摘要 |
<p>Methods and systems are described for communicating the session keys used to encrypt media stream to allow a lawful intercept agency to decrypt the media stream. Assuming the endpoints negotiate the session keys themselves, the send an encrypted format key message which is encrypted with an encryption key for which only the LI agency knows the corresponding decryption key. However, to avoid abuse by the LI agency, or even to avoid the perception that LI agencies can intercept private calls without due process, the media session key is further encrypted with at least one additional key, with the corresponding decryption key(s) being unknown to the LI agency.</p> |