CALL ROUTING VIA RECIPIENT AUTHENTICATION

• US 20080119165A1
• Filed: 10/02/2006
• Published: 05/22/2008
• Est. Priority Date: 10/03/2005
• Status: Abandoned Application

• Current Assignee: Divitas Networks, Inc.
• Original Assignee: Divitas Networks, Inc.
• Inventors: Mittal, Ajay, Karia, Snehal, Athuluru, Srinivasa
• Application Number:
  US11/538,037
• Publication Number:
  US 20080119165A1
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 61/2564 for a higher-layer protocol, e.g. for session initiation protocol [SIP]
• CPC Class Codes: H04L 61/2575 using address mapping retrieval, e.g. simple traversal of user datagram protocol through session traversal utilities for NAT [STUN]
• CPC Class Codes: H04L 61/2578 without involvement of the NAT server
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 65/1083 In-session procedures
• CPC Class Codes: H04L 65/1095 Inter-network session transfer or sharing
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/401 wherein the services involve a main real-time session and one or more additional parallel real-time or time sensitive sessions, e.g. white board sharing or spawning of a subconference
• CPC Class Codes: H04L 65/403 Arrangements for multi-party communication, e.g. for conferences data switching systems for conference H04L12/18; arrangements for connecting several subscribers to a common circuit, i.e. affording conference facilities H04M3/56; television conferencing systems H04N7/15
• CPC Class Codes: H04L 65/70 Media network packetisation
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/164 Adaptation or special uses of UDP protocol
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04W 36/02 Buffering or recovering information during reselection ; Modification of the traffic flow during hand-off
• CPC Class Codes: H04W 36/08 Reselecting an access point
• CPC Class Codes: H04W 36/38 by fixed network equipment
• CPC Class Codes: H04W 4/16 Communication-related supplementary services, e.g. call-transfer or call-hold
• CPC Class Codes: H04W 8/02 Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
• CPC Class Codes: H04W 8/04 : Registration at HLR or HSS [Home Subscriber Server]
• CPC Class Codes: H04W 8/08 : Mobility data transfer
• CPC Class Codes: H04W 80/04 : Network layer protocols, e.g. mobile IP [Internet Protocol]
• CPC Class Codes: H04W 92/02 : Inter-networking arrangements

Abstract

A computer-implemented method for authenticating a cellular recipient to facilitate a call from a first caller'"'"'s first communication device to a cellular recipient'"'"'s cellular telephone is provided. The first caller dials an enterprise extension number and a server employs a cellular telephone number associated with cellular telephone to attempt to direct the call to cellular telephone in a public cellular network. The method includes initiating, prior to completing an end-to-end bearer channel between first communication device and cellular telephone, an authentication period having a finite duration. The method also includes receiving first authentication data from cellular telephone. If first authentication data matches, during the authentication period, with second authentication data that is pre-arranged with the server, completing the end-to-end bearer channel between first communication device and cellular telephone. However, if authentication period expires before first authentication data is received, denying the call and preventing the establishment of end-to-end bearer channel.

Claims

1. A computer-implemented method for authenticating a cellular recipient, to facilitate a call from a first communication device associated with a first caller to a cellular telephone that is believed to be associated with said cellular recipient, said call being reached when said first caller dials an enterprise extension number and, responsive to said first caller dialing said enterprise extension number, a server employs a cellular telephone number associated with said cellular telephone to attempt to direct said call to said cellular telephone in a public cellular network via said cellular telephone number, comprising:

initiating, prior to completing an end-to-end bearer channel between said first communication device and said cellular telephone, an authentication period having a finite duration;

receiving first authentication data from said cellular telephone, said first authentication data derived at least in part from authentication information provided by said cellular recipient to said cellular telephone;

if said first authentication data matches, during said authentication period, with second authentication data that is pre-arranged with said server, completing said end-to-end bearer channel between said first communication device and said cellular telephone; and

if said authentication period expires before said first authentication data that matches said second authentication data is received, denying said call, thereby preventing said end-to-end bearer channel between said first communication device and said cellular telephone from being established.

2. The method of claim 1 wherein said first authentication data is encrypted when transmitted from said cellular telephone.

3. The method of claim 1 wherein said first authentication data is generated using a mathematical function that employs at least said authentication information inputted by said cellular recipient via a user interface on said cellular telephone.

4. The method of claim 3 wherein said mathematical function further employs a nonce value transmitted received at said cellular telephone to facilitate authentication.

5. The method of claim 1 wherein first authentication data is generated during said authentication period.

6. The method of claim 1 wherein said first authentication data represents cached authentication data is computed prior to said initiating said authentication period and stored in said cellular telephone prior to said initiating.

7. The method of claim 1 wherein said cached authentication data is configured to expire after a predefined time period.

8. A computer-implemented method for determining which of an enterprise voicemail box and a cellular voicemail box in a public cellular network be employed to store voicemail message associated with a call from a first communication device associated with a first caller to a cellular telephone that is believed to be associated with a cellular recipient, said call being reached when said first caller dials an enterprise extension number and, responsive to said first caller dialing said enterprise extension number, a server employs a cellular telephone number associated with said cellular telephone to attempt to direct said call to said cellular telephone in said public cellular network via said cellular telephone number, comprising:

initiating, prior to completing an end-to-end bearer channel between said first communication device and said cellular voicemail box, an authentication period having a finite duration;

monitoring for first authentication data from said cellular telephone, said first authentication data derived at least in part from authentication information provided by said cellular recipient;

if said authentication period expires before said first authentication data that matches pre-arranged second authentication data is received, facilitating completion of said end-to-end bearer data channel from said first communication device to said enterprise voicemail box instead of to said cellular voice mailbox, thereby allowing said voicemail message to be stored in said enterprise voicemail box instead of in said cellular voice mailbox.

9. The method of claim 8 wherein said end-to-end bearer channel is not completed between said first communication device and said cellular voicemail box even if said public cellular network directs said call to said public cellular voicemail box when said cellular recipient fails to pick up said call.

10. The method of claim 9 wherein said authentication information is required from said cellular recipient during said authentication period.

11. The method of claim 8 wherein said authentication information is inputted by said cellular recipient via a user interface on said cellular telephone.

12. The method of claim 10 wherein first authentication data is generated using combination of said authentication information and a nonce value received by said cellular telephone during said authentication period.

13. An electronic system for authenticating a cellular recipient to facilitate a call from a first communication device associated with a first caller to a cellular telephone that is believed to be associated with said cellular recipient said call being reached when said first caller dials an enterprise extension number and, responsive to said caller dialing said enterprise extension number, a server employs a cellular telephone number associated with said cellular telephone to attempt to direct said call to said cellular telephone in a public cellular network via said cellular telephone number, comprising:

means for initiating, prior to completing an end-to-end bearer channel between said first communication device and said cellular telephone, an authentication period having a finite duration,

means for receiving first authentication data from said cellular telephone, said first authentication data derived at least in part from authentication information provided by said cellular recipient to said cellular telephone;

means for completing, if said first authentication data matches, during said authentication period, with second authentication data that is pre-arranged with said server, said end-to-end bearer channel between said first communication device and said cellular telephone; and

means for denying, if said authentication period expires before said first authentication data that matches said second authentication data is received, said call, thereby preventing said end-to-end bearer channel between said first communication device and said cellular telephone from being established.

14. The system of claim 13 wherein said first authentication data is encrypted when transmitted from said cellular telephone.

15. The system of claim 13 wherein said first authentication data is generated using a mathematical function that employs at least said authentication information inputted by said cellular recipient via a user interface on said cellular telephone.

16. The system of claim 15 wherein said mathematical function further employs a nonce value transmitted received at said cellular telephone to facilitate said authentication.

17. The system of claim 13 wherein first authentication data is generated during said authentication period.

18. The system of claim 13 wherein said first authentication data represents cached authentication data is computed prior to said initiating said authentication period and stored in said cellular telephone prior to said initiating.

19. The system of claim 13 wherein said cached authentication data is configured to expire after a predefined time period.

20. An electronic system for determining which of an enterprise voicemail box and a cellular voicemail box in a public cellular network be employed to store voicemail message associated with a call from a first communication device associated with a first, caller to a cellular telephone that is believed to be associated with said cellular recipient, said call being reached when said first caller dials an enterprise extension number and, responsive to said caller dialing said enterprise extension number, a server employs a cellular telephone number associated with said cellular telephone to attempt to direct said call to said cellular telephone in said public cellular network via said cellular telephone number, comprising:

means for initiating, prior to completing an end-to-end bearer channel between said first communication device and said cellular voicemail box, an authentication period having a finite duration;

means for monitoring for first authentication data from said cellular telephone, said first authentication data derived at least in part from authentication information provided by said cellular recipient;

means for facilitating, if said authentication period expires before said first authentication data that matches pre-arranged second authentication data is received, completion of said end-to-end bearer data channel from said first communication device to said enterprise voicemail box instead of to said cellular voice mailbox, thereby allowing said voicemail message to be stored in said enterprise voicemail box instead of in said cellular voice mailbox.

21. The system of claim 20 wherein said end-to-end bearer channel is not completed between said first communication device and said cellular voicemail box even if said public cellular network directs said call to said public cellular voicemail box when said cellular recipient fails to pick up said call.

22. The system of claim 21 wherein said authentication information is required from said cellular recipient during said authentication period.

23. The system of claim 20 wherein said authentication information is inputted by said cellular recipient via a user interlace on said cellular telephone.

24. The system of claim 22 wherein first authentication data is generated using combination of said authentication information and a nonce value received by said cellular telephone during said authentication period.