基于安全便捷加密芯片的加密通话系统设计

Design of encrypted call system based on secure and convenient encryption chip

通过研究语音通话系统的安全现状及密钥存储安全性问题,该文设计了一种基于安全便捷加密芯片的加密通话系统。以自主可控的安全便捷加密芯片对密钥进行安全存储并实现加解密、加签验签等功能,通过安全中间件实现客户端与安全便捷加密芯片之间的数据安全传输。该系统以PKI安全体系为设计核心,在语音加密过程,利用国密SM2算法,以数字信封的方式实现密钥同步;利用Opus编码算法先对音频数据进行压缩编码,减小传输带宽;利用密钥对编码后的音频数据进行SM4加密,实现密文传输,确保语音通话过程的实时性和安全性。通过性能测试和安全性分析结果可以看出,该系统在保证通话流畅的同时,大大提高了用户通话过程的安全性,具有较好的应用前景。

By studying the security status quo of voice call system and the security of key storage,this paper designs an encrypted call system based on a secure and convenient encryption chip.The secure and convenient encryption chip is used to securely store the key and realise the functions of encryption,decryption,signature verification and so on,and the secure middleware is used to realise the secure transmission of data between the client and the secure and convenient encryption chip.The system takes PKI security system as the core of design,and in the process of voice encryption,the state secret SM2 algorithm is used to synchronise the key in the form of digital envelopes;the Opus coding algorithm is used to compress and encode the audio data first to reduce the transmission bandwidth;and then the encoded audio data is encrypted by the key in SM4 to achieve the transmission of the ciphertext to ensure the real⁃time and security of the voice call process.The results of performance testing and security analysis show that the system greatly improves the security of the user’s call process while ensuring the smoothness of the call,and has a better application prospect.