Method and system for multi-level secure personal profile management and access control to the enterprise multi-modal communication environment in heterogeneous convergent communication networks

• US 20070115940A1
• Filed: 05/31/2006
• Published: 05/24/2007
• Est. Priority Date: 10/13/2005
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: Passban, Inc.
• Inventors: Alikhani, Kayvan, Naimi, Farzad, Kamen, Vladimir
• Granted Patent: US 8,406,421 B2
• Time in Patent Office: Days
• US Class Current: 370/352
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 65/103 in the network
• CPC Class Codes: H04L 65/1053 IP private branch exchange [PBX] functionality entities or arrangements circuit switched PBXs H04M3/00
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04M 1/2535 adapted for voice communication over an Internet Protocol [IP] network Voice over Internet Protocol (VoIP) network equipment and services H04M7/006; implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP] H04L69/16
• CPC Class Codes: H04M 1/66 with means for preventing unauthorised or fraudulent calling verifying user identity or authority in secret or secure digital communications H04L9/32
• CPC Class Codes: H04M 7/0078 Security; Fraud detection; Fraud prevention

Abstract

A method and apparatus, in accordance with an embodiment of the present invention, is presented for securely accessing a voice-enabled communication terminal using Internet Protocol by performing physical authentication, performing biometric authentication, performing logical authentication, performing confirmation of a user and upon successful confirmation of the user, allowing access to the communication terminal.

Claims

1. A method of securely accessing a voice-enabled communication terminal, having certain functions associated therewith, using an Internet Protocol (IP) comprising:

performing physical authentication of a user;

performing logical authentication of the user;

performing verification of the user; and

upon successful confirmation of the user, allowing access to the functions of the communication terminal.

2. A method of securely accessing a voice-enabled communication terminal, as recited in claim 1, further including the step of performing biometric verification of the user.

3. A method of securely accessing a voice-enabled communication terminal, as recited in claim 1, wherein the communication terminal is an Internet Protocol (IP) telephone.

4. A method of securely accessing a voice-enabled communication terminal, as recited in claim 3, further including the step of, upon access of the IP telephone, using the user profile to build functions for the IP telephone.

5. A method of securely accessing a voice-enabled communication terminal, as recited in claim 3, wherein coupling the IP telephone to a secure personal authentication reader (SPAR) device.

6. A method of securely accessing a voice-enabled communication terminal, as recited in claim 3, further including encrypting authentication data for authentication of the user.

7. A secure service point (SSP) system comprising a secure personal authentication reader (SPAR) device coupled to communication terminal, which is in communication with a network switch 16 for performing physical authentication of a user, for performing logical authentication of the user, for performing verification of the user and upon successful confirmation of the user, allowing access to the functions of the communication terminal.

8. A SSP system, as recited in claim 7, wherein the communication terminal is an Internet Protocol (IP) telephone.

9. A SSP system, as recited in claim 8, further including a user profile having functions for the IP telephone.

10. A SSP system, as recited in claim 8, wherein the SPAR device includes any combination of a smart card reader, a biometric reader, a magnetic card or RFID.

11. A SSP system, as recited in claim 8, wherein at least one IP telephone and an associated SPAR device are employed in a multi-modal service-point convergent communication system.

12. A SSP system, as recited in claim 11, wherein said at least one IP telephone and an associated SPAR device are configures to dynamically determine the type of requested service from the user, and ability to execute automated multi-modal interaction session with the user.

13. A SSP system, as recited in claim 11, wherein said multi-modal service-point convergent communication system includes a Customer Relationship Management (CRM) software environment for requesting and delivering relevant business services to an authenticated user through the IP telephone.