Terminal-Based Encrypted Call Key Generation Without KMC

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing encrypted call systems relying on a Key Management Center (KMC) and network reconstruction are costly and limited in expansibility, as they require specialized networks for key allocation and distribution.

Innovation Solution

A method where a first terminal determines a key for an encrypted call with a second terminal using a circuit switched call, eliminating the need for a KMC and network reconstruction by generating and sending synchronization frames as pseudo speech frames to activate speech encoding transparent transmission features, allowing encrypted calls over existing networks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a Key Management Center (KMC) is deployed for key allocation and distribution, then encrypted call functionality is achieved, but deployment costs and network reconstruction requirements increase

Engineering Contradiction:
Improveencrypted call functionalityVSAvoidKMC deployment and network reconstruction
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The terminal performs self-service by autonomously generating encryption keys and determining encryption algorithms without external assistance from a KMC. The terminal uses its own processing capabilities to establish encrypted communication, eliminating the need for centralized key management infrastructure.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The key management function is extracted from the network infrastructure and relocated to the terminal device itself. By removing the KMC component from the system architecture, the solution simplifies network deployment while maintaining encrypted call functionality through terminal-based key generation and management.

Inventive Principle:
Principle #2Taking out (Extraction)

2Reliability

If network reconstruction is performed to support encrypted calls, then speech encoding transparent transmission is enabled, but network complexity and deployment costs increase

Engineering Contradiction:
Improvespeech encoding transparent transmissionVSAvoidnetwork reconstruction
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The terminal achieves self-service by autonomously establishing encrypted communication channels without requiring network-side modifications. The terminal independently manages key generation, encryption algorithm selection, and secure data transmission, eliminating the need for network reconstruction to enable speech encoding transparent transmission.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The terminal is designed with multi-functionality to perform both regular communication and encrypted call functions using the same network infrastructure. By making the terminal capable of handling multiple communication modes, the solution avoids the need for separate reconstructed networks while maintaining speech encoding transparent transmission capabilities.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If a specialized reconstructed network is used for encrypted calls, then key allocation is secured, but expansibility and compatibility are limited

Engineering Contradiction:
Improvekey allocation securityVSAvoidexpansibility compatibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The terminal performs self-service by autonomously generating and managing encryption keys without relying on specialized network infrastructure. This approach maintains key allocation security through terminal-based cryptographic operations while enabling broad expansibility and compatibility across different network environments and devices.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The key allocation function is extracted from the network layer and implemented at the terminal layer. By removing the dependency on specialized network infrastructure for key management, the solution achieves both secure key allocation and enhanced expansibility, allowing encrypted calls to function across diverse network configurations without requiring dedicated reconstructed networks.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS10972438B2Method for encrypted call and terminal
Publication Date: 2021.04.06 HUAWEI TECH CO LTD
  • US10972438B2 patent drawing
  • US10972438B2 patent drawing

AI summary

A method and a corresponding terminal for an encrypted call, to resolve disadvantages of an encrypted call that is implemented relying on a key management center (KMC) and network reconstruction, and reduce costs. The method includes establishing, by a first terminal, a circuit switched call with a second terminal, determining, by the first terminal using the circuit switched call, a key for performing an encrypted call with the second terminal, and performing, by the first terminal, an encrypted call with the second terminal using the key.