Method and system for calling line authenticated key distribution

• US 20060045268A1
• Filed: 10/28/2005
• Published: 03/02/2006
• Est. Priority Date: 12/22/2000
• Status: Abandoned Application

• Current Assignee: SBC Technology Resources, Inc. (AT&T, Inc.)
• Original Assignee: SBC Technology Resources, Inc. (AT&T, Inc.)
• Inventors: Adams, Thomas Lee
• Application Number:
  US11/261,296
• Publication Number:
  US 20060045268A1
• Time in Patent Office: Days
• US Class Current: 380/257
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04M 2207/12 intelligent networks
• CPC Class Codes: H04M 2242/22 Automatic class or number identification arrangements
• CPC Class Codes: H04M 3/38 Graded-service arrangements, i.e. some subscribers prevented from establishing certain connections queuing arrangements H04Q3/64
• CPC Class Codes: H04M 3/382 using authorisation codes or passwords
• CPC Class Codes: H04M 3/42059 Making use of the calling party identifier
• CPC Class Codes: H04M 7/0024 Services and arrangements where telephone services are combined with data services arrangements which combine a telephonic equipment and a computer H04M7/0012
• CPC Class Codes: H04M 7/0078 Security; Fraud detection; Fraud prevention
• CPC Class Codes: H04Q 3/0029 Provisions for intelligent networking

Abstract

The preferred embodiments described herein provide a method and system for calling line authenticated key distribution. In one preferred embodiment, an authentication key is provided to a calling party if the calling party is phoning from a calling line associated with an authorized user. This preferred embodiment provides a more secure authentication key distribution method as compared to the prior art since preventing an unauthorized user from gaining access to an authorized user'"'"'s calling line is more feasible and reliable than attempting to prevent an unauthorized user from obtaining an authorized user'"'"'s password. Other preferred embodiments are provided, and each of the preferred embodiments described herein can be used alone or in combination with one another.

Claims

1. A method of sending an authentication key to a calling party, the method comprising:

determining with a telephone network an authentication key associated with a calling line identifier, the calling line identifier identifying a calling line on which a calling party initiated a telephone call; and

sending the authentication key to calling party.

2. The method of claim 1, further comprising:

marking the authentication key as distributed.

3. The method of claim 1, wherein the calling line identifier comprises a directory number.

4. A system for sending an authentication key to a calling party, the system comprising:

a server to receive a call from a calling party, the calling party initiating the call from a calling line identified by a calling line identifier;

a database correlating authentication keys and calling line identifiers; and

a service control point in communication with the database and operative to determine an authentication key associated with the calling line identifier in response to a query from the service switching point, wherein the service control point is further operative to send the authentication key associated with the calling line identifier to the server;

wherein the server is further operative to send the authentication key to the calling party.

5. The system of claim 4, wherein the calling line identifier comprises a directory number.

6. A computer-readable storage medium containing a set of instructions for sending an authentication key to a calling party, the set of instructions to direct a computer system to perform acts of:

routing a call from a calling party to a server, the calling party initiating the call from a calling line identified by a calling line identifier;

determining an authentication key associated with the calling line identifier;

sending the authentication key to the server; and

sending the authentication key from the server to the calling party.

7. The computer-readable storage medium of claim 6, wherein the set of instructions further directs the computer server to perform the acts of:

marking the authentication key as distributed.

8. The computer-readable storage medium of claim 6, wherein the call is routed using a service switching point.

9. The computer-readable storage medium of claim 6, wherein the server comprises a connectivity server and the authentication key is sent to the connectivity server through a key distribution server.

10. The computer-readable storage medium of claim 9, wherein the authentication key is sent to the key distribution server through a firewall.

11. The computer-readable storage medium of claim 6, wherein the calling line identifier comprises a directory number.

12. A computer-readable storage medium containing a set of instructions for sending an authentication key to a calling party, the set of instructions to direct a computer system to perform acts of:

routing a call from a calling party to a connectivity server through a service switching point, the calling party initiating the call from a calling line identified by a calling line identifier;

sending a query from the service switching point to a service control point, the query comprising the calling line identifier;

determining an authentication key associated with the calling line identifier;

sending the authentication key to a key distribution server;

sending the authentication key from the key distribution server to the connectivity server; and

sending the authentication key from the connectivity server to the calling party.

13. The computer-readable storage medium of claim 12, the set of instructions to direct the computer system to perform further acts of:

marking the authentication key as distributed.

14. The computer-readable storage medium of claim 12, the set of instructions to direct the computer system to perform further acts of:

removing the authentication key from key distribution server.

15. The computer-readable storage medium of claim 12, wherein the authentication key is sent to the key distribution server through a firewall.

16. The computer-readable storage medium of claim 12, wherein the authentication key is retrieved from a database correlating authentication keys and calling line identifiers.

17. The computer-readable medium of claim 12, wherein the calling line identifier comprises a directory number.

18. A computer-readable storage medium containing a set of instructions for sending an authentication key to a calling party, the set of instructions to direct a computer system to perform acts of:

routing a call from a calling party to a server, the calling party initiating the call from a calling line identified by a calling line identifier;

providing the server with the calling line identifier;

authenticating the calling party with the calling line identifier; and

sending an authentication key from the server to the calling party.

19. The computer-readable storage medium of claim 18, wherein the calling line identifier comprises a directory number.

20. The computer-readable storage medium of claim 18, the set of instructions to direct the computer system to perform further acts of:

marking the authentication key as distributed.