminal meets a preset condition includes: querying a service activation state of a second communication protocol of the second terminal and a connection condition of the second communication protocol through the quantum security shield; sending an online status query request for the first communication protocol of the second terminal to a service platform through the quantum security shield; obtaining a query result returned by the service platform according to the online status query request; judging whether the service activation state of the second communication protocol of the second terminal is an activation state, whether the connection condition of the second communication protocol is to satisfy the connection condition, and whether the query result is an online state; when the service activation state of the second communication protocol of the second terminal is an activation state, the connection condition of the second communication protocol is to satisfy the connection condition, and the query result is an online state, it is determined that the terminal type of the second terminal meets the preset condition.

[0105] Specifically, the first terminal can query the service activation status of the second communication protocol of the second terminal and the connection conditions of the second communication protocol through the quantum security shield. For example, the second communication protocol can be the VoLTE protocol. The first terminal can query the service activation status of the VoLTE protocol of the second terminal and the connection conditions of the VoLTE protocol through the quantum security shield, that is, query whether the second terminal has activated the VoLTE service status and whether it has the connection conditions of the VoLTE protocol through the quantum security shield.

[0106] The first terminal can also send an online status query request of the first communication protocol for the second terminal to the service platform through the quantum security shield to query whether the second terminal can communicate through the first communication protocol. In the present invention, the first communication protocol can be a VoIP protocol.

[0107] When the first terminal determines through the quantum security shield that the service activation status of the second communication protocol of the second terminal is in the activated state, the connection condition of the second communication protocol of the second terminal meets the connection condition, and the online state of the first communication protocol of the second terminal is online, it can be determined that the terminal type of the second terminal meets the preset condition.

[0108] It should be noted that when the present invention determines whether the terminal type of the second terminal meets the preset conditions, it will also determine the service activation status of the second communication protocol of the first terminal. In other words, the encrypted call of the present invention is based on the condition that the service activation status of the second communication protocol of the first terminal and the second terminal are both activated.

[0109] Step 102, when the terminal type of the second terminal meets the preset condition, a first call request is sent to the secret call service platform through the preset application; the first call request includes a first application key request and secret call signaling; the first call request is a call request of the first communication protocol.

[0110] In an embodiment of the present invention, when the first terminal determines that the terminal type of the second terminal meets the preset conditions, a first call request can be sent to the secret call service platform through a preset application, wherein the first call request can include a first application key request and secret call signaling, and the first call request can be a call request of the first communication protocol, that is, the first call request can be a call request of the VoIP protocol.

[0111] Step 103: Obtain the session key sent by the secret conversation service platform according to the first key application request.

[0112] In an embodiment of the present invention, after the first terminal sends a first call request to the secret call service platform through a preset application, the secret call service platform can determine the session key according to the first application key request in the first call request, and send the session key to the first terminal.

[0113] In one embodiment, the first terminal may be deployed with a first user identity module; obtaining the session key sent by the secret call service platform according to the first application key request may include: obtaining the first encryption key sent by the secret call service platform according to the first application key request; the first encryption key is the session key determined by the secret call service platform from the preset session key according to the first application key request, and the session key is encrypted using the first key; the first key application request is obtained by the first terminal encrypting the session identifier according to the first key obtained from the first user identity module; the session identifier is an identifier predetermined by the first terminal and the second terminal; the first encryption key is decrypted according to the first key to obtain the session key.

[0114] Specifically, the first user identity module in the present invention can be a quantum security SIM (Subscriber Identity Module) card installed in the first terminal. The first terminal and the second terminal can pre-negotiate to determine a session identifier according to certain rules. The first terminal can obtain a key from the quantum security SIM card, that is, the first terminal obtains the first key from the first user identity module, and then uses the first key to encrypt the session identifier to obtain a first application key request, and sends the first application key request to the secret call service platform. After receiving the first application key request, the secret call service platform can determine the session key from the preset session key according to the first application key request. The secret call service platform then encrypts the session key according to the first key to obtain a first encryption key, and sends the first encryption key to the first terminal. Finally, the first terminal decrypts the first encryption key according to the first key to obtain the session key.

[0115] Step 104: Send a second call request to the second terminal through the secret call service platform based on the secret call signaling, so that the second terminal obtains the session key from the secret call service platform according to the second call request; the second call request is a call request of the second communication protocol.

[0116] In an embodiment of the present invention, after receiving the first call request sent by the first terminal, the secret call service platform can send a second call request to the second terminal based on the secret call information in the first call request through the secret call service platform, wherein the second call request can be a call request of the second communication protocol, for example, the second call request can be a call request of the VoLTE protocol.

[0117] In one embodiment, sending a second call request to a second terminal based on secret call signaling through the secret call service platform may include: forwarding the secret call signaling to the first gateway through the secret call service platform; converting the secret call signaling into protocol signaling through the first gateway, and forwarding the protocol signaling to the second gateway; forwarding the protocol signaling to the multimedia subsystem through the second gateway, so that the multimedia subsystem sends the second call request to the second terminal through the protocol signaling.

[0118] Specifically, the first gateway may be a transcoding gateway, and the second gateway may be a VoLTE capability gateway. The secret call service platform forwards the secret call signaling to the transcoding gateway, and the transcoding gateway may convert the secret call signaling into a protocol signaling, which may be a SIP (Session Initiation Protocol) signaling. The transcoding gateway then forwards the SIP signaling to the VoLTE capability gateway, and the VoLTE capability gateway forwards the SIP signaling to the multimedia subsystem, which may be an IMS (IP Multimedia Subsystem) IP multimedia subsystem, and the multimedia subsystem sends the second call request to the second terminal through the SIP signaling.

[0119] In the embodiment of the present invention, after receiving the second call request, the second terminal may obtain the session key from the secret call service platform according to the second call request.

[0120] Specifically, a second user identity module may be deployed in the second terminal, and the second user identity module may be a quantum security SIM (Subscriber Identity Module) card installed in the second terminal. The first terminal and the second terminal may pre-negotiate to determine a session identifier according to certain rules, and the second terminal may obtain a key from the quantum security SIM card, that is, the second terminal obtains the second key from the second user identity module, and then uses the second key to encrypt the session identifier to obtain a second application key request, and sends the second application key request to the secret call service platform. After receiving the second application key request, the secret call service platform may determine the session key from the preset session key according to the second application key request, and the secret call service platform then encrypts the session key according to the second key to obtain a second encryption key, and sends the second encryption key to the second terminal. Finally, the second terminal decrypts the second encryption key according to the second key to obtain the session key.

[0121] Step 105: encrypt the first communication data according to the session key to obtain first encrypted data, and send the first encrypted data to the second terminal, so that the second terminal decrypts the first encrypted data according to the session key to obtain the first communication data.

[0122] In an embodiment of the present invention, after sending a second call request to the second terminal, after the user confirms the second call request at the second terminal, the first terminal and the second terminal can establish a connection for a call. During the call, the first terminal can encrypt the first communication data according to the session key to obtain the first encrypted data, and then send the first encrypted data to the second terminal. After receiving the first encrypted data, the second terminal can decrypt the first encrypted data according to the session key to obtain the first communication data, thereby encrypting the communication data and providing security protection for the communication data, effectively preventing the risk of malicious interception and eavesdropping.

[0123] Step 106: Acquire second encrypted data obtained by encrypting second communication data by the second terminal according to the session key, and decrypt the second encrypted data according to the session key to obtain second communication data.

[0124] In an embodiment of the present invention, after sending a second call request to the second terminal, after the user confirms the second call request at the second terminal, the first terminal and the second terminal can establish a connection for a call. During the call, the second terminal can encrypt the second communication data according to the session key to obtain second encrypted data, and then send the second encrypted data to the first terminal. After receiving the second encrypted data, the first terminal can decrypt the second encrypted data according to the session key to obtain the second communication data, thereby encrypting the communication data and providing security protection for the communication data, effectively preventing the risk of malicious interception and eavesdropping.

[0125] In an embodiment of the present invention, the method for encrypting a call may further include: when the service activation status of the second communication protocol of the second terminal is in the activated state, the connection condition of the second communication protocol is that the connection condition is not met, and the query result is online, then the call process of the first communication protocol is performed on the second terminal.

[0126] For example: the service activation status of the VoLTE protocol of the second terminal is in the activated status, but the connection condition of the VoLTE protocol of the second terminal does not meet the connection condition, that is, although the second terminal has activated the VoLTE protocol service, it does not have the conditions for receiving the VoLTE protocol. However, when the online status of the VoIP protocol of the second terminal is online, the first terminal directly performs the call process of the first communication protocol to the second terminal, that is, the first terminal and the second terminal both use the VoIP protocol to communicate.

[0127] In an embodiment of the present invention, the method for encrypting calls may further include: when the service activation status of the second communication protocol of the second terminal is not activated, determining whether the service status of the first communication protocol of the second terminal is activated; when the service status of the first communication protocol of the second terminal is activated, performing a call process of the first communication protocol on the second terminal.

[0128] For example: if the service activation status of the VoLTE protocol of the second terminal is activated, then it is determined whether the service status of the VoIP protocol of the second terminal is activated. When the service status of the VoIP protocol of the second terminal is activated, the first terminal directly performs a call process of the first communication protocol on the second terminal, that is, the first terminal and the second terminal both use the VoIP protocol to communicate.

[0129] like Figure 2As shown, a flowchart of another encrypted call method provided by an embodiment of the present invention is shown. The first terminal sends a call instruction to the second terminal through a preset program, and the first terminal determines whether the service activation state of the VoLTE protocol of the second terminal is in an activated state and whether the connection condition of the second communication protocol satisfies the connection condition through the quantum security shield. When the service activation state of the VoLTE protocol of the second terminal is in an activated state and the connection condition of the second communication protocol satisfies the connection condition, the first terminal sends a call request of the VoIP protocol to the secret call service platform, and sends a call request of the VoLTE protocol to the second terminal through the secret call service platform, the first gateway, the second gateway and the multimedia subsystem.

[0130] When the service activation status of the VoLTE protocol of the second terminal is not activated, or the connection condition of the second communication protocol does not meet the connection condition, it is judged that the service activation status of the VoIP protocol of the second terminal is not activated. When the service activation status of the VoIP protocol of the second terminal is activated, the first terminal sends a call request of the VoIP protocol to the second terminal. When the service activation status of the VoIP protocol of the second terminal is not activated, the first terminal outputs a related prompt tone, for example: please switch to a normal call, etc.

[0131] In the embodiment of the present invention, when the second terminal receives the first call request or the second call request and does not respond to the call within a preset time range, the first terminal may output a prompt tone and hang up due to timeout.

[0132] In an embodiment of the present invention, a call instruction for a second terminal is received, and in response to the call instruction, it is determined whether the terminal type of the second terminal meets a preset condition; when the terminal type of the second terminal meets the preset condition, a first call request is sent to the secret call service platform through a preset application; the first call request includes a first application key request and a secret call signaling; the first call request is a call request for a first communication protocol; the session key sent by the secret call service platform according to the first application key request is obtained; a second call request is sent to the second terminal through the secret call service platform based on the secret call signaling, so that the second terminal obtains the session key from the secret call service platform according to the second call request; the second call request is a call request for a second communication protocol; the first communication data is encrypted according to the session key to obtain first encrypted data, and the first encrypted data is sent to the second terminal, so that the second terminal decrypts the first encrypted data according to the session key to obtain the first communication data; the second encrypted data encrypted by the second terminal according to the session key for the second communication data is obtained, and the second encrypted data is decrypted according to the session key to obtain the second communication data. Thereby, seamless connection between the first communication protocol and the second communication protocol can be achieved, and encrypted communication can be performed between the first communication protocol and the second communication protocol, thereby meeting the user's usage needs and improving the user's usage experience.

[0133] like Figure 3 FIG. 1 is a flowchart showing another method for encrypting a call provided by an embodiment of the present invention. The method is applied to a second terminal and may specifically include the following steps:

[0134] Step 301, receiving a second call request sent by a secret call service platform based on secret call signaling; the secret call signaling is obtained by the secret call service platform from the first call request; the first call request is received by the first terminal when a call instruction to the second terminal is received, and the first terminal responds to the call instruction to determine whether the terminal type of the second terminal meets the preset conditions, and when the terminal type of the second terminal meets the preset conditions, it is sent to the secret call service platform through a preset application; the preset application is deployed on the first terminal; the first call request includes a first application key request and secret call signaling; the first call request is a call request of a first communication protocol; the second call request is a call request of a second communication protocol.

[0135] In an embodiment of the present invention, the first terminal may be deployed with a preset application, which may be a secret letter application. The user may dial the second terminal through the dial pad of the preset application, enter the phone number of the second terminal on the dial pad in the preset application, and click Call or Confirm. The first terminal may receive a call instruction for the second terminal, and then the first terminal may respond to the call instruction to determine whether the terminal type of the second terminal meets the preset condition.

[0136] When the first terminal determines that the terminal type of the second terminal meets the preset conditions, a first call request can be sent to the secret call service platform through a preset application, wherein the first call request can include a first application key request and secret call signaling, and the first call request can be a call request of the first communication protocol, that is, the first call request can be a call request of the VoIP protocol.

[0137] After the first terminal sends a first call request to the secret call service platform through a preset application, the secret call service platform may determine a session key according to the first key application request in the first call request, and send the session key to the first terminal.

[0138] After receiving the first call request sent by the first terminal, the secret call service platform can send a second call request to the second terminal based on the secret call information in the first call request through the secret call service platform, wherein the second call request can be a call request of the second communication protocol, for example, the second call request can be a call request of the VoLTE protocol.

[0139] Step 302: Obtain the session key from the secret call service platform according to the second call request.

[0140] In the embodiment of the present invention, after the second terminal receives the second call request, the session key can be obtained from the secret call service platform according to the second call request.

[0141] In one embodiment, the second terminal is deployed with a second user identity module; obtaining a session key from the secret call service platform according to a second call request may include: responding to the second call request, sending a second key application request to the secret call service platform; obtaining a second encryption key sent by the secret call service platform according to the second key application request; the second encryption key is obtained by the secret call service platform determining the session key from a preset session key according to the second key application request, and encrypting the session key with the second key; the second key application request is obtained by the second terminal encrypting a session identifier according to the second key obtained from the second user identity module; the session identifier is an identifier predetermined by the first terminal and the second terminal; and the second encryption key is decrypted according to the second key to obtain the session key.

[0142] Specifically, a second user identity module may be deployed in the second terminal, and the second user identity module may be a quantum security SIM (Subscriber Identity Module) card installed in the second terminal. The first terminal and the second terminal may pre-negotiate to determine a session identifier according to certain rules, and the second terminal may obtain a key from the quantum security SIM card, that is, the second terminal obtains the second key from the second user identity module, and then uses the second key to encrypt the session identifier to obtain a second application key request, and sends the second application key request to the secret call service platform. After receiving the second application key request, the secret call service platform may determine the session key from the preset session key according to the second application key request, and the secret call service platform then encrypts the session key according to the second key to obtain a second encryption key, and sends the second encryption key to the second terminal. Finally, the second terminal decrypts the second encryption key according to the second key to obtain the session key.

[0143] Step 303, obtaining the first encrypted data that the first terminal encrypts the first communication data according to the session key, and decrypting the first encrypted data according to the session key to obtain the first communication data; the session key of the first terminal is sent to the first terminal by the secret call service platform according to the first application key request.

[0144] In an embodiment of the present invention, after sending a second call request to the second terminal, after the user confirms the second call request at the second terminal, the first terminal and the second terminal can establish a connection for a call. During the call, the first terminal can encrypt the first communication data according to the session key to obtain the first encrypted data, and then send the first encrypted data to the second terminal. After receiving the first encrypted data, the second terminal can decrypt the first encrypted data according to the session key to obtain the first communication data, thereby encrypting the communication data and providing security protection for the communication data, effectively preventing the risk of malicious interception and eavesdropping.

[0145] Step 304: encrypt the second communication data according to the session key to obtain second encrypted data, and send the second encrypted data to the first terminal, so that the first terminal decrypts the second encrypted data according to the session key to obtain second communication data.

[0146] In an embodiment of the present invention, after sending a second call request to the second terminal, after the user confirms the second call request at the second terminal, the first terminal and the second terminal can establish a connection for a call. During the call, the second terminal can encrypt the second communication data according to the session key to obtain second encrypted data, and then send the second encrypted data to the first terminal. After receiving the second encrypted data, the first terminal can decrypt the second encrypted data according to the session key to obtain the second communication data, thereby encrypting the communication data and providing security protection for the communication data, effectively preventing the risk of malicious interception and eavesdropping.

[0147] In an embodiment of the present invention, a call instruction for a second terminal is received, and in response to the call instruction, it is determined whether the terminal type of the second terminal meets a preset condition; when the terminal type of the second terminal meets the preset condition, a first call request is sent to the secret call service platform through a preset application; the first call request includes a first application key request and a secret call signaling; the first call request is a call request for a first communication protocol; the session key sent by the secret call service platform according to the first application key request is obtained; a second call request is sent to the second terminal through the secret call service platform based on the secret call signaling, so that the second terminal obtains the session key from the secret call service platform according to the second call request; the second call request is a call request for a second communication protocol; the first communication data is encrypted according to the session key to obtain first encrypted data, and the first encrypted data is sent to the second terminal, so that the second terminal decrypts the first encrypted data according to the session key to obtain the first communication data; the second encrypted data encrypted by the second terminal according to the session key for the second communication data is obtained, and the second encrypted data is decrypted according to the session key to obtain the second communication data. Thereby, seamless connection between the first communication protocol and the second communication protocol can be achieved, and encrypted communication can be performed between the first communication protocol and the second communication protocol, thereby meeting the user's usage needs and improving the user's usage experience.

[0148] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0149] like Figure 4 , showing a structural block diagram of an encrypted call system provided by an embodiment of the present invention, the system includes a first terminal 401, a second terminal 402 and a secret call service platform 403, and the first terminal is deployed with a preset application 4011.

[0150] The first terminal 401 is used to receive a call instruction for the second terminal 402, and respond to the call instruction to determine whether the terminal type of the second terminal 402 meets the preset condition; when the terminal type of the second terminal 402 meets the preset condition, send a first call request to the secret call service platform 403 through the preset application 4011; the first call request includes a first application key request and a secret call signaling; the first call request is a call request of the first communication protocol; when the terminal type of the second terminal 402 meets the preset condition, obtain the session key sent by the secret call service platform 403 according to the first application key request; encrypt the first communication data according to the session key to obtain the first encrypted data, and send the first encrypted data to the second terminal 402; decrypt the second encrypted data according to the session key to obtain the second communication data;

[0151] The secret call service platform 403 is configured to send a session key to the first terminal 401 according to the first key application request; and send a second call request to the second terminal 402 based on the secret call signaling;

[0152] The second terminal 402 is used to obtain the session key from the secret call service platform 403 according to the second call request; the second call request is a call request of the second communication protocol; the first encrypted data is decrypted according to the session key to obtain the first communication data; the second communication data is encrypting according to the session key to obtain the second encrypted data, and the second encrypted data is sent to the first terminal 401.

[0153] In one embodiment, the system also includes: a first gateway, a second gateway and a multimedia subsystem; a secret call service platform 403, used to forward the secret call signaling to the first gateway; the first gateway, used to convert the secret call signaling into protocol signaling and forward the protocol signaling to the second gateway; the second gateway, used to forward the protocol signaling to the multimedia subsystem; the multimedia subsystem, used to send a second call request to the second terminal 402 via protocol signaling.

[0154] In one embodiment, the first terminal 401 is deployed with a quantum security shield; the first terminal 401 is used to query the service activation status of the second communication protocol and the connection condition of the second communication protocol of the second terminal 402 through the quantum security shield; send an online status query request for the first communication protocol of the second terminal 402 to the service platform through the quantum security shield; obtain the query result returned by the service platform according to the online status query request; determine whether the service activation status of the second communication protocol of the second terminal 402 is an activated state, whether the connection condition of the second communication protocol is to meet the connection condition, and whether the query result is an online state; when the service activation status of the second communication protocol of the second terminal 402 is an activated state, the connection condition of the second communication protocol is to meet the connection condition, and the query result is an online state, it is determined that the terminal type of the second terminal 402 meets the preset condition.

[0155] In one embodiment, the first terminal 401 is deployed with a first user identity module; the first terminal 401 is used to obtain a first encryption key sent by the secret call service platform 403 according to a first application key request; the first encryption key is obtained by the secret call service platform 403 determining a session key from a preset session key according to the first application key request, and encrypting the session key using the first key; the first key application request is obtained by the first terminal 401 encrypting a session identifier according to the first key obtained from the first user identity module; the session identifier is an identifier predetermined by the first terminal 401 and the second terminal 402; the first encryption key is decrypted according to the first key to obtain the session key.

[0156] In one embodiment, the first terminal 401 is also used to perform a call process of the first communication protocol on the second terminal 402 when the service activation status of the second communication protocol of the second terminal 402 is activated, the connection condition of the second communication protocol is not met, and the query result is online.

[0157] In one embodiment, the first terminal 401 is also used to determine whether the service status of the first communication protocol of the second terminal 402 is activated when the service activation status of the second communication protocol of the second terminal 402 is not activated; when the service status of the first communication protocol of the second terminal 402 is activated, the call process of the first communication protocol is performed on the second terminal 402.

[0158] In one embodiment, the second terminal 402 is deployed with a second user identity module; the second terminal 402 is used to respond to the second call request and send a second application key request to the secret call service platform 403; obtain the second encryption key sent by the secret call service platform 403 according to the second application key request; the second encryption key is that the secret call service platform 403 determines the session key from the preset session key according to the second application key request, and uses the second key to encrypt the session key; the second key application request is obtained by the second terminal 402 encrypting the session identifier according to the second key obtained in the second user identity module; the session identifier is a predetermined identifier by the first terminal 401 and the second terminal 402; the second encryption key is decrypted according to the second key to obtain the session key.

[0159] In an embodiment of the present invention, a first terminal is used to receive a call instruction for a second terminal, and in response to the call instruction, determine whether the terminal type of the second terminal meets a preset condition; when the terminal type of the second terminal meets the preset condition, send a first call request to the secret call service platform through a preset application; the first call request includes a first application key request and a secret call signaling; the first call request is a call request of a first communication protocol; when the terminal type of the second terminal meets the preset condition, obtain a session key sent by the secret call service platform according to the first application key request; encrypt the first communication data according to the session key to obtain first encrypted data, and send the first encrypted data to the second terminal; decrypt the second encrypted data according to the session key to obtain second communication data; the secret call service platform is used to send a session key to the first terminal according to the first application key request; based on the secret call signaling, send a second call request to the second terminal; the second terminal is used to obtain a session key from the secret call service platform according to the second call request; the second call request is a call request of a second communication protocol; decrypt the first encrypted data according to the session key to obtain the first communication data; encrypt the second communication data according to the session key to obtain the second encrypted data, and send the second encrypted data to the first terminal. Thereby, seamless connection between the first communication protocol and the second communication protocol can be achieved, and encrypted communication can be performed between the first communication protocol and the second communication protocol, thereby meeting the user's usage needs and improving the user's usage experience.

[0160] Reference Figure 5 , shows a structural block diagram of an encrypted call device provided by an embodiment of the present invention, the device is applied to a first terminal; the first terminal is deployed with a preset application, which may specifically include the following modules:

[0161] The first determination module 501 is used to receive a call instruction for a second terminal, and determine whether the terminal type of the second terminal meets a preset condition in response to the call instruction;

[0162] A first sending module 502 is used to send a first call request to the secret call service platform through the preset application when the terminal type of the second terminal meets the preset condition; the first call request includes a first application key request and a secret call signaling; the first call request is a call request of a first communication protocol;

[0163] A first acquisition module 503, configured to acquire a session key sent by the secret conversation service platform according to the first key application request;

[0164] A second sending module 504 is configured to send a second call request to the second terminal based on the secret call signaling through the secret call service platform, so that the second terminal obtains the session key from the secret call service platform according to the second call request; the second call request is a call request of a second communication protocol;

[0165] A third sending module 505 is used to encrypt the first communication data according to the session key to obtain first encrypted data, and send the first encrypted data to the second terminal, so that the second terminal decrypts the first encrypted data according to the session key to obtain the first communication data;

[0166] The second acquisition module 506 is used to acquire second encrypted data obtained by encrypting second communication data using the session key by the second terminal, and decrypt the second encrypted data using the session key to obtain second communication data.

[0167] In one embodiment, the second sending module 504 includes:

[0168] A first forwarding submodule, configured to forward the secret speech signaling to a first gateway via the secret speech service platform;

[0169] A second forwarding submodule, configured to convert the encrypted speech signaling into a protocol signaling through the first gateway, and forward the protocol signaling to a second gateway;

[0170] The third forwarding submodule is used to forward the protocol signaling to the multimedia subsystem through the second gateway, so that the multimedia subsystem sends a second call request to the second terminal through the protocol signaling.

[0171] In one embodiment, the first terminal is deployed with a quantum security shield; the first determination module 501 includes:

[0172] A query submodule, used to query the service activation status of the second communication protocol of the second terminal and the connection condition of the second communication protocol through the quantum security shield;

[0173] A first sending submodule, configured to send an online status query request of a first communication protocol for the second terminal to a service platform through the quantum security shield;

[0174] A first acquisition submodule, used to obtain the query result returned by the service platform according to the online status query request;

[0175] a judgment submodule, configured to judge whether the service activation status of the second communication protocol of the second terminal is activated, whether the connection condition of the second communication protocol satisfies the connection condition, and whether the query result is online;

[0176] The determination submodule is used to determine that the terminal type of the second terminal meets the preset condition when the service activation state of the second communication protocol of the second terminal is the activation state, the connection condition of the second communication protocol meets the connection condition, and the query result is the online state.

[0177] In one embodiment, the first terminal is deployed with a first user identity module; the first acquisition module 503 includes:

[0178] a second acquisition submodule, configured to acquire a first encryption key sent by the secret call service platform according to the first key application request; the first encryption key is obtained by the secret call service platform determining a session key from a preset session key according to the first key application request, and encrypting the session key using the first key; the first key application request is obtained by the first terminal encrypting a session identifier according to the first key obtained in the first user identity module; the session identifier is an identifier predetermined by the first terminal and the second terminal;

[0179] The first decryption submodule is used to decrypt the first encryption key according to the first key to obtain a session key.

[0180] In one embodiment, the device further comprises:

[0181] The first calling module is used to perform a calling process of the first communication protocol on the second terminal when the service activation state of the second communication protocol of the second terminal is activated, the connection condition of the second communication protocol is not satisfied, and the query result is online.

[0182] In one embodiment, the device further comprises:

[0183] A second judgment module is used to judge whether the service status of the first communication protocol of the second terminal is activated when the service activation status of the second communication protocol of the second terminal is not activated;

[0184] The second calling module is used to perform a calling process of the first communication protocol on the second terminal when the service status of the first communication protocol of the second terminal is activated.

[0185] In an embodiment of the present invention, a first judgment module is used to receive a call instruction for a second terminal, and judge whether the terminal type of the second terminal meets a preset condition in response to the call instruction; a first sending module is used to send a first call request to the secret call service platform through a preset application when the terminal type of the second terminal meets the preset condition; the first call request includes a first application key request and a secret call signaling; the first call request is a call request of a first communication protocol; a first acquisition module is used to obtain a session key sent by the secret call service platform according to the first application key request; a second sending module is used to send a second call request to the second terminal based on the secret call signaling through the secret call service platform, so that the second terminal obtains the session key from the secret call service platform according to the second call request; the second call request is a call request of a second communication protocol; a third sending module is used to encrypt the first communication data according to the session key to obtain the first encrypted data, and send the first encrypted data to the second terminal, so that the second terminal decrypts the first encrypted data according to the session key to obtain the first communication data; a second acquisition module is used to obtain the second encrypted data encrypted by the second terminal according to the session key, and decrypt the second encrypted data according to the session key to obtain the second communication data. Thereby, seamless connection between the first communication protocol and the second communication protocol can be achieved, and encrypted communication can be performed between the first communication protocol and the second communication protocol, thereby meeting the user's usage needs and improving the user's usage experience.

[0186] Reference Figure 6 , shows a structural block diagram of an encrypted communication device provided by an embodiment of the present invention, the device is applied to a second terminal and may specifically include the following modules:

[0187] The receiving module 601 is used to receive a second call request sent to the secret call service platform based on the secret call signaling; the secret call signaling is obtained by the secret call service platform from the first call request; the first call request is received by the first terminal when the call instruction to the second terminal is received, and the terminal type of the second terminal is judged in response to the call instruction whether it meets the preset conditions, and when the terminal type of the second terminal meets the preset conditions, it is sent to the secret call service platform through a preset application; the preset application is deployed on the first terminal; the first call request includes a first application key request and a secret call signaling; the first call request is a call request of the first communication protocol; the second call request is a call request of the second communication protocol;

[0188] A third acquisition module 602, configured to acquire the session key from the secret call service platform according to the second call request;

[0189] The fourth acquisition module 603 is used to acquire first encrypted data encrypted by the first terminal according to the session key to the first communication data, and decrypt the first encrypted data according to the session key to obtain the first communication data; the session key of the first terminal is sent to the first terminal by the secret call service platform according to the first application key request;

[0190] The fourth sending module 604 is used to encrypt the second communication data according to the session key to obtain second encrypted data, and send the second encrypted data to the first terminal, so that the first terminal decrypts the second encrypted data according to the session key to obtain second communication data.

[0191] In one embodiment, the third acquisition module 602 includes:

[0192] A second sending submodule, configured to respond to the second call request and send a second key application request to the secret call service platform;

[0193] a third acquisition submodule, configured to acquire a second encryption key sent by the secret call service platform according to the second key application request; the second encryption key is obtained by the secret call service platform determining a session key from a preset session key according to the second key application request, and encrypting the session key using the second key; the second key application request is obtained by the second terminal encrypting a session identifier according to the second key obtained in the second user identity module; the session identifier is an identifier predetermined by the first terminal and the second terminal;

[0194] The second decryption submodule is used to decrypt the second encryption key according to the second key to obtain a session key.

[0195] In an embodiment of the present invention, a receiving module is used to receive a second call request sent by a secret call service platform based on a secret call signaling; the secret call signaling is obtained by the secret call service platform from the first call request; the first call request is received by the first terminal when a call instruction to the second terminal is received, and the terminal type of the second terminal is judged in response to the call instruction whether it meets the preset conditions, and when the terminal type of the second terminal meets the preset conditions, it is sent to the secret call service platform through a preset application; the preset application is deployed on the first terminal; the first call request includes a first application key request and a secret call signaling; the first call request is a call request of the first communication protocol; the second call request is a call request of the second communication protocol. The first terminal uses a first communication protocol to communicate with the user through a secure communication interface, and the second communication protocol can be used to communicate with the user through a secure communication interface. The first communication protocol can be used to communicate with the user through a secure communication interface, and the second communication protocol can be used to communicate with the user through a secure communication interface. The first communication protocol can be used to communicate with the user through a secure communication interface, and the second communication protocol can be used to communicate with the user through a secure communication interface. The first communication protocol can be used to communicate with the user through a secure communication interface, and the second communication protocol can be used to communicate with the user through a secure communication interface. The first communication protocol can be used to communicate with the user through a secure communication interface, and the second communication protocol can be used to communicate with the user through a secure communication interface, and the first ...

[0196] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0197] An embodiment of the present invention further provides an electronic device, including:

[0198] It includes a processor, a memory, and a computer program stored in the memory and capable of running on the processor. When the computer program is executed by the processor, the various processes of the above-mentioned encrypted call method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0199] An embodiment of the present invention further provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the various processes of the above-mentioned encrypted call method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0200] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0201] It will be appreciated by those skilled in the art that the embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0202] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0203] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0204] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0205] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0206] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0207] The above is a detailed introduction to an encrypted call method, an encrypted call system, an encrypted call device, an electronic device and a computer-readable storage medium provided by the present invention. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for general technical personnel in this field, according to the idea of ​​the present invention, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. An encrypted call method, characterized in that: The method is applied to a first terminal; the first terminal is deployed with a preset application program, and the method includes: receiving a call instruction for a second terminal, and determining, in response to the call instruction, whether a terminal type of the second terminal meets a preset condition; When the terminal type of the second terminal meets the preset condition, sending a first call request to the secret call service platform through the preset application; the first call request includes a first application key request and a secret call signaling; the first call request is a call request of a first communication protocol; Obtaining a session key sent by the secret conversation service platform according to the first key application request; sending, by the secret call service platform, a second call request to the second terminal based on the secret call signaling, so that the second terminal obtains the session key from the secret call service platform according to the second call request; the second call request is a call request of a second communication protocol; Encrypting the first communication data according to the session key to obtain first encrypted data, and sending the first encrypted data to the second terminal, so that the second terminal decrypts the first encrypted data according to the session key to obtain the first communication data; The second encrypted data obtained by encrypting the second communication data by the second terminal according to the session key is acquired, and the second encrypted data is decrypted according to the session key to obtain the second communication data.

2. The encrypted call method according to claim 1, characterized in that: The sending, by the secret call service platform based on the secret call signaling, the second call request to the second terminal includes: forwarding the secret message signaling to the first gateway through the secret message service platform; converting the encrypted speech signaling into a protocol signaling through the first gateway, and forwarding the protocol signaling to the second gateway; The protocol signaling is forwarded to the multimedia subsystem through the second gateway, so that the multimedia subsystem sends a second call request to the second terminal through the protocol signaling.

3. The encrypted call method according to claim 1, characterized in that: The first terminal is deployed with a quantum security shield; The determining whether the terminal type of the second terminal meets a preset condition includes: querying the service activation status of the second communication protocol of the second terminal and the connection condition of the second communication protocol through the quantum security shield; Sending an online status query request of the first communication protocol for the second terminal to the service platform through the quantum security shield; Obtaining a query result returned by the service platform according to the online status query request; Determine whether the service activation state of the second communication protocol of the second terminal is activated, whether the connection condition of the second communication protocol satisfies the connection condition, and whether the query result is online; When the service activation state of the second communication protocol of the second terminal is activated, the connection condition of the second communication protocol satisfies the connection condition, and the query result is online, it is determined that the terminal type of the second terminal satisfies the preset condition.

4. The encrypted call method according to claim 1, characterized in that: The first terminal is deployed with a first user identity module; and the obtaining of the session key sent by the secret call service platform according to the first key application request includes: Obtaining a first encryption key sent by the secret call service platform according to the first key application request; the first encryption key is obtained by the secret call service platform determining a session key from a preset session key according to the first key application request, and encrypting the session key using the first key; the first key application request is obtained by the first terminal encrypting a session identifier according to the first key obtained in the first user identity module; the session identifier is an identifier predetermined by the first terminal and the second terminal; The first encryption key is decrypted according to the first key to obtain a session key.

5. The encrypted call method according to claim 3, characterized in that: The method further comprises: When the service activation state of the second communication protocol of the second terminal is activated, the connection condition of the second communication protocol is not satisfied, and the query result is online, a call flow of the first communication protocol is performed on the second terminal.

6. The encrypted call method according to claim 3, characterized in that: The method further comprises: When the service activation state of the second communication protocol of the second terminal is not activated, determining whether the service state of the first communication protocol of the second terminal is activated; When the service status of the first communication protocol of the second terminal is activated, a call flow of the first communication protocol is performed on the second terminal.

7. An encrypted call method, characterized in that: The method is applied to a second terminal, and the method includes: Receiving a second call request sent to a secret call service platform based on secret call signaling; the secret call signaling is obtained by the secret call service platform from the first call request; the first call request is made by the first terminal receiving a call instruction to the second terminal, responding to the call instruction to determine whether the terminal type of the second terminal meets a preset condition, and when the terminal type of the second terminal meets the preset condition, sending it to the secret call service platform through a preset application; the preset application is deployed on the first terminal; the first call request includes a first application key request and a secret call signaling; the first call request is a call request of a first communication protocol; the second call request is a call request of a second communication protocol; acquiring the session key from the secret call service platform according to the second call request; Acquire first encrypted data encrypted by the first terminal according to the session key, and decrypt the first encrypted data according to the session key to obtain the first communication data; the session key of the first terminal is sent to the first terminal by the secret call service platform according to the first application key request; The second communication data is encrypted according to the session key to obtain second encrypted data, and the second encrypted data is sent to the first terminal, so that the first terminal decrypts the second encrypted data according to the session key to obtain second communication data.

8. The encrypted communication method according to claim 7, characterized in that: The second terminal is deployed with a second user identity module; Acquiring the session key from the secret call service platform according to the second call request includes: In response to the second call request, sending a second key application request to the secret call service platform; Obtaining a second encryption key sent by the secret call service platform according to the second key application request; the second encryption key is obtained by the secret call service platform determining a session key from a preset session key according to the second key application request, and encrypting the session key using the second key; the second key application request is obtained by the second terminal encrypting a session identifier according to the second key obtained in the second user identity module; the session identifier is an identifier predetermined by the first terminal and the second terminal; The second encryption key is decrypted according to the second key to obtain a session key.

9. An encrypted call system, characterized in that: The system includes a first terminal, a second terminal and a secret call service platform; the first terminal is deployed with a preset application; The first terminal is used to receive a call instruction for the second terminal, and in response to the call instruction, determine whether the terminal type of the second terminal meets a preset condition; When the terminal type of the second terminal meets the preset condition, sending a first call request to the secret call service platform through the preset application; the first call request includes a first application key request and a secret call signaling; the first call request is a call request of a first communication protocol; when the terminal type of the second terminal meets the preset condition, obtaining a session key sent by the secret call service platform according to the first application key request; Encrypt the first communication data according to the session key to obtain first encrypted data, and send the first encrypted data to the second terminal; Decrypting the second encrypted data according to the session key to obtain second communication data; The secret conversation service platform is configured to send a session key to the first terminal according to the first key application request; Based on the secret call signaling, sending a second call request to the second terminal; The second terminal is used to obtain the session key from the secret call service platform according to the second call request; The second call request is a call request of a second communication protocol; Decrypting the first encrypted data according to the session key to obtain first communication data; The second communication data is encrypted according to the session key to obtain second encrypted data, and the second encrypted data is sent to the first terminal.

10. An encrypted communication device, characterized in that: The device is applied to a first terminal; the first terminal is deployed with a preset application program, and the device includes: A first determination module, configured to receive a call instruction for a second terminal, and determine, in response to the call instruction, whether a terminal type of the second terminal meets a preset condition; A first sending module, configured to send a first call request to the secret call service platform through the preset application program when the terminal type of the second terminal meets the preset condition; the first call request includes a first application key request and a secret call signaling; the first call request is a call request of a first communication protocol; A first acquisition module, configured to acquire a session key sent by the secret conversation service platform according to the first key application request; A second sending module, configured to send a second call request to the second terminal based on the secret call signaling through the secret call service platform, so that the second terminal obtains the session key from the secret call service platform according to the second call request; the second call request is a call request of a second communication protocol; A third sending module is used to encrypt the first communication data according to the session key to obtain first encrypted data, and send the first encrypted data to the second terminal, so that the second terminal decrypts the first encrypted data according to the session key to obtain the first communication data; The second acquisition module is used to acquire second encrypted data obtained by encrypting second communication data by the second terminal according to the session key, and decrypt the second encrypted data according to the session key to obtain second communication data.

11. An encrypted communication device, characterized in that: The device is applied to a second terminal, and the device includes: A receiving module, used for receiving a second call request sent to a secret call service platform based on secret call signaling; the secret call signaling is obtained by the secret call service platform from the first call request; the first call request is made by the first terminal receiving a call instruction to the second terminal, responding to the call instruction to determine whether the terminal type of the second terminal meets the preset conditions, and when the terminal type of the second terminal meets the preset conditions, sending it to the secret call service platform through a preset application; the preset application is deployed on the first terminal; the first call request includes a first application key request and a secret call signaling; the first call request is a call request of a first communication protocol; the second call request is a call request of a second communication protocol; A third acquisition module, configured to acquire the session key from the secret call service platform according to the second call request; a fourth acquisition module, configured to acquire first encrypted data encrypted by the first terminal according to the session key for the first communication data, and decrypt the first encrypted data according to the session key to obtain the first communication data; the session key of the first terminal is sent to the first terminal by the secret call service platform according to the first application key request; The fourth sending module is used to encrypt the second communication data according to the session key to obtain second encrypted data, and send the second encrypted data to the first terminal, so that the first terminal decrypts the second encrypted data according to the session key to obtain second communication data.

12. An electronic device, characterized in that: include: A processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the steps of the encrypted call method as described in any one of claims 1-6 or 7-8 are implemented.

13. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the encrypted call method as described in any one of claims 1-6 or 7-8 are implemented.

Images