CN100388659C - Device, system and method for realizing encrypted communication between heterogeneous networks - Google Patents

Abstract

The invention discloses a method for realizing encrypted communication, including a communication method from a mobile terminal to a fixed terminal, and is characterized in that: when an encrypted mobile terminal initiates an encrypted service call, the service option is used to notify the base station system that the encrypted service needs to be used, and the base station communication system allocates the corresponding The resource establishes encrypted communication. After adding the encapsulation of the encrypted service transmission protocol, the encrypted service transmission protocol processing module is used to receive the service data, recover the data, and finally send it to the encrypted fixed terminal through the modem module. The resource utilization rate is improved and the cost is reduced; the structure is flexible, and it can be extended and applied to other types of heterogeneous networks according to relevant principles, and supports more types of services, including encrypted services and non-encrypted services.

Description

Device, system and method for realizing encrypted communication between heterogeneous networks

technical field

The present invention relates to a communication system, in particular to a device, system and method for realizing encrypted communication between a mobile communication network and a fixed communication network.

Background technique

Encrypted communication provides a mechanism to ensure the security of communication content and prevent communication content from being known by unauthorized users. Encrypted communication is becoming more and more important, and the scope of application is wider and wider, extending from special users to ordinary users. There are many encryption technologies and methods, and encrypted communication can be realized directly through terminal encryption and decryption between terminals in a fixed communication network. Between the terminals of the mobile communication network, network support must be required to establish an encrypted communication link and realize encrypted communication through terminal encryption, such as in Chinese patent 99802508 "encrypted data transmission method and a cellular radio system using this method" In the present invention, a mobile communication system and a method for encrypting data transmission in the mobile communication system are provided. The system comprises at least one transceiver communicating with other transceivers over a radio link comprising one or more radio carriers or logical channels on which encryption is performed using a selected encryption method.

Existing methods can only provide symmetric encrypted services within the same network, and cannot be flexibly applied to various networks; for terminals on different networks (such as between fixed networks and mobile networks), encrypted communication services cannot be provided , only non-encrypted services can be used, and the application range of encrypted services is relatively narrow.

Contents of the invention

One of the technical tasks to be solved by the present invention is to provide an encryption device that supports encrypted communication services between heterogeneous network terminals. Another technical task to be solved by the present invention is to provide a system to realize encrypted communication services between heterogeneous networks. Another object of the present invention is to provide an encrypted communication method between heterogeneous networks.

A device for realizing encrypted communication between heterogeneous networks according to the present invention includes a signaling processing/control module, a digital modulation and demodulation module, an encrypted service transmission protocol processing module, and a link interface module; the signaling processing/control module Connect with other functional modules through the control interface, provide communication-related signaling processing and internal resource management, allocation and control, and receive and send signaling through the signaling link; the digital modulation and demodulation module is used to establish point-to-point point communication, through the data bus and encrypted business transmission protocol processing function module connection, send and receive encrypted business data; the encrypted business transmission protocol processing module is connected with the digital modem module through the data bus, send and receive encrypted The service data is used to process the encrypted service transmission protocol for the encrypted service, and establish a connection with the mobile communication network; the link interface module provides a physical link interface, and provides a relay link and a signaling link to the outside.

The present invention provides a system for realizing encrypted communication between heterogeneous networks, including a mobile communication system and a fixed communication system. The mobile communication system at least includes a base station, a mobile station supporting encrypted services, a mobile switching center, and a base station controller. The fixed communication system includes at least a fixed exchange and a fixed terminal, and is characterized in that: the system further includes a device for realizing encrypted communication between heterogeneous networks; The device for communication is connected, and the fixed communication system is connected with the device for realizing encrypted communication between heterogeneous networks through the switched telephone network; the device for realizing encrypted communication between heterogeneous networks is connected by the mobile communication system with the The communication link established between the fixed communication systems completes the transparent transfer of encrypted service data between the mobile station and the fixed terminal.

A method for implementing encrypted communication provided by the present invention includes a communication method from a mobile terminal to a fixed terminal, and is characterized in that: when an encrypted mobile terminal initiates an encrypted service call, the service option is used to notify the base station system that the encrypted service needs to be used, and the base station communication system allocates Corresponding resources establish encrypted communication. After adding the encapsulation of the encrypted service transmission protocol, the encrypted service transmission protocol processing module is used to receive the service data, restore the data, and finally send it to the encrypted fixed terminal through the modem module.

The present invention also provides a device for realizing half-process encryption of data services between heterogeneous networks, which is characterized in that it includes a signaling processing/control module, an encrypted service transmission protocol processing module, a link interface module, a digital modulation and demodulation module and encryption/decryption module; the signaling processing/control module is respectively connected to other functional modules through the control interface, provides communication-related signaling processing and internal resource management, allocation and control, and receives and sends signaling through the signaling link; the digital The modulation and demodulation module is used to establish point-to-point communication, and is connected to the encrypted service transmission protocol processing function module through a data bus to send and receive encrypted service data; the encrypted service transmission protocol processing module is connected to the said encrypted service transmission protocol processing module through a data bus The digital modem module connects, sends and receives encrypted service data, processes the encrypted service transmission protocol when used for encrypted services, and establishes a connection with the mobile communication network; the encryption/decryption module provides encryption and decryption functions in encrypted communication, It is connected with the encrypted service transmission protocol processing function module to receive and send encrypted data; the link interface module provides a physical link interface and provides a relay link and a signaling link to the outside.

The present invention also provides a system for realizing half-way encrypted communication of data services between heterogeneous networks, including a mobile communication system and a fixed communication system. The mobile communication system at least includes a base station, a mobile station supporting encrypted services, a mobile switching center, and a base station The controller, the fixed communication system includes at least a fixed exchange and a fixed terminal, characterized in that: the system further includes a device for realizing half-pass encrypted communication of data services between heterogeneous networks; the mobile communication system communicates via land mobile The network is connected with the device for realizing half-time encrypted communication of data services between heterogeneous networks, and the described fixed communication system is connected with the device for realizing half-process encrypted communication of data services between heterogeneous networks through the switched telephone network; The device for half-pass encrypted communication of data services between heterogeneous networks completes half-pass encryption of data services between the mobile station and the fixed terminal through the communication link established between the mobile communication system and the fixed communication system transfer.

The present invention also provides a method for realizing half-way encrypted communication of data services between heterogeneous networks. The encrypted service transmission protocol processing module receives the service data, and then goes to the encryption/decryption module for decryption, and finally sends it to the common terminal through the modem module.

The present invention also provides a device for realizing half-time encryption of voice services between heterogeneous networks, which is characterized in that it includes a signaling processing/control module, an encrypted service transmission protocol processing module, a link interface module, and a digital modulation and demodulation module encryption/decryption module and a vocoder module; the signaling processing/control module is respectively connected to other functional modules through a control interface, provides communication-related signaling processing and internal resource management, allocation and control, and receives and sends signaling through a signaling link The digital modulation and demodulation module is used to establish point-to-point communication, and is connected to the encrypted service transmission protocol processing function module through a data bus to send and receive encrypted service data; the encrypted service transmission protocol processing module passes the data The bus is connected to the digital modulation and demodulation module to send and receive encrypted service data, and to process the encrypted service transmission protocol when used for encrypted services, and to establish a connection with the mobile communication network; the encryption/decryption module provides encryption in encrypted communication. and decryption function, connected with the encryption service transmission protocol processing function module, receiving and sending encrypted data; the vocoder module, providing voice coding conversion between the fixed communication network and the mobile communication network, and the encryption/ The decryption module performs interactive transmission of encrypted/decrypted voice packets through the communication interface; the link interface module provides a physical link interface, and provides a relay link and a signaling link to the outside.

The present invention also provides a method for realizing half-time encrypted communication of voice services between heterogeneous networks, which is characterized in that: when an encrypted mobile terminal initiates an encrypted service call, the service option is used to notify the base station system that the encrypted service needs to be used, and the base station communication system allocates corresponding resources Establish encrypted communication, after adding the encapsulation of the encrypted service transmission protocol, the service data is received by the encrypted service transmission protocol processing module, and then decrypted by the encryption/decryption module, and then the vocoder module performs voice The decoding of the signal is finally sent to the fixed terminal through the switch.

Compared with the prior art, the device, system and method of the present invention improve resource utilization and reduce costs; the structure is flexible, and can be extended and applied to other types of heterogeneous networks according to relevant principles, supporting more types of services, It can support encrypted business and non-encrypted business.

Description of drawings

Fig. 1 is an embodiment of the device for implementing encrypted communication between heterogeneous networks proposed by the present invention.

Fig. 2 is an embodiment of the system proposed by the present invention to realize encrypted communication between heterogeneous networks.

Fig. 3 is a protocol structure when the mobile communication system in the system shown in Fig. 2 implements encryption services.

Fig. 4 is the flow that the mobile terminal supporting encryption service calls the fixed terminal supporting encryption service to establish whole-process encryption communication;

Fig. 5 is the flow that the fixed terminal that supports encrypted service calls the mobile terminal that supports encrypted service and establishes whole-process encrypted communication;

Detailed ways

Below in conjunction with accompanying drawing, the implementation of technical scheme is described in further detail:

As shown in Figure 1, it is an embodiment of a device for implementing encrypted communication between heterogeneous networks. This embodiment can be used to complete encryption of voice services between heterogeneous networks. The device specifically includes: signaling processing and control function modules, providing communication-related Signaling processing and internal resource management, distribution and control, use the control interface to connect with other functional modules to manage and control other modules; at the same time, provide time division multiplexing (TDM) Make the link receive and send signaling. The encryption function module provides encryption and decryption functions in encrypted communication; there is a communication interface with the vocoder function module, and the decrypted voice packet is sent to the vocoder, and the voice packet received by the vocoder is encrypted; The service transmission protocol processing function module connects, receives and sends encrypted data. The vocoder function module provides voice coding conversion between the fixed communication network and the mobile communication network; at the same time, it connects with the circuit switching function module through a time division multiplexing (TDM) interface to receive and send voice data of the fixed communication network. The digital modulation and demodulation function module is used to establish point-to-point communication with the encrypted fixed terminal; it is connected with the circuit switching function module through a time division multiplexing (TDM) interface, and receives and sends business data between the encrypted fixed terminal; through the data bus It is connected with the encrypted service transmission protocol processing function module to send and receive encrypted service data. The encryption service transmission protocol processing function module is used to process the encryption service transmission protocol when encrypting services, and establish a connection with the mobile communication network; and connect with the circuit switching function module through a time division multiplexing (TDM) interface, and send and receive services to the mobile communication network Data: through the data bus and digital modem function module connection, send and receive encrypted business data. The link interface module provides a physical link interface, provides a relay link and a signaling link externally, and is connected to a circuit switching function module through a time division multiplexing (TDM) interface, so that internal functional units are connected to external links.

The device for realizing encrypted communication can be implemented by adding some functional unit software upgrades in the mobile gateway office, in which the mobile gateway office includes signaling processing and control function modules, switching function modules and link interface modules, and the external can independently provide the vocoder function Module, digital modulation and demodulation function module, encrypted service transmission protocol processing function module and encryption and decryption function module. The mobile gateway office controls and manages these functional modules through the control interface, and these functional modules communicate with the data interface (which can be a time division multiplexing interface or other types of serial or/and parallel interfaces) with the mobile gateway office. .

A system capable of supporting encrypted communication services between a mobile communication network and a fixed communication network is shown in Figure 2. Including mobile terminals that support encrypted services (referred to as encrypted mobile terminals); mobile communication systems, including base stations, base station controllers, and mobile switching centers; devices that implement encrypted communications; fixed terminals in fixed communication networks, including ordinary Terminals and fixed terminals supporting encrypted services (referred to as encrypted fixed terminals). If encrypted access to the private data network is supported, an encrypted access server or a common access server may be added.

The encryption access server can support point-to-point encryption with the encryption mobile terminal. It is a common access server with an encryption/decryption module added, which can realize the encrypted communication from the encryption mobile terminal to the encryption access server. Using the common access server can only realize half-pass encrypted communication, that is, establish encrypted communication between the encrypted mobile terminal and the device for realizing encrypted communication, and establish non-encrypted communication between the common access server and the device for realizing encrypted communication.

The protocol structure adopted by the encrypted voice and data services in the mobile communication system is shown in Figure 3. The base station system must support corresponding protocols. The encrypted service adopts the radio link protocol (defined in IS-707A, Radio Link Protocol) to transmit encrypted voice and data, and the encrypted voice service and encrypted data service respectively adopt the transparent wireless link protocol and the non-transparent wireless link protocol; the air interface Standard wireless protocols are adopted; the base station system adopts encrypted service transmission protocols, such as Intersystem Link Protocol (defined in IS-728, Intersystem Link Protocol), to realize rate adaptation between air service rate data and 64kbps ground link , and use the 64kbps ground link as the physical link for transmission to establish connections with other systems. In this way, services on the upper layer can be transmitted transparently.

In addition, the encrypted service adopts a specific service option. When an encrypted mobile terminal initiates an encrypted service call, it uses the service option to notify the base station system that the encrypted service needs to be used, and the base station communication system allocates corresponding resources to establish encrypted communication. The base station system can also transmit relevant information such as service options to the mobile switching center, so that the switching center knows that encrypted communication needs to be established, and the switching center is responsible for establishing a communication link and transparently transmitting encrypted service data.

The half-pass encrypted communication established between the ordinary terminal (access server) and the device for implementing encrypted communication needs to select the modules involved in the communication according to the business type. Voice services require a vocoder module, an encrypted service transmission protocol processing module, and an encryption/decryption module; firstly, the voice from the encrypted mobile terminal is transmitted through the base station, and the encapsulation of the encrypted service transmission protocol is added, and the encrypted service transmission protocol processing module is used for processing. The service data is received, and then goes to the encryption/decryption module for decryption, and then the voice coder module decodes the voice, and finally sends it to the ordinary terminal through the switch. The voice processing process for ordinary terminals is a reverse process. The vocoder encodes the voice after receiving it, then encrypts it in the encryption/decryption module, and finally uses the encryption service transmission protocol processing module to encapsulate it and send it to the base station system. The data service needs to establish corresponding communication between the modem part and the modem of the common terminal (access server), such as facsimile, asynchronous data and so on. The data service requires an encryption service transmission protocol processing module, a modem module and an encryption/decryption module. First, the business data from the encrypted mobile terminal is transmitted through the base station, the encapsulation of the encrypted business transmission protocol is added, the business data is received by the encrypted business transmission protocol processing module, and then decrypted by the encryption/decryption module, and finally sent through the modem module to a common terminal (access server). For the data processing process sent by the ordinary terminal (access server) to the encrypted mobile terminal is a reverse process, the modem module receives the data, then the encryption/decryption module encrypts, and finally uses the encrypted service transmission protocol processing module to encapsulate and send to the base station system .

Likewise, unencrypted ordinary communication can be established between ordinary terminals and non-encrypted mobile terminals.

An encrypted fixed terminal (encrypted access server) and an encrypted mobile terminal can establish whole-process encrypted communication. The established whole-process encrypted communication requires an encrypted service transmission protocol processing module and a modem module; firstly, the business from the encrypted mobile terminal is transmitted through the base station, and the encapsulation of the encrypted service transmission protocol is added, and the encrypted service transmission protocol processing module is used to process the business data. The data is received, recovered, and finally sent to the encrypted fixed terminal (encrypted access server) through the modem module. The processing process for encrypted fixed terminal (encrypted access server) service data is a reverse process, the modem module receives it, and finally uses the encrypted service transmission protocol processing module to package it and send it to the base station system. The data service needs to establish corresponding communication between the modem part and the modem of the encrypted fixed terminal (encrypted access server), such as fax, asynchronous data, etc.

If it is an encrypted voice communication, in the encrypted fixed terminal, the received encrypted voice data will be decrypted, and then the voice will be decoded to resume voice playback. If it is an encrypted fax, the encrypted fixed terminal will decrypt the received encrypted data to restore the original data. If it is an encrypted asynchronous data service, the encrypted data will be received for decryption, and then handed over to the upper layer protocol for processing.

Inside the encrypted access server, the situation is similar to the encrypted asynchronous data service of encrypted fixed terminals. The received encrypted data is decrypted, and then handed over to the upper layer protocol for processing, data packet recovery, routing, etc.

FIG. 4 is a flowchart of a mobile terminal supporting encryption services calling a fixed terminal supporting encryption services to establish full encrypted communication. First, the second-class terminal device sends an AT command to the mobile terminal to apply for establishing communication. The mobile terminal sends a service application to the mobile base station system, in which the service option parameter indicates the service type. At this time, the mobile communication system can perform related access authentication to determine whether the terminal is a legal encryption service user and whether to access. After the mobile terminal accesses successfully, the mobile base station system allocates resources for this call, including radio resources, radio protocol processing resources, radio link protocol processing resources, and encrypted service transmission protocol processing resources. The base station system sends parameters such as service type and called number to the mobile switching center and the device for implementing encrypted communication. The device for implementing encrypted communication determines the encrypted service according to parameters such as the service type and the called number, and establishes a connection with the fixed terminal. If the service does not match the type of the terminal, for example, the service is an encrypted voice service and the terminal is a data terminal; or the service is encrypted data and the terminal is a voice terminal, the call cannot be established and the call is released. And allocate corresponding resources according to the business type. The modem unit of the device for implementing encrypted communication establishes a connection with the modem unit of the terminal, and the call is established. When releasing, if the mobile terminal initiates the release, all link resources are released. At the same time, the fixed terminal can also initiate release.

FIG. 5 is a flowchart of a fixed terminal supporting encrypted services calling a mobile terminal supporting encrypted services to establish full encrypted communication. First, the fixed terminal initiates a call, and the fixed exchange establishes a corresponding connection, and carries parameters such as calling number and called number to the device for implementing encrypted communication. The device for realizing encrypted communication judges the service type according to parameters such as calling number and called number, allocates corresponding resources, and establishes a connection with a fixed terminal; at the same time, it sends relevant parameters to the mobile switching center and mobile base station system. If the service does not match the terminal type, for example, the service is an encrypted service and the terminal is a common terminal, release the call. The mobile switching center and the mobile base station system establish a connection with the mobile terminal according to the type of service. At this time, the mobile communication system can perform relevant access authentication to determine whether the terminal is a legal encryption service user and whether to access. After the mobile terminal accesses successfully, the mobile base station system allocates resources for this call, including radio resources, radio protocol processing resources, radio link protocol processing resources, and encrypted service transmission protocol processing resources. The call is established. When releasing, if the fixed terminal initiates the release, all link resources are released. At the same time, the mobile terminal can also initiate release. For ordinary fixed terminals, the steps for establishing communication are similar to the above, except that the communication type between devices implementing encrypted communication is different, and different communication needs to be established according to the business type; and the processing resources allocated by devices implementing encrypted communication are different.

Claims (10)

1. a device of realizing coded communication between heterogeneous network is characterized in that comprising signaling process/control module, secure service host-host protocol processing module, link interface module and digital modulation and demodulation module;

Described signaling process/control module provides the relevant signaling process of communication and internal resource management, distribution and control, receives and send signaling by signaling link;

Described digital modulation and demodulation module is connected with described signaling process/control module by control interface, is used to set up point to point link, is connected with described secure service host-host protocol processing capacity module by data/address bus, sends and receive the business datum of encrypting;

Described secure service host-host protocol processing module, be connected with described signaling process/control module by control interface, be connected with described digital modulation and demodulation module by data/address bus, send and receive the business datum of encrypting, handle the secure service host-host protocol when being used for secure service, connect with mobile radio communication;

Described link interface module is connected with described signaling process/control module by control interface, and the physical link interface is provided, and repeated link and signaling link externally are provided.

2. system that realizes coded communication between heterogeneous network, comprise mobile communication system and fixed communications, described mobile communication system comprises the base station at least, supports travelling carriage, mobile switching centre and the base station controller of secure service, described fixed communications comprises fixed switch at least and supports the secure service fixed terminal, it is characterized in that:

Described system further comprises the device of coded communication between realization heterogeneous network as claimed in claim 1; Described mobile communication system is connected by the device of coded communication between land mobile communication network and described realization heterogeneous network, and described fixed communications is connected by the device of coded communication between switched telephone and described realization heterogeneous network; The communication link of the device of coded communication by setting up between described mobile communication system and described fixed communications finished the transparent transmission of secure service data between described travelling carriage and the described fixed terminal between described realization heterogeneous network.

3. system as claimed in claim 2, it is characterized in that further comprising the encryption access server, described encryption access server by switched telephone or repeated link directly with described realization heterogeneous network between the device of coded communication be connected, support realizes omnidistance encrypted data traffic to the encrypted access of private data net.

4. method that realizes coded communication, comprise the communication means of portable terminal to fixed terminal, it is characterized in that: when encrypting the calling of portable terminal initiation secure service, adopt the business option informing base station need use secure service, the corresponding resource of base station assigns is set up coded communication, after the encapsulation that has increased the secure service host-host protocol, use the secure service host-host protocol processing module in the device of realizing coded communication between heterogeneous network to carry out the reception of business datum, data are recovered, and send to the encryption fixed terminal by the modulation module in the device of coded communication between realization heterogeneous network as claimed in claim 1 at last.

5. a device of realizing data service half way coded communication between heterogeneous network is characterized in that comprising signaling process/control module, secure service host-host protocol processing module, link interface module and digital modulation and demodulation module and encrypting-decrypting module;

Described signaling process/control module provides the relevant signaling process of communication and internal resource management, distribution and control, receives and send signaling by signaling link;

Described digital modulation and demodulation module is connected with described signaling process/control module by control interface, is used to set up point to point link, is connected with described secure service host-host protocol processing capacity module by data/address bus, sends and receive the business datum of encrypting;

Described secure service host-host protocol processing module, be connected with described signaling process/control module by control interface, be connected with described digital modulation and demodulation module by data/address bus, send and receive the business datum of encrypting, handle the secure service host-host protocol when being used for secure service, connect with mobile radio communication;

Described encrypting-decrypting module is connected with described signaling process/control module by control interface, and the function of the encryption and decryption in the coded communication is provided, and is connected with described secure service host-host protocol processing capacity module, receives and send ciphered data;

Described link interface module provides the physical link interface, is connected with described signaling process/control module by control interface, and repeated link and signaling link externally are provided.

6. system that realizes data service half way coded communication between heterogeneous network, comprise mobile communication system and fixed communications, described mobile communication system comprises the base station at least, supports travelling carriage, mobile switching centre and the base station controller of secure service, described fixed communications comprises fixed switch and fixed terminal at least, it is characterized in that:

Described system further comprises the device of data service half way coded communication between realization heterogeneous network as claimed in claim 5; Described mobile communication system is connected by the device of data service half way coded communication between land mobile communication network and described realization heterogeneous network, and described fixed communications is connected by the device of data service half way coded communication between switched telephone and described realization heterogeneous network; The communication link of the device of data service half way coded communication by setting up between described mobile communication system and described fixed communications between described realization heterogeneous network finished the transmission that the data service half way is encrypted between described travelling carriage and the described fixed terminal.

7. system as claimed in claim 6 is characterized in that: further comprise common access server; Described common access server by switched telephone or by repeated link directly with described realization heterogeneous network between the device of data service half way coded communication be connected, support is to the half way coded communication of private data net.

8. method that realizes data service half way coded communication between heterogeneous network, it is characterized in that: at first the business datum that transmits from described encryption portable terminal is through the transmission of base station, increased the encapsulation of secure service host-host protocol, use the secure service host-host protocol processing module that realizes the device of data service half way coded communication between heterogeneous network to carry out the reception of business datum, be decrypted to the encrypting-decrypting module of realizing the device of data service half way coded communication between heterogeneous network then, the modem module by the device of data service half way coded communication between realization heterogeneous network as claimed in claim 5 sends to ordinary terminal at last.

9. device of realizing voice service half way coded communication between heterogeneous network, it is characterized in that comprising signaling process/control module, secure service host-host protocol processing module, link interface module and digital modulation and demodulation module encrypt/deciphering module and vocoder module;

Described signaling process/control module provides the relevant signaling process of communication and internal resource management, distribution and control, receives and send signaling by signaling link;

Described digital modulation and demodulation module is connected with described signaling process/control module by control interface, is used to set up point to point link, is connected with described secure service host-host protocol processing capacity module by data/address bus, sends and receive the business datum of encrypting;

Described secure service host-host protocol processing module, be connected with described signaling process/control module by control interface, be connected with described digital modulation and demodulation module by data/address bus, send and receive the business datum of encrypting, handle the secure service host-host protocol when being used for secure service, connect with mobile radio communication;

Described encrypting-decrypting module is connected with described signaling process/control module by control interface, and the function of the encryption and decryption in the coded communication is provided, and is connected with described secure service host-host protocol processing capacity module, receives and send ciphered data;

Described vocoder module, be connected with described signaling process/control module by control interface, the conversion of speech coding between fixed communication network and the mobile radio communication is provided, carries out the mutual transmission of encrypt/decrypt voice packet by communication interface with described encrypting-decrypting module;

Described link interface module is connected with described signaling process/control module by control interface, and the physical link interface is provided, and repeated link and signaling link externally are provided.

10. a device as claimed in claim 9 is realized the method for voice service half way coded communication between heterogeneous network, it is characterized in that: when encrypting the calling of portable terminal initiation secure service, adopt business option informing base station system need use secure service, the corresponding resource of base station communication system assignment is set up coded communication, after the encapsulation that has increased the secure service host-host protocol, carry out the reception of business datum by described secure service host-host protocol processing module, be decrypted by described encrypting-decrypting module then, described afterwards vocoder module is carried out the decoding of voice signal, sends to described fixed terminal by described switch at last.

Images