Methods and systems for establishing an encrypted-audio session

METHODS AND SYSTEMS FOR

ESTABLISHING AN ENCRYPTED-AUD IO SESSION

CROSS REFERENCE TO RELATED APPLICATIONS

[0001] This application claims priority to U.S. Application No. 14/726,102, filed May 29, 2015, entitled “METHODS AND SYSTEMS FOR ESTABLISHING AN ENCRYPTEDAUDIO SESSION.”

BACKGROUND

[0002] People communicate wirelessly and on the go. Among the devices that make this possible arc those sometimes referred to as personal mobile devices. Examples of personal mobile devices include cell phones, smartphones, walkie-talkies, and portable hotspots, among others. A personal mobile device could be handheld (as may be the case for a walkie-talkie), body-mounted, or attached to a vehicle (such as the roof of a car), as examples.

(0003] Given the relative ease with which radio signals can be intercepted, communication with (or between) personal mobile devices is often encrypted to prevent interception of the communication by third parties. Encryption is the process of converting audible voice or other data into unintelligible voice, while decryption is the process of converting the unintelligible voice back to the original audible voice. The respective algorithms used for encryption and decryption are often referred to collectively as a cipher. Examples of common ciphers include Advanced Encryption Standard (AES), Blowfish, Triple Data Encryption Algorithm (3DES), and RC4, among numerous others.

(0004] A given cipher typically uses one or more cryptographic keys for encryption and decryption. Common examples of cryptographic keys include passwords, digital certificates, and random and/or pseudo-random data. Any party (including a third party) with access to a cryptographic key used to encrypt a given plaintext may be able to decrypt the unintelligible voice; therefore, for encryption to be effective, the cryptographic key should be known only to the sender and receiver. Encryption and decryption may take place in a secure element that is external to the personal mobile device.

-1CA 02987151 2017-11-24

WO 2016/193137 PCT/EP2016/061975

OVERVIEW

[0005] Disclosed herein are systems and methods for establishing an encrypted-audio session. At least one embodiment takes the form of a method carried out by a personal mobile device. The personal mobile device receives a session-request message requesting establishment of an cncryptcd-audio session with a call-initiating device, responsively presents one or more callresponse inquiries via a user interface, and subsequently receives an accessory-unready indication via the user interface. The one or more call-response inquiries include an accessorystatus inquiry, and the accessory-unready indication is associated with the presented accessorystatus inquiry. In response to receiving the accessory-unready indication, the personal mobile device sends, to the call-initiating device, a request-acknowledgment message that is associated with the session-request message. Subsequent to sending the request-acknowledgment message but before establishing the cncryptcd-audio session, the personal mobile device makes an accessory-ready determination. In response to making the accessory-ready determination, the personal mobile device establishes the encrypted-audio session.

[0006] At least one embodiment the form of a personal mobile device that includes a communication interface, a user interface, a processor, and data storage containing instructions executable by the processor for causing the personal mobile device to carry out at least the functions described in the preceding paragraph. Moreover, any of the variations and permutations described in the ensuing paragraphs and anywhere else in this disclosure can be implemented with respect to any embodiments, including with respect to any method embodiments and with respect to any system embodiments.

[0007] In at least one embodiment, making the accessory-ready determination includes receiving an accessory-ready indication via the user interface.

[0008] In at least one embodiment, making the accessory-ready determination includes determining that a communication link with an accessory is established. In at least one such embodiment, making the accessory-ready determination further includes receiving an accessoryready indication via the established communication link.

[0009] In at least one embodiment, making the accessory-ready determination includes receiving an accessory-ready indication via an accessory user interface.

[0010] In at least one such embodiment, the accessory user interface includes a touch display, and receiving the accessory-ready indication via the accessory user interface includes receiving the accessory-ready indication via the touch display of the accessory user interface.

-2CA 02987151 2017-11-24

WO 2016/193137 PCT/EP2016/061975

[0011] In at least one other such embodiment, the accessory user interface includes a push button, and receiving the accessory-ready indication via the accessory user interface includes receiving the accessory-ready indication via the push button of the accessory user interface.

[0012] In at least one embodiment, the one or more presented call-response inquiries further includes a call-accept inquiry. The personal mobile device receives a call-accept indication via the user interface. The call-accept indication is associated with the presented call-accept inquiry. In response to receiving the accept indication, the personal mobile device establishes the encrypted-audio session.

[0013] In at least one embodiment, the one or more presented call-response inquiries further includes a call-reject inquiry. The personal mobile device receives a call-reject indication via the user interface. The call-reject indication is associated with the presented call-reject inquiry. In response to receiving the call-reject indication, the personal mobile device sends a requestrejection message to the call-initiating device. The rcqucst-rcjcction message is associated with the session request.

[0014] In at least one such embodiment, the request-rejection message includes a requestrejection-reason indication. In at least one such embodiment, the request-rejection-reason indication includes an indication that a called party is at an unsecured location. In at least one other such embodiment, the request-reject ion-reason indication includes an indication that a called-party’s accessory is unavailable for the requested encrypted-audio session.

[0015] The above overview is provided by way of example and not limitation, as those having ordinary skill in the relevant art may well implement the disclosed systems and methods using one or more equivalent components, structures, devices, and the like, and may combine and/or distribute certain functions in equivalent though different ways, without departing from the scope and spirit of this disclosure.

BRIEF DESCRIPTION OF THE DRAWINGS

[0016] The accompanying figures, where like reference numerals refer to identical or functionally similar elements throughout the separate views, together with the detailed description below, are incorporated in and form part of the specification, and serve to further illustrate embodiments of concepts that include the claimed invention, and explain various principles and advantages of those embodiments.

[0017] FIG. 1 depicts a communication system, in accordance with at least one embodiment.

-3CA 02987151 2017-11-24

WO 2016/193137 PCT/EP2016/061975

[0018] FIG. 2 depicts a block diagram of a personal mobile device, in accordance with at least one embodiment.

[0019] FIG. 3 depicts a flowchart of a method carried out by a personal mobile device, in accordance with at least one embodiment.

[0020] FIG. 4 depicts a user-interface presentation of call-response inquiries.

[0021] FIG. 5 depicts an accessory, in accordance with at least one embodiment.

DETAILED DESCRIPTION

[0022] The present systems and methods will now be described with reference to the figures. It should be understood, however, that numerous variations from the depicted arrangements and functions arc possible while remaining within the scope and spirit of the claims. For instance, one or more elements may be added, removed, combined, distributed, substituted, re-positioned, rc-ordcrcd, and/or otherwise changed. Further, where this description refers to one or more functions being implemented on and/or by one or more devices, one or more machines, and/or one or more networks, it should be understood that one or more of such entities could carry out one or more of such functions by themselves or in cooperation, and may do so by application of any suitable combination of hardware, firmware, and/or software. For instance, one or more processors may execute one or more sets of programming instructions as at least part of carrying out of one or more of the functions described herein.

[0023] FIG. 1 depicts a communication system, in accordance with at least one embodiment. As shown, a communication system 100 includes a called-party accessory 102, a personal mobile device 104, a data network 106, and a call-initiating device 108. Those of skill in the art will appreciate that communication system 100 could include different and/or additional entities.

[0024] Called-party accessory 102 could take the form of (or include) a headset, a video camera, a digital camera, a keyboard, a display screen, and/or any other device capable of obtaining user input and/or providing an output, as is known to one of skill in the art.

[0025] Personal mobile device 104 and/or call-initiating device 108 may be any suitable respective devices (or combination of respective devices) equipped, programmed, or configured to communicate over a data network (such as data network 106). Such devices may include, but arc not limited to, mobile phoncs/smart phones, laptop computers, desktop computers, portable media players, smartwatches, and/or tablet computers, among other possible devices as known to one of skill in the art.

-4CA 02987151 2017-11-24

WO 2016/193137 PCT/EP2016/061975

10026] In some embodiments, communication link 110 includes one or more wiredcommunication links (e.g., one or more Ethernet connections, one or more Universal Serial Bus (USB) connections, and/or the like) and/or one or more wireless-communication links (e.g., one or more wireless local area network (WLAN) (e.g., Wi-Fi) links, and/or one or more Bluetooth links. It is also possible that communication link 110 itself include one or more half- or fullduplex wireless communication links. Moreover, communication link 110 may include one or more communication networks of any type deemed suitable by those of skill in the relevant art for a given context. And certainly numerous other configurations are possible as well.

10027] In some embodiments, communication link 112 includes on orc more wirelesscommunications links (Wi-Fi links), one or more wireless wide area network (WWAN) (e.g., Long Term Evolution (LTE)) links), and/or the like. It is also possible that communication link 112 itself includes one or more half- or full-duplex wireless communication links. Moreover, communication link 112 may include one or more communication networks of any type deemed suitable by those of skill in the relevant art for a given context. And certainly numerous other configurations are possible as well.

(0028] Call-initiating device 108 may be any suitable device (or combination of devices) configured to perform the call-initiating-device functions described herein. In the embodiment illustrated in FIG. 1, call-initiating device 108 takes the form of a call-initiating personal mobile device 118 and a call-initiating accessory 116 that are communicatively connected via a communication link 120. Accessory 116, device 118, and communication link 120 may be similar in function and/or structure to accessory 102, device 104, and communication link 110 (respectively), as examples.

(0029] In the communications system 100, the call-initiating device 108 sets up an encrypted audio session with the personal mobile device 104 via the data network 106. In at least one embodiment, after the encrypted audio session has been accepted, voice information is encrypted within called party accessory 102, and the encrypted data is sent to the personal mobile device 104 via communications link 112. The personal mobile device 104 sends this encrypted data via to the data network 106 via communications link 114. The data network 106 then sends the encrypted data to the call-initiating device 108 via communications link 116.

(0030] FIG. 2 depicts a block diagram of a personal mobile device, in accordance with at least one embodiment. As shown, personal mobile device 104 includes a processor 202, data storage 204, a communication interface 206, and user interface 208, each of which arc interconnected via a system bus 210. Those having skill in the relevant art will appreciate that personal mobile

-5CA 02987151 2017-11-24

WO 2016/193137 PCT/EP2016/061975 device 104 could have additional and/or different components, and perhaps a different arrangement of components, among many other possible variations that could be listed here, and that call-initiating device 108 could take a form similar to that of personal mobile device 104.

[0031] Processor 202 may include one or more processors of any type deemed suitable by those of skill in the relevant art, some examples including a microprocessor and a dedicated digital signal processor (DSP).

[0032] Data storage 204 may take the form of any non-transitory computer-readable medium or combination of such media, some examples including flash memory, read-only memory (ROM), and random-access memory (RAM) to name but a few, as any one or more types of non-transitory data-storage technology deemed suitable by those of skill in the relevant art could be used. As depicted in FIG. 2, data storage 204 contains program instructions 212 executable by processor 202 for carrying out various functions, though data storage 204 may contain different and/or additional data (such as one or more cryptographic keys).

[0033] In an embodiment in which personal mobile device 104 is configured to carry out one or more processes and/or functions (such as the processes and functions described with reference to FIG. 3), program instructions 212 are executable by processor 202 for carrying out those functions. In instances where other entities described herein have a structure similar to that of the example personal mobile device 104 that is described in connection with at least FIG. 2, the respective program instructions 212 stored by the respective data storages 204 of those respective devices arc executable by their respective processors 202 to carry out functions performed by those devices.

[0034] Communication interface 206 may include (i) one or more wireless-communication interfaces for communicating according to one or more of the wireless-communication types and/or protocols mentioned above, and/or one or more other types and/or protocols deemed suitable by those having skill in the relevant art for a given implementation or in a given context and/or (ii) one or more wired-communication interfaces for communicating according to one or more types and/or protocols such as Ethernet, USB, and the like, and/or one or more other types and/or protocols deemed suitable by those having skill in the relevant art for a given implementation or in a given context. As such, communication interface 206 may include any necessary hardware (e.g., chipsets, antennas, Ethernet cards, etc.), any necessary firmware, and any necessary software for conducting one or more forms of communication with one or more other entities.

-6CA 02987151 2017-11-24

WO 2016/193137 PCT/EP2016/061975 (0035J User interface 208 could include a touchscreen such as a capacitive touch display, a pressure-sensitive touch display, or any other touch-sensitive display. In some embodiments, the user interface includes a keyboard, which in turn could include one or more physical keys, touch keys, alphabet keys, and/or specific command keys. A user-interface microphone could take the form of (or include) a condenser microphone, a dynamic microphone, a ribbon microphone, a carbon microphone, a piezoelectric microphone, a fiber optic microphone, a laser microphone, a liquid microphone, a MEMS microphone, and/or any other type of microphone. As another possibility, user interface 208 may include one or more buttons or switches. Those of skill in the art will appreciate that user interface 208 could include any combination of these and/or other user-interface elements.

[0036] FIG. 3 depicts a flowchart of a method carried out by a personal mobile device, in accordance with at least one embodiment. As shown, method 300 begins at step 302 with personal mobile device 104 receiving a session-request message to establish an encrypted-audio session with call-initiating device 108.

[0037] Personal mobile devices 104 may receive the session-request message from callinitiating device 108, from a public-branch exchange (PBX), from an Internet protocol PBX (IPPBX), from an entity conducting third-party call control (e.g., on behalf of call-initiating device 108), and/or any other suitable entity. The session-request message could be received via data network 106.

[0038] The session-request message could take the form of a call-origination message, a Session Initiation Protocol (SIP) message, a Real-time Transport Protocol (RTP) message, a Secure RTP (SRTP) message, a ZRTP message, an H.323 message, an Inter-Asterisk exchange (IAX) message, and/or an IAX2 message, among many other possibilities that will be apparent to those of skill in the art.

[0039] The session-request message could include metadata related to the message and/or the requested media session. The metadata could take the form of (or include) an identifier associated with the session-request message, an identifier associated with the requested message, a source identifier and/or destination identifier (such as a telephone number, an Internet protocol (IP) address, and/or a uniform resource identifier (URI)), and/or any combination of these, among other possibilities.

[0040] At step 304, and in response to receiving the session-request message at step 302, personal mobile device 104 presents one or more call-response inquiries via user interface 208. The one or more presented call-response inquiries include an accessory-status inquiry.

-7CA 02987151 2017-11-24

WO 2016/193137 PCT/EP2016/061975

[0041] FIG. 4 depicts a uscr-intcrfacc presentation of call-response inquiries, in accordance with at least one embodiment. As shown, user-interface presentation 400 via a touchscreen 406 of user interface 208 includes presentation of a call notification 402 and a set 404 of callresponse inquiries. Set 404 of call-response inquiries includes an accessory-unready inquiry 408, a call-accept inquiry 410 and a call-reject inquiry 412. It should be noted that set 404 of callresponse inquiries could include additional and/or different inquiries.

[0042] Though FIG. 4 depicts set 404 of call-response inquiries as being presented via touchscreen 406 of user interface 208, those of skill in the art will appreciate that the callresponse inquiries could be presented in other ways. For example, user interface 208 could include a loudspeaker, and presenting the call-response inquiries could include providing spoken call-response inquiries (e.g., using tcxt-to-spccch functionality) via the loudspeaker.

[0043] At step 306, personal mobile device 104 receives an accessory-unready indication via user interface 208. The received accessory-unready indication is associated with the accessorystatus inquiry. To illustrate, the accessory-unready indication may be received while personal mobile device 104 is displaying one or more call-response inquires via a display of user interface 208. As another possibility, the accessory-unready indication may be received subsequent to personal mobile device 104 audibly presenting a respective call-response inquiry via a microphone of user interface 208. The accessory-unready indication may be received via a touch display, a microphone, and/or any other element of user interface 208.

[0044] At step 308, and in response to receiving the accessory-unready indication, personal mobile device 104 sends a request-acknowledgment message to call-initiating device 108. The request-acknowledgment message could take the form of a SIP message, among other examples that arc described herein or that will be known to those of skill in the art.

[0045] The request-acknowledgment message is associated with the session-request message received at step 302. To illustrate, the request-acknowledgment message could include an identification of the received session-request message and/or an identification of the requested cncryptcd-audio session, as examples. Such association may be manifested in other ways as well.

[0046] In response to receiving the accessory-unready indication, personal mobile device 104 may also establish one or more communication links with call-initiating device 108-c.g., for use with any later-established cncryptcd-audio session. Establishing the one or more communication links could include, for example, establishing a media session (such as an RTP session, an SRTP session, a ZRTP session, etc.) with call-initiating device 108, but refraining from exchanging

-8CA 02987151 2017-11-24

WO 2016/193137 PCT/EP2016/061975 media with call-initiating device 108 via the media session until, for example, making an accessory-ready determination.

[0047] At step 310, subsequent to sending the request-acknowledgment message at step 308 but before establishing the encrypted-audio session, personal mobile device 104 makes an accessory-ready determination.

[0048] Making the accessory-ready determination could include receiving an accessory-ready indication via user interface 208. For example, subsequent to receiving the accessory-unready indication at step 306, personal mobile device 104 may present a follow-up accessory-status inquiry via user interface 208, and making the accessory-ready determination could include receiving, via user interface 208, an accessory-ready indication that is associated with the follow-up accessory-status inquiry.

[0049] Additionally or alternatively, making the accessory-ready determination could include determining that a communication link is established with an accessory. This communication link could include a Bluetooth link or other wireless link between the accessory and personal mobile device 104, for example. In another embodiment, the communication link is a wired connection between the accessory and personal mobile device 104—e.g., via a headphone jack or a USB port. Those of skill in the art will appreciate that other methods are possible for determining that a communication link is established with an accessory.

[0050] Making the accessory-ready determination could farther include receiving an accessory-ready indication via the established communication link. In an embodiment, personal mobile devices 104 receives, from the accessory via an established communication link, a Bluetooth message indicating that a connection between the two devices has been established successfully. In another embodiment, personal mobile device 104 receives a message from the accessory via a wired connection, the message indicating that a connection between the respective devices has been established. Receiving an accessory-ready indication via an established communication link could take other forms.

[0051] Making the accessory-ready determination could include receiving an accessory-ready indication from an accessory. Receiving the accessory-ready indication from the accessory could include receiving the accessory-ready indication via an accessory user interface.

[0052] FIG. 5 depicts an accessory, in accordance with at least one embodiment. As shown, an accessory 500 includes a touch display 505, a push button 510, and a microphone 515, any of which may function as described with respect to the user-interface elements of personal mobile device 104, for example. Receiving the accessory-read indication via the accessory user

-9CA 02987151 2017-11-24

WO 2016/193137 PCT/EP2016/061975 interface could include receiving an indication that an accessory-ready confirmation was obtained by the accessory via touch display 505. The obtained accessory-ready confirmation could correspond to a user tapping touch display 505 and/or swiping a finger along the touch display. User could also press push button 510 to provide an accessory-ready indication. In an embodiment, receiving the accessory-read indication via the accessory user interface includes receiving an indication that an accessory-ready confirmation was obtained by the accessory push button 510 (the confirmation correspond to a push of the button, for example) and/or via microphone 515 (the confirmation perhaps corresponding to a word or phrase). In an embodiment, the acccssory-rcady indication is received via a communication link 520 between personal mobile device 104 and accessory 500. Receiving an accessory-ready indication via an accessory user interface could take other forms that will be apparent to those of skill in the art.

[0053] At step 312, and in response to making the accessory-ready determination, personal mobile device 104 establishes the encrypted-audio session.

[0054] Establishing the cncryptcd-audio session may include, for example, establishing a media session with call-initiating device 108 (e.g., as described with respect to step 308) and exchanging encrypted-audio media with call-initiating device 108 via the media session. If a media session with call-initiating device 108 is already established when personal mobile device 104 makes the accessory-ready determination, establishing the encrypted-audio session may include commencing exchange of encrypted-audio media via the media session.

[0055] In some embodiments, personal mobile device may receive a call-response indication in addition to the acccssory-unrcady indication received at step 306. An indication that call-accept inquiry 402 was selected may cause personal mobile device 104 to establish the secure call immediately. In such an embodiment, making the accessory-ready determination at step 310 could include receiving an indication that call-accept inquiry 402 was selected. As another possibility, receiving an indication that call-reject inquiry 406 was selected may cause personal mobile device 104 to send a request-rejection message to call-initiating device 108. In at least one embodiment, the request-rejection message includes a rcqucst-rcjcction-rcason indication, which could take the form of (or include) an indication that the called party is at an unsecured location, is at a crowded place, and/or is in a meeting, among numerous other possibilities. For example, if the called party is in a crowded place, then secured communications may not be possible, as people within the crowded place may be able to overhear any conversation between the parties of a call. If the called party is in a meeting, other meeting attendees may be able to

-10CA 02987151 2017-11-24

WO 2016/193137

PCT/EP2016/061975 overhear the conversation. Or the callcd-party may not want to have the callcd-party accessory out in plain sight, as someone may attempt to steal it.

[0056] Although features and elements are described above in particular combinations, those having ordinary skill in the art will appreciate that each feature or element can be used alone or in any combination with the other features and elements without departing from the scope and spirit of the present disclosure.