Method and apparatus for implementing a secure side conversation on a telephone conference call
A separate peer-to-peer multi-directional audio channel is established between a subset of the participants to an existing multi-party communication session on the same channel as the original multi-party communication session. Since the secure channel is established on the existing call, the same NAT/firewall traversal mechanisms may be used, and even the same socket may be used. Participants on the secure side conversation can hear both the secure side conversation and the main multi-party communication session. Participants that are not on the secure side conversation may receive packets from the secure side conversation, but are not part of the security association for the secure side conversation and, hence, cannot hear the audio from the secure side conversation.
1. A method of implementing a secure side conversation on a multi-party communication session, the method comprising the steps of:
receiving an output audio stream associated with the multi-party communication session during a first period of time and during a second period of time;
receiving first input audio from a user during the first period of time;
receiving a first control input from the user to cause the first input audio to be transmitted from a communication client associated with the user on the secure side conversation for the first period of time;
receiving second input audio from the user during a second period of time;
receiving a second control input from the user to cause the second input audio to be transmitted from the communication client on the multi-party communication session for the second period of time; and
during the first period of time while the first input audio is transmitted on the secure side conversation, securing the first input audio before transmitting the first input audio on the secure side conversation so that the first input audio cannot be heard on the multi-party communication session during the first period of time;
wherein the step of receiving an output audio stream comprises the steps of receiving mixed audio including first audio from the multi-party communication session and second audio from the secure side conversation, and providing both the first audio and second audio to the user.
2. The method of claim 1 , wherein the multi-party communication session is a telephone conference call.
3. The method of claim 1 , wherein the multi-party communication session is a communication session implemented in a virtual environment.
4. The method of claim 1 , wherein the step of securing the input audio comprises implementing a secure client-to-client tunnel for the secure side conversation.
5. The method of claim 4 , wherein the secure client-to-client tunnel is implemented using Transport Layer Security (TLS).
6. The method of claim 4 , wherein the secure client-to-client tunnel is implemented using Secure Socket Layer (SSL).
7. The method of claim 4 , wherein the secure client-to-client tunnel is implemented using Secure Real-Time Transport Protocol (SRTP).
8. The method of claim 1 , further comprising the step of providing the user with feedback as to whether the first input audio from the user is being transmitted from the communication client on the secure side conversation or is being transmitted from the communication client on the multi-party communication session.
9. The method of claim 8 , wherein the feedback comprises a visual indication.
10. The method of claim 8 , wherein the feedback comprises alteration of audio played to the user.
11. The method of claim 1 , wherein the step of providing both the first audio and the second audio to the user comprises playing the first audio and playing the second audio as an overlay to the first audio.
12. The method of claim 1 , further comprising the step of decrypting the second audio.
13. The method of claim 1 , wherein the multi-party communication session is hosted by a communication server function on a communication network; and wherein the secure side conversation is hosted by separate trusted communication server function.
14. The method of claim 13 , wherein the separate trusted communication server function is hosted by the communication client.
15. The method of claim 1 , wherein the secure side conversation shares a data path with the multi-party communication session.
16. The method of claim 15 , wherein the secure side conversation and the multi-party communication session share a socket.
17. An audio client, comprising:
a processor to receive user audio input;
a selection mechanism to enable the user to direct the user audio input to be output on a multi-party communication session during a first period of time and to enable the user to direct the user audio input to be output on a simultaneously extant secure side conversation during a second period of time;
a multiplexor to receive mixed audio including both first audio from the multi-party communication session and second audio from the simultaneously extant secure side conversation during both the first period of time and the second period of time; and
a processor to simultaneously output both the first audio and second audio to the user during both the first period of time and the second period of time;
wherein the step of receiving an output audio stream comprises the steps of receiving mixed audio including first audio from the multi-party communication session and second audio from the secure side conversation, and providing both the first audio and second audio to the user.