System and method for end-to-end encryption and security indication at an endpoint
Disclosed herein are systems, methods, and non-transitory computer-readable storage media for implementing real-time transport control protocol to obtain an end-to-end encryption and security status of a communication session. The system collects real-time transport control protocol messages associated with a communication session, wherein the real-time transport control protocol messages are generated by devices in the communication session, and wherein the real-time transport control protocol messages include security information associated with the communication session. Then, based on the real-time transport control protocol messages, the system determines a security status associated with the communication session. The system can also generate an indication of the security status associated with the communication session. Further, the system can generate an indication of the security status of a communication session on a per participant basis.
1. A method comprising:
collecting, via a microprocessor, a plurality of real-time transport control protocol messages originating from a plurality of communication endpoints participating in a communication session, and wherein each of the plurality of real-time transport control protocol messages comprises security information provided by a respective communication endpoint from the plurality of communication endpoints participating the communication session;
based on the plurality of real-time transport control protocol messages, determining, via the microprocessor, for each communication endpoint from the plurality of communication endpoints participating in the communication session, a respective security status of a respective media segment connecting the respective communication endpoint to the communication session, to yield a plurality of communication endpoint security statuses; and
determining, via the microprocessor, an overall security status associated with the communication session based on the plurality of communication endpoint security statuses of the respective media segment connecting the respective communication endpoint to the communication session.
2. The method of claim 1 , further comprising generating, by the microprocessor, an indication of the overall security status, wherein the indication comprises one of an alert, a sound, an image, a report, a message, a visual representation, a multimedia presentation, an announcement, a description, or a summary.
3. The method of claim 2 , wherein the indication is based on a display scheme.
4. The method of claim 1 , wherein the real-time transport control protocol messages are collected from at least one of a centralized device or a regional collecting device, and wherein the real-time transport control protocol messages are transmitted from the at least one of the centralized device or the regional collecting device to a communication endpoint in the communication session in response to at least one of a query and a triggering event.
5. The method of claim 1 , further comprising generating a representation of the overall security status.
6. The method of claim 1 , wherein the overall security status comprises of an encryption status, an encryption status, an encryption strength, playout device characteristics, or a security level.
7. The method of claim 1 , wherein the overall security status is an end-to-end security status of the communication session.
8. The method of claim 7 , wherein the security status of each of the respective communication endpoints is specific to a communication path used by the respective communication endpoint to participate in the communication session.
9. The method of claim 1 , further comprising, based on the real-time transport control protocol messages, determining, by the microprocessor, a respective security status for each of the plurality of communication endpoints participating in the communication session.
10. The method of claim 1 , wherein each of the plurality of communication endpoints in the communication session relays a respective real-time transport control protocol message from the real-time transport control protocol messages along the communication session.
11. The method of claim 1 , wherein the real-time transport control protocol messages propagate along the plurality of communication endpoints in the communication session based on a real-time transport control protocol message extension comprising an instruction to propagate the real-time transport control protocol messages.
12. The method of claim 1 , wherein the real-time transport control protocol messages further comprise instructions for relaying the real-time transport control protocol messages.
13. The method of claim 1 , wherein collecting the real-time transport control protocol messages is based on a triggering event comprising a user input.
14. The method of claim 1 , wherein the real-time transport control protocol messages further comprise one of a differentiated services trace, a global session identifier, a transcoding and gain table, a topology, an access mode, encryption information, hardware information, hop-by-hop information, or information related to network characteristics.
15. A system comprising:
a microprocessor; and
a memory having stored therein instructions which, when executed by the microprocessor, cause the microprocessor to perform operations comprising:
collecting a plurality of real-time transport control protocol messages originating from a plurality of communication endpoints participating in a communication session, and wherein each of the plurality of real-time transport control protocol messages comprises security information provided by a respective communication endpoint from the plurality of communication endpoints participating in the communication session;
based on the plurality of real-time transport control protocol messages, determining, for each communication endpoint from the plurality of communication endpoints participating in the communication session, a respective security status of a respective media segment connecting the respective communication endpoint to the communication session, to yield a plurality of communication endpoint security statuses; and
determining an overall security status associated with the communication session based on the plurality of communication endpoint security statuses of the respective media segment connecting the respective communication endpoint to the communication session.
16. The system of claim 15 , wherein the memory further stores instructions which, when executed by the microprocessor, result in an operation further comprising generating an indication of the overall security status associated with the communication session.
17. The system of claim 15 , wherein the real-time transport control protocol messages propagate along the communication session based on an instruction included in the real-time transport control protocol messages.
18. A computer-readable storage device having stored therein instructions which, when executed by a microprocessor, cause the microprocessor to perform a method comprising:
collecting a plurality of real-time transport control protocol messages originating from a plurality of communication endpoints participating in a communication session, and wherein each of the plurality of real-time transport control protocol messages comprises security information provided by a respective communication endpoint from the plurality of communication endpoints participating in the communication session;
based on the plurality of real-time transport control protocol messages, determining, for each communication endpoint from the plurality of communication endpoints participating in the communication session, a respective security status of a respective media segment connecting the respective communication endpoint to the communication session, to yield a plurality of communication endpoint security statuses; and
determining an overall security status associated with the communication session based on the plurality of communication endpoint security statuses of the respective media segment connecting the respective communication endpoint to the communication session.
19. The non-transitory computer-readable storage device of claim 18 , the instructions which, when executed by the microprocessor, cause the microprocessor to perform an operation further comprising generating an indication of the overall security status associated with the communication session.
20. The non-transitory computer-readable storage device of claim 18 , wherein the real-time transport control protocol messages propagate along the communication session based on an instruction provided in an extension of the real-time transport control messages.