System and method for the secure enrollment of devices with a clearinghouse server for internet telephony and multimedia communications

• US 20020049654A1
• Filed: 12/22/2000
• Published: 04/25/2002
• Est. Priority Date: 12/22/1999
• Status: Active Grant

• Current Assignee: Transnexus Incorporated
• Original Assignee: Transnexus Incorporated
• Inventors: Thomas, Stephen, McManus, Rodney Scott, Vaughn, Rick
• Granted Patent: US 7,203,956 B2
• Time in Patent Office: Days
• US Class Current: 705/35
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 65/1073 Registration or de-registration
• CPC Class Codes: H04M 15/00 Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04M 15/48 Secure or trusted billing, e.g. trusted elements or encryption
• CPC Class Codes: H04M 15/56 for VoIP communications
• CPC Class Codes: H04M 2215/0156 Secure and trusted billing, e.g. trusted elements, encryption, digital signature, codes or double check mechanisms to secure billing calculation and information
• CPC Class Codes: H04M 2215/202 VoIP; Packet switched telephony
• CPC Class Codes: H04M 7/0078 Security; Fraud detection; Fraud prevention

Abstract

Enrolling devices with a clearinghouse server for Internet telephony and multimedia communications. Enrollment can be the process of taking a network device (such as a router, gateway, gatekeeper, etc.) and exchanging encrypted information with the clearinghouse server, so that later communications with that device can be secured. The enrollment is done with levels of security and verification that ensures the devices and clearinghouse server is legitimate.

Claims

1. A method for secure enrollment of a device with services of a clearinghouse enrollment server supporting communications completed by an Internet telephony system, comprising the steps:

initiating a request by the device to enroll for the services of the clearinghouse enrollment server;

verifying an identity of the clearinghouse enrollment server by using a security infrastructure comprising the Secure Sockets Layer (SSL) and a public key infrastructure; and

responsive to verifying the identity of the clearinghouse enrollment server, completing enrollment of the device to access the services of the clearinghouse enrollment server.

2. A method for secure enrollment of a device with services of a clearinghouse server for an Internet telephony system, comprising the steps:

obtaining an identity of the clearinghouse server;

issuing a CA certificate request from the device to the clearinghouse server using the obtained identity;

responsive to the CA certificate request, transmitting a CA certificate from the clearinghouse server to the device;

determining by the device the verification of the CA certificate;

responsive to verification of the CA certificate, generating a combination of a private key and a public key and issuing to the clearinghouse server a request from the device for enrollment comprising the public key;

responsive to the device enrollment request, generating a public key certificate at the clearinghouse server and transmitting the public key certificate to the device, thereby enabling the device to securely verify the identity of the clearinghouse server; and

responsive to verifying the identity of the clearinghouse server, completing enrollment of the device to access the services of the clearinghouse server.