Device to PC authentication for real time communications

• US 20080075064A1
• Filed: 08/30/2006
• Published: 03/27/2008
• Est. Priority Date: 08/30/2006
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Khanchandani, Niraj K., Yee, Dawson, Krantz, Anton W.
• Application Number:
  US11/514,020
• Publication Number:
  US 20080075064A1
• Time in Patent Office: Days
• US Class Current: 370/352
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 65/1073 Registration or de-registration

Abstract

A method for securely pairing an IP phone with a computing device during VoIP communication on an IP network comprising a plurality of IP phones and computing devices is disclosed. The method pairs an IP phone with a computing device. The IP phone is authenticated to the computing device and the computing device to the IP phone using an identity registered with an identity service. If the authentication succeeds, a pairing data structure is created on the IP phone that is dedicated to communicating with the computing device and a pairing data structure on the computing device is created that is dedicated to communicating with the IP phone.

Claims

1. A method for securely pairing an IP phone with a computing device for secure VoIP communication on an IP network, the method comprising:

authenticating the IP phone to the computing device and the computing device to the IP phone using an identity registered with an identity service; and

if the authentication succeeds, creating a pairing data structure on the IP phone dedicated to communicating with the computing device and creating a pairing data structure on the computing device dedicated to communicating with the IP phone.

2. The method of claim 1, wherein authenticating the IP phone to the computing device and the computing device to the IP phone using an identity registered with the identity service comprises the IP phone:

(a) determining the most recent active computing device of a plurality of computing devices;

(b) transmitting the pairing request to each computing device of the plurality of computing devices;

(c) designating the most recent active computing device as a preferred computing device; and

(d) receiving a response from the preferred computing device.

3. The method of claim 2, wherein the designation of the preferred computing device is overrideable.

4. The method of claim 1, wherein authenticating the IP phone to the computing device and the computing device to the IP phone using an identity registered with the identity service comprises the computing device:

(a) determining the most recently active IP phone of a plurality of IP phones;

(b) transmitting a pairing request to each IP phone of the plurality of IP phones;

(c) designating the most recently active phone IP as a preferred IP phone; and

(d) receiving a response from the preferred phone.

5. The method of claim 4, wherein the designation of the preferred IP phone is overrideable.

6. The method of claim 1, wherein authenticating the IP phone to the computing device and the computing device to the IP phone using an identity registered with the identity service comprises:

(a) connecting the computing device and the IP phone via a network not connected to the IP network;

(b) the IP phone transmitting a challenge to each of a plurality of computing devices on the IP network; and

(c) the computing device connected to the IP phone via a network not connected to the IP network transmitting a correct response to the challenge.

7. The method of claim 6, wherein the network not connected to the IP network is a USB network.

8. The method of claim 6, wherein the network not connected to the IP network is a wireless network.

9. The method of claim 1, wherein authenticating the IP phone to the computing device and the computing device to the IP phone using an identity registered with the identity service comprises:

(a) connecting the computing device and the IP phone via a network not connected to the IP network;

(b) the computing device transmitting a challenge to each of a plurality of IP phones; and

(c) the IP phone connected to the computing device via a network not connected to the IP network transmitting a correct response to the challenge.

10. The method of claim 9, wherein the network not connected to the IP network is a USB network.

11. The method of claim 9, wherein the network not connected to the IP network is a wireless network.

12. A computer readable medium having stored thereon executable instructions that when selected pair a computing device to an IP phone, the computer executable instructions including:

an identification component for registering the computing device'"'"'s identity with an identity service;

an identification component for accessing the identity service to acquire an IP phone'"'"'s identity;

an authenticating component for authenticating the IP phone to the computing device using the IP phone identity acquired from the identity service; and

a pair data structuring component for creating a pairing data structure on the computing device dedicated to communicating with the IP phone.

13. The computer readable medium of claim 12, wherein the authenticating component for authenticating the IP phone to the computing device;

(a) determines the most recent active IP phone of a plurality of IP phones;

(b) transmits a pairing request to each IP phone of the plurality of IP phones; and

(c) designates the most recently active IP phone as a preferred IP phone.

14. The computer readable medium of claim 13, wherein the designation of the preferred IP phone is overrideable.

15. The computer readable medium of claim 12, wherein the authenticating component for authenticating the IP phone to the computing device authenticates the IP phone to the computing device uses more than one communication channel.

16. A computer readable medium having stored thereon executable instructions that when executed pair an IP phone to a computing device, the computer executable instructions including:

an identification component for registering the IP phone'"'"'s identity with an identity service;

an identification component for accessing the identity service to acquire a computing device'"'"'s identity;

an authenticating component for authenticating the computing device to the IP phone using the computing device'"'"'s identity acquired from the identity service; and

a pair data structuring component for creating a pairing data structure on the IP phone dedicated to communicating with the computing device.

17. The computer readable medium of claim 16, wherein the authenticating component for authenticating the computing device to the IP phone:

(a) determines the most recently active computing device of a plurality of computing devices;

(b) transmits a pairing request to each computing device of the plurality of computing devices; and

(c) designates the most recently active computing device as a preferred computing device.

18. The computer readable medium of claim 17, wherein the designation of the preferred computing device is overrideable.

19. The computer readable medium of claim 16, wherein the authenticating component for authenticating the computing device to the IP phone authenticates the computing device to the IP phone uses more than one communication channel.

20. The computer readable medium of claim 19, wherein the more than one communication channels are an IP network and a USB network.