Method and apparatus for identifying a voice caller

• US 20030051133A1
• Filed: 09/12/2002
• Published: 03/13/2003
• Est. Priority Date: 09/13/2001
• Status: Active Grant

• Current Assignee: Valtrus Innovations Limited (f/k/a Dolya Holdco 9 Limited) (Key Patent Innovations Limited)
• Original Assignee: Hewlett-Packard Company (HP Inc.)
• Inventors: Pearson, Siani Lynne
• Granted Patent: US 7,634,656 B2
• Time in Patent Office: Days
• US Class Current: 713/155
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04M 1/2535 adapted for voice communication over an Internet Protocol [IP] network Voice over Internet Protocol (VoIP) network equipment and services H04M7/006; implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP] H04L69/16
• CPC Class Codes: H04M 1/57 Arrangements for indicating or recording the number of the calling subscriber at the called subscriber's set at the operator set in a manual exchange H04M5/20
• CPC Class Codes: H04M 1/571 Blocking transmission of caller identification to called party
• CPC Class Codes: H04M 2242/22 Automatic class or number identification arrangements
• CPC Class Codes: H04M 3/42042 Notifying the called party of information on the calling party details within substation equipment H04M1/57, signalling details H04Q3/72
• CPC Class Codes: H04M 7/006 Networks other than PSTN/ISDN providing telephone service, e.g. Voice over Internet Protocol (VoIP) , including next generation networks with a packet-switched transport layer H04L65/00 takes precedence; aspects not specific to the type of network H04M3/00; special services in those networks H04M3/42

Abstract

A voice call system and a method and apparatus for identifying a voice caller are disclosed. The system includes a call originator apparatus 10 and a called party apparatus 20. At least one trusted user identity is formed at the call originator apparatus 10, ideally in a trusted platform module 12 configured according to a Trusted Computing Platform Alliance (TCPA) specification. The called party apparatus 20 checks the trusted user identity when establishing a new voice call. Advantageously, an identity of the voice caller using the call originator apparatus is confirmed in a reliable and trustworthy manner, even when the voice call is transported over an inherently insecure medium, e.g. an open computing system like the internet 30. Preferred embodiments of the invention use IP telephony, such as SIP (session initiation protocol) or H.323 standard voice telephony.

Claims

1. A method for identifying a voice caller in a voice call network including a call originating apparatus and a called party apparatus, the method comprising the steps of:

forming a trusted user identity comprising an identity label and a cryptographically generated identity key;

initiating a voice call; and

providing the trusted user identity from the call originating apparatus to the called party apparatus.

2. The method of claim 1, wherein the step of forming a trusted user identity includes obtaining a certificate signed by a trusted certifying authority, and the step of providing the trusted user identity includes supplying the certificate to the called party apparatus.

3. The method of claim 1, wherein the identity label is anonymous, in that the identity label does not reveal a real identity of the voice caller.

4. The method of claim 1, comprising forming a plurality of trusted user identities, and selecting one amongst the plurality of trusted user identities.

5. The method of claim 1, wherein the voice call is an IP telephony voice call.

6. A method for identifying a voice caller, for use in a computing network arranged to carry a voice call from a call originating apparatus to a called party apparatus, the method comprising the steps of:

forming a user identity at the call originating apparatus, the user identity being a cryptographic identity according to an encryption algorithm; and

initiating a IP telephony voice call, including supplying the user identity from the call originating apparatus to the called party apparatus.

7. The method of claim 6, comprising forming the user identity with an asymmetric encryption algorithm.

8. The method of claim 6, comprising creating a public key and private key pair, retaining the private key at the call originating apparatus, and supplying the public key to the called party apparatus in the user identity.

9. The method of claim 6, comprising cryptographically checking the user identity at the called party apparatus.

10. The method of claim 6, comprising indicating a successful or unsuccessful result of the cryptographic check at the called party apparatus.

11. The method of claim 6, wherein the step of forming a user identity includes obtaining a signature from a privacy certifying authority.

12. The method of claim 11, comprising checking the signature at the called party apparatus using a signature checking key.

13. The method of claim 6, comprising forming a plurality of user identities, and selecting one user identity amongst the plurality of user identities to provide to the called party apparatus.

14. The method of claim 6, wherein the user identity includes a user identity label, and the method includes the step, at the called party apparatus, of displaying the user identity label on a display.

15. A call originating user apparatus arranged to originate a voice call over a computing network to a called party apparatus, the call originating user apparatus comprising:

a call unit arranged to initiate a voice call over the computing network; and

an identity unit arranged to form a cryptographic user identity, and to provide the cryptographic user identity to the called party apparatus.

16. The apparatus of claim 15, wherein the identity unit is arranged to form a trusted user identity comprising an identity label and a public identity key, the public identity key being formed as one part of an asymmetric encryption algorithm.

17. The apparatus of claim 16, wherein the user identity comprises a signature obtained from a privacy certifying authority.

18. The apparatus of claim 16, wherein the identity unit comprises a TCPA trusted platform module.

19. The apparatus of claim 16, wherein the identity unit is arranged to form a plurality of trusted user identities and to select one amongst the plurality for a particular voice call.

20. The apparatus of claim 19, wherein the identity unit is arranged to select the one amongst the plurality of user identities automatically in a random or pseudorandom pattern.

21. A called party user apparatus arranged to receive a voice call from a call originating apparatus across a computing network, the called party user apparatus comprising:

a call unit arranged to receive an incoming voice call that includes a cryptographically-formed user identity; and

a check unit arranged to cryptographically check the user identity to identify a voice caller.

22. The apparatus of claim 21, wherein the check unit is arranged to make a challenge to the call originator apparatus, and in return receive a signed response.

23. The apparatus of claim 21, wherein the user identity comprises a user identity label, a public identity key, and a third-party signature, and the check unit is arranged to check the third-party signature using a signature checking key, cryptographically check the public identity key by interrogating the call originating apparatus, and then identify a voice caller with the user identity label.

24. A voice call system for use in IP telephony, the system comprising:

a call originator apparatus adapted to form and send a cryptographic caller identity that includes an identity label and a public identity key, the public identity key being one part of a public key and private key encryption; and

a called party apparatus arranged to receive and check the caller identity, using the public key.

25. The system of claim 24, wherein the call originator apparatus and the called party apparatus are each arranged to communicate by IP telephony.

26. The apparatus of claim 25, wherein the call originator apparatus and the called party apparatus are each arranged to communicate by Session Initiation Protocol or H.323 standard IP telephony.