CN113645613B - Cellular mobile network real-time voice encryption equipment and method - Google Patents

Abstract

The invention belongs to the technical field of network information security, and specifically relates to a real-time voice encryption device and method for a cellular mobile network. connection, the cellular mobile network voice channel is established between the cellular mobile phones; the voice encryption equipment at the sending end and the voice encryption equipment at the receiving end both include a voice call module, a source coding module, a sequence code module, a channel coding module, and a voice-like A modulation module and a Bluetooth connection module; when the voice encryption device at the receiving end receives the voice signal of the other party, it processes it in the reverse order of the voice encryption device at the sending end, and outputs clear voice to the user's earphone. The invention can be applied to the real-time voice encryption means of different types of cellular mobile networks to solve the security problem of the current voice channel of the cellular mobile network.

Description

A real-time voice encryption device and method for cellular mobile network

technical field

The invention belongs to the technical field of network information security, and in particular relates to a real-time voice encryption device and method for a cellular mobile network.

Background technique

The cellular mobile network is generally composed of mobile terminals, wireless access network and core network in structure. Voice signal transmission includes two stages: air transmission between mobile terminal and base station and core network transmission. In 2G and 3G networks, the voice signal in the core network is transmitted in plain text, and the authentication of the access network is not supported during the air transmission phase. The A5 series encryption algorithm used is relatively fragile, and some mobile operators do not support this encryption scheme. Therefore, it faces a greater security threat. In 4G and 5G networks, although the security system has been strengthened and reconstructed, the all-IP packet data transmission faces the security threats of traditional networks. What's more, in all 2G to 5G networks, the voice communication security architecture is controlled by mobile operators, and user privacy is difficult to guarantee. Therefore, the secure communication of the voice channel of the cellular mobile network needs to be realized by end-to-end encryption technology.

During the voice over-the-air transmission stage of the cellular mobile network, the vocoder deployed in the mobile terminal and the base station implements parametric encoding and transmission of the voice signal, and uses voice-activity detection (voice-activity detection, VAD) and discontinuous transmission (discontinuous transmission, DTX) And other technologies improve channel utilization, and signals that do not have speech characteristics are regarded as noise and discarded. Therefore, the voice signal is randomized after being digitally encrypted and loses voice characteristics, making it difficult to transmit on a cellular mobile network.

Contents of the invention

In order to solve the problems existing in the prior art, the present invention proposes a real-time voice encryption device and method for a cellular mobile network, which can be applied to real-time voice encryption means for different types of cellular mobile networks, so as to solve the security problem of the voice channel of the current cellular mobile network .

In order to solve the problems of the technologies described above, the present invention adopts the following technical solutions:

The invention provides a real-time voice encryption device for a cellular mobile network. The voice encryption device is divided into a voice encryption device at a receiving end and a voice encryption device at a sending end, and respectively establishes a Bluetooth connection with a cellular mobile phone. Establish a cellular mobile network voice channel;

The voice encryption device at the sending end includes a voice communication module, a source coding module, a sequence cipher module, a channel coding module, a class voice modulation module and a bluetooth connection module connected in sequence according to the voice transmission direction; the voice communication module is used for When the user speaks, the user's voice is picked up and amplified, sampled and quantized; the source encoding module is used to compress and encode voice data frames into voice parameters; the sequence code module is used to encrypt voice parameters into encrypted voice data; the The channel coding module is used to implement forward error correction to the transmitted cipher voice data; the class voice modulation module is used to map the cipher voice data after forward error correction to a class voice signal; the bluetooth connection module is used to Establish a voice transmission channel with the cellular mobile phone;

The voice encryption device at the receiving end includes a bluetooth connection module, a voice-like modulation module, a channel coding module, a sequence cipher module, a source coding module and a voice call module connected sequentially according to the voice transmission direction, and the voice encryption device at the receiving end receives When receiving the voice signal of the other party, it is processed in the reverse order of the voice encryption device at the sending end, and the clear voice voice is output to the user's earphone.

Further, the speech-like modulation module includes a modulation codebook, a modulator, a signal recorder, a signal compensator, a demodulator, and a demodulation codebook;

The modulator maps the cipher data after forward error correction to the waveform symbols in the pre-optimized generated modulation codebook, and performs filtering and shaping to eliminate high-frequency harmonics, and then transmits it to the voice channel of the cellular mobile network;

The signal compensator implements waveform compensation on the received voice signal at the sending end according to the historical voice data recorded by the signal recorder, and then the demodulator uses a demodulation codebook to demodulate the compensated signal into target data.

Further, the modulator, signal recorder, signal compensator and demodulator need to learn and train the demodulation codebook through online learning, and the process is: the modulator of the voice encryption device at the sending end shares the prefabricated random number The sequence is mapped to the waveform symbol in the modulation codebook, and sent to the opposite end through the voice channel of the cellular mobile network; the voice encryption device at the receiving end learns to generate the optimal demodulation code according to the prefabricated random number sequence and modulation codebook shared by both parties , and train the signal compensation weights.

Further, the channel encoding module includes an encoding module, an interleaving module, an inverse interleaving module and a decoding module;

The encoding module of the voice encryption device at the sending end uses a multi-core polar code to encode the cipher voice data, then the interleaving module implements the row/column data interleaving, and finally transmits the DoV link;

The inverse interleaving module of the voice encryption device at the receiving end implements row/column data inverse interleaving transformation, and then is decoded into target data by the decoding module.

Further, the serial encryption module includes an authentication key negotiation module, a key synchronization module and an encryption and decryption module;

The encryption and decryption module is a serial cipher algorithm using two parameters of the seed key and the initial vector, the seed key remains unchanged in a session, and the initial vector is regularly replaced; its working process is: the voice encryption device at the sending end The encryption and decryption module uses a password generation algorithm, encrypts the transmission data based on the modulus two plus operation, and transfers it to the DoV link for transmission; the encryption and decryption module of the voice encryption device at the receiving end decrypts the received data based on the modulus two plus operation;

The key synchronization module is used for key synchronization; its process includes initial vector synchronization and data frame sequence number synchronization two parts, using data verification and prediction technology to achieve;

The authentication key negotiation module is used for negotiating a seed key, and the process is: the voice encryption device at the receiving end and the voice encryption device at the sending end complete terminal registration through the private key generation center before the session, and during the session, the receiving end The voice encryption device and the voice encryption device at the sending end complete the seed key agreement based on identity authentication based on the certificateless public key cryptosystem.

Further, the source encoding module adopts the MELP algorithm, and its working process is: the source encoding module of the voice encryption device at the sending end compresses and encodes the voice data frames sampled and quantized by the voice communication module into voice parameters using the MELP algorithm, and exchanges Encrypted by the sequence cipher module; the source coding module of the voice encryption device at the receiving end reconstructs the plain voice voice based on the voice parameters decrypted by the sequence cipher module, and outputs it to the voice communication module.

Further, the voice call module includes a microphone voice driver module, a sampling and quantization module, and a voice power amplifier driver module, and the microphone voice driver module of the voice encryption device at the sending end is used to amplify the weak voice signal of the user microphone and send it to the sampling and quantization module; The voice power amplifier driver module of the voice encryption device at the receiving end amplifies the power of the reconstructed plain voice voice and then outputs it to the user's earphone.

Further, the voice encryption device at the receiving end and the voice encryption device at the sending end are wearable devices such as earphones, watches or bracelets.

Further, the voice encryption device also includes a control module, a display module, a battery and a power supply module.

The present invention also provides a real-time voice encryption method for a cellular mobile network, comprising the following steps:

For sender:

When the user speaks, the voice communication module of the voice encryption device at the sending end picks up the user's voice and amplifies, samples and quantifies it, and then the voice data frame is compressed and encoded into voice parameters by the information source coding module; Voice data, and handed over to the channel coding module for forward error correction, and then mapped to a voice-like signal by the voice-like modulation module, and finally transmitted to the cellular mobile phone through the Bluetooth connection module;

For receiver:

The voice-like modulation module of the voice encryption device at the receiving end demodulates the received voice-like signal into encrypted voice data, and after further error detection and correction by the channel coding module, it is decrypted and converted into voice parameters by the sequence encryption module, and finally passed The information source coding module reconstructs it into a clear speech signal, which is amplified by the voice communication module and then output to the user's earphone.

Compared with the prior art, the present invention has the following advantages:

The real-time voice encryption device for the cellular mobile network of the present invention adopts the DoV modulation and demodulation technology based on waveform symbol mapping, the channel coding technology based on multi-core polar code and the key negotiation technology of certificateless public key cryptosystem, without changing the mobile phone terminal It can provide end-to-end voice encryption services for various types of cellular mobile networks such as 2G to 5G without requiring it to install any application in terms of hardware, software or protocols, and has the advantages of good network adaptation, high voice restoration quality and high security strength , Realized digital voice encryption.

Description of drawings

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are For some embodiments of the present invention, those skilled in the art can also obtain other drawings based on these drawings without creative work.

Fig. 1 is the structural diagram of the cellular mobile network voice channel real-time encryption communication system constructed by the cellular mobile network real-time voice encryption equipment and the cellular mobile phone of the embodiment of the present invention, 10 represents the voice encryption equipment at the receiving end, and 20 represents the voice encryption equipment at the sending end , 30 represents a cellular mobile phone;

Fig. 2 is the structural block diagram of the voice encryption device of the receiving end and the voice encryption device of the sending end of the embodiment of the present invention; 11 represents the bluetooth connection module, 12 represents the class voice modulation module, 13 represents the channel coding module, 14 represents the sequence code module, and 15 represents Information source encoding module, 16 represents voice communication module;

Fig. 3 is the structural block diagram of the speech modulation module of the embodiment of the present invention, 121 represents modulation code book, 122 represents modulator, 124 represents signal recorder, 126 represents signal compensator, 128 represents demodulator, 129 represents demodulation code Book;

4 is a structural block diagram of a channel encoding module in an embodiment of the present invention, 132 indicates an encoding module, 134 indicates an interleaving module, 136 indicates an inverse interleaving module, and 138 indicates a decoding module;

Fig. 5 is the structural block diagram of the serial encryption module of the embodiment of the present invention, 142 represents authentication key agreement module, 144 represents key synchronization module, 146 represents encryption and decryption module;

Fig. 6 is a structural block diagram of the voice communication module of the embodiment of the present invention, 162 denotes a microphone voice driving module, 164 denotes a sampling and quantization module, and 166 denotes a voice power amplifier driving module.

Detailed ways

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of the embodiments of the present invention, but not all of them. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative work belong to the protection of the present invention. scope.

Figure 1 is a structural diagram of a cellular mobile network voice channel real-time encryption communication system constructed by a cellular mobile network real-time voice encryption device and a cellular mobile phone, including two voice encryption devices and two integrated mobile phone specifications (Head-Set-Profile, HSP ) bluetooth module and the cellular mobile phone that has entered the network, in this example, two cellular mobile phones should have connected voice calls, and set up the bluetooth connection of HSP standard with voice encryption equipment, the present invention does not require installing any Software or modifications to use only the voice channel of the cellular phone.

As shown in Figure 2, the present embodiment proposes a real-time voice encryption device for a cellular mobile network. Bluetooth connection, the voice encryption device at the sending end establishes a Bluetooth connection with the cellular mobile phone at the sending end, and a cellular mobile network voice channel is established between the cellular mobile phones at both ends to realize real-time voice communication.

The voice encryption device at the sending end includes a voice communication module, a source coding module, a sequence cipher module, a channel coding module, a class voice modulation module and a bluetooth connection module connected in sequence according to the voice transmission direction; the voice communication module is used for When the user speaks, the user's voice is picked up and amplified, sampled and quantized; the source encoding module is used to compress and encode voice data frames into voice parameters; the sequence code module is used to encrypt voice parameters into encrypted voice data; the The channel coding module is used to implement forward error correction to the transmitted cipher voice data; the class voice modulation module is used to map the cipher voice data after forward error correction to a class voice signal; the bluetooth connection module is used to Establish a voice transmission channel with the cellular mobile phone, and the encrypted voice data is finally transmitted to the cellular mobile phone to realize "transparent" transmission in the voice channel of the cellular mobile network.

The voice encryption device at the receiving end includes a bluetooth connection module, a voice-like modulation module, a channel coding module, a sequence cipher module, a source coding module and a voice call module connected sequentially according to the voice transmission direction, and the voice encryption device at the receiving end receives When receiving the voice signal of the other party, it is processed in the reverse order of the voice encryption device at the sending end, and the clear voice voice is output to the user's earphone.

As shown in FIG. 3 , the speech-like modulation module includes a modulation codebook, a modulator, a signal recorder, a signal compensator, a demodulator and a demodulation codebook. The function of the class voice modulation module is DoV modulation and demodulation technology based on waveform symbol mapping, and establishes a DoV link for transmitting digital data on the voice channel. The specific working process is: the modulator converts the forward error correction The encrypted voice data is mapped to the waveform symbols in the pre-optimized modulation codebook, and filtered to eliminate high-frequency filtering, and then sent to the voice channel of the cellular mobile network for transmission; the signal compensator is based on the historical class recorded by the signal recorder Voice data implements waveform compensation on the received voice signal at the sending end, and then the demodulator uses the demodulation codebook to demodulate the compensated signal into target data.

Before the above work process takes place, the modulator, signal recorder, signal compensator and demodulator need to learn and train the demodulation codebook through online learning, and the process is: the modulator of the voice encryption device at the sending end shares the The prefabricated random number sequence is mapped to the waveform symbol in the modulation codebook, and is sent to the opposite end through the voice channel of the cellular mobile network; the voice encryption device at the receiving end learns to generate the most Optimize the demodulation codebook and train the signal compensation weights.

As shown in Figure 4, the channel encoding module includes an encoding module, an interleaving module, an inverse interleaving module and a decoding module; its working process is: the encoding module of the transmitting-end speech encryption device uses a multi-core polar code to encrypt voice The data is encoded, and then interleaved by the interleaving module to implement row/column data interleaving, and finally handed over to the DoV link for transmission; the inverse interleaving module of the voice encryption device at the receiving end implements row/column data inverse interleaving transformation, and then decoded by the decoding module Code is the target data.

Among them, the encoding module comprehensively utilizes the boundary of the polarization kernel Bhattacharyian parameters and the maximization rule of the symbol distance to implement the multi-core polar code construction that has nothing to do with the quality of the DoV link; the decoding module is based on the polarization kernel log-likelihood ratio (log-likelihoodratio, LLR) transfer formula, using the successive elimination list (successive-cancellation list, SCL) decoding algorithm to implement decoding.

As shown in FIG. 5 , the serial cipher module includes an authentication key negotiation module, a key synchronization module and an encryption and decryption module. The encryption and decryption module is a serial cipher algorithm using two parameters of a seed key and an initial vector, the seed key remains unchanged in a session, and the initial vector is changed periodically. Its working process is: the encryption and decryption module of the voice encryption device at the sending end uses a password generation algorithm, encrypts the transmission data based on the "modulus two addition" operation, and transmits it through the DoV link; the voice encryption device at the receiving end The encryption and decryption module decrypts the received data based on the "modulo two plus" operation.

Among them, when the above working process occurs, the key synchronization module is required to perform key synchronization. This process includes two parts: initial vector synchronization and data frame serial number synchronization, and is realized by using data verification and prediction technology.

Wherein, before the above working process takes place, the authentication key negotiation module needs to negotiate the seed key, and the process is: the voice encryption device at the receiving end and the voice encryption device at the sending end pass through the private key generation center (private key generator, PKG) before the session When the terminal registration is completed and the session is completed, the speech encryption device at the receiving end and the speech encryption device at the sending end complete identity authentication-based seed key negotiation based on the certificateless public key cryptosystem.

Specifically, the source encoding module adopts the MELP algorithm, and its working process is: the source encoding module of the voice encryption device at the sending end compresses and encodes the voice data frames sampled and quantized by the voice communication module into voice parameters using the MELP algorithm, and exchanges Encrypted by the sequence cipher module; the source coding module of the voice encryption device at the receiving end reconstructs the plain voice voice based on the voice parameters decrypted by the sequence cipher module, and outputs it to the voice communication module.

As shown in Figure 6, the voice call module includes a microphone voice driver module, a sampling quantization module and a voice power amplifier driver module, and its working process is: the microphone voice driver module of the sending end voice encryption device amplifies the weak voice signal of the user microphone It is sent to the sampling and quantization module, and then parameter coding is implemented by the information source coding module; the speech power amplifier driving module of the speech encryption device at the receiving end amplifies the power of the reconstructed clear speech and outputs it to the user's earphone.

In addition to the above structures, the voice encryption device of this embodiment may further include a control module, a display module, a battery, and a power supply module.

The voice encryption device in this embodiment may be a wearable device such as an earphone, a watch, or a bracelet, but is not limited thereto.

The present embodiment also provides a real-time voice encryption method for a cellular mobile network, comprising the following steps:

For sender:

When the user speaks, the voice communication module of the voice encryption device at the sending end picks up the user's voice and amplifies, samples and quantifies it, and then the voice data frame is compressed and encoded into voice parameters by the information source coding module; Voice data, and handed over to the channel coding module for forward error correction, and then mapped to a voice-like signal by the voice-like modulation module, and finally transmitted to the cellular mobile phone through the Bluetooth connection module;

For receiver:

The voice-like modulation module of the voice encryption device at the receiving end demodulates the received voice-like signal into encrypted voice data, and after further error detection and correction by the channel coding module, it is decrypted and converted into voice parameters by the sequence encryption module, and finally passed The information source coding module reconstructs it into a clear speech signal, which is amplified by the voice communication module and then output to the user's earphone.

It should be noted that, in this document, the terms "comprising", "comprising" or any other variation thereof are intended to cover a non-exclusive inclusion such that a process, method, article or apparatus comprising a set of elements includes not only those elements, It also includes other elements not expressly listed, or elements inherent in the process, method, article, or apparatus.

Finally, it should be noted that the above descriptions are only preferred embodiments of the present invention, and are only used to illustrate the technical solution of the present invention, and are not used to limit the protection scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principles of the present invention are included in the protection scope of the present invention.

Claims (5)

1. The real-time voice encryption equipment of the cellular mobile network is characterized in that the voice encryption equipment is divided into a receiving end voice encryption equipment and a transmitting end voice encryption equipment, bluetooth connection is respectively established with the cellular mobile phones, and a cellular mobile network voice channel is established between the cellular mobile phones;

the transmitting end voice encryption equipment comprises a voice call module, a source coding module, a sequence cipher module, a channel coding module, a voice-like modulation module and a Bluetooth connection module which are sequentially connected according to a voice transmission direction; the voice call module is used for picking up the voice of the user and amplifying, sampling and quantizing the voice when the user speaks; the source coding module is used for compressing and coding the voice data frame into voice parameters; the sequence cipher module is used for encrypting the voice parameters into the close-language data; the channel coding module is used for carrying out forward error correction on the transmitted compact morphology data; the voice-like modulation module is used for mapping the close-language data subjected to forward error correction into voice-like signals; the Bluetooth connection module is used for establishing a voice transmission channel with the cellular mobile phone;

the receiving end voice encryption equipment comprises a Bluetooth connection module, a voice-like modulation module, a channel coding module, a sequence password module, a source coding module and a voice call module which are sequentially connected according to the voice transmission direction, wherein the receiving end voice encryption equipment processes according to the reverse order of the sending end voice encryption equipment when receiving the voice signals of the opposite side, and outputs plain language voice to the user earphone;

the voice-like modulation module comprises a modulation codebook, a modulator, a signal recorder, a signal compensator, a demodulator and a demodulation codebook; the modulator maps the compact morphology data subjected to forward error correction into waveform symbols in a modulation codebook which is generated in advance in an optimized way, performs filtering shaping to eliminate high-frequency harmonic waves, and transmits the waveform symbols to a voice channel of a cellular mobile network; the signal compensator carries out waveform compensation on the received transmitting-end voice-like signal according to the history voice-like data recorded by the signal recorder, and then a demodulator demodulates the compensated signal into target data by using a demodulation codebook; the modulator, the signal recorder, the signal compensator and the demodulator need to train a demodulation codebook through online learning, and the process is as follows: the modulator of the transmitting-end voice encryption equipment maps the random number sequences shared and prefabricated by the two parties into waveform symbols in a modulation codebook and transmits the waveform symbols to the opposite end through a voice channel of a cellular mobile network; the receiving terminal voice encryption equipment learns to generate an optimal demodulation codebook according to the prefabricated random number sequence and the modulation codebook shared by the two parties, and trains signal compensation weights;

the channel coding module comprises a coding module, an interleaving module, an inverse interleaving module and a decoding module; the coding module of the transmitting-end voice encryption equipment codes the compact-morphology data by using a multi-core polarization code, then carries out data interleaving/column data interleaving by an interleaving module, and finally carries out data interleaving/column data interleaving by a DoV link transmission; the reverse interleaving module of the receiving end voice encryption equipment performs reverse interleaving transformation of data of an execution/column, and then decodes the data into target data through the decoding module;

the sequence cipher module comprises an authentication key negotiation module, a key synchronization module and an encryption and decryption module; the encryption and decryption module is a sequence cipher algorithm using two parameters of a seed key and an initial vector, the seed key is kept unchanged in one session, and the initial vector is replaced periodically; the working process is as follows: the encryption and decryption module of the sending-end voice encryption equipment uses a password generation algorithm, encrypts transmission data based on a modulo two addition operation and transmits the transmission data through a DoV link; the encryption and decryption module of the receiving end voice encryption equipment decrypts the received data based on the second-mode encryption operation; the key synchronization module is used for performing key synchronization; the process comprises the steps of synchronizing two parts of contents of initial vector synchronization and data frame sequence number synchronization, and realizing the two parts of contents by using a data checksum prediction technology; the authentication key negotiation module is used for negotiating a seed key, and comprises the following steps: the receiving end voice encryption equipment and the transmitting end voice encryption equipment finish terminal registration through a private key generation center before conversation, and during conversation, the receiving end voice encryption equipment and the transmitting end voice encryption equipment finish seed key negotiation based on identity authentication based on a certificate-free public key cryptosystem;

the source coding module adopts MELP algorithm, and the working process is as follows: the source coding module of the transmitting-end voice encryption equipment compresses and codes the voice data frames sampled and quantized by the voice communication module into voice parameters by using an MELP algorithm, and then the voice parameters are encrypted by the sequence encryption module; the source coding module of the receiving end voice encryption equipment rebuilds plain language voice based on the voice parameters decrypted by the sequence password module and outputs the plain language voice to the voice call module.

2. The cellular mobile network real-time voice encryption device according to claim 1, wherein the voice call module comprises a microphone voice driving module, a sampling quantization module and a voice power amplifier driving module, and the microphone voice driving module of the transmitting-end voice encryption device is used for amplifying and transmitting weak voice signals of a microphone of a user to the sampling quantization module; and the voice power amplification driving module of the receiving end voice encryption equipment performs power amplification on the reconstructed plain language voice and outputs the reconstructed plain language voice to the user earphone.

3. The cellular mobile network real-time voice encryption device according to claim 1, wherein the receiving-side voice encryption device and the transmitting-side voice encryption device are headphones, watches, or wearable devices.

4. The cellular mobile network real-time voice encryption device of claim 1, further comprising a control module, a display module, a battery, and a power module.

5. A method for encrypting cellular mobile network real-time voice, comprising the steps of:

for the transmitting end:

when a user speaks, a voice call module of the voice encryption equipment at the transmitting end picks up the voice of the user, amplifies, samples and quantizes the voice, and then the voice data frame is transmitted to a source coding module for compression coding into voice parameters; encrypting the voice signals into dense language data through a sequence cipher module, transmitting the dense language data to a channel coding module for forward error correction, mapping the dense language data into voice signals through a voice-like modulation module, and transmitting the voice signals to a cellular mobile phone through a Bluetooth connection module;

for the receiving end:

the voice-like modulation module of the receiving end voice encryption equipment demodulates the received voice-like signal into compact-form data, and the compact-form data is further subjected to error detection and error correction by the channel coding module, then is decrypted by the sequence coding module and converted into voice parameters, finally is reconstructed into a plain-form voice signal by the source coding module, and is subjected to power amplification by the voice communication module and then is output to the user earphone;

the voice-like modulation module comprises a modulation codebook, a modulator, a signal recorder, a signal compensator, a demodulator and a demodulation codebook; the modulator maps the compact morphology data subjected to forward error correction into waveform symbols in a modulation codebook which is generated in advance in an optimized way, performs filtering shaping to eliminate high-frequency harmonic waves, and transmits the waveform symbols to a voice channel of a cellular mobile network; the signal compensator carries out waveform compensation on the received transmitting-end voice-like signal according to the history voice-like data recorded by the signal recorder, and then a demodulator demodulates the compensated signal into target data by using a demodulation codebook; the modulator, the signal recorder, the signal compensator and the demodulator need to train a demodulation codebook through online learning, and the process is as follows: the modulator of the transmitting-end voice encryption equipment maps the random number sequences shared and prefabricated by the two parties into waveform symbols in a modulation codebook and transmits the waveform symbols to the opposite end through a voice channel of a cellular mobile network; the receiving terminal voice encryption equipment learns to generate an optimal demodulation codebook according to the prefabricated random number sequence and the modulation codebook shared by the two parties, and trains signal compensation weights;

the channel coding module comprises a coding module, an interleaving module, an inverse interleaving module and a decoding module; the coding module of the transmitting-end voice encryption equipment codes the compact-morphology data by using a multi-core polarization code, then carries out data interleaving/column data interleaving by an interleaving module, and finally carries out data interleaving/column data interleaving by a DoV link transmission; the reverse interleaving module of the receiving end voice encryption equipment performs reverse interleaving transformation of data of an execution/column, and then decodes the data into target data through the decoding module;

the sequence cipher module comprises an authentication key negotiation module, a key synchronization module and an encryption and decryption module; the encryption and decryption module is a sequence cipher algorithm using two parameters of a seed key and an initial vector, the seed key is kept unchanged in one session, and the initial vector is replaced periodically; the working process is as follows: the encryption and decryption module of the sending-end voice encryption equipment uses a password generation algorithm, encrypts transmission data based on a modulo two addition operation and transmits the transmission data through a DoV link; the encryption and decryption module of the receiving end voice encryption equipment decrypts the received data based on the second-mode encryption operation; the key synchronization module is used for performing key synchronization; the process comprises the steps of synchronizing two parts of contents of initial vector synchronization and data frame sequence number synchronization, and realizing the two parts of contents by using a data checksum prediction technology; the authentication key negotiation module is used for negotiating a seed key, and comprises the following steps: the receiving end voice encryption equipment and the transmitting end voice encryption equipment finish terminal registration through a private key generation center before conversation, and during conversation, the receiving end voice encryption equipment and the transmitting end voice encryption equipment finish seed key negotiation based on identity authentication based on a certificate-free public key cryptosystem;

the source coding module adopts MELP algorithm, and the working process is as follows: the source coding module of the transmitting-end voice encryption equipment compresses and codes the voice data frames sampled and quantized by the voice communication module into voice parameters by using an MELP algorithm, and then the voice parameters are encrypted by the sequence encryption module; the source coding module of the receiving end voice encryption equipment rebuilds plain language voice based on the voice parameters decrypted by the sequence password module and outputs the plain language voice to the voice call module.

Images