TRANSMISSION OF ENCRYPTED MESSAGES IN A RADIO SYSTEM

Description

Field of invention

[0001] The invention relates to a method for transmitting encrypted messages in a radio paging system.

[0002] Further aspects of the invention relate to a corresponding radio paging arrangement for such a method, a radio paging receiver and an application program for an electronic device, in particular a mobile communication device, e.g. a smartphone. background

[0003] Radio paging systems, also known as paging networks, are well-known. They primarily serve to transmit alarm and incident messages to emergency personnel, such as firefighters. These personnel carry a digital pager (DME) to which messages are transmitted via radio and displayed. Known paging systems can operate according to a paging protocol, such as the POCSAG standard or the FLEX protocol. The data rate of the transmissions is limited by standard.

[0004] In some countries, such as Germany, the encryption of messages sent via POCSAG (and, in the case of hybrid POCSAG / GSM devices, also via GSM) is now standard practice. The keys used are part of an encryption concept that is fully controlled by the respective emergency response organization operating the paging system. This also applies to the end devices (pagers) and the alerting infrastructure, which can generally be operated entirely without external IT infrastructure, such as cloud computing.

[0005] There are also applications (apps) used by firefighters with extended functions and user-friendliness. However, these are usually based on a "bring your own device" policy, meaning firefighters use their personal smartphones. Furthermore, these applications are not integrated into the emergency services' encryption concept, but rather rely on the encryption of the push notification services of the respective mobile operating systems, such as iOS or Android.

[0006] If the operational organization also wants to apply its own encryption concept to the application program, this encounters the following problems regarding the allocation and storage of keys: Firstly, the users of the application program must be authenticated.

[0007] Secondly, the keys and addresses of the emergency personnel must be stored twice, both in the pagers / POCSAG devices and on the apps / smartphones.

[0008] This leads to both increased complexity and increased susceptibility to errors.

[0009] US 2019 / 0237170 A1 describes a multimodal encrypted messaging platform for providing HIPAA-compliant messaging and interfaces for accessing electronic records.

[0010] US Patent 2009 / 0036164 A1 describes a smart card that can be accessed via a personal area network. One embodiment includes a wireless transceiver for communicatively coupling with a personal area network (PAN) to receive an authentication request via the PAN from a device. The device further includes a storage device for storing a digital certificate that uniquely identifies a user. An authentication module in the device can authenticate the user in response to an authentication request from the device using the digital certificate, and the user is then permitted to access the computer after authentication. Description of the invention

[0011] The invention is therefore based on the objective of creating a method for transmitting encrypted messages in a radio paging system, which makes it possible to display encrypted messages efficiently and / or easily on devices that are not integrated into the encryption concept of the radio paging system or the operational organization that operates the radio paging system.

[0012] In a first aspect of the invention, this problem is solved by a method according to claim 1.

[0013] The first aspect of the invention relates in particular to a method for transmitting encrypted messages in a paging system. The paging system comprises a paging center and a plurality of paging receivers. The paging receivers store one or more electronic keys of a first encryption mechanism and one or more receiving addresses of the paging system. The one or more electronic keys of the first encryption mechanism are organized by an operational organization as a private encryption system.

[0014] The radio pagers are designed to receive messages encrypted using the first encryption mechanism from the radio paging center via a first data connection.

[0015] The inventive method is characterized in particular by the following steps: Sending the encrypted messages from the paging center via a second data connection to an application program of an electronic device, in particular a mobile phone; forwarding the encrypted messages from the electronic device to the pager via a third data connection; decrypting the encrypted message forwarded by the electronic device by the pager using one of the electronic keys stored in the pager; sending the decrypted message via the third data connection from the pager to the electronic device; and displaying the decrypted message from the application program on the electronic device.

[0016] This method has the advantage that the electronic keys and the receiving addresses to which the encrypted message is to be sent are stored only in the radio pager, while they do not need to be stored in the application program. From the application program's perspective, the radio pager thus acts as the key for the encrypted messages received via the second data connection.

[0017] This simplifies the management of electronic keys and increases the security of the paging system. This is particularly advantageous when the electronic device, especially a personal device such as a personal smartphone, is frequently changed.

[0018] The inventive method is advantageous in radio systems where the electronic keys of the first encryption mechanism are organized by an operational organization as a private encryption system or private encryption concept. In this context, the inventive method makes it possible to display the messages sent within the operational organization's encryption concept unencrypted on the private smartphones of the emergency personnel, without the smartphone knowing the key.

[0019] According to embodiments of the invention, the radio paging receiver can be a device issued, controlled, and dedicated by the operational organization, for example, a pager. Accordingly, the radio paging system can transmit encrypted messages, e.g., alarm notifications, to the organization's operational personnel.

[0020] According to one embodiment of the invention, the method further comprises the following steps: Establishing the third data connection and sending a request for one or more receiving addresses of the radio pager and an identification token from the electronic device to the radio pager; sending the one or more receiving addresses and the identification token from the radio pager to the application program of the electronic device via the third data connection; and sending the one or more receiving addresses and the identification token from the application program of the electronic device to the radio paging center.

[0021] The identification token is a token linked to the identity of the corresponding pager. The identification token can, in particular, be the pager's serial number.

[0022] Subsequently, the radio pager and the application program can be registered with the radio paging center in a further step, together with one or more receiving addresses and the identification token of the associated radio pager.

[0023] The radio paging center can thus send the messages intended for the corresponding radio pager in parallel to the application program registered in this way via the second data connection.

[0024] Such an embodiment of the invention has the advantage that the application program does not need to be separately authenticated by the paging center. Instead, the application program is authenticated to the paging center using the identity of the pager or the identification token of the pager.

[0025] According to a further embodiment of the invention, the radio paging center additionally encrypts the message encrypted by the first encryption mechanism using a second encryption mechanism. Furthermore, the radio paging center sends the message encrypted by both the first and second encryption mechanisms via the second data connection to the application program of the electronic device. The application program then decrypts the message encrypted by the second encryption mechanism and forwards only the message encrypted by the first encryption mechanism to the radio pager via the third data connection.

[0026] According to one embodiment of the invention, the messages sent to the application program via the second data connection are thus doubly encrypted: firstly, with the first encryption mechanism, e.g., within the framework of a private encryption concept of the respective operational organization, and secondly, with a second encryption mechanism. According to embodiments of the invention, the second encryption mechanism can, in particular, be an encryption mechanism of a service of the second data connection. According to a preferred embodiment of the invention, the second encryption mechanism is an end-to-end encryption between the paging center and the application program.

[0027] According to one embodiment of the method, the second data connection is a data connection via the internet, in particular a push service of the operating system of the electronic device, e.g., a push service of the iOS or Android operating systems. Such push services often have their own encryption, which, according to embodiments of the invention, can be used as a second encryption mechanism.

[0028] According to one embodiment of the method, the first encryption mechanism is a symmetric encryption method, e.g. based on the International Data Encryption Algorithm (IDEA), AES-128 or AES-256.

[0029] According to one embodiment of the method, the first data connection is a wireless data connection according to a radio paging protocol, e.g. the POCSAG standard or the FLEX protocol, or a mobile communication standard, e.g. a second (2G), third (3G), fourth (4G) or fifth (5G) generation mobile communication standard, or a low-power wide-area network (LPWAN) data connection, e.g. according to LoRa, LoRaWAN or MIOTY.

[0030] According to one embodiment of the method, the third data connection is a wireless local data connection, in particular a data connection according to a Bluetooth standard, e.g., the Bluetooth Low Energy (BLE) standard. According to alternative embodiments, however, it is also possible to implement the third data connection as a wired data connection, e.g., via a USB connection.

[0031] According to some embodiments, the third data connection can include a further (third) encryption mechanism, e.g., encryption of the Bluetooth standard.

[0032] Another preferred embodiment of the invention is characterized by the step of updating the assignment of one or more electronic keys of the radio paging receiver to one or more receiving addresses via the first data connection. This is particularly efficient and user-friendly.

[0033] Another aspect of the invention relates to a radio paging system comprising a radio paging center and a plurality of radio pagers. The radio pagers are designed to store one or more electronic keys of a first encryption mechanism of the radio system and one or more receiving addresses of the radio system. The radio pagers are further designed to receive messages encrypted by the first encryption mechanism from the radio paging center via a first data connection. The radio paging system is configured to transmit the encrypted messages from the radio paging center via a second data connection to an application program of an electronic device, in particular a mobile communication device.The first electronic device is configured to establish a third data connection with one of the radio pagers and forward the encrypted messages received from the paging center to the radio pager. The radio pager is configured to decrypt the encrypted message received from the electronic device and send the decrypted message back to the electronic device via the third data connection.

[0034] According to one embodiment of the invention, the radio pagers can also be registered with the radio paging center.

[0035] Further aspects of the invention relate to a radio paging receiver, a radio paging center and an application program for such a radio paging arrangement. Brief description of the drawings

[0036] Further embodiments, advantages, and applications of the invention will become apparent from the dependent claims and from the following description of exemplary embodiments with reference to the figures. These show: Figure 1 schematically a radio paging arrangement according to an embodiment of the invention; Figure 2 schematically a radio paging arrangement according to a further embodiment of the invention; Figure 3 a procedure for creating and assigning keys to addresses in the radio paging center and in the radio pagers; Figure 4 a method for registering a radio pager and authenticating an application program in radio paging orders using a private encryption concept; and Figure 5 A flowchart of a procedure for the parallel transmission of encrypted messages in a radio paging arrangement to both a radio pager and another electronic device. Way(s) to implement the invention

[0037] Figure 1 Figure 1 schematically shows a radio paging system 100 according to an embodiment of the invention. The radio paging system 100 comprises a radio paging center 10 and a plurality of radio pagers 20, wherein in the FIG. 1 Only one radio pager 20 is shown. Such radio pagers are also often referred to as pagers.

[0038] Each radio pager 20 is assigned one or more receiving addresses 50, which are stored in a memory 21. According to embodiments of the invention, the receiving addresses 50 can, for example, contain a Radio Identification Code (RIC) to address and alert digital radio pagers of a paging system according to the POCSAG protocol. Furthermore, the radio pagers 20 store one or more electronic keys 60 in the memory 21. The electronic keys 60 are part of a first encryption mechanism of the paging system 100. The keys 60 of the first encryption mechanism are managed by the organization operating the paging system 100. The keys 60 are thus part of an encryption concept of the respective organization, e.g., the fire department. The keys 60 of the first encryption mechanism are graphically represented by a black key.According to embodiments of the invention, the first encryption mechanism can be implemented using a symmetric encryption method. This can be based, for example, on the International Data Encryption Algorithm (IDEA), the Advanced Encryption Standard (AES)-128, or AES-256. The electronic keys 60 are thus, according to a preferred embodiment, symmetric keys. However, according to other embodiments, asymmetric encryption methods would also be conceivable.

[0039] The radio paging center 10 can send encrypted messages 15 via a first data connection 71 to the radio pagers 20 using the first encryption mechanism. These could be, for example, alarm messages (AM) from an emergency response organization to emergency personnel of that organization. The encryption of the message 15 using the first encryption mechanism is in the Figure 1illustrated with a black lock. According to embodiments of the invention, the first data connection 71 can be configured as a wireless data connection according to a radio paging protocol, e.g., the POCSAG standard or the FLEX protocol, or a mobile communication standard. The mobile communication standard can be, for example, a second (2G), third (3G), fourth (4G), or fifth (5G) generation mobile communication standard. Alternatively, a low-power wide-area network (LPWAN) connection would also be possible, e.g., LoRa, LoRaWAN, or MIOTY.

[0040] The radio paging center 10 has a central control unit 11, which controls the radio paging center. The control unit 11 has a memory 12, which stores the keys 60 of the first encryption mechanism as well as the receiving addresses 50 of the radio pagers 20. The radio pagers 20 can also be registered in memory 12 with an identification token 51. The central control unit 11 can, for example, also include a software platform for resource management of emergency personnel and remote configuration of radio pagers, e.g., the s.ONE™ software platform from Swissphone.

[0041] The control unit 11 encrypts the messages 15 using an electronic key 60 and sends the encrypted messages 15 to the radio pagers 20 via one or more radio base stations 80. In the Figure 1Only one radio base station is shown, which therefore represents a master base station.

[0042] The radio paging center 10 is located in the Figure 1 The invention is presented in a highly simplified and schematic form to illustrate essential aspects. The radio paging center 10 can, in particular, comprise various other components, which are shown in the Figure 1not shown. For example, the radio paging center 10 can comprise an encryption server, an alarm server, an input point, a gateway, and / or a control system. According to embodiments of the invention, the term radio paging center can encompass the entire upstream IT infrastructure up to the point where the message 15 is handed off to the corresponding radio base station 80. In particular, individual components of the radio paging center 10 can also be located in different places. For example, according to embodiments of the invention, the encryption server can be located in a different place than the alarm server and the control center.

[0043] The central control unit 11 can be located, for example, at the operations center of the service whose members are to be alerted via the paging system. The central control unit 11 is connected to the radio base station 80, which is configured as the "master," via a data connection, e.g., a data connection using the TCP / IP protocol. The data connection can be wired, for example, via an Ethernet cable, or it can be wireless. The paging system 100 can also include several downstream radio base stations, which are not shown in detail and are also referred to as slave base stations.

[0044] The radio base stations are also referred to as digital alarm converters (DACs). Depending on the embodiment, the radio paging system can be configured with multiple alarm rings. Each alarm ring can contain several radio base stations or digital alarm converters (DACs) configured as "slaves." The alarm is triggered by an alarm message being sent from the radio paging center 10 and then simultaneously by the "master" DAC via radio to the pagers within its coverage area and to the "slave" DACs of the first alarm ring. These "slave" DACs then simultaneously transmit the alarm message via radio to the pagers within their coverage area and to the "slave" DACs of the next alarm ring. In this way, the alarm spreads in a wave-like pattern across the entire region covered by the radio paging system.

[0045] In another configuration, the alarm message is first sent to all radio base stations or DAUs via messages in the so-called transport layer, and only then is the alarm message simultaneously and synchronously transmitted by all DAUs as an alarm signal, or in other words, as an alarm via radio to the pagers.

[0046] According to one embodiment of the invention, the format of the alarm messages and their sequence are determined by a radio call protocol, e.g. the aforementioned POCSAG standard or the Flex protocol.

[0047] In addition to transmitting the messages 15 to the radio pagers 20, the radio paging system 100 can also transmit the encrypted messages 15 from the radio paging center 10 to an application program 40 of an electronic device 30 via a second data connection 72. The electronic device 30 is, in particular, a mobile device, e.g., a smartphone.

[0048] The second data connection 72 can, in particular, be a data connection via the Internet 74. According to embodiments, the second data connection can, in particular, be a push service of the operating system of the mobile device 30, e.g., a push service of iOS or Android.

[0049] The electronic device 30 is configured to establish a third data connection 73 with one of the radio pagers 20 and to forward the encrypted messages 15 received from the radio paging center 10 to the radio pager 20 for decryption. The third data connection 73 can, in particular, be a wireless local data connection, e.g., a data connection according to a Bluetooth standard, e.g., according to the Bluetooth Low Energy (BLE) standard.

[0050] The electronic device 30 can, in particular, be a personal device of the respective emergency responder of the operational organization. This personal device may, for example, be authorized by the operational organization under a "Bring Your Own Device" (BYOD) policy. However, the electronic device 30 does not have a key 60 of the first encryption mechanism and is therefore not capable on its own of decrypting the message received from the radio paging center 10.

[0051] However, if the relevant emergency responder also possesses a radio pager 20 of the radio paging order of the emergency organization, this radio pager 20 can be used by the emergency responder to decrypt the encrypted messages received by the emergency responder's personal electronic device 30.

[0052] Accordingly, the radio pager 20 is configured to decrypt the encrypted message 15 received from the personal electronic device 30 and to send the decrypted message 15 back to the electronic device 30 via the third data connection 73. There, it can then be viewed by the emergency responder on the screen of the personal electronic device 30.

[0053] Figure 2 Figure 1 schematically shows a radio paging arrangement 200 according to a further embodiment of the invention. The radio paging arrangement 200 largely corresponds to the radio paging arrangement 100 according to Figure 100. FIG. 1 Therefore, identical reference symbols are used for identical components. In particular, the radio paging system 200 comprises a radio paging center 10, a plurality of radio pagers 20, and an electronic device 30 with an application program 40.

[0054] In the paging system 200, the message 15, which is sent from the paging center 10 to the electronic device 30 or to the application program on the electronic device 30, is not only encrypted with the first encryption mechanism and the corresponding electronic keys 60, but also additionally by means of a second encryption mechanism. This constitutes double encryption. The second encryption mechanism can, in particular, be end-to-end encryption between the paging center 10 and the application program 40. According to embodiments, the control unit 11 can use the encryption system of the aforementioned push service of the mobile device 30 for this purpose, e.g., the encryption mechanism of iOS or Android. FIG. 2The electronic keys of the second encryption mechanism are illustrated by means of grey keys 61 and messages encrypted with the second encryption mechanism 15 are shown with a grey lock.

[0055] On the electronic device 30, the encryption of the second encryption mechanism is decrypted, e.g., by the operating system's push service, and thus removed. The message 15, which is now only encrypted with the first encryption mechanism, is then forwarded to the radio pager 20 via the third data connection 73.

[0056] According to some embodiments, the third data connection can include a further (third) encryption mechanism, e.g., encryption of the Bluetooth standard.

[0057] The Figures 3, 4 and 5show flowcharts of aspects of a method for transmitting encrypted messages in a radio paging system according to embodiments of the invention, e.g. in radio paging systems 100 and 200 of the Figures 1 and 2 The following explanation of the procedure refers to the information contained in the Figures 1 and 2 Reference is made to the components or elements shown and explained above.

[0058] FIG. 3 shows an initial procedure 300 for creating and assigning the electronic keys 60 to the receiving addresses 50 in the radio paging center and in the radio pagers, a subsequent procedure for updating the assignment of the keys 60 to the receiving addresses 50 in the radio pager 20 and finally the key or address update.

[0059] In step 310, keys 60 are generated or created in the radio paging center and assigned to one or more receiving addresses 50. The receiving addresses 50 and the electronic key 60 are stored in the memory 12 of the radio paging center 10.

[0060] In step 311, one or more receiving addresses 50 and the associated keys 60 are stored in the pager 20, specifically in its memory 21. This step 311 can be performed, for example, during the initial commissioning of the pager 20 by programming the pager 20 by the control center or a responsible person of the emergency response organization. Such a person, who is responsible for managing the keys and organizing the encryption concept of the respective emergency response organization, is also referred to as a radio operator. According to embodiments of the invention, the initial programming of the pager is carried out via a wired interface, e.g., via a USB connection.

[0061] After the initial commissioning of a radio paging receiver 20, the assignment of keys 60 to receiving addresses 50 can be regularly updated via the first data connection in step 312.

[0062] In step 313, completely new keys can also be assigned to one or more receiving addresses in the radio paging center. These are updated in step 314 in the radio pager via remote programming, e.g., via a USB connection. According to embodiments of the invention, this is also possible via a wireless data connection (over the air).

[0063] FIG. 4 shows a method for registering radio paging receivers and authenticating an application program in radio paging orders using a private encryption concept.

[0064] In step 410, the third data connection 73 described above is established between the radio pager 20 and the electronic device 30, e.g. a Bluetooth connection.

[0065] According to one embodiment, the application program 40, upon initial pairing with the radio pager 20, requests a code that appears on the screen of the radio pager 20. Only if this code is entered correctly is the third data connection activated. This prevents the application program from being put into operation without authorization. Such a mechanism is supported, for example, by the Bluetooth standard.

[0066] If a second application program is to be connected to the radio pager, a (new) code must be entered on this second application program, according to one embodiment. This code then appears on the screen of the radio pager 20. If the user does this, the third data connection to the first application program is interrupted, and a (new) code must be entered again when the connection is re-established.

[0067] In step 411, the electronic device 30 or the application program 40 sends a request for one or more receiving addresses 50 and for an identification token 51 to the radio paging receiver 20. In step 412, the radio paging receiver 20 then sends its receiving address 50 or multiple receiving addresses 50 and its identification token 51, which is stored in memory 21 (e.g., its serial number), to the electronic device 30 or the application program 40 of the electronic device via the third data connection 73. According to embodiments, step 412 can also be initiated by the radio paging receiver 20 without an explicit request from the application program. In step 413, the electronic device 30 or the application program 40 then forwards the received one or more receiving addresses 50 and the received identification token 51 to the radio paging center 10.

[0068] Subsequently, the radio pager 20 and the application program 40 of the electronic device 30, together with the corresponding identification token 51 and the one or more addresses 50, are registered with the radio paging center 10 in step 414, and the corresponding registration or login data are stored in the memory 12 of the control unit 11. The application program 40 can be registered, for example, using a device ID and / or a push token. Such mechanisms are provided, for example, by the operating systems iOS or Android and are familiar to those skilled in the art.

[0069] Afterwards, messages, e.g. alarm messages to the corresponding radio pager 20, are not only sent to the radio pager 20 via the first data connection 71, but also to the registered application program 40 of the electronic device 30 via the second data connection 72.

[0070] This will be discussed below in the Figure 5 This explains the parallel transmission of encrypted messages, e.g., alarm messages in a radio paging order, to both a radio pager 20 and another electronic device 30. In this example, the electronic device 30 is implemented as a smartphone.

[0071] The encrypted messages are referred to below as encrypted alarm messages 15 as an example.

[0072] In step 510, an alarm message is generated, which is to be transmitted via the radio paging system. In step 511, this alarm message 15 is then encrypted in the radio paging center 10 using an electronic key 60, e.g., by an encryption server.

[0073] In step 512, the encrypted alarm message 15 is sent from the radio paging center 10 via the first data connection 71, e.g. via a POCSAG data connection, to the radio pagers 20.

[0074] In parallel, the encrypted alarm message 15 is sent from the radio control center 10 in step 513 via the second data connection 72, in particular via an internet data connection, to the application program 40 of the smartphone 30, which previously acted as if FIG. 4 described, has been registered. As explained, this can be done, for example, by a push service and can also include further encryption with a second encryption mechanism.

[0075] In step 514, the encrypted alarm message 15 is forwarded from the smartphone 30 to the radio pager 20 via the third data connection 73.

[0076] If necessary, the second encryption mechanism of the push service will be removed beforehand.

[0077] In step 515, the radio pager 20 can check the encrypted alarm message 15. This check includes, in particular, verifying whether the radio pager 20 has stored and therefore knows the receiving address 50 of the alarm message and whether it has stored the corresponding electronic key 60. This step 515 can also be performed indirectly.

[0078] If this is the case, the radio pager 20 decrypts or decodes the encrypted alarm message 15 forwarded by the smartphone 30 in one step 516 using the electronic key 60 stored in the radio pager 20.

[0079] In step 517, the radio pager 20 sends the decrypted or decoded alarm message 15 back to the smartphone 30 via the third data connection 73.

[0080] Finally, in step 518, the application program 40 displays the decrypted alarm message on a display of the smartphone 30.

[0081] While preferred embodiments of the invention are described in the present application, it should be clearly pointed out that the invention is defined by the following claims.

Claims

1. Method for transmitting encrypted messages in a paging system, wherein the paging system (100; 200) comprises a paging center (10) and a plurality of paging receivers (20), wherein the paging receivers (20) store one or more electronic keys (60) of a first encryption mechanism and one or more receiving addresses (50) of the paging system, wherein the one or more electronic keys of the first encryption mechanism are organized by an operational organization as a private encryption system; and the paging receivers (20) are configured to receive messages encrypted using the first encryption mechanism from the paging center (10) via a first data connection (71); wherein the method comprises the following steps: sending one of the encrypted messages from the paging center (10) via a second data connection (72) to an application program (40) of an electronic device (30), in particular a mobile radio device; forwarding the encrypted message from the electronic device (30) to the paging receiver (20) via a third data connection (73); decrypting the encrypted message forwarded by the electronic device (30) by the paging receiver (20) using one of the electronic keys (60) stored in the paging receiver (20); sending the decrypted message via the third data connection (73) from the paging receiver (20) to the electronic device (30); and displaying the decrypted message by the application program (40) on the electronic device (30).

2. Method according to claim 1, characterized by the steps: establishing the third data connection (73) and sending a request for the one or more receiving addresses (50) of the paging receiver and an identification token (51) from the electronic device (30) to the paging receiver (20); sending the one or more receiving addresses (50) and the identification token (51) from the paging receiver (20) to the application program (40) of the electronic device (30) via the third data connection (73); sending the one or more receiving addresses (50) and the identification token (51) from the application program (40) of the electronic device (30) to the paging center (10).

3. Method according to claim 2, characterized by the further step of: registering the paging receiver (20) and the application program (40) with the paging center (10).

4. Method according to any one of the preceding claims, characterized in that the paging center (10) additionally encrypts the message encrypted by means of the first encryption mechanism by means of a second encryption mechanism; the paging center (10) sends the message encrypted with the first and second encryption mechanisms to the application program (40) of the electronic device (30) via the second data connection (72); and the application program (40) decrypts the second encryption mechanism of the message and forwards only the message encrypted with the first encryption mechanism to the paging receiver (20) via the third data connection (73).

5. Method according to any one of the preceding claims, characterized in that the second encryption mechanism is end-to-end encryption between the paging center (10) and the application program (40).

6. Method according to any one of the preceding claims, characterized in that the first encryption mechanism is a symmetric encryption method.

7. Method according to any one of the preceding claims, characterized in that the first data connection (71) is a wireless data connection according to a paging protocol, in particular the POCSAG standard; according to a mobile communications standard; or according to a low-power wide-area network (LPWAN); the second data connection (72) is a data connection via the Internet, in particular a push service of the operating system of the electronic device; and / or the third data connection (73) is a wireless local data connection, in particular a data connection according to a Bluetooth standard.

8. Method according to any one of the preceding claims, characterized by the step of updating the assignment of the one or more electronic keys (60) of the paging receiver (20) to the one or more receiving addresses (50) via the first data connection.

9. Paging system with a paging center and a plurality of paging receivers, wherein the paging receivers are provided for storing one or more electronic keys of a first encryption mechanism of the paging system and one or more receiving addresses of the paging system, wherein the one or more electronic keys of the first encryption mechanism are organized by an operational organization as a private encryption system; the paging receivers are configured to receive messages encrypted using the first encryption mechanism from the paging center via a first data connection; wherein the paging system is configured to transmit one of the encrypted messages from the paging center via a second data connection to an application program of an electronic device, in particular a mobile radio device; the first electronic device is configured to establish a third data connection with one of the paging receivers and to forward the encrypted message received from the paging center to the paging receiver; and the paging receiver is configured to decrypt the encrypted message received from the electronic device and to send the decrypted message to the electronic device via the third data connection.

10. Paging system according to claim 9, characterized in that the paging receiver is configured to send an identification token and the one or more receiving addresses to the electronic device; and the electronic device is configured to send the identification token and the one or more receiving addresses to the paging center.

11. Paging receiver configured for a paging system according to claim 9 or 10, wherein the paging receiver is provided for storing one or more receiving addresses and for storing one or more electronic keys of a first encryption mechanism of the paging system, wherein the one or more electronic keys of the first encryption mechanism are organized by an operational organization as a private encryption system; the paging receiver is provided to receive messages encrypted using the first encryption mechanism from the paging center via a first data connection; the paging receiver is configured to establish a third data connection with an electronic device, in particular a smartphone, and to receive encrypted messages sent from the paging center to the electronic device via the third data connection; and the paging receiver is configured to decrypt the encrypted message received from the electronic device and to send the decrypted message to the electronic device via the third data connection.

12. Paging center configured for a paging system according to claim 9 or 10, wherein the paging center is configured to encrypt messages by means of one or more electronic keys of a first encryption mechanism and send them to paging receivers via a first data connection, wherein the one or more electronic keys of the first encryption mechanism are organized by an operational organization as a private encryption system; and transmitting one of the encrypted messages via a second data connection to an application program of an electronic device, in particular a mobile radio device.

13. Application program for an electronic device, in particular for a mobile radio device, wherein the electronic device is part of a paging system according to claim 9 or 10 and is configured to receive messages from the paging system, wherein the application program is configured to receive messages encrypted by means of a first encryption mechanism from the paging center via a second data connection, wherein the one or more electronic keys of the first encryption mechanism are organized by an operational organization as a private encryption system; establishing a third data connection with a paging receiver of the paging system and forwarding the encrypted messages received from the paging center to the paging receiver; and receiving the decrypted messages from the paging receiver via the third data connection and displaying them.