Secure telecommunications
The present disclosure describes techniques for configuring and participating in encrypted audio calls, audio conferences, video calls, and video conferences. In particular, a call initiator generates a meeting identifier and a first meeting key, which are encrypted using a first encryption key and distributed to one or more participants of the call. The one or more participants decrypt the meeting identifier and the first meeting key, and use that information to participate in the encrypted call. Further, participants respond to the encrypted communication data by encrypting their reply data with the first meeting key. The call initiator decrypts the reply data using the first meeting key.
1. A method comprising:
generating an asymmetric key pair, wherein the asymmetric key pair comprises a first ephemeral public component and a first ephemeral private component;
deriving a key-encrypting key using the first ephemeral private component and a second ephemeral public component, wherein the second ephemeral public component is associated with at least one second device;
encrypting a first key using the derived key-encrypting key;
sending, from a first device to the at least one second device, a request to initialize a secure communication session via a control channel, wherein the request includes a first identifier, the encrypted first key, and the first ephemeral public component;
encrypting, by the first device and using the first key, communication data; and
sending, by the first device to the at least one second device and via a communication channel, the encrypted communication data and the first identifier.
2. The method of claim 1 , further comprising:
retrieving the second ephemeral public component from a server.
3. The method of claim 1 , wherein the encrypted communication data and the first identifier are sent to the at least one second device via a communication server.
4. The method of claim 1 , wherein the secure communication session comprises at least one of a video call, an audio call, a video conference, or a conference call.
5. The method of claim 1 , further comprising:
receiving, by the first device from the at least one second device, second encrypted communication data;
decrypting, using the first key, the second encrypted communication data; and
providing the second decrypted communication data to a user of the first device.
6. The method of claim 5 , wherein the second encrypted communication data is received via a communication server.
7. A first device comprising:
one or more processors; and
memory comprising instructions that, when executed by the one or more processors, cause the first device to:
generate an asymmetric key pair, wherein the asymmetric key pair comprises a first ephemeral public component and a first ephemeral private component;
derive a key-encrypting key using the first ephemeral private component and a second ephemeral public component, wherein the second ephemeral public component is associated with at least one second device;
encrypt a first key using the derived key-encrypting key;
send, to the at least one second device, a request to initialize a secure communication session via a control channel, wherein the request includes a first identifier, the encrypted first key, and the first ephemeral public component;
encrypt, using the first key, communication data; and
send, to the at least one second device and via a communication channel, the encrypted communication data and the first identifier.
8. The first device of claim 7 , wherein the instructions, when executed by the one or more processors, cause the first device to:
retrieve the second ephemeral public component from a server.
9. The first device of claim 7 , wherein the encrypted communication data and the first identifier are sent to the at least one second device via a communication server.
10. The first device of claim 7 , wherein the secure communication session comprises at least one of a video call, an audio call, a video conference, or a conference call.
11. The first device of claim 7 , wherein the instructions, when executed by the one or more processors, cause the first device to:
receive, from the at least one second device, second encrypted communication data;
decrypt, using the first key, the second encrypted communication data; and
provide the second decrypted communication data to a user of the first device.
12. The first device of claim 11 , wherein the second encrypted communication data is received via a communication server.
13. One or more non-transitory media storing instructions that, when executed by one or more processors, cause the one or more processors to perform steps comprising:
generating an asymmetric key pair, wherein the asymmetric key pair comprises a first ephemeral public component and a first ephemeral private component;
deriving a key-encrypting key using the first ephemeral private component and a second ephemeral public component, wherein the second ephemeral public component is associated with at least one second device;
encrypting a first key using the derived key-encrypting key;
sending, from a first device to the at least one second device, a request to initialize a secure communication session via a control channel, wherein the request includes a first identifier, the encrypted first key, and the first ephemeral public component;
encrypting, by the first device and using the first key, communication data; and
sending, by the first device to the at least one second device and via a communication channel, the encrypted communication data and the first identifier.
14. The one or more non-transitory media of claim 13 , wherein the instructions cause the one or more processors to perform steps comprising:
retrieving the second ephemeral public component from a server.
15. The one or more non-transitory media of claim 13 , wherein the encrypted communication data and the first identifier are sent to the at least one second device via a communication server.
16. The one or more non-transitory media of claim 13 , wherein the secure communication session comprises at least one of a video call, an audio call, a video conference, or a conference call.
17. The one or more non-transitory media of claim 13 , wherein the instructions cause the one or more processors to perform steps comprising:
receiving, by the first device from the at least one second device, second encrypted communication data, wherein the second encrypted communication data is received via a communication server;
decrypting, using the first key, the second encrypted communication data; and
providing the second decrypted communication data to a user of the first device.