Mobile Voice Encryption via SMS Registration

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Mobile voice communications are vulnerable to security breaches, unauthorized access, and inadequate encryption, particularly when using SSL/TLS, leading to potential revenue loss and regulatory non-compliance due to weak encryption and reliance on pre-shared keys.

Innovation Solution

A method is established for secure mobile voice communications involving registration between a mobile device and a server, using SMS or MMS messages for verification, encryption key establishment, and dynamic codec selection based on network conditions to enhance security and throughput.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If SSL/TLS encryption is used for mobile voice communications, then security is improved, but vulnerabilities remain due to reliance on pre-shared keys and weak encryption

Engineering Contradiction:

ImprovesecurityVSAvoidvulnerabilities to MITM attacks and key compromise

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the pre-shared key dependency from the SSL/TLS protocol and replaces it with certificate-based authentication. The mobile device and server each hold their own private keys and verify the other's certificate, eliminating the need for a pre-shared key and making the system resistant to MITM attacks.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent changes the encryption parameter from weak SSL/TLS encryption to strong end-to-end encryption using advanced cryptographic algorithms. This parameter change ensures that even if SSL/TLS is compromised, the actual voice communication remains secure through separate encryption layers.

Inventive Principle:

Principle #35Parameter changes

2Reliability

If end-to-end encryption is implemented for mobile voice communications, then security is improved, but device complexity increases

Engineering Contradiction:

Improveend-to-end securityVSAvoidencryption key management

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements self-service authentication where each mobile device automatically generates its own private key and certificate. The device independently manages its own cryptographic materials without requiring manual configuration or external key distribution, simplifying the overall system despite the complexity of end-to-end encryption.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent uses a universal certificate-based authentication mechanism that works across different mobile devices, operating systems, and network conditions. This multi-functional approach handles authentication, encryption key establishment, and certificate verification in a unified framework, reducing complexity compared to multiple separate systems.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Reliability

If registration and authentication procedures are added to mobile voice communications, then security is improved, but ease of operation deteriorates

Engineering Contradiction:

Improveauthentication securityVSAvoidregistration process

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent performs preliminary authentication and certificate exchange during the initial registration phase. Once registered, the security credentials are cached and reused for subsequent communications, so users experience enhanced security without repeated authentication hurdles during normal voice calls.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent replaces manual authentication mechanisms with automated certificate-based verification. The cryptographic protocols automatically verify identities and establish secure channels without requiring user intervention beyond initial registration, maintaining ease of operation while improving security.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

4Productivity

If dynamic codec selection is implemented based on network conditions, then throughput is improved, but device complexity increases

Engineering Contradiction:

Improvenetwork throughputVSAvoidcodec management

Core Design Contradiction:

ProductivityVSDevice complexity

Solution Approach 1:

The patent implements dynamic codec selection that automatically adjusts encryption and compression parameters based on real-time network conditions. The system monitors bandwidth, latency, and packet loss, then dynamically switches between different codec configurations to optimize throughput while maintaining security, managing complexity through adaptive algorithms.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS8862129B2Systems and methods for encrypted mobile voice communications

Publication Date: 2014.10.14 CELLTRUST CORP

AI summary

A method of establishing a registration between a mobile device and a server includes receiving at the server an SMS or MMS from a mobile device. The server receives the phone number of the mobile device, verifies the phone number of the mobile device against a whitelist to authorize a registration between the mobile device and the server, and verifies a secure identification code that is input at the mobile device. The secure identification code is provided to a user of the mobile phone before the mobile device is registered with the server. The secure identification code can be provided to the user via an administrator of the server. An encryption key established between the mobile device and the server can be used to provide or enhance encryption of a voice communication, such as a VoIP communication, made using the mobile device.