Patent ID: 7934088

Claim:
A method of secure communication between endpoints, for secure communication between endpoints in different gate keeper management domains, comprising: generating, by a home gate keeper of a called endpoint, a shared key between a calling endpoint and the called endpoint when the calling endpoint is calling the called endpoint; performing communication between the calling endpoint and the called endpoint based on the shared key; wherein before the process of generating the shared key between the calling endpoint and the called endpoint, the method further comprises, presetting the shared key between the home gate keeper of the calling endpoint and the home gate keeper of the called endpoint, and presetting a first key derivation algorithm and a first encryption algorithm by the home gate keeper of the called endpoint; and encrypting the shared key in a first encryption mode and sending encrypted data to the home gate keeper of the calling endpoint by the home gate keeper of the called endpoint, wherein encrypting the shared key in a first encryption mode and sending further comprises, generating a first random sequence and a first clear token by the home gate keeper of the called endpoint, encrypting the shared key between the home gate keeper of the calling endpoint and the home gate keeper of the called endpoint with the first random sequence on the basis of the first key derivation algorithm, to obtain a first derived key, encrypting the shared key between the calling endpoint and the called endpoint with the first derived key on the basis of the first encryption algorithm, to obtain a first encryption result, setting the first encryption result, the first random sequence, the first key derivation algorithm and the first encryption algorithm into respective fields of the first clear token, and encapsulating the first clear token into a Location Confirm message, and sending the encapsulated first clear token to the home gate keeper of the calling endpoint.