Methods and apparatus for increasing security and control of voice communication sessions using digital certificates
    1.
    发明公开
    Methods and apparatus for increasing security and control of voice communication sessions using digital certificates 审中-公开
    用于通过数字证书来增强语音的通信会话的安全性和控制的方法和装置

    公开(公告)号:EP1806934A1

    公开(公告)日:2007-07-11

    申请号:EP06250028.5

    申请日:2006-01-05

    IPC分类号: H04Q7/28

    摘要: Methods and apparatus for increasing security and control of voice communication sessions, such as Push-To-Talk (PTT) over Cellular (PoC) sessions, using digital certificates are disclosed. A certificate control mechanism of a private communication network is used to help facilitate secure PoC sessions for mobile communication devices associated with the private network. The certificate control mechanism of includes a certificate controller which is adapted to communicate with a Certificate Authority (CA) component which produces and stores a plurality of digital certificates for the mobile devices. The certificate controller is further adapted to communicate with one of a PoC server and a PoC group list server through a public communication network (e.g. the Internet) so as to provide the plurality of digital certificates for secure PoC communication sessions for chat groups which include the plurality of mobile communication devices. In one illustrative technique, a request message for participation in a PoC session is received by an authentication component of a PoC server from a mobile device. The request message is signed with use of a private key of a digital certificate which may be associated with the mobile device, an end user of the mobile device, or a chat group which includes the mobile device. An authentication procedure is performed on the request message by the authentication component. The authentication procedure includes retrieving a public key associated with the digital certificate and attempting to validate the signature with use of the public key. Processing for the PoC communication session is permitted for the mobile communication device if the authentication is successful, and otherwise denied. Several other techniques and variations are described.

    摘要翻译: 方法和装置用于提高安全性和语音通信会话,:例如即按即说(PTT)基于蜂窝键通(PoC)会话的控制,使用数字证书是游离缺失盘。 专用通信网络的证书控制机制来帮助保护对促进与专用网络相关联的移动通信设备的PoC会话。 一个证书的证书控制机构包括控制器的所有这是angepasst与产生并存储在移动设备的数字证书的多个A证书颁发机构(CA)成分进行通信。 该证书控制器与PoC服务器中的一个,并通过公共通信网络的PoC组列表服务器(例如互联网),以提供数字证书的多个用于聊天组安全PoC通信会话其中包括沟通进一步angepasst 移动通信设备的多个。 在一个说明性的技术中,一种用于在PoC会话的参与的请求消息是通过从移动设备接收的PoC服务器的认证组件。 所述请求消息与使用可与移动设备相关联的数字证书的私钥签署,以结束该移动设备,或其中包含所述移动设备的聊天组的用户。 验证过程在执行由所述认证组件的请求消息。 认证过程包括检索与数字证书相关的公钥,并试图利用公钥来验证签名。 处理针对PoC通信会话被允许用于移动通信设备,如果认证成功,否则拒绝。 几个其它技术和变型的描述。