Abstract:
A system and method are disclosed in which a secure voicemail repository ( 50 ) is arranged to receive calls for a recipient system ( 20 ) and record said calls in an encrypted form. The encrypted form is decryptable by a key associated with the handset. On demand, the encrypted form is provided to the recipient system ( 20 ).

Description:
FIELD OF THE INVENTION 
       [0001]    The present invention relates to a system for providing a secure and encrypted voicemail repository. 
       BACKGROUND TO THE INVENTION 
       [0002]    Voicemail facilities are often offered by corporate telephone systems and also mobile telephone systems to enable messages to be taken when a user is unavailable or on another line. Most telephone systems can now offer some form of voicemail. In each case, the voicemail service is typically hosted by a computer system linked to the telephone network being served such that it is able to receive calls to handsets set to forward calls to voicemail or that are unavailable and record messages in a repository. 
         [0003]    In order to offer flexibility to users, current voicemail systems allow users to dial in to the voicemail repository to retrieve their messages. Users can assign a pin number to their mailbox to limit access and many systems have a default pin number if this is not assigned. Some systems will not prompt for a pin number if the caller uses the handset associated with the mailbox (as opposed to dialing in from a different number to retrieve their messages). 
         [0004]    Increasingly, data security is becoming an issue to everyone. The telephone is still considered a more secure method of communication than e-mail for example. As such, confidential messages may be left by voicemail that would not necessarily have been communicated via e-mail. 
         [0005]    However, it is slowly becoming apparent that security surrounding telecommunication systems is insufficient. Security in respect of e-mail systems and the like has increased over the last few years to the extent that strong authentication is often required to access an e-mail mailbox. However, current voicemail systems are very poorly defended and pin numbers can often be guessed or cracked by brute force approaches, allowing anybody access to a user&#39;s mailbox. Moreover a voicemail message could be intercepted during retrieval by eavesdropping on the communication. 
       STATEMENT OF INVENTION 
       [0006]    According to an aspect of the present invention there is provided a secure voicemail repository arranged to receive calls for a handset and record said calls in an encrypted form, wherein the encrypted form is decryptable by a key associated with the handset, the system being arranged, on demand, to provide the encrypted form of the message to the handset. 
         [0007]    Preferably, the voicemail system encrypts each voicemail message as it is received using a public key of a public-private key pair associated with the handset associated with the voicemail mailbox. When a voicemail message is requested, the message in its encrypted form is transmitted to the handset which is then able to use the private key associated with the key pair to decrypt the message and output it to the user. 
         [0008]    Optionally, the voicemail system may check for existence of a secure communication system associated with the handset wishing to leave a voicemail message and establish a secure communication channel with the handset should one exist. In this manner, not only would the voicemail be secure but so would the communication channel used to deposit the voicemail within the voicemail system. 
         [0009]    The voicemail system need not be the default voicemail system assigned by the telecommunication provider. The recipient&#39;s handset could be configured to forward voicemail calls to an alternate voicemail provider. 
         [0010]    The repository may be arranged to receive calls in the encrypted form via a secure communication channel and to record said calls in said encrypted form. 
         [0011]    The secure communication channel may be established between a calling system and the recipient system, the recipient system being remote of the repository, the repository being arranged to receive transference of the secure communication channel from the recipient system for receiving said voicemail. 
         [0012]    The repository may be arranged to establish said secure communication channel with said calling system. 
         [0013]    The repository may further comprise at least one encryption key associated with each of a plurality of mailboxes, each of the mailboxes being associated with a recipient system, the repository being arranged to identify the mailbox in dependence on the called recipient system and use said respective at least one key for establishment of said secure communication channel and/or communication with said calling system via said secure communication channel. 
         [0014]    The repository may further comprise at least one encryption key associated with each of a plurality of mailboxes, each of the mailboxes being associated with a recipient system, the repository being arranged to identify the mailbox called in dependence on the called recipient system and to encrypt non-encrypted calls into said encrypted form during or prior to recording using said at least one encryption key. 
         [0015]    The at least one key may comprise a public key of a public-private key pair. 
         [0016]    The system may further comprise a recipient system, wherein the recipient system includes the private key of the public-private key pair and is arranged to obtain said encrypted form of the call from the repository and decrypt the call in dependence on the private key. 
         [0017]    The repository may be arranged, upon completion of recordal of a call, to transmit said encrypted form of said call to the respective recipient system. 
         [0018]    The repository may be arranged to said encrypted form of said call to the respective recipient system during recordal. 
         [0019]    The repository may be remote of any telecommunication provider&#39;s network management system and is arranged to receive calls on behalf of recipient systems that operate on different telecommunication networks. 
         [0020]    The system may further comprise a plurality of repositories each arranged to receive calls for a recipient system and to transmit said recorded calls in said encrypted form between themselves upon demand. 
         [0021]    According to another aspect of the present invention, there is provided a method of operating a secure voicemail repository comprising: 
         [0000]    receiving calls for a recipient system;
 
recording said calls in an encrypted form in the repository; and,
 
providing, on demand, the encrypted form of the call to the recipient system, wherein the encrypted form is decryptable by a key associated with the handset.
 
         [0022]    The receiving step may further comprise receiving calls in a packetised encrypted form and the recording step further comprises recording said calls in said packetised encrypted form. 
         [0023]    The receiving step may comprise receiving calls in the encrypted form via a secure communication channel wherein the secure communication channel is established between a calling system and the recipient system, the recipient system being remote of the repository, the method further comprising receiving transference of the secure communication channel from the recipient system for receiving said voicemail. 
         [0024]    The receiving step may further comprise establishing a secure communication channel with said calling system for receiving the call. 
         [0025]    The method may further comprise: 
         [0000]    storing at least one encryption key associated with each of a plurality of mailboxes, each of the mailboxes being associated with a recipient system;
 
identifying the mailbox in dependence on the called recipient system; and,
 
using said respective at least one key for establishment of said secure communication channel and/or communication with said calling system via said secure communication channel.
 
         [0026]    The method may further comprise: 
         [0000]    storing at least one encryption key associated with each of a plurality of mailboxes, each of the mailboxes being associated with a recipient system;
 
identifying the mailbox called in dependence on the called recipient system; and,
 
encrypting non-encrypted calls into said encrypted form during or prior to recording using said at least one encryption key.
 
         [0027]    The method may further comprise, upon completion of recordal of a call, transmitting said encrypted form of said call to the recipient system. 
         [0028]    The method may further comprise transmitting said encrypted form of said call to the respective recipient system during recordal. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0029]    Examples of the present invention will now be described with reference to the accompanying drawings, in which: 
           [0030]      FIG. 1  is a schematic diagram of a secure voicemail system according to a first aspect of the present invention; 
           [0031]      FIG. 2  is the schematic diagram of  FIG. 1  illustrating a preferred manner of operation; 
           [0032]      FIG. 3  is a schematic diagram of a secure voicemail system according to another aspect of the present invention; and 
           [0033]      FIG. 4  is an illustration of a screen display according to another aspect of the present invention. 
       
    
    
     DETAILED DESCRIPTION 
       [0034]      FIG. 1  is a schematic diagram of a secure voicemail system according to an embodiment of the present invention. 
         [0035]    The secure voicemail system  5  forms part of a mobile telephone network. The mobile telephone network includes a switching station  40  which is connected to a public switched telephone network (PSTN)  30 . A repository  50  is connected via a network  60  to the switching station  40  for storing voicemail messages. 
         [0036]    When a first user wishes to communicate with a second user, the first user uses his or her handset  10  calls the telephone number associated with the handset  20  of the second user. This call is routed via the PSTN  30  to the switching centre  40 . The switching centre  40  determines whether the handset  20  of the second user is in range and available. 
         [0037]    If the handset  20  of the second user is not in range or available (for example if the user was on another call or the handset was set to forward all calls to voicemail), the switching centre  40  initiates a voicemail message capture process that instructs the user at handset  10  to record a voicemail message. 
         [0038]    The recorded voicemail message is stored in the repository  50 . The recorded message is stored in an encrypted form, encryption being performed using a public key from a public-private key pair associated with the second user&#39;s handset  20 . 
         [0039]    When the second user wishes to access his or her voicemail, he or she uses the handset  20  to connect to the voicemail system  5 . Upon receiving the request, the voicemail system  5  accesses the messages in the repository  50  and uploads them to the handset  20 . Software on the handset uses the private key from the public-private key pair to decrypt the message so that it can be output to the user via the device  20 . 
         [0040]      FIG. 2  is the schematic diagram of  FIG. 1  illustrating preferred operation of the secure voicemail system. 
         [0000]    In this embodiment, the first user&#39;s device  15  includes a secure communication system  100 . 
         [0041]    When the switching system  40  connects to the first user&#39;s handset  15 , it initiates a query to determine whether a secure communication system exists. In this case, as such a system  120  does exist, the first handset  15  provides a confirmatory response and a secure communication channel  70  is negotiated between the first user&#39;s device  15  and the second device  20 . In this manner, communications over the PSTN  30  (or other network as embodiments of the present invention need not operate over a PSTN) are encrypted and also secure. 
         [0042]    In use, when a communication session is being established, the communication system  100  checks to see if the second user&#39;s device  20  supports secure communications. In this scenario, the called device  20  includes a compatible secure communication system  110 . During call setup negotiation, the respective secure communications systems  100 ,  110  establish a data connection  70  (preferably using an Internet Protocol (IP) based connection), perform key exchange and subsequently intercept voice communications and digitise, packetise and encrypt them before transmitting them over a data connection. Upon receipt, the second user&#39;s device  20  performs the steps in reverse and outputs the voice to the remote user. 
         [0043]    Optionally, a direct GSM data connection may be used instead of IP. An HSCSD GSM data connection is used to reduce latency. 
         [0044]    The ITU-T G.722.2 codec is preferably used for voice processing. 
         [0045]    The communications systems  100 ,  110  may use redundant encryption systems for session, authentication and/or key exchange. Preferred embodiments use two strong algorithms at the same time in series. The combination preserves security of communication in the event that one algorithm is found to be weak in the future. 
         [0046]    For session encryption: AES and RC4 with 256 bit may be used. For authentication: RSA and DSA with 4096 bit may be used. For key exchange: Diffie-Hellman with 4096 bit may be used. 
         [0047]    Preferably, session keys are deleted from both the initiating and recipient mobile telephones once the communication has been completed. In this way, past communications cannot be decrypted even if the private key material from the mobile phones is extracted. Session keys are only stored on the mobile phone, only in memory and only for the duration of the secure communication. 
         [0048]    Random numbers used for key generation are taken from a secure source if available. As most mobile telephones do not offer such a source, a remote source may be used such as an SMS server  120  for providing a random number seed by SMS  125 . In this way, for each communication session the first seed for a local pseudo random number generator requested through SMS. 
         [0049]    Preferably the communication system is simply installable on a mobile telephone from a remote source. Preferably, installation does not require key management. A ‘first-trust’ key management similar to that in SSH may be used. Making and receiving a phone call will preferably be no different to a traditional phone call in respect of voice quality and latency. 
         [0050]    The identity of a user is bound to the EMSI, IMSI and/or phone number. 
         [0051]    Each GSM packet is preferably encrypted separately. Any GSM packet that does not arrive in time or is lost during transmission is ignored. It is believed that lost GSM packets do not pose a security or quality problem. 
         [0052]    In the case where the second user&#39;s device  20  is available to establish the secure communication channel  70  but not available to actually take the call (for example the recipient may be on another call or the device may be set to go straight to voicemail), key exchange and establishment of the secure communication channel  70  happens as above. However, once the channel is established, the second user&#39;s device  20  triggers the switching system  40  to divert the call to voicemail. 
         [0053]    The switching system  40  routes the call to the repository  50  where the user&#39;s standard or pre-recorded greeting is played to the first user&#39;s device  15 . The voicemail message is then received from the first user&#39;s device  15  in the packetized, encrypted form. The data is stored at the repository  50  as received. Preferably, the repository captures data on the first user&#39;s device and meta data on the call (e.g. identifier/phone number of the first user&#39;s device, time of message) and stores this data linked to the stored packets of voicemail data. 
         [0054]    The repository preferably does not hold the key(s) necessary to decrypt the data received over the secure communications channel and therefore has no choice other than to record it in the secure form as received. Therefore, even if the repository is compromised, the data itself is still secure. 
         [0055]    In a preferred embodiment, public/private key encryption is used and the repository holds copies of the second device&#39;s public key(s). In this manner, if the second device is not available (for example it was turned off) to establish the secure communication channel  70 , the repository can act as a proxy to the second device and establish the secure communications channel  70  for subsequent use in receiving a voicemail message. Indeed, the repository  50  may act as a proxy even if the second device  20  is available as it may be considered more efficient for the second device to immediately pass voicemail destined connection requests to the repository to be dealt with instead of having to manage the overhead of key exchange etc. Even when the second device  20  does take part in establishing the secure communications channel  70 , it is still preferred that the repository holds copies of the device&#39;s public key(s) so that it can encrypt the outgoing voicemail greeting and communicate any options securely to the first device  15 . 
         [0056]      FIG. 3  is a schematic diagram of a secure voicemail system according to another embodiment of the present invention. 
         [0057]    In this embodiment, the second user&#39;s handset  20  is configured to forward voicemails to an alternate voicemail system  80  that is not linked or associated with the communication provider&#39;s switching centre  40 . 
         [0058]    The alternate voicemail system  80  is sited remotely from the switching centre  40 . When the switching centre  40  attempts to forward the first caller to voicemail, the alternate forwarding address is identified and the first handset  15  is connected (via a secure channel  70  should the handset  15  be capable) to the alternate voicemail system  80 . The secure channel  70  can be established as discussed above (i.e. either by the second device  20  and then redirected or, preferably, direct with the alternate voicemail system  80  using copies of the second device&#39;s public encryption keys. 
         [0059]    Preferably, if the alternate voicemail system  80  is remote from the network or systems of the telecommunications operator that serves the second handset  20 , a secure communication channel is established between the second handset  20  and the alternate voicemail system  80  whenever voicemail is transmitted to the handset  20 . In this manner, not only is the voicemail itself is encrypted, so to is the communication traffic providing redundancy and additional security. 
         [0060]      FIG. 4  is an illustration of a screen display according to a further embodiment of the present invention. 
         [0061]    In this embodiment, an interface  100  is provided to the user of the handset  20  associated with the mailbox on the secure voicemail system ( 50  or  80 ). As voicemails are received and stored in the repository  50 ,  80 , a notification is pushed out to the handset  20  and displayed on the user interface  100 . Preferably, the telephone number of the caller, time and date and duration of the message are displayed. The interface preferably allows the user to select messages to be downloaded, played, stored or deleted. It will be appreciated that whilst the secure voicemail system of the present invention could work in the same manner as conventional voicemail systems which are accessed and voicemails are output sequentially, by pushing a notification to the user device, random access can be provided to voicemails which should improve the user experience substantially. Additionally, voicemails can be downloaded to the handset  20  to allow the user to listen to them at his or her leisure and the caller and length of voicemail can give the user at the handset  20  an indication of how long it will take to obtain the messages. Optionally, the encrypted messages themselves can be pushed to the handset  20  rather than a notification. In this manner, no wait would be experienced by the user during the downloading process but it would require the handset  20  to have an increased storage capacity. 
         [0062]    As the voicemail messages are encrypted, they could be transported around the Internet as there is a reduced concern in terms of security. One possibility for movement of voicemail messages would be if the user of the second handset  20  was roaming between networks. A voicemail message could be transmitted to a local store on the last known network used by the handset  20  rather than requiring it always to be sent via the user&#39;s home network. 
         [0063]    In one embodiment, voicemail repositories may be implemented in some form or hierarchy or peer-to-peer topology and arranged to distribute public keys amongst themselves to provide redundancy, provide roaming and also to enable selection of a closest repository to the caller to reduce network overhead. In such arrangements, a repository may be identified as a home repository for a user device and voicemails received on other repositories may be transferred to, or synchronised with, the home repository. A non-home repository receiving a voicemail may indicate its availability to the home repository and transmit it to the home repository if not requested by the device or home repository within a predetermined amount of time. 
         [0064]    Whilst public/private key pairings are discussed as a preferred implementation for encryption, it will be appreciated that other encryption systems exist which would be equally applicable. For example, the public-private key pairings could be used to negotiate a symmetric session key used only for that message. Preferably, the public/private key pair is generated at the user&#39;s handset  20 . It may optionally be linked to a specific parameter of the handset such as the IMEI unique identifier. The public key could be shared among telecommunication providers and those providing the secure encrypted voicemail service without fear of breaching security of the secure voicemail system. Preferably, compatible handsets can download a software application to enable use of an encrypted voicemail system. When the application is first run, the public and private key pairings are created and the public key is then transmitted to the secure voicemail system for use in creating the secure encrypted voicemails.