RFC2833 Message Encryption in Media Gateway Control Protocol
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional RFC2833 protocol messages in H.248/MGCP are not encrypted, making them insecure and susceptible to interception over bearer networks, particularly in applications requiring secure transmission for commercial and telecommunication services.
Innovation Solution
Implementing encryption and decryption methods for RFC2833 messages using a key configured on media gateways, which can be sent from a soft switch device, ensuring secure transmission by encrypting messages before transmission and decrypting them upon receipt, with the option to use different keys for each call and to encrypt the key itself for added security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If RFC2833 messages are transmitted in clear text without encryption, then the transmission process is simple and fast, but the security of the transmitted content is compromised and messages are susceptible to interception
Solution Approach 1:
The patent applies preliminary action by configuring encryption keys in advance on both sending and receiving media gateways before actual message transmission. The key configuration can be done through pre-setup or automated key management systems, so that when RFC2833 messages need to be encrypted, the cryptographic operations can proceed immediately without delaying the communication flow.
Solution Approach 2:
The patent introduces an intermediary approach by utilizing the media gateway itself as the encryption/decryption device. The sending media gateway encrypts outgoing RFC2833 messages using locally configured keys, and the receiving media gateway decrypts incoming messages using its own configured keys. This intermediary encryption layer is transparent to the core communication protocol while providing necessary security.
2Reliability
If encryption is applied to RFC2833 messages, then the security of transmitted content is enhanced, but the transmission time and processing overhead increase
Solution Approach 1:
By performing key configuration in advance, the patent eliminates the need for time-consuming key exchange or generation during active message transmission. The cryptographic keys are already in place on both ends, allowing immediate encryption/decryption operations to proceed with minimal latency.
Solution Approach 2:
The media gateways perform encryption and decryption operations independently using their own locally stored keys, without requiring external cryptographic processing assistance. This self-service approach reduces processing overhead and eliminates dependencies on external cryptographic services that could introduce delays.
Data Source
AI summary
A method for transmitting content in a call established via media gateway control protocol includes: encrypting an RFC, Request for Comment, 2833 message with a first key; and sending out the encrypted RFC2833 message. The key used for encryption and decryption may be configured in advance on a calling and a called media gateways, or be sent from a soft switch device once and for all, or be sent from the soft switch device every time when a call is initiated. The key sent from the soft switch device may be in clear text or be encrypted. The technical scheme of the present invention greatly improves the security of the content in the RFC2833 protocol transmission.