Method and system for calling line authenticated key distribution

• US 20020159597A1
• Filed: 12/20/2001
• Published: 10/31/2002
• Est. Priority Date: 12/22/2000
• Status: Active Grant

• Current Assignee: SBC Technology Resources, Inc. (AT&T, Inc.)
• Original Assignee: SBC Technology Resources, Inc. (AT&T, Inc.)
• Inventors: Adams, Thomas Lee
• Granted Patent: US 6,985,587 B2
• Time in Patent Office: Days
• US Class Current: 380/257
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04M 2207/12 intelligent networks
• CPC Class Codes: H04M 2242/22 Automatic class or number identification arrangements
• CPC Class Codes: H04M 3/38 Graded-service arrangements, i.e. some subscribers prevented from establishing certain connections queuing arrangements H04Q3/64
• CPC Class Codes: H04M 3/382 using authorisation codes or passwords
• CPC Class Codes: H04M 3/42059 Making use of the calling party identifier
• CPC Class Codes: H04M 7/0024 Services and arrangements where telephone services are combined with data services arrangements which combine a telephonic equipment and a computer H04M7/0012
• CPC Class Codes: H04M 7/0078 Security; Fraud detection; Fraud prevention
• CPC Class Codes: H04Q 3/0029 Provisions for intelligent networking

Abstract

The preferred embodiments described herein provide a method and system for calling line authenticated key distribution. In one preferred embodiment, an authentication key is provided to a calling party if the calling party is phoning from a calling line associated with an authorized user. This preferred embodiment provides a more secure authentication key distribution method as compared to the prior art since preventing an unauthorized user from gaining access to an authorized user'"'"'s calling line is more feasible and reliable than attempting to prevent an unauthorized user from obtaining an authorized user'"'"'s password. Other preferred embodiments are provided, and each of the preferred embodiments described herein can be used alone or in combination with one another.

Claims

1. A method for sending an authentication key to a calling party, the method comprising:

with a telephone network, routing a call from a calling party to a server, the calling party initiating the call from a calling line identified by a calling line identifier;

with the telephone network, determining an authentication key associated with the calling line identifier;

sending the authentication key to the server; and

sending the authentication key from the server to the calling party.

2. The invention of claim 1, wherein the call is routed using a service switching point.

3. The invention of claim 1, wherein a service control point determines the authentication key associated with the calling line identifier.

4. The invention of claim 1, wherein the server comprises a connectivity server, and wherein the authentication key is sent to the connectivity server through a key distribution server.

5. The invention of claim 4, wherein the authentication key is sent to the key distribution server through a firewall.

6. The invention of claim 1, wherein the calling line identifier comprises a directory number.

7. A method for sending an authentication key to a calling party, the method comprising:

routing a call from a calling party to a connectivity server through a service switching point, the calling party initiating the call from a calling line identified by a calling line identifier;

sending a query from the service switching point to a service control point, the query comprising the calling line identifier;

with the service control point, determining an authentication key associated with the calling line identifier;

sending the authentication key to a key distribution server;

sending the authentication key from the key distribution server to the connectivity server; and

sending the authentication key from the connectivity server to the calling party.

8. The invention of claim 7 further comprising:

removing the authentication key from key distribution server.

9. The invention of claim 7, wherein the authentication key is sent to the key distribution server through a firewall.

10. The invention of claim 7, wherein the connectivity server is in communication with the service switching point via a modem.

11. The invention of claim 7, wherein the service control point retrieves the authentication key from a database correlating authentication keys and calling line identifiers.

12. The invention of claim 7, wherein the calling line identifier comprises a directory number.

13. The invention of claim 7, wherein the query is sent from the service switching point to the service control point in response to a terminating attempt trigger.

15. The invention of claim 14, wherein the server is part of a computer network comprising a second server, and wherein the authentication key is sent to the first-mentioned server via the second server.

16. The invention of claim 15, wherein the first-mentioned server comprises a connectivity server, and wherein the second server comprises a key distribution server.

17. The invention of claim 14 further comprising a firewall, wherein the authentication key is sent to the server through the firewall.

18. The invention of claim 14, wherein the calling line identifier comprises a directory number.

19. The invention of claim 14, wherein the service switching point is operative to send the query to the service control point in response to a terminating attempt trigger.

20. The invention of claim 14 further comprising a modem connecting the server with the service switching point.

21. The invention of claim 7 further comprising:

marking the authentication key as distributed.

14. A system for sending an authentication key to a calling party, the system comprising:

a server;

a service switching point operative to route a call from a calling party to the server, the calling party initiating the call from a calling line identified by a calling line identifier;

a database correlating authentication keys and calling line identifiers; and

a service control point in communication with the database and operative to determine an authentication key associated with the calling line identifier in response to a query from the service switching point, wherein the service control point is further operative to send the authentication key associated with the calling line identifier to the server;

wherein the server is further operative to send the authentication key to the calling party.

22. A method for sending an authentication key to a calling party, the method comprising:

routing a call from a calling party to a connectivity server through a service switching point, the calling party initiating the call from a calling line identified by a calling line identifier;

sending a query from the service switching point to a service control point, the query comprising the calling line identifier;

with the service control point, determining whether an authentication key for the calling line identifier exists in a key distribution server;

if the authentication key for the calling line identifier exists, sending an indication to the key distribution server that the authentication key stored in the key distribution server should be sent to the calling party;

sending the authentication key from the key distribution server to the connectivity server; and

sending the authentication key from the connectivity server to the calling party.

23. The invention of claim 22 further comprising:

removing the authentication key from key distribution server.

24. The invention of claim 22 further comprising:

marking the authentication key as distributed.

25. The invention of claim 22, wherein the indication is sent to the key distribution server through a firewall.

26. The invention of claim 22, wherein the connectivity server is in communication with the service switching point via a modem.

27. The invention of claim 22, wherein the service control point determines whether an authentication key exists for the calling line identifier by consulting a database storing calling line identifiers for which authentication keys exist.

28. The invention of claim 22, wherein the calling line identifier comprises a directory number.

29. The invention of claim 22, wherein the query is sent from the service switching point to the service control point in response to a terminating attempt trigger.

30. A method for sending an authentication key to a calling party, the method comprising:

with a telephone network, routing a call from a calling party to a server, the calling party initiating the call from a calling line identified by a calling line identifier;

with the telephone network, providing the server with the calling line identifier;

with the server, authenticating the calling party with the calling line identifier; and

sending an authentication key from the server to the calling party.

31. The invention of claim 30, wherein the calling line identifier comprises a directory number.

32. The invention of claim 30, wherein the server comprises a connectivity server, and the invention further comprises:

before the authentication key is sent from the connectivity server to the calling party, sending the authentication key to the connectivity server from a key distribution server.