IncoTecs CryptoCall

Secure Communication Done Right

CryptoCall by IncoTecs is a business solution featuring encrypted telephony that runs on all iOS and Android smartphones. Make smartphone-to-smartphone calls, secure in the knowledge that they cannot be intercepted. Benefit from the encrypted dial-in to your company or use CryptoCall to connect your company sites.

Security & Administration of the CryptoCall System

I joined this project as a subcontractor for Alexander Kordecki. In this role, I developed, amongst other things, routines for the self hosted SSL certification authority, which enabled CryptoCall to operate independently of external security providers. This allowed for completely autonomous communication with end-to-end encryption via an app.

In addition, I took the lead on developing the administration interface for the SSL certification authority within a Joomla application, and drafted the initial versions of two patent applications.

The product information for Incotecs CryptoCall is available at Archive.org.

CryptoCall in the AIS Core

The company Agile Interoperable Solutions presented in 2016 the CORE (Common Operating Radio Engine), that was based on CryptoCall. It was marketed as a communication solution for integrated and redundant radio, cellular and hardline phone communications to public safety, private entities, and the military.

Scenes from product videos for the AIS Core, that utilized CryptoCall.

Patent Applications

As part of my work on the CryptoCall project, I also took on the challenge of drafting two patent applications as a ghostwriter. This was done in close consultation with the inventor and through my own research into form and structure of such a document. I regard my work as a first draft, which will need to undergo several revisions before it finally takes the form that can be submitted to the Patent Office. I am, in fact, unclear of further progress of this work.

PKI based SAS Gateway Communication Encryption System

Assure secure communication for voice calls from mobile devices to any endpoint, including devices lacking encryption capabilities, in an already secured network, utilizing modern “man in the middle attacks” safeguard protocols.

Loss-Tolerant Source Authentication For Multicast Streaming

This invention establishes a process, which allows to reliably authorize the source of a multicast transmission with minimal computational requirements, even in the case of high package loss. For this, the sender randomizes both the order of data packages and the package's sequence numbers. In addition to the data packages themselves, another package is sent in regular intervals, that contains the correct order of the data packages, which is lost due to the randomization of the sequence numbers. This additional, descriptive package is signed using asymmetrical cryptography. The receiving end devices buffer all incoming data packages until the signed package is encountered. The signature is then verified, reliably identifying the source of the transmission, and the correct order of the buffered data packages can be established.