System, method, device and equipment for conversation between fixed-line telephone and mobile terminal

Abstract

The embodiment of the invention provides a system, method, device and equipment for conversation between a fixed-line telephone and a mobile terminal, and the method comprises the following steps: after the fixed-line telephone initiates a call to the mobile terminal or the mobile terminal initiates a call to the fixed-line telephone, the fixed-line telephone and the mobile terminal begin to establish a voice session; the method comprises the following steps: firstly, sending an encryption identifier acquisition request to an identity authentication platform and receiving a returned encryption identifier; sending a session key acquisition request to the quantum key management service platform, wherein the request comprises an encryption identifier; receiving a returned session key distributed for the encryption identifier; after the voice session is established, receiving first voice data sent by the fixed-line telephone, encrypting the first voice data by using the session key, and sending the encrypted first voice data to the mobile terminal; and receiving encrypted second voice data sent by the mobile terminal, decrypting the encrypted second voice data by using the session key, and sending the decrypted second voice data to the fixed-line telephone. Identity authentication can be realized while a call is made, and call voice data are symmetrically encrypted through a quantum key.

Description

Technical Field

[0001] The present invention relates to the technical field of encrypted calls, and in particular to a system for calls between a fixed telephone and a mobile terminal, a method, a device, an electronic device and a computer-readable storage medium for calls between a fixed telephone and a mobile terminal. Background Art

[0002] Despite the rapid development of mobile communications and VoIP (Voice over Internet Protocol) technologies in recent years, due to the advantages of fixed-line telephones such as reliability, high call quality, and low cost-effectiveness, there are still a large number of PSTN (Public Switched Telephone Network) internal fixed-line telephones in specific collaborative scenarios. As a communication tool for daily office work, they are also irreplaceable due to their unique advantages.

[0003] The coding standards at both ends of the call data stream of the fixed-line PSTN network and IMS (IP Multimedia Subsystem) are different. The data structure type of the PSTN network is G.711, and the signaling format is NO.7 signaling. VoLTE (Voice over Long-Term Evolution) calls in the IMS network mainly use SIP (Session Initiation Protocol) signaling, and the data format is AMR-WB (Adaptive Multi-Rate Wideband). Since the signaling format and the data format are different, the data streams cannot communicate directly and need to be converted through gateway equipment. The current IMS network data format conversion gateway has no data security protection measures, so there are security risks for internal fixed-line calls to the outside. Summary of the invention

[0004] In view of the above problems, embodiments of the present invention are proposed to provide a system for calls between a fixed telephone and a mobile terminal, a method, an apparatus, an electronic device and a computer-readable storage medium for calls between a fixed telephone and a mobile terminal that overcome the above problems or at least partially solve the above problems.

[0005] In order to solve the above problems, the embodiment of the present invention discloses a system for a fixed telephone to talk with a mobile terminal, including: a fixed telephone, a voice gateway, a mobile terminal, an identity authentication platform, and a quantum key management service platform;

[0006] The fixed telephone is used to establish a voice session with the mobile terminal through the voice gateway, and after the voice session is established, send first voice data to the voice gateway, and receive second voice data sent by the voice gateway, the second voice data being sent by the mobile terminal to the voice gateway;

[0007] The voice gateway is used to establish a voice session with the mobile terminal after the fixed telephone initiates a call to the mobile terminal or the mobile terminal initiates a call to the fixed telephone; in the process of establishing the voice session, send a request for obtaining a secret identifier to the identity authentication platform; receive a secret identifier assigned by the identity authentication platform; send a request for obtaining a session key to the quantum key management service platform, wherein the key acquisition request includes the secret identifier; receive a session key assigned to the secret identifier sent by the quantum key management service platform; after establishing the voice session, receive first voice data sent by the fixed telephone, encrypt the first voice data using the session key and send it to the mobile terminal; and receive encrypted second voice data sent by the mobile terminal, decrypt the encrypted second voice data using the session key, and send the second voice data to the fixed telephone;

[0008] The mobile terminal is used to establish a voice session with the fixed-line telephone through the voice gateway; in the process of establishing the voice session, send a request for obtaining a secret identifier to the identity authentication platform; receive the secret identifier assigned by the identity authentication platform; send a request for obtaining a session key to the quantum key management service platform, wherein the key acquisition request includes the secret identifier; receive a session key assigned to the secret identifier sent by the quantum key management service platform; after establishing the voice session, encrypt the second voice data using the session key, and send the encrypted second voice data to the voice gateway; and receive the encrypted first voice data sent by the voice gateway, and decrypt the encrypted first voice data according to the session key; the first voice data is sent by the fixed-line telephone to the voice gateway;

[0009] The identity authentication platform is used to receive a secret identification acquisition request sent by the voice gateway, and send a secret identification to the voice gateway according to the secret identification acquisition request; and receive a secret identification acquisition request sent by the mobile terminal, and send a secret identification to the mobile terminal according to the secret identification acquisition request;

[0010] The quantum key management service platform is used to receive a session key acquisition request sent by the voice gateway, the key acquisition request includes the secret identifier; allocate a session key according to the secret identifier, and send the encrypted session key to the voice gateway; and receive a session key acquisition request sent by the mobile terminal, the key acquisition request includes the secret identifier; allocate a session key according to the secret identifier, and send the encrypted session key to the mobile terminal.

[0011] Optionally, the secret identification acquisition request includes voice gateway information and mobile terminal information;

[0012] The identity authentication platform is used to determine whether the conditions for establishing a quantum secret call are met according to the voice gateway information and the mobile terminal information; after determining that the conditions for establishing a quantum secret call are met, the secret entry identifier is generated according to the voice gateway information and the mobile terminal information.

[0013] Optionally, the voice gateway has a secure medium, in which a charging key is stored; the voice gateway is used to send a session key acquisition request to the quantum key management service platform, wherein the key acquisition request includes the secret identifier encrypted according to the charging key; receive the session key encrypted according to the charging key sent by the quantum key management service platform, and use the charging key to decrypt the encrypted session key to obtain the session key;

[0014] The mobile terminal has a secure medium in which a charging key is stored; the mobile terminal is used to send a session key acquisition request to the quantum key management service platform, wherein the key acquisition request includes the encryption identifier encrypted according to the charging key; receive a session key encrypted according to the charging key sent by the quantum key management service platform, and use the charging key to decrypt the encrypted session key to obtain a session key;

[0015] The quantum key management service platform is used to receive a session key acquisition request sent by the voice gateway, the key acquisition request includes the encryption identifier encrypted according to the injection key; obtain the injection key, decrypt the encrypted encryption identifier according to the injection key, allocate a session key for the encryption identifier, encrypt the session key according to the injection key, and send the encrypted session key to the voice gateway; and receive a session key acquisition request sent by the mobile terminal, the key acquisition request includes the encryption identifier encrypted according to the injection key; obtain the injection key, decrypt the encrypted encryption identifier according to the injection key, allocate a session key for the encryption identifier, encrypt the session key using the injection key, and send the encrypted session key to the mobile terminal.

[0016] Optionally, the voice gateway is used to, after receiving first voice data sent by the fixed-line telephone, convert the first voice data into a data format, encrypt the first voice data after data format conversion using the session key, and send the converted first voice data to the mobile terminal; and, after receiving encrypted second voice data sent by the mobile terminal, decrypt the encrypted second voice data using the session key, convert the second voice data into a data format, and send the converted second voice data to the fixed-line telephone.

[0017] Optionally, it also includes: a session control server, a home user server and a call session control server;

[0018] The fixed telephone is used to send call signaling to the voice gateway;

[0019] The voice gateway is used to convert the call signaling into a signaling format to obtain a call request, and send the call request to the session control server;

[0020] The session control server is used to call the home user server according to the call request to query whether the called party mobile terminal supports the long-term evolution voice bearer communication service; if the called party mobile terminal supports the long-term evolution voice bearer communication service, call the call session control server to establish a voice session.

[0021] In a second aspect, an embodiment of the present invention provides a method for a fixed telephone to communicate with a mobile terminal, the method being applied to a voice gateway, the method comprising:

[0022] After the fixed telephone initiates a call to the mobile terminal, or after the mobile terminal initiates a call to the fixed telephone, establishing a voice session with the mobile terminal;

[0023] In the process of establishing the voice session, a request for obtaining a secret identifier is sent to an identity authentication platform, and a secret identifier assigned by the identity authentication platform is received; a request for obtaining a session key is sent to a quantum key management service platform, and the key acquisition request includes the secret identifier; and a session key assigned to the secret identifier and sent by the quantum key management service platform is received;

[0024] After establishing a voice session, first voice data sent by the fixed-line phone is received, the first voice data is encrypted using the session key and sent to the mobile terminal; and encrypted second voice data sent by the mobile terminal is received, the encrypted second voice data is decrypted using the session key, and the second voice data is sent to the fixed-line phone.

[0025] Optionally, sending a password entry identification acquisition request to the identity authentication platform includes:

[0026] Obtain voice gateway information and mobile terminal information;

[0027] A request for obtaining a secret entry identifier is sent to the identity authentication platform, wherein the request for obtaining a secret entry identifier includes voice gateway information and mobile terminal information, so that the identity authentication platform determines that the conditions for establishing a quantum secret call are met based on the voice gateway information and the mobile terminal information, and then generates the secret entry identifier based on the voice gateway information and the mobile terminal information.

[0028] Optionally, the voice gateway has a secure medium, in which a charging key is stored;

[0029] The sending of a session key acquisition request to the subkey management service platform includes:

[0030] Using the charging key, encrypting the encryption identifier;

[0031] Sending a session key acquisition request to the quantum key management service platform, wherein the key acquisition request includes the encryption identifier encrypted according to the injection key;

[0032] The receiving the session key assigned to the key entry identifier and sent by the quantum key management service platform includes:

[0033] Receiving a session key encrypted according to the injection key sent by the quantum key management service platform;

[0034] The encrypted session key is decrypted using the injection key to obtain the session key.

[0035] Optionally, the using the session key to encrypt the first voice data and sending the first voice data to the mobile terminal includes:

[0036] Converting the first voice data into a data format, encrypting the first voice data after the data format conversion using the session key, and sending the first voice data to the mobile terminal;

[0037] The sending the second voice data to the fixed telephone includes:

[0038] The second voice data is converted into a data format, and the second voice data after the data format conversion is sent to the fixed telephone.

[0039] Optionally, after the fixed telephone initiates a call to the mobile terminal, establishing a voice session with the mobile terminal includes:

[0040] Receive the fixedly sent call signaling, convert the call signaling into a signaling format to obtain a call request, and send the call request to a session control server, so that the session control server calls a home user server according to the call request to query whether the called party's mobile terminal supports the long-term evolution voice bearer communication service; if the called party's mobile terminal supports the long-term evolution voice bearer communication service, call the call session control server to establish a voice session.

[0041] In a third aspect, an embodiment of the present invention provides a method for communicating with a fixed telephone via a mobile terminal, the method being applied to a mobile terminal, the method comprising:

[0042] In the process of establishing a voice session with the fixed telephone through the voice gateway, sending a request for obtaining a secret identifier to the identity authentication platform; receiving the secret identifier assigned by the identity authentication platform; sending a request for obtaining a session key to the quantum key management service platform, wherein the key acquisition request includes the secret identifier; receiving the session key assigned to the secret identifier sent by the quantum key management service platform;

[0043] After establishing a voice session, encrypt the second voice data using the session key and send the encrypted second voice data to the voice gateway; and receive the encrypted first voice data sent by the voice gateway, and decrypt the encrypted first voice data according to the session key; the first voice data is sent from the landline phone to the voice gateway.

[0044] Optionally, sending a password entry identification acquisition request to the identity authentication platform includes:

[0045] Obtain voice gateway information and mobile terminal information;

[0046] A request for obtaining a secret entry identifier is sent to the identity authentication platform, wherein the request for obtaining a secret entry identifier includes voice gateway information and mobile terminal information, so that the identity authentication platform determines that the conditions for establishing a quantum secret call are met based on the voice gateway information and the mobile terminal information, and then generates the secret entry identifier based on the voice gateway information and the mobile terminal information.

[0047] Optionally, the mobile terminal has a secure medium, and the secure medium stores a charging key;

[0048] The sending of a session key acquisition request to the subkey management service platform includes:

[0049] Using the charging key, encrypting the encryption identifier;

[0050] Sending a session key acquisition request to the quantum key management service platform, wherein the key acquisition request includes the encryption identifier encrypted according to the injection key;

[0051] The receiving the session key assigned to the key entry identifier and sent by the quantum key management service platform includes:

[0052] Receiving a session key encrypted according to the injection key sent by the quantum key management service platform;

[0053] The encrypted session key is decrypted using the injection key to obtain the session key.

[0054] In a fourth aspect, an embodiment of the present invention provides a device for a fixed telephone to talk with a mobile terminal, the device being applied to a voice gateway, and the device comprising:

[0055] A session establishing module, configured to establish a voice session with the mobile terminal after the fixed telephone initiates a call to the mobile terminal or the mobile terminal initiates a call to the fixed telephone;

[0056] The first request and acquisition module is used to send a secret identification acquisition request to the identity authentication platform during the process of establishing the voice session, and receive the secret identification assigned by the identity authentication platform; send a session key acquisition request to the quantum key management service platform, wherein the key acquisition request includes the secret identification; and receive the session key assigned to the secret identification sent by the quantum key management service platform;

[0057] The first sending and receiving module is used to receive the first voice data sent by the fixed-line phone after establishing the voice session, encrypt the first voice data using the session key and send it to the mobile terminal; and receive the encrypted second voice data sent by the mobile terminal, decrypt the encrypted second voice data using the session key, and send the second voice data to the fixed-line phone.

[0058] Optionally, the first request and acquisition module includes:

[0059] The first acquisition submodule is used to acquire voice gateway information and mobile terminal information;

[0060] The second secret identification generation submodule is used to send a secret identification acquisition request to the identity authentication platform, and the secret identification acquisition request includes voice gateway information and mobile terminal information, so that the identity authentication platform, after determining that the conditions for establishing a quantum secret call are met according to the voice gateway information and the mobile terminal information, generates the secret identification according to the voice gateway information and the mobile terminal information.

[0061] Optionally, the voice gateway has a secure medium, in which a charging key is stored;

[0062] The first request and acquisition module further includes:

[0063] A first encryption submodule, used to encrypt the encryption identifier using the injection key;

[0064] A first request sending submodule, used for sending a session key acquisition request to the subkey management service platform, wherein the key acquisition request includes the key entry identifier encrypted according to the injection key;

[0065] The first request and acquisition module further includes:

[0066] A first receiving submodule is used to receive a session key encrypted according to the injection key and sent by the quantum key management service platform;

[0067] The first encryption submodule is used to decrypt the encrypted session key using the injection key to obtain the session key.

[0068] Optionally, the first sending and receiving module includes:

[0069] A first data sending submodule, configured to convert the first voice data into a data format, encrypt the first voice data after the data format conversion using the session key, and send the first voice data to the mobile terminal;

[0070] The first sending and receiving module further includes:

[0071] The second data sending submodule is used to perform data format conversion on the second voice data, and send the second voice data after data format conversion to the fixed telephone.

[0072] Optionally, the first sending and receiving module further includes:

[0073] The session establishment submodule is used to receive the fixedly sent call signaling, convert the call signaling into a signaling format to obtain a call request, and send the call request to a session control server, so that the session control server calls a home user server according to the call request to query whether the called party's mobile terminal supports the long-term evolution voice bearer communication service; if the called party's mobile terminal supports the long-term evolution voice bearer communication service, the call session control server is called to establish a voice session.

[0074] In a fifth aspect, an embodiment of the present invention provides a device for a fixed telephone to talk with a mobile terminal, the device being applied to a mobile terminal, and the device comprising:

[0075] The second request and acquisition module is used to send a secret identification acquisition request to the identity authentication platform during the process of establishing a voice session with the fixed telephone through the voice gateway; receive the secret identification assigned by the identity authentication platform; send a session key acquisition request to the quantum key management service platform, the key acquisition request includes the secret identification; receive the session key assigned to the secret identification sent by the quantum key management service platform;

[0076] The second sending and receiving module is used to encrypt the second voice data using the session key after establishing the voice session, and send the encrypted second voice data to the voice gateway; and receive the encrypted first voice data sent by the voice gateway, and decrypt the encrypted first voice data according to the session key; the first voice data is sent from the landline phone to the voice gateway.

[0077] Optionally, the second request and acquisition module includes:

[0078] The second acquisition submodule is used to acquire voice gateway information and mobile terminal information;

[0079] The second secret identification generation submodule is used to send a secret identification acquisition request to the identity authentication platform, and the secret identification acquisition request includes voice gateway information and mobile terminal information, so that the identity authentication platform, after determining that the conditions for establishing a quantum secret call are met according to the voice gateway information and the mobile terminal information, generates the secret identification according to the voice gateway information and the mobile terminal information.

[0080] Optionally, the mobile terminal has a secure medium, and the secure medium stores a charging key;

[0081] The second request and acquisition module further includes:

[0082] A second encryption submodule, used to encrypt the encryption identifier using the injection key;

[0083] A second request sending submodule, used to send a session key acquisition request to the subkey management service platform, wherein the key acquisition request includes the key entry identifier encrypted according to the injection key;

[0084] The second request and acquisition module further includes:

[0085] A second receiving submodule is used to receive a session key encrypted according to the injection key and sent by the quantum key management service platform;

[0086] The second encryption submodule is used to decrypt the encrypted session key using the injection key to obtain the session key.

[0087] In a sixth aspect, an embodiment of the present invention provides an electronic device, comprising: a processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein the computer program, when executed by the processor, implements the steps of the method for making a call between a fixed telephone and a mobile terminal as described above.

[0088] In a seventh aspect, an embodiment of the present invention provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the method for making a call between a fixed telephone and a mobile terminal are implemented as described above.

[0089] The embodiments of the present invention include the following advantages:

[0090] In the embodiment of the present invention, after a fixed telephone initiates a call to a mobile terminal or a mobile terminal initiates a call to a fixed telephone, a voice session is established between the two. In the process of establishing the voice session, a request for obtaining a secret identifier is sent to an identity authentication platform, and a secret identifier assigned by the identity authentication platform is received. A request for obtaining a session key is sent to a quantum key management service platform, and the key acquisition request includes the secret identifier. The session key assigned to the secret identifier sent by the quantum key management service platform is received. After the voice session is established, the first voice data sent by the fixed telephone is received, the first voice data is encrypted using the session key and sent to the mobile terminal. The encrypted second voice data sent by the mobile terminal is received, the encrypted second voice data is decrypted using the session key, and the second voice data is sent to the fixed telephone. Identity authentication can be achieved while making a call, and the call voice data can be symmetrically encrypted by the quantum key, solving the problem that the call information may be eavesdropped or recorded when the fixed telephone and the mobile terminal in the unit call each other. The identity authentication and equipment security guarantee problems of external mobile phones making internal calls are solved. BRIEF DESCRIPTION OF THE DRAWINGS

[0091] Figure 1 It is a structural block diagram of a fixed telephone and mobile terminal call system provided by an embodiment of the present invention;

[0092] Figure 2 This is a flowchart of a method for making a call between a fixed telephone and a mobile terminal provided by an embodiment of the present invention;

[0093] Figure 3 This is a business process diagram of a fixed telephone and mobile terminal call system provided by an embodiment of the present invention;

[0094] Figure 4 is a flowchart of another method for making a call between a fixed telephone and a mobile terminal provided by an embodiment of the present invention;

[0095] Figure 5It is a structural block diagram of a fixed telephone and mobile terminal communication device provided by an embodiment of the present invention;

[0096] Figure 6 It is a structural block diagram of another fixed telephone and mobile terminal communication device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0097] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0098] One of the core concepts of the embodiment of the present invention is that, through the device hardware number and the authentication data preset in the security chip in the quantum SIM card, the authentication information is reported to the gateway synchronously during the call, and the call is blocked for unauthorized devices and SIM cards. Identity authentication can be achieved while the call is in progress. Because the mobile terminals are all issued internally by the unit, the information can be entered into the gateway in advance, and the authentication information can be encrypted and protected by quantum encryption technology to ensure that the identities of both parties in the call are credible. By deploying signaling and voice conversion equipment at the external exit of the internal fixed-line telephone, and using U shield as the encryption medium, the segmented encryption and decryption of the voice is realized, and finally the encrypted communication between the external network mobile phone and the internal network fixed-line telephone is realized. There is no need to replace the internal network fixed-line terminal and switching equipment, and the networking structure does not need to be adjusted. The voice data encryption within the scope of the public network exposure surface can be realized, which greatly enhances the information security protection capability during the internal and external communication process.

[0099] Reference Figure 1 , shows a structural block diagram of a fixed telephone and mobile terminal call system provided by an embodiment of the present invention, and the system may specifically include the following parts:

[0100] Fixed telephone 10, voice gateway 11, mobile terminal 12, identity authentication platform 13, quantum key management service platform 14;

[0101] The fixed telephone 10 is used to establish a voice session with the mobile terminal 12 through the voice gateway 11, and after the voice session is established, send first voice data to the voice gateway 11, and receive second voice data sent by the voice gateway 11, the second voice data is sent by the mobile terminal 12 to the voice gateway 11;

[0102] A voice gateway is a network device that acts as a bridge between traditional telephone systems (such as PSTN, Public Switched Telephone Network) and IP-based communication systems (such as VoIP, Voice over Internet Protocol). Through a voice gateway, businesses or individual users can convert traditional analog telephone signals into digital format and transmit them over the Internet or other data networks, and vice versa.

[0103] A landline telephone, also known as a wired telephone or landline, is a communication device that is connected to the public switched telephone network (PSTN) through a physical line. A landline telephone is connected to a local telephone exchange through one or more pairs of copper wires (twisted pair) or other types of transmission media (such as optical fiber); when a user makes a call, the microphone converts the sound into electrical signals, which are transmitted along the telephone line to the exchange, where they are further processed and routed to the destination; in modern telephone systems, analog signals are usually converted to digital format at a node close to the user for more efficient transmission on the network. After reaching the recipient, the digital signal is restored to an analog signal for the handset to play.

[0104] The voice gateway is able to handle the conversion between different types of communication protocols, such as using SIP (Session Initiation Protocol) for VoIP calls to interoperate with protocols of traditional telephone systems such as ISDN (Integrated Services Digital Network) or POTS (Plain Old Telephone Service). It has built-in multiple audio codecs (such as G.711, G.729, AMR-WB, etc.), and can select the most appropriate encoding method according to network conditions to optimize sound quality and bandwidth usage. The voice gateway usually integrates basic call processing functions such as dial plan management, number mapping, call transfer, conference bridging, etc. to simplify user operations and increase flexibility. It supports TLS / DTLS encryption and SRTP (Secure Real-time Transport Protocol) to protect the security of voice communications; various access control policies can also be implemented to ensure that only authorized users can use the service.

[0105] Mobile Terminal refers to a portable electronic device that can communicate via wireless networks. It is a computing and communication device designed to operate in a mobile state, has independent processing capabilities and is connected to a wireless communication network. Such devices are usually powered by built-in batteries and support a variety of wireless connection methods, such as cellular networks (2G / 3G / 4G / 5G), Wi-Fi, Bluetooth, etc. They are widely used in personal and commercial fields, providing users with multiple functions such as voice calls, data transmission, multimedia services, etc. Mobile terminals can include smartphones, tablets, smart watches, and IoT devices.

[0106] In some embodiments of the present invention, the fixed telephone 10 can only send and receive analog signals, and needs to use the voice gateway 11 to complete the signaling conversion before establishing a voice session with the mobile terminal 12. The established voice session is divided into the fixed telephone 10 actively dialing the mobile terminal 12 and the fixed telephone 10 receiving the dialing from the mobile terminal 12. Therefore, the first voice data refers to the voice data sent by the fixed telephone 10 to the mobile terminal 12 via the voice gateway 11, and the second voice data refers to the voice data sent by the mobile terminal 12 to the fixed telephone 10 via the voice gateway 11.

[0107] The voice gateway 11 is used to establish a voice session with the mobile terminal 12 after the fixed telephone 10 initiates a call to the mobile terminal 12, or after the mobile terminal 12 initiates a call to the fixed telephone 10; in the process of establishing the voice session, send a request for obtaining a secret identifier to the identity authentication platform 13; receive the secret identifier assigned by the identity authentication platform 13; send a request for obtaining a session key to the quantum key management service platform 14, wherein the key acquisition request includes the secret identifier; receive the session key assigned to the secret identifier sent by the quantum key management service platform 14; after establishing the voice session, receive the first voice data sent by the fixed telephone 10, encrypt the first voice data using the session key and send it to the mobile terminal 12; and receive the encrypted second voice data sent by the mobile terminal 12, decrypt the encrypted second voice data using the session key, and send the second voice data to the fixed telephone 10;

[0108] Since the PSTN network of the fixed phone and the IMS call data stream of the mobile terminal have different encoding formats at both ends, whether the fixed phone 10 dials the mobile terminal 12 or the mobile terminal 12 dials the fixed phone 10, the voice gateway 11 is required to perform data and signaling format conversion in the middle. In addition, the voice gateway 11 also plays the important role of proxy voice encryption and decryption. In the process of establishing a connection between the fixed phone 10 and the mobile terminal 12, in order to ensure the safe transmission of call data, the voice gateway 11 first needs to apply to the identity authentication platform 13 for a secret identification. With the secret identification, it can apply to the quantum key management service platform 14 for a session key for encrypted session data. The secret identification can include a session ID generated by calculating the calling and called party numbers. After obtaining the session key, the voice gateway 11 can encrypt the first voice data received from the fixed phone 10 and send it to the mobile terminal 12 after establishing a voice session, or decrypt the encrypted second voice data received from the mobile terminal 12 using the session key decryption and send the decrypted second voice data to the fixed phone 10, so as to ensure the confidentiality of the voice call content.

[0109] In some embodiments of the present invention, the voice gateway 11 further includes a secure medium 110, in which a charging key is stored;

[0110] The voice gateway 11 is further configured to send a session key acquisition request to the quantum key management service platform 14, wherein the key acquisition request includes the encryption identifier encrypted according to the injection key; receive the session key encrypted according to the injection key sent by the quantum key management service platform 14, and use the injection key to decrypt the encrypted session key to obtain the session key;

[0111] Secure media refers to physical or digital media used to store, transmit and process sensitive information. They have certain security features to protect data from unauthorized access, tampering or leakage. Secure media are widely used in government, military, finance, medical and other industries to ensure the security and integrity of critical information. Secure media are specially designed or configured to prevent data loss, corruption and unauthorized access to storage devices or communication channels to a certain extent. These media can be in the form of hardware (such as hard drives, USB flash drives, smart cards, etc.) or software (such as encrypted file systems, virtual disks, etc.).

[0112] In one embodiment of the present invention, the security medium 111 built into the voice gateway 11 can use the U shield as an encryption medium. After the voice gateway 11 obtains the encryption identifier from the identity authentication platform 13, when sending a session key request to the quantum key management service platform 14, the encryption identifier will also be sent to the quantum key management service platform 14. The encryption identifier is a session ID generated by the operation of the caller and the called party's numbers. Only through the encryption identifier can the session key corresponding to this voice call be accurately found. The security medium 111 built into the voice gateway 11 will pre-charge the key, and encrypt and decrypt the session key according to the pre-charged key.

[0113] In some embodiments of the present invention, the voice gateway 11 is also used to, after receiving the first voice data sent by the fixed telephone 10, convert the first voice data into a data format, encrypt the first voice data after the data format conversion using the session key and send it to the mobile terminal 12; and, after receiving the encrypted second voice data sent by the mobile terminal 12, decrypt the encrypted second voice data using the session key, convert the data format of the second voice data, and send the second voice data after the data format conversion to the fixed telephone 10.

[0114] In addition to encrypting and decrypting the first voice data and the second voice data, the voice gateway 11 also converts the first voice data of the analog signal in the No. 7 signaling format sent by the fixed-line telephone 10 into a digital signal in the SIP signaling format, and then sends it to the mobile terminal 12; similarly, the voice gateway 11 converts the second voice data of the digital signal in the SIP signaling format sent by the mobile terminal 12 into an analog signal in the No. 7 signaling format before sending it to the fixed-line telephone 10, completing the normal communication of the session.

[0115] The mobile terminal 12 is used to establish a voice session with the fixed telephone 10 through the voice gateway 11; in the process of establishing the voice session, send a request for obtaining a secret identifier to the identity authentication platform 13; receive the secret identifier assigned by the identity authentication platform 13; send a session key acquisition request to the quantum key management service platform 14, the key acquisition request including the secret identifier; receive the session key assigned to the secret identifier sent by the quantum key management service platform 14; after establishing the voice session, encrypt the second voice data using the session key, and send the encrypted second voice data to the voice gateway 11; and receive the encrypted first voice data sent by the voice gateway 11, and decrypt the encrypted first voice data according to the session key; the first voice data is sent by the fixed telephone 10 to the voice gateway 11;

[0116] The mobile terminal 12 is the other end of the call with the fixed telephone 10. In the process of establishing a voice session, it is necessary to first apply to the identity authentication platform 13 for a secret entry identifier. Only with the secret entry identifier can the correct session key be obtained when a session key acquisition request is sent to the quantum key management service platform 14. After the voice session is established, the mobile terminal 12 uses the obtained session key to encrypt the second voice data sent by itself and then sends it to the voice gateway 11. At the same time, the mobile terminal 12 also needs to rely on the session key to decrypt the first voice data from the fixed telephone 10 received from the voice gateway 11.

[0117] In some embodiments of the present invention, the mobile terminal 12 has a secure medium 120, in which a charging key is stored;

[0118] The mobile terminal 12 is used to send a session key acquisition request to the quantum key management service platform 14, wherein the key acquisition request includes the encryption identifier encrypted according to the injection key; receive the session key encrypted according to the injection key sent by the quantum key management service platform 14, and use the injection key to decrypt the encrypted session key to obtain the session key;

[0119] The security medium 120 of the mobile terminal 12 is usually a quantum SIM card. The authentication data preset in the security chip of the quantum SIM card, namely the pre-charged key, can encrypt the session key. When sending an application for the session key to the quantum key management service platform 14, the encryption identifier is also sent to the quantum key management service platform 14 to accurately obtain the encrypted session key of the corresponding call, and then use the charge key to decrypt the obtained session key.

[0120] The identity authentication platform 13 is used to receive the secret identification acquisition request sent by the voice gateway 11, and send the secret identification to the voice gateway 11 according to the secret identification acquisition request; and receive the secret identification acquisition request sent by the mobile terminal 12, and send the secret identification to the mobile terminal 12 according to the secret identification acquisition request;

[0121] The main function of the identity authentication platform 13 is to perform identity authentication, confirm the identities of the calling and called parties and generate a session ID generated by the calling and called party numbers as a secret identifier. According to the secret identifier sent by the voice gateway 11, an application is obtained to send the secret identifier, and according to the secret identifier sent by the mobile terminal 12, an application is obtained to send the corresponding secret identifier.

[0122] In some embodiments of the present invention, the identity authentication platform 13 is also used to determine whether the conditions for establishing a quantum secret call are met based on the information of the voice gateway 11 and the information of the mobile terminal 12; after determining that the conditions for establishing a quantum secret call are met, the secret entry identifier is generated based on the information of the voice gateway 11 and the information of the mobile terminal 12.

[0123] During the session establishment process, in order to generate the encryption identifier, it is necessary to first determine whether the voice gateway 11 and the mobile terminal 12 meet the conditions for establishing quantum encryption, that is, to confirm that both the caller and the called party meet the conditions for establishing Volte quantum encryption (terminal, service activation status, network, etc.). VoLTE (Voice over Long-Term Evolution) is a high-speed wireless communication standard for mobile phones and data terminals. It is based on the IP Multimedia Subsystem (IMS) network and uses a special configuration file for the control plane and the media plane of voice services on LTE (defined by the GSM Association in PRD IR.92). This enables voice services (control and media planes) to be transmitted as data streams in the LTE data bearer network, without the need to maintain and rely on traditional circuit-switched voice networks. The voice and data capacity of VoLTE is more than three times that of 3G UMTS and more than six times that of 2G GSM. Because the header of the VoLTE data packet is smaller than that of unoptimized VoIP / LTE, it also uses bandwidth more efficiently.

[0124] After determining that both the voice gateway 11 and the mobile terminal 12 meet the conditions for establishing a quantum secret call, a session ID is generated based on the numbers of the calling and called parties of the voice gateway 11 and the mobile terminal 12 as a secret identifier. Generating a session ID based on the numbers of the calling and called parties is a method for ensuring that each communication session has a unique identifier. This method can be used in a variety of communication protocols and services, such as SIP (Session Initiation Protocol), VoIP (Voice over IP), instant messaging, etc.

[0125] The quantum key management service platform 14 is used to receive a session key acquisition request sent by the voice gateway 11, wherein the key acquisition request includes the encryption identifier; allocate a session key according to the encryption identifier, and send the encrypted session key to the voice gateway 11; and receive a session key acquisition request sent by the mobile terminal 12, wherein the key acquisition request includes the encryption identifier; allocate a session key according to the encryption identifier, and send the encrypted session key to the mobile terminal 12.

[0126] The quantum key management service platform 14 is the place for session key negotiation. When receiving a session key request from the voice gateway 11 or the mobile terminal 12, it determines the corresponding voice session based on the encryption identifier they send together, encrypts the session key of the voice session with the injection key and then sends it to them.

[0127] In some embodiments of the present invention, the quantum key management service platform 14 is also used to receive a session key acquisition request sent by the voice gateway 11, the key acquisition request including the encryption identifier encrypted according to the injection key; obtain the injection key, decrypt the encrypted encryption identifier according to the injection key, allocate a session key for the encryption identifier, encrypt the session key according to the injection key, and send the encrypted session key to the voice gateway 11; and receive a session key acquisition request sent by the mobile terminal 12, the key acquisition request including the encryption identifier encrypted according to the injection key; obtain the injection key, decrypt the encrypted encryption identifier according to the injection key, allocate a session key for the encryption identifier, encrypt the session key using the injection key, and send the encrypted session key to the mobile terminal 12.

[0128] In some embodiments of the present invention, the system further comprises a session control server 15, a home subscriber server 16 and a call session control server 17;

[0129] The fixed telephone 10 is used to send call signaling to the voice gateway 11;

[0130] The voice gateway 11 is used to convert the call signaling into a signaling format to obtain a call request, and send the call request to the session control server 15;

[0131] The session control server, also known as the SIP server (Session Initiation Protocol Server), is a key component for supporting SIP-based real-time communication services. It plays an important role in applications such as VoIP, video conferencing, and instant messaging. The main responsibilities of the SIP server include user registration, call control, routing, and security authentication. When a user wants to initiate a call, the SIP server receives and processes the INVITE request from the initiator, and then tries to forward the request to the recipient. If the recipient agrees to join the call, the SIP server helps establish the connection; otherwise, it notifies the initiator that the call failed. The SIP server decides how to route SIP messages based on predefined rules or policies to ensure that they reach their destination correctly.

[0132] When the fixed telephone 10 sends a call signaling to the voice gateway 11, the voice gateway 11 converts the analog signal No. 7 into a call request of a digital signal, and then hands it over to the session control server 15 to process the call request.

[0133] The session control server 15 is used to call the home subscriber server 16 according to the call request to query whether the called party's mobile terminal supports the long-term evolution voice bearer communication service; if the called party's mobile terminal supports the long-term evolution voice bearer communication service, call the call session control server 17 to establish a voice session.

[0134] HSS (Home Subscriber Server) is a key component in the IMS architecture, mainly used to store and manage user-related configuration data and service information. HSS stores the user's authentication credentials (such as IMSI, K, etc.) to verify the user's identity and ensure that only authorized users can access network resources and services. HSS communicates with S-CSCF through the Diameter protocol, which is responsible for handling user registration, session control and other functions. Every time a user equipment (UE) initiates registration or establishes a session, S-CSCF queries HSS for relevant information. In addition to CSCF, HSS may also exchange data with other IMS components such as AS (Application Server) and MGCF (Media Gateway Control Function) to support more complex service scenarios, and also provide core support for high-quality voice and video calls under 4G / 5G networks.

[0135] CSCF (Call Session Control Function) is one of the core components in the IMS architecture, mainly used to manage and control SIP-based multimedia communication sessions. CSCF can be divided into three main types: P-CSCF (Proxy CSCF), which is responsible for forwarding SIP requests from user devices to I-CSCF and returning responses from the network to user devices; I-CSCF (Interrogating CSCF), for calls or messages entering the IMS network, I-CSCF acts as a bridge between the external network and the internal S-CSCF; for calls or messages leaving the IMS network, on the contrary, when a new registration request or other type of SIP message is received, I-CSCF will query HSS to determine which S-CSCF should be sent to for processing; S-CSCF (Serving CSCF), which is responsible for processing user registration requests and collaborates with HSS to complete the identity authentication process to ensure that only authorized users can access IMS services.

[0136] In some embodiments of the present invention, the session control server 15 queries the home user server 16 based on the call request converted by the voice gateway 11 to determine whether the called party's terminal supports VoLTE (Long Term Evolution Voice Bearer Communication Service). If supported, the session control server 15 will notify the call session control server 17 to start the session establishment process. The call session control server 17 negotiates call parameters with the called party's terminal device, including codec and bit rate.

[0137] In the embodiment of the present invention, after a fixed telephone initiates a call to a mobile terminal or a mobile terminal initiates a call to a fixed telephone, a voice session is established between the two. In the process of establishing the voice session, a request for obtaining a secret identifier is sent to an identity authentication platform, and a secret identifier assigned by the identity authentication platform is received. A request for obtaining a session key is sent to a quantum key management service platform, and the key acquisition request includes the secret identifier. The session key assigned to the secret identifier sent by the quantum key management service platform is received. After the voice session is established, the first voice data sent by the fixed telephone is received, the first voice data is encrypted using the session key and sent to the mobile terminal. The encrypted second voice data sent by the mobile terminal is received, the encrypted second voice data is decrypted using the session key, and the second voice data is sent to the fixed telephone. Identity authentication can be achieved while making a call, and the call voice data can be symmetrically encrypted by the quantum key, solving the problem that the call information may be eavesdropped or recorded when the fixed telephone and the mobile terminal in the unit call each other. The identity authentication and equipment security guarantee problems of external mobile phones making internal calls are solved.

[0138] Reference Figure 2 , shows a flowchart of a method for making a call between a fixed telephone and a mobile terminal provided by an embodiment of the present invention, which is applied to a voice gateway. The method may specifically include the following steps:

[0139] Step 201, after the fixed telephone initiates a call to the mobile terminal, or after the mobile terminal initiates a call to the fixed telephone, establishing a voice session with the mobile terminal;

[0140] In some embodiments of the present invention, step 201 may include the following sub-steps:

[0141] Receive call signaling sent by the fixed telephone, convert the call signaling into a signaling format to obtain a call request, and send the call request to a session control server, so that the session control server calls a home user server according to the call request to query whether the called party's mobile terminal supports the long-term evolution voice bearer communication service; if the called party's mobile terminal supports the long-term evolution voice bearer communication service, call the call session control server to establish a voice session.

[0142] Reference Figure 3 A business process diagram of a fixed-line telephone and mobile terminal call system provided by an embodiment of the present invention is shown, and the figure serves as a supplementary description. When a fixed-line telephone initiates a call to a mobile terminal, or a mobile terminal initiates a call to a fixed-line telephone, a voice session needs to be established between the two through a voice gateway. If the call request is initiated by a fixed-line telephone, the analog signal of the No. 7 signaling used by the fixed-line telephone needs to be converted into a suitable digital signal first, and then connected to the customized voice encryption gateway in the telecommunications room through the E1 line through the outgoing device. The voice encryption gateway completes the conversion of the call signaling (NO.7->SIP), and then the call request is processed by the SIP server. The SIP server queries the HSS server to determine whether the called party supports VoLTE, etc. If supported, the SIP server will notify the CSCF server to start the session establishment process, and the CSCF server negotiates the call parameters with the called party's terminal device.

[0143] Step 202: during the process of establishing the voice session, a request for obtaining a secret identifier is sent to an identity authentication platform, and a secret identifier assigned by the identity authentication platform is received; a request for obtaining a session key is sent to a quantum key management service platform, and the key acquisition request includes the secret identifier; and a session key assigned to the secret identifier and sent by the quantum key management service platform is received;

[0144] In some embodiments of the present invention, step 202 may include the following sub-steps:

[0145] Sub-step S11, obtaining voice gateway information and mobile terminal information;

[0146] Sub-step S12, sending a secret identification acquisition request to the identity authentication platform, the secret identification acquisition request includes voice gateway information and mobile terminal information, so that the identity authentication platform, after determining that the conditions for establishing a quantum secret call are met based on the voice gateway information and the mobile terminal information, generates the secret identification based on the voice gateway information and the mobile terminal information.

[0147] During the process of establishing a voice session, the caller and the called party need to negotiate the session key through the quantum key management service platform (QMS) to protect the voice session. The negotiation method is that for the caller, the caller (voice gateway or Volte terminal) applies to the identity authentication platform after the session is initiated. The identity authentication platform confirms that the caller and the called party meet the conditions for establishing Volte quantum secret calls (terminals, service activation status, network, etc.), and generates a session ID for this session that is generated by the caller and the called party's number calculation as a secret identifier, and sends this secret identifier to the caller. The caller encrypts this identifier with the pre-charged key and sends it to the quantum key management service platform (QMS) to apply for the session key for this call. QMS encrypts and sends this session key to the caller.

[0148] For the called party, the called party (voice gateway or Volte terminal) sends a request for a secret identification to the identity authentication platform during the voice session establishment phase, and the identity authentication platform returns the secret identification to the called party. The called party encrypts this identification with the pre-charged key and sends it to the quantum key management service platform (QMS) to obtain the session key for this call. QMS encrypts and sends this session key to the caller. Both parties successfully obtain the session key, and the session key negotiation for this call is successful.

[0149] In some embodiments of the present invention, the voice gateway has a secure medium in which a charging key is stored. Step 202 may further include the following sub-steps:

[0150] Sub-step S21, using the charging key to encrypt the encryption identifier;

[0151] Sub-step S22, sending a session key acquisition request to the sub-key management service platform, wherein the key acquisition request includes the encryption identifier encrypted according to the injection key;

[0152] The step 202 may also include the following sub-steps:

[0153] Sub-step S31, receiving a session key encrypted according to the injection key sent by the quantum key management service platform;

[0154] Sub-step S32, using the injection key to decrypt the encrypted session key to obtain the session key.

[0155] The voice gateway can be customized for encryption, with a built-in security chip. It applies for a secret identifier from the identity authentication platform, initiates session key negotiation with the quantum key management system through the secret identifier and the pre-charged key built into the security chip, and obtains the session key used for this session. After receiving a voice call, the mobile terminal obtains the secret identifier of this session from the identity authentication platform, and uses this secret identifier to obtain the session key from the quantum key management system.

[0156] Step 203, after establishing the voice session, receiving the first voice data sent by the fixed-line phone, encrypting the first voice data using the session key and sending it to the mobile terminal; and receiving the encrypted second voice data sent by the mobile terminal, decrypting the encrypted second voice data using the session key, and sending the second voice data to the fixed-line phone.

[0157] In some embodiments of the present invention, step 203 may include the following sub-steps:

[0158] Using the session key to encrypt the first voice data after data format conversion and sending it to the mobile terminal;

[0159] After the fixed-line phone successfully negotiates the session key through the voice gateway, the voice gateway and the mobile terminal encrypt the voice data in real time through the session key. The voice data sent by the fixed-line phone to the mobile terminal is the first voice data, and conversely, the voice data sent by the mobile terminal to the fixed-line phone is the second voice data.

[0160] In some embodiments of the present invention, step 203 may further include the following sub-steps:

[0161] The second voice data is converted into a data format, and the second voice data after the data format conversion is sent to the fixed telephone.

[0162] Similarly, in one embodiment of the present invention, when a mobile terminal initiates a call to a fixed-line phone, when the second voice data encrypted with a session key is sent by the mobile terminal to the fixed-line phone, it is necessary to first route the digital signal of the second voice data from the IMS network to the fixed-line network, and then the voice gateway converts the digital signal into the fixed-line format of the No. 7 signaling, and then the fixed-line phone is connected.

[0163] Reference Figure 4 , shows a flowchart of another method for making a call between a fixed telephone and a mobile terminal provided by an embodiment of the present invention, which is applied to a mobile terminal. The method may specifically include the following steps:

[0164] Step 401, in the process of establishing a voice session with the fixed telephone through the voice gateway, sending a request for obtaining a secret identifier to the identity authentication platform; receiving a secret identifier assigned by the identity authentication platform; sending a request for obtaining a session key to the quantum key management service platform, wherein the key acquisition request includes the secret identifier; receiving a session key assigned to the secret identifier sent by the quantum key management service platform;

[0165] In some embodiments of the present invention, step 401 may include the following sub-steps:

[0166] Sub-step S41, obtaining voice gateway information and mobile terminal information;

[0167] Sub-step S42, sending a secret identification acquisition request to the identity authentication platform, the secret identification acquisition request includes voice gateway information and mobile terminal information, so that the identity authentication platform, after determining that the conditions for establishing a quantum secret call are met based on the voice gateway information and the mobile terminal information, generates the secret identification based on the voice gateway information and the mobile terminal information.

[0168] When a mobile terminal receives a call from a fixed-line phone or calls a fixed-line phone, it first requests a secret identification from the identity authentication platform. In order for the identity authentication platform to return the secret identification, the voice gateway and the mobile terminal need to send the information of the voice gateway and the mobile terminal together when sending the secret identification application. Only after the information is determined to meet the conditions for establishing a quantum secret call can the session ID be calculated and generated as the secret identification.

[0169] In some embodiments of the present invention, the mobile terminal has a secure medium, and the secure medium stores a charging key. Step 401 may also include the following sub-steps:

[0170] Sub-step S51, using the charging key to encrypt the encryption identifier;

[0171] Sub-step S52, sending a session key acquisition request to the vector key management service platform, wherein the key acquisition request includes the encryption identifier encrypted according to the injection key;

[0172] Mobile terminals such as quantum mobile phones can be issued by the unit, and information can be entered into the gateway in advance. The security medium in the quantum mobile phone can be a quantum SIM card. The pre-set charging key in the security chip of the SIM card can encrypt the secret entry identifier. When sending a session key acquisition request to the quantum key management service platform, the encrypted secret entry identifier is also sent to the quantum key management service platform to find the corresponding communication session.

[0173] The step 401 may also include the following sub-steps:

[0174] Sub-step S61, receiving a session key encrypted according to the injection key sent by the quantum key management service platform;

[0175] Sub-step S62, using the injection key to decrypt the encrypted session key to obtain the session key.

[0176] Step 402, after establishing the voice session, encrypt the second voice data using the session key, and send the encrypted second voice data to the voice gateway; and receive the encrypted first voice data sent by the voice gateway, and decrypt the encrypted first voice data according to the session key; the first voice data is sent from the landline phone to the voice gateway.

[0177] After the fixed phone and the mobile terminal obtain the session key, they can use the negotiated session key to encrypt their respective voice data before transmission. The second voice data sent by the mobile terminal is encrypted with the session key and then sent to the voice gateway. The first voice data received by the mobile terminal from the voice gateway also needs to be decrypted with the session key.

[0178] In one embodiment of the present invention, when a fixed telephone initiates a call to a mobile terminal, the customized mobile terminal sends the received VoLTE voice data, i.e., the first voice data, from the DSP module of the mobile phone communication processor (CP side) to the quantum security middleware of the mobile phone application processor (AP side), and uses the session key to decrypt the VoLTE voice data.

[0179] In the embodiment of the present invention, after a fixed telephone initiates a call to a mobile terminal or a mobile terminal initiates a call to a fixed telephone, a voice session is established between the two. In the process of establishing the voice session, a request for obtaining a secret identifier is sent to an identity authentication platform, and a secret identifier assigned by the identity authentication platform is received. A request for obtaining a session key is sent to a quantum key management service platform, and the key acquisition request includes the secret identifier. The session key assigned to the secret identifier sent by the quantum key management service platform is received. After the voice session is established, the first voice data sent by the fixed telephone is received, the first voice data is encrypted using the session key and sent to the mobile terminal. The encrypted second voice data sent by the mobile terminal is received, the encrypted second voice data is decrypted using the session key, and the second voice data is sent to the fixed telephone. Identity authentication can be achieved while making a call, and the call voice data can be symmetrically encrypted by the quantum key, solving the problem that the call information may be eavesdropped or recorded when the fixed telephone and the mobile terminal in the unit call each other. The identity authentication and equipment security guarantee problems of external mobile phones making internal calls are solved.

[0180] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0181] Reference Figure 5 , shows a structural block diagram of a fixed telephone and mobile terminal communication device provided by an embodiment of the present invention, which may specifically include the following modules:

[0182] A session establishing module 501, configured to establish a voice session with the mobile terminal after the fixed telephone initiates a call to the mobile terminal, or after the mobile terminal initiates a call to the fixed telephone;

[0183] The first request and acquisition module 502 is used to send a secret identification acquisition request to the identity authentication platform during the process of establishing the voice session, and receive the secret identification assigned by the identity authentication platform; send a session key acquisition request to the quantum key management service platform, wherein the key acquisition request includes the secret identification; and receive the session key assigned to the secret identification sent by the quantum key management service platform;

[0184] The first sending and receiving module 503 is used to receive the first voice data sent by the fixed-line phone after establishing the voice session, encrypt the first voice data using the session key and send it to the mobile terminal; and receive the encrypted second voice data sent by the mobile terminal, decrypt the encrypted second voice data using the session key, and send the second voice data to the fixed-line phone.

[0185] In some embodiments of the embodiments of the present invention, the first request and acquisition module includes:

[0186] The first acquisition submodule is used to acquire voice gateway information and mobile terminal information;

[0187] The second secret identification generation submodule is used to send a secret identification acquisition request to the identity authentication platform, and the secret identification acquisition request includes voice gateway information and mobile terminal information, so that the identity authentication platform, after determining that the conditions for establishing a quantum secret call are met according to the voice gateway information and the mobile terminal information, generates the secret identification according to the voice gateway information and the mobile terminal information.

[0188] In some embodiments of the present invention, the voice gateway has a secure medium, and the secure medium stores a charging key;

[0189] The first request and acquisition module further includes:

[0190] A first encryption submodule, used to encrypt the encryption identifier using the injection key;

[0191] A first request sending submodule, used for sending a session key acquisition request to the subkey management service platform, wherein the key acquisition request includes the key entry identifier encrypted according to the injection key;

[0192] The first request and acquisition module further includes:

[0193] A first receiving submodule is used to receive a session key encrypted according to the injection key and sent by the quantum key management service platform;

[0194] The first encryption submodule is used to decrypt the encrypted session key using the injection key to obtain the session key.

[0195] In some embodiments of the embodiments of the present invention, the first sending and receiving module includes:

[0196] A first data sending submodule, configured to convert the first voice data into a data format, encrypt the first voice data after the data format conversion using the session key, and send the first voice data to the mobile terminal;

[0197] The first sending and receiving module further includes:

[0198] The second data sending submodule is used to perform data format conversion on the second voice data, and send the second voice data after data format conversion to the fixed telephone.

[0199] In some embodiments of the embodiments of the present invention, the first sending and receiving module further includes:

[0200] The session establishment submodule is used to receive the fixedly sent call signaling, convert the call signaling into a signaling format to obtain a call request, and send the call request to a session control server, so that the session control server calls a home user server according to the call request to query whether the called party's mobile terminal supports the long-term evolution voice bearer communication service; if the called party's mobile terminal supports the long-term evolution voice bearer communication service, the call session control server is called to establish a voice session.

[0201] Reference Figure 6 , shows a structural block diagram of another fixed telephone and mobile terminal communication device provided by an embodiment of the present invention, which may specifically include the following modules:

[0202] The second request and acquisition module 601 is used to send a secret identification acquisition request to the identity authentication platform during the process of establishing a voice session with the fixed telephone through the voice gateway; receive the secret identification assigned by the identity authentication platform; send a session key acquisition request to the quantum key management service platform, the key acquisition request includes the secret identification; receive the session key assigned to the secret identification sent by the quantum key management service platform;

[0203] The second sending and receiving module 602 is used to encrypt the second voice data using the session key after establishing the voice session, and send the encrypted second voice data to the voice gateway; and receive the encrypted first voice data sent by the voice gateway, and decrypt the encrypted first voice data according to the session key; the first voice data is sent by the landline phone to the voice gateway.

[0204] In some embodiments of the embodiments of the present invention, the second request and acquisition module includes:

[0205] The second acquisition submodule is used to acquire voice gateway information and mobile terminal information;

[0206] The second secret identification generation submodule is used to send a secret identification acquisition request to the identity authentication platform, and the secret identification acquisition request includes voice gateway information and mobile terminal information, so that the identity authentication platform, after determining that the conditions for establishing a quantum secret call are met according to the voice gateway information and the mobile terminal information, generates the secret identification according to the voice gateway information and the mobile terminal information.

[0207] In some embodiments of the present invention, the mobile terminal has a secure medium, and the secure medium stores a charging key;

[0208] The second request and acquisition module further includes:

[0209] A second encryption submodule, used to encrypt the encryption identifier using the injection key;

[0210] A second request sending submodule, used for sending a session key acquisition request to the subkey management service platform, wherein the key acquisition request includes the key entry identifier encrypted according to the charging key;

[0211] The second request and acquisition module further includes:

[0212] A second receiving submodule is used to receive a session key encrypted according to the injection key and sent by the quantum key management service platform;

[0213] The second encryption submodule is used to decrypt the encrypted session key using the injection key to obtain the session key.

[0214] In the embodiment of the present invention, after a fixed telephone initiates a call to a mobile terminal or a mobile terminal initiates a call to a fixed telephone, a voice session is established between the two. In the process of establishing the voice session, a request for obtaining a secret identifier is sent to an identity authentication platform, and a secret identifier assigned by the identity authentication platform is received. A request for obtaining a session key is sent to a quantum key management service platform, and the key acquisition request includes the secret identifier. The session key assigned to the secret identifier sent by the quantum key management service platform is received. After the voice session is established, the first voice data sent by the fixed telephone is received, the first voice data is encrypted using the session key and sent to the mobile terminal. The encrypted second voice data sent by the mobile terminal is received, the encrypted second voice data is decrypted using the session key, and the second voice data is sent to the fixed telephone. Identity authentication can be achieved while making a call, and the call voice data can be symmetrically encrypted by the quantum key, solving the problem that the call information may be eavesdropped or recorded when the fixed telephone and the mobile terminal in the unit call each other. The identity authentication and equipment security guarantee problems of external mobile phones making internal calls are solved.

[0215] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0216] An embodiment of the invention also provides an electronic device, including a processor, a memory, and a computer program stored in the memory and capable of running on the processor. When the computer program is executed by the processor, the various processes of the above-mentioned embodiment of the method for making a call between a fixed telephone and a mobile terminal are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be described here.

[0217] An embodiment of the present invention further provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the various processes of the above-mentioned embodiment of the method for making a call between a fixed telephone and a mobile terminal are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0218] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0219] It will be appreciated by those skilled in the art that the embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0220] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0221] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0222] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable terminal device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0223] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0224] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0225] The above is a detailed introduction to a method for calling a fixed telephone and a mobile terminal and a device for calling a fixed telephone and a mobile terminal provided by the present invention. Specific examples are used in this article to illustrate the principle and implementation mode of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea. At the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation mode and application scope. In summary, the content of this specification should not be understood as limiting the present invention.

Claims

1. A system for communication between a fixed telephone and a mobile terminal, characterized in that: include: Fixed-line telephones, voice gateways, mobile terminals, identity authentication platforms, and quantum key management service platforms; The fixed telephone is used to establish a voice session with the mobile terminal through the voice gateway, and after the voice session is established, send first voice data to the voice gateway, and receive second voice data sent by the voice gateway, the second voice data being sent by the mobile terminal to the voice gateway; The voice gateway is used to establish a voice session with the mobile terminal after the fixed telephone initiates a call to the mobile terminal or the mobile terminal initiates a call to the fixed telephone; in the process of establishing the voice session, send a request for obtaining a secret identifier to the identity authentication platform; and receive a secret identifier assigned by the identity authentication platform; Sending a session key acquisition request to the quantum key management service platform, wherein the key acquisition request includes the secret identifier; receiving a session key assigned to the secret identifier and sent by the quantum key management service platform; after establishing a voice session, receiving first voice data sent by the fixed-line phone, encrypting the first voice data using the session key and sending the first voice data to the mobile terminal; and receiving encrypted second voice data sent by the mobile terminal, decrypting the encrypted second voice data using the session key, and sending the second voice data to the fixed-line phone; The mobile terminal is used to establish a voice session with the fixed telephone through the voice gateway; in the process of establishing the voice session, send a request for obtaining a secret identifier to the identity authentication platform; receive the secret identifier assigned by the identity authentication platform; send a request for obtaining a session key to the quantum key management service platform, wherein the key obtaining request includes the secret identifier; Receiving a session key assigned to the encryption identifier and sent by the quantum key management service platform; after establishing a voice session, encrypting second voice data using the session key, and sending the encrypted second voice data to the voice gateway; and receiving the encrypted first voice data sent by the voice gateway, and decrypting the encrypted first voice data according to the session key; the first voice data is sent by the landline phone to the voice gateway; The identity authentication platform is used to receive a secret identification acquisition request sent by the voice gateway, and send a secret identification to the voice gateway according to the secret identification acquisition request; and receive a secret identification acquisition request sent by the mobile terminal, and send a secret identification to the mobile terminal according to the secret identification acquisition request; The quantum key management service platform is used to receive a session key acquisition request sent by the voice gateway, the key acquisition request includes the secret identifier; allocate a session key according to the secret identifier, and send the encrypted session key to the voice gateway; and receive a session key acquisition request sent by the mobile terminal, the key acquisition request includes the secret identifier; allocate a session key according to the secret identifier, and send the encrypted session key to the mobile terminal.

2. The system according to claim 1, characterized in that The secret identification acquisition request includes voice gateway information and mobile terminal information; The identity authentication platform is used to determine whether the quantum secret call establishment condition is met according to the voice gateway information and the mobile terminal information; After determining that the conditions for establishing the quantum secret call are met, the secret entry identifier is generated according to the voice gateway information and the mobile terminal information.

3. The system according to claim 1, characterized in that The voice gateway has a secure medium in which a charging key is stored; the voice gateway is used to send a session key acquisition request to the quantum key management service platform, wherein the key acquisition request includes the key entry identifier encrypted according to the charging key; Receiving a session key encrypted according to the injection key and sent by the quantum key management service platform, and decrypting the encrypted session key using the injection key to obtain a session key; The mobile terminal has a secure medium in which a charging key is stored; the mobile terminal is used to send a session key acquisition request to the quantum key management service platform, wherein the key acquisition request includes the key entry identifier encrypted according to the charging key; Receiving a session key encrypted according to the injection key and sent by the quantum key management service platform, and decrypting the encrypted session key using the injection key to obtain a session key; The quantum key management service platform is used to receive a session key acquisition request sent by the voice gateway, the key acquisition request includes the encryption identifier encrypted according to the injection key; obtain the injection key, decrypt the encrypted encryption identifier according to the injection key, allocate a session key for the encryption identifier, encrypt the session key according to the injection key, and send the encrypted session key to the voice gateway; and receive a session key acquisition request sent by the mobile terminal, the key acquisition request includes the encryption identifier encrypted according to the injection key; obtain the injection key, decrypt the encrypted encryption identifier according to the injection key, allocate a session key for the encryption identifier, encrypt the session key using the injection key, and send the encrypted session key to the mobile terminal.

4. The system according to claim 1, characterized in that The voice gateway is used to, after receiving the first voice data sent by the fixed-line phone, convert the first voice data into a data format, encrypt the first voice data after the data format conversion using the session key and send it to the mobile terminal; and, after receiving the encrypted second voice data sent by the mobile terminal, decrypt the encrypted second voice data using the session key, convert the second voice data into a data format, and send the second voice data after the data format conversion to the fixed-line phone.

5. The system according to claim 1, characterized in that Also includes: Session control server, home subscriber server and call session control server; The fixed telephone is used to send call signaling to the voice gateway; The voice gateway is used to convert the call signaling into a signaling format to obtain a call request, and send the call request to the session control server; The session control server is used to call the home user server according to the call request to query whether the called party mobile terminal supports the long-term evolution voice bearer communication service; if the called party mobile terminal supports the long-term evolution voice bearer communication service, call the call session control server to establish a voice session.

6. A method for communicating between a fixed telephone and a mobile terminal, characterized in that: The method is applied to a voice gateway, and the method comprises: After the fixed telephone initiates a call to the mobile terminal, or after the mobile terminal initiates a call to the fixed telephone, establishing a voice session with the mobile terminal; In the process of establishing the voice session, a request for obtaining a secret identifier is sent to an identity authentication platform, and a secret identifier assigned by the identity authentication platform is received; a request for obtaining a session key is sent to a quantum key management service platform, and the key acquisition request includes the secret identifier; and a session key assigned to the secret identifier and sent by the quantum key management service platform is received; After establishing a voice session, first voice data sent by the fixed-line phone is received, the first voice data is encrypted using the session key and sent to the mobile terminal; and encrypted second voice data sent by the mobile terminal is received, the encrypted second voice data is decrypted using the session key, and the second voice data is sent to the fixed-line phone.

7. The method according to claim 6, characterized in that The step of sending a password entry identification acquisition request to the identity authentication platform includes: Obtain voice gateway information and mobile terminal information; A request for obtaining a secret entry identifier is sent to the identity authentication platform, wherein the request for obtaining a secret entry identifier includes voice gateway information and mobile terminal information, so that the identity authentication platform determines that the conditions for establishing a quantum secret call are met based on the voice gateway information and the mobile terminal information, and then generates the secret entry identifier based on the voice gateway information and the mobile terminal information.

8. The method according to claim 6, characterized in that The voice gateway has a secure medium, in which a charging key is stored; The sending of a session key acquisition request to the subkey management service platform includes: Using the charging key, encrypting the encryption identifier; Sending a session key acquisition request to the quantum key management service platform, wherein the key acquisition request includes the encryption identifier encrypted according to the injection key; The receiving the session key assigned to the key entry identifier and sent by the quantum key management service platform includes: Receiving a session key encrypted according to the injection key sent by the quantum key management service platform; The encrypted session key is decrypted using the injection key to obtain the session key.

9. The method according to claim 6, characterized in that The step of encrypting the first voice data using the session key and sending the first voice data to the mobile terminal comprises: Converting the first voice data into a data format, encrypting the first voice data after the data format conversion using the session key, and sending the first voice data to the mobile terminal; The sending the second voice data to the fixed telephone includes: The second voice data is converted into a data format, and the second voice data after the data format conversion is sent to the fixed telephone.

10. The method according to claim 6, characterized in that After the fixed telephone initiates a call to the mobile terminal, establishing a voice session with the mobile terminal includes: Receive the fixedly sent call signaling, convert the call signaling into a signaling format to obtain a call request, and send the call request to a session control server, so that the session control server calls a home user server according to the call request to query whether the called party's mobile terminal supports the long-term evolution voice bearer communication service; if the called party's mobile terminal supports the long-term evolution voice bearer communication service, call the call session control server to establish a voice session.

11. A method for communicating between a fixed telephone and a mobile terminal, characterized in that: The method is applied to a mobile terminal, and the method comprises: In the process of establishing a voice session with the fixed telephone through the voice gateway, sending a request for obtaining a secret identifier to the identity authentication platform; receiving the secret identifier assigned by the identity authentication platform; sending a request for obtaining a session key to the quantum key management service platform, wherein the key acquisition request includes the secret identifier; receiving the session key assigned to the secret identifier sent by the quantum key management service platform; After establishing a voice session, encrypt the second voice data using the session key and send the encrypted second voice data to the voice gateway; and receive the encrypted first voice data sent by the voice gateway, and decrypt the encrypted first voice data according to the session key; the first voice data is sent from the landline phone to the voice gateway.

12. The method according to claim 11, characterized in that The step of sending a password entry identification acquisition request to the identity authentication platform includes: Obtain voice gateway information and mobile terminal information; A request for obtaining a secret entry identifier is sent to the identity authentication platform, wherein the request for obtaining a secret entry identifier includes voice gateway information and mobile terminal information, so that the identity authentication platform determines that the conditions for establishing a quantum secret call are met based on the voice gateway information and the mobile terminal information, and then generates the secret entry identifier based on the voice gateway information and the mobile terminal information.

13. The method according to claim 11, characterized in that The mobile terminal has a secure medium, and the secure medium stores a charging key; The sending of a session key acquisition request to the subkey management service platform includes: Using the charging key, encrypting the encryption identifier; Sending a session key acquisition request to the quantum key management service platform, wherein the key acquisition request includes the encryption identifier encrypted according to the injection key; The receiving the session key assigned to the key entry identifier and sent by the quantum key management service platform includes: Receiving a session key encrypted according to the injection key sent by the quantum key management service platform; The encrypted session key is decrypted using the injection key to obtain the session key.

14. A device for communicating between a fixed telephone and a mobile terminal, characterized in that: The device is applied to a voice gateway, and the device comprises: A session establishing module, configured to establish a voice session with the mobile terminal after the fixed telephone initiates a call to the mobile terminal or the mobile terminal initiates a call to the fixed telephone; The first request and acquisition module is used to send a secret identification acquisition request to the identity authentication platform during the process of establishing the voice session, and receive the secret identification assigned by the identity authentication platform; send a session key acquisition request to the quantum key management service platform, wherein the key acquisition request includes the secret identification; and receive the session key assigned to the secret identification sent by the quantum key management service platform; The first sending and receiving module is used to receive the first voice data sent by the fixed-line phone after establishing the voice session, encrypt the first voice data using the session key and send it to the mobile terminal; and receive the encrypted second voice data sent by the mobile terminal, decrypt the encrypted second voice data using the session key, and send the second voice data to the fixed-line phone.

15. A device for communicating between a fixed telephone and a mobile terminal, characterized in that: The device is applied to a mobile terminal, and comprises: The second request and acquisition module is used to send a secret identification acquisition request to the identity authentication platform during the process of establishing a voice session with the fixed telephone through the voice gateway; receive the secret identification assigned by the identity authentication platform; send a session key acquisition request to the quantum key management service platform, the key acquisition request includes the secret identification; receive the session key assigned to the secret identification sent by the quantum key management service platform; The second sending and receiving module is used to encrypt the second voice data using the session key after establishing the voice session, and send the encrypted second voice data to the voice gateway; and receive the encrypted first voice data sent by the voice gateway, and decrypt the encrypted first voice data according to the session key; the first voice data is sent from the landline phone to the voice gateway.

16. An electronic device, characterized in that: include: A processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the steps of the method for a fixed telephone to communicate with a mobile terminal as described in any one of claims 6-10 or 11-13 are implemented.

17. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by the processor, the steps of the method for a call between a fixed telephone and a mobile terminal are implemented as described in any one of claims 6-10 or 11-13.

Images