Multi-Protocol Video Conference Gateway Encryption

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional multi-protocol videoconferencing systems are limited in providing secure and efficient data transmission across different encryption standards, leading to unacceptable time delays and complexity in key management, scheduling, and billing operations when establishing secure videoconferences between sites using various transport protocols.

Innovation Solution

An integrated secure multi-protocol gateway device that translates between transport and encryption protocols in real-time, using commercial encryption standards like DES, AES, and automatic key exchange protocols, with a secure gateway engine for managing encryption, key exchange, and protocol synchronization, allowing secure videoconferencing across multiple digital data transport protocols.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If conventional multi-protocol videoconferencing systems are used to establish secure videoconferences across different transport protocols, then interoperability between various protocols is achieved, but unacceptable time delays and complexity in key management occur

Engineering Contradiction:
Improveinteroperability between transport protocolsVSAvoidtime delays
Core Design Contradiction:
Adaptability or versatilityVSLoss of time

Solution Approach 1:

The patent combines multiple encryption protocols (DES, AES, 3DES) and key exchange mechanisms within a single gateway device. The gateway integrates protocol translation and encryption functions into one unified system, eliminating the need for separate encryption devices for each protocol and reducing time delays associated with multiple independent systems.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The gateway device is designed with multi-functional capabilities to handle multiple transport protocols (H.320, H.323, SIP) and multiple encryption standards simultaneously. This universal design allows the single device to perform protocol conversion, encryption, decryption, and key management across different protocols, reducing system complexity and operational delays.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If multiple encryption protocols are used to secure videoconferencing across different transport protocols, then security is improved, but complexity in key management, scheduling, and billing operations increases

Engineering Contradiction:
ImprovesecurityVSAvoidcomplexity in key management
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The gateway device serves as an intermediary between different transport protocols and encryption systems. It manages key exchange and encryption operations centrally, acting as a mediator that simplifies key management by handling all cryptographic operations in one location rather than requiring distributed key management across multiple independent systems.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements automatic key exchange protocols that enable encryption keys to be exchanged and managed automatically without manual intervention. The gateway device handles key generation, distribution, and rotation autonomously, reducing the complexity and operational burden of manual key management, scheduling, and billing operations.

Inventive Principle:
Principle #25Self-service

3Reliability

If separate encryption devices are used for each transport protocol, then protocol-specific encryption requirements are met, but equipment requirements and configuration complexity increase

Engineering Contradiction:
Improveprotocol-specific encryptionVSAvoidequipment requirements
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges the functionality of multiple protocol-specific encryption devices into a single gateway device. Instead of requiring separate encryption hardware for H.320, H.323, and SIP protocols, the gateway integrates all encryption capabilities in one device, reducing equipment requirements while maintaining protocol-specific encryption requirements through software-based protocol handling.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The gateway device is designed with universal capabilities to handle multiple transport protocols and encryption standards through a single multi-functional platform. This eliminates the need for separate dedicated encryption devices for each protocol, simplifying equipment requirements while maintaining the ability to meet protocol-specific encryption requirements through flexible protocol handling.

Inventive Principle:
Principle #6Universality (Multi-functionality)

4Reliability

If manual key exchange and encryption management are used, then security control is improved, but operational complexity and time delays increase

Engineering Contradiction:
Improvesecurity controlVSAvoidoperational complexity
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system implements automatic key exchange protocols that enable encryption keys to be exchanged and managed automatically without manual intervention. The gateway device handles key generation, distribution, and rotation autonomously, reducing the complexity and operational burden of manual key management while maintaining security control through automated cryptographic operations.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system incorporates automated feedback mechanisms that monitor encryption operations, key exchange status, and security parameters. This feedback enables the gateway to automatically adjust encryption settings and key management operations, maintaining security control while reducing operational complexity through automated monitoring and adjustment.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS7474326B2Inter-network and inter-protocol video conference privacy method, apparatus, and computer program product
Publication Date: 2009.01.06 CISCO TECHNOLOGY INC
  • US7474326B2 patent drawing
  • US7474326B2 patent drawing
  • US7474326B2 patent drawing

AI summary

A system, apparatus, method, and computer program product for establishing secure videoconferences between multiple nodes communicating via two or more transport protocols in which at least one encryption protocol is used.