Granted Patent B1

US 9,722,976 · App. 14/841,276 · Granted Aug 1, 2017

Abstract

Claims (39)

1. A secure communications method, the method comprising:

receiving signaling information corresponding to a secure real time packet stream;

receiving a plurality of encrypted secure real time packets, said plurality of packets being a part of the secure real time packet stream, said secure real time packet stream using an implicit packet index for sequencing of packets in said secure real time packet stream, said implicit packet index being generated from a sequence number and a sequence number roll over counter number, said sequence number for each of said plurality of packets being included in each of said packets, said roll over counter number for each of said plurality of packets not being included with said packets;

determining, based at least in part on the received signaling information, whether an adaptive index learning mode of operation or a second mode of operation is to be used for processing packets in said secure real time packet stream, said second mode of operation being a mode of operation in which a step performed in said adaptive mode of operation is bypassed; and

wherein when it is determined that said adaptive index learning mode of operation is to be used storing in memory an indication that the adaptive index learning mode of operation is to be used and using an adaptive index learning process to determine a correct sequence number roll over counter number for one of said plurality of received packets, said indication that the adaptive index learning mode of operation is to be used that is stored in said memory is a flag stored in said memory that is set.

2. The method of claim 1 further including:

after determining said correct sequence number roll over counter number for one of said plurality of received packets storing in said memory an indication that said adaptive index learning mode of operation is not to be used; and

switching to the non-adaptive mode of operation for processing packets in said secure real time packet stream.

3. The method of claim 1 wherein when it is determined that said adaptive index learning mode of operation is not to be used storing in said memory an indication that the adaptive index learning mode of operation is not to be used.

4. The method of claim 3 further including operating in said second mode of operation to process the received plurality of packets and determining the correct sequence number roll over counter number for packets being processed when it is determined that the adaptive index learning mode of operation is not to be used.

5. The method of claim 1 wherein the indication that the adaptive index learning mode of operation is not to be used that is stored in said memory is the flag stored in said memory that is cleared.

6. The method of claim 1 wherein said signaling information includes at least one of the following: session control signaling information, call flow signaling information or decryption device status signaling information.

7. The method of claim 6 wherein said plurality of encrypted secure real time packets are part of a Voice Over Internet Protocol call.

8. The method of claim 1 , wherein said signaling information includes a control signal indicating a switchover of the processing of said packet stream from an active decryption device to a standby decryption device, said standby decryption device receiving said packet after said switchover.

9. The method of claim 1 , wherein said plurality of encrypted secure real time packets are part of a Voice Over Internet Protocol call received at a standby Session Border Controller and wherein determining, based at least in part on the received signaling information, whether said adaptive index learning mode of operation or said second mode of operation is to be used for processing packets in said secure real time packet stream includes determining that said adaptive index learning mode of operation is to be used when said signaling information includes status information indicating that an active Session Border Controller servicing said VOIP call has failed.

10. The method of claim 1 ,

wherein said plurality of encrypted secure real time packets are part of a Voice Over Internet Protocol call; and

wherein determining, based at least in part on the received signaling information, whether said adaptive index learning mode of operation or said second mode of operation is to be used for processing packets in said secure real time packet stream includes determining that said adaptive index learning mode of operation is to be used when said signaling information includes call flow signaling information indicating that said VOIP call is resuming after having been placed on hold.

11. The method of claim 1 ,

wherein said plurality of encrypted secure real time packets are part of a Voice Over Internet Protocol call; and

wherein determining, based at least in part on the received signaling information, whether said adaptive index learning mode of operation or said second mode of operation is to be used for processing packets in said secure real time packet stream includes determining that said adaptive index learning mode of operation is to be used when said signaling information includes status information indicating that the processing of said VOIP call is to be switched from an active Session Border Controller servicing said VOIP call to a standby Session Border Controller.

12. The method of claim 11 , wherein no mirroring of sequence number roll over counter number information is performed between the active Session Border Controller and the standby Session Border Controller.

13. A device comprising:

a receiver configured to receive signaling information corresponding to a secure real time packet stream and receive a plurality of encrypted secure real time packets, said plurality of packets being a part of the secure real time packet stream, said secure real time packet stream using an implicit packet index for sequencing of packets in said secure real time packet stream, said implicit packet index being generated from a sequence number and a sequence number roll over counter number, said sequence number for each of said plurality of packets being included in each of said packets, said roll over counter number for each of said plurality of packets not being included with said packets;

a processor that determines, based at least in part on the received signaling information, whether an adaptive index learning mode of operation or a second mode of operation is to be used for processing packets in said secure real time packet stream, said second mode of operation being a mode of operation in which a step performed in said adaptive mode of operation is bypassed;

memory, said memory storing an indication that the adaptive index learning mode of operation is to be used when the processor determines that said adaptive index learning mode of operation is to be used, the indication that the adaptive index learning mode of operation is to be used that is stored in said memory is a flag stored in said memory that is set in response to a determination by the processor that said adaptive index learning mode of operation is to be used; and

wherein said processor uses an adaptive index learning process to determine a correct sequence number roll over counter number for one of said plurality of received packets, when said processor determines that said adaptive index learning mode of operation is to be used.

14. The device of claim 13 , wherein said memory stores an indication that said adaptive index learning mode of operation is not to be used after determining said correct sequence number roll over counter number for one of said plurality of received packets; and

said processor switches to the second mode of operation for processing packets in said secure real time packet stream after determining said correct sequence number roll over counter number for one of said plurality of received packets.

15. The device of claim 13 wherein said memory stores an indication that the adaptive index learning mode of operation is not to be used, when it is determined that said adaptive index learning mode of operation is not to be used.

16. The device of claim 15 wherein said processor operates in the second mode of operation to process the received plurality of packets and determines the correct sequence number roll over counter number for packets being processed when it is determined that the adaptive index learning mode of operation is not to be used.

17. The device of claim 15 wherein the indication that the adaptive index learning mode of operation is not to be used that is stored in said memory is the flag stored in said memory that is cleared, and wherein said processor is further configured to clear said flag in response to a determination by the processor that said adaptive index learning mode of operation is not to be used.

18. The device of claim 13 wherein said signaling information includes at least one of the following: session control signaling information, call flow signaling information or decryption device status signaling information.

19. The device of claim 18 wherein said plurality of encrypted secure real time packets are part of a Voice Over Internet Protocol call.

20. A non-transitory computer readable medium including processor executable instructions, said non-transitory computer readable medium comprising:

instructions which when executed by at least one processor control said at least one processor to receive signaling information corresponding to a secure real time packet stream;

instructions which when executed by said at least one processor control said at least one processor to receive a plurality of encrypted secure real time packets, said plurality of packets being a part of the secure real time packet stream, said secure real time packet stream using an implicit packet index for sequencing of packets in said secure real time packet stream, said implicit packet index being generated from a sequence number and a sequence number roll over counter number, said sequence number for each of said plurality of packets being included in each of said packets, said roll over counter number for each of said plurality of packets not being included with said packets;

instructions which when executed by said at least one processor control said at least one processor to determine, based at least in part on the received signaling information, whether an adaptive index learning mode of operation or a second mode of operation is to be used for processing packets in said secure real time packet stream, said second mode of operation being a mode of operation in which a step performed in said adaptive mode of operation is bypassed; and

instructions which when executed by said at least one processor control said at least one processor to: (i) store in memory an indication that the adaptive index learning mode of operation is to be used when it is determined that said adaptive index learning mode of operation is to be used and (ii) use an adaptive index learning process to determine a correct sequence number roll over counter number for one of said plurality of received packets when it is determined that said adaptive index learning mode of operation is to be used, said indication that the adaptive index learning mode of operation is to be used that is stored in said memory is a flag stored in said memory that is set.

Assignments (8)