Method and system indicating a level of security for VoIP calls through presence

• US 20060218399A1
• Filed: 03/28/2005
• Published: 09/28/2006
• Est. Priority Date: 03/28/2005
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Jennings, Cullen F., FitzGerald, Cary W.
• Granted Patent: US 8,015,403 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

In accordance with a particular embodiment of the present invention, a method for providing security information associated with a prospective communication session to a user includes providing at least one communication network for the establishment of a prospective communication session between a first network device and a second network device. A security rating is assigned to the prospective communication session, and security information is provided to a user associated with the first network device that includes the security rating.

Claims

1. A method for providing security information associated with a prospective communication session to a user, comprising:

providing at least one communication network for the establishment of a prospective communication session between a first network device and a second network device;

assigning a security rating to the prospective communication session; and

providing security information to a user associated with the first network device that includes the security rating.

2. The method of claim 1, wherein providing the at least one communication network for the establishment of a prospective communication session comprises providing the at least one communication network for the communication of signaling.

3. The method of claim 1, wherein providing the at least one communication network for the establishment of a prospective communication session comprises providing the at least one communication network for the communication of media.

4. The method of claim 1, wherein assigning the security rating comprises obtaining security information pertaining to the ability of the second network device to ensure that an actual communication session will be secure.

5. The method of claim 1, wherein assigning the security rating comprises:

identifying a communication path between the first network device and the second network device, the communication path comprising one or more networks; and

determining a security level provided by each of the one or more networks; and

identifying a lowest security level provided on the communication path.

6. The method of claim 5, further comprising:

assigning an insecure security rating to the prospective communication session if any of the one or more networks have a security level of insecure; and

assigning a secure security rating to the prospective communication session if all of the one or more networks have a security level of secure.

7. The method of claim 5, further comprising:

assigning an insecure security rating to the prospective communication session if any one of the one or more networks comprise an unencrypted network; and

assigning a secure security rating to the prospective communication session if all of the one or more networks are encrypted networks.

8. The method of claim 1, wherein providing the security information to the user associated with the first network device includes displaying an icon identifying the security rating on an endpoint used by the first user.

9. The method of claim 1, further comprising providing presence information to the first user.

10. The method of claim 9, wherein providing the presence information comprises:

determining the availability of a user associated with the second network device to the establishment of the actual communication session between the first network device and the second network device; and

displaying the availability of the user associated with the second network device to the user associated with the first network device.

11. The method of claim 1, further comprising:

maintaining an association list identifying a plurality of end users with whom the user associated with the first network device is associated;

obtaining security infromation for a plurality of prospective communication sessions between the first network device and the plurality of end users;

assigning a security rating to each of the plurality of prospective communication sessions; and

providing security information to the user associated with the first network device that includes the security rating assigned to each of the plurality of prospective communication sessions.

12. The method of claim 11, further comprising:

receiving a user selection, from the user associated with the first network device, identifying a selected prospective communication session from the plurality of prospective communication sessions; and

establishing an actual communication session in response to receiving the user selection.

13. A system for providing security information associated with a prospective communication session to a user, comprising:

a plurality of endpoints operable to establish one or more communication sessions over a network; and

a processor coupled to the network, the processor operable to;

provide at least one communication network for the establishment of a prospective communication session between a first network device and a second network device;

assign a security rating to the prospective communication session; and

provide security information to a user associated with the first network device that includes the security rating.

14. The system of claim 13, wherein the at least one communication network provides for the communication of signaling.

15. The system of claim 13, wherein the at least one communication network provides for the communication of media.

16. The system of claim 13, wherein the processor is operable to assign the security rating by obtaining security information pertaining to the ability of the second network device to ensure that an actual communication session will be secure

17. The system of claim 13, wherein the processor is operable to assign the security rating by:

identifying a communication path between the first network device and the second network device, the communication path comprising one or more networks; and

determining a security level provided by each of the one or more networks; and

identifying a lowest security level provided on the communication path.

18. The system of claim 17, wherein the processor is further operable to:

assign an insecure security rating to the prospective communication session if any of the one or more networks have a security level of insecure; and

assign a secure security rating to the prospective communication session if all of the one or more networks have a security level of secure.

19. The system of claim 17, wherein the processor is further operable to:

assign an insecure security rating to the prospective communication session if any one of the one or more networks comprise an unencrypted network; and

assign a secure security rating to the prospective communication session if all of the one or more networks are encrypted networks.

20. The system of claim 13, wherein the processor is further operable to provide the security information to the user associated with the first network device by displaying an icon identifying the security rating on an endpoint used by the first user.

21. The system of claim 13, wherein the processor is further operable to provide presence information to the first user.

22. The system of claim 21 wherein the processor is further operable to provide the presence information by:

determining the availability of a user associated with the second network device to the establishment of the actual communication session between the first network device and the second network device; and

displaying the availability of the user associated with the second network device to the user associated with the first network device.

23. The system of claim 13, wherein the processor is further operable to:

maintain an association list identifying a plurality of end users with whom the user associated with the first network device is associated;

obtain security infromation for a plurality of prospective communication sessions between the first network device and the plurality of end users;

assign a security rating to each of the plurality of prospective communication sessions; and

provide security information to the user associated with the first network device that includes the security rating assigned to each of the plurality of prospective communication sessions.

24. The system of claim 23, wherein the processor is further operable to:

receive a user selection, from the user associated with the first network device, identifying a selected prospective communication session from the plurality of prospective communication sessions; and

establish an actual communication session in response to receiving the user selection.

25. A system for providing security information associated with a prospective communication session to a user, comprising:

means for providing at least one communication network for the establishment of a prospective communication session between a first network device and a second network device;

means for assigning a security rating to the prospective communication session; and

means for providing security information to a user associated with the first network device that includes the security rating.

26. Logic embodied in a computer readable medium, the computer readable medium comprising code operable to:

provide at least one communication network for the establishment of a prospective communication session between a first network device and a second network device;

assign a security rating to the prospective communication session; and

provide security information to a user associated with the first network device that includes the security rating.