Patent ID: 8526616
Filing Date: 2013-09-03
Classification: H04L

Abstract:
1. A method for transmitting real-time end-to-end encrypted voice and data communications, between at least a first digital device and a second device, comprising: registering at least the first digital device and the second device at a portal on a network; providing the first digital device and the second device with at least first and second keys; receiving at the portal a request from the first digital device to communicate with the second device; receiving authorization from the second device to set up a secure session with the first digital device; receiving real-time voice or data messages which have been encrypted from the first digital device and the second device; real-time decrypting at the portal, the encrypted messages with the keys provided to the first digital device and the second device; re-encrypting at the portal, the received messages which were decrypted real-time from the first digital device and the second device with the provided keys; sending the re-encrypted messages in real-time to the first digital device and the second device; wherein the first digital device and the second device are capable of securely communicating in real-time with each other by encrypting and decrypting the messages sent to and received from the portal; The portal re-encrypts encrypted messages which were decrypted by the portal via keys in order to determine a header so that the messages can continue to be forwarded to intended receiver; The Portal dynamically assigns separate keys to each end point—for use of symmetric encryption between the end point and Portal; The Portal re-encrypts and routes to a destination with destination's keys whereas the received message is decrypted using source's key; There are six functions to the portal; The portal: a. Authenticates users b. Authorizes users c. Dynamically exchanges encryption keys once users are authorized and authenticated that is transparent to the users d. The Portal hides an identity of the users header, meaning origin and destination address e. The Portal handles comprise user location, call setup and tear down f. The portal that is a proxy server, serves as a “middle man” into ensuring that users have the correct encryption keys in order to operate a voice and/or data encrypted session; wherein the overall design comprises: 1. The Proxy is already running ready to accept incoming registration requests or call request for clients; 2. A client registers: 3. Other clients register: