Enhancing ENUM Security

• US 20110016145A1
• Filed: 11/30/2007
• Published: 01/20/2011
• Est. Priority Date: 11/30/2007
• Status: Active Grant

• Current Assignee: Telecom Italia S.p.A.
• Original Assignee: Telecom Italia S.p.A.
• Inventors: Silletta, Francesco, De Lutiis, Paolo
• Granted Patent: US 8,510,793 B2
• Time in Patent Office: Days
• US Class Current: 707/769
• CPC Class Codes: H04L 2101/385 Uniform resource identifier for session initiation protocol [SIP URI]
• CPC Class Codes: H04L 61/30 Managing network names, e.g. use of aliases or nicknames name-to-address mapping H04L61/45
• CPC Class Codes: H04L 61/301 Name conversion
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/4557 Directories for hybrid networks, e.g. including telephone numbers
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04L 67/54 Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users
• CPC Class Codes: H04M 2203/354 Reverse directory service
• CPC Class Codes: H04M 2203/6009 Personal information, e.g. profiles or personal directories being only provided to authorised persons
• CPC Class Codes: H04M 3/4931 Directory assistance systems
• CPC Class Codes: H04M 7/128 Details of addressing, directories or routing tables

Abstract

A method of providing telecommunication services includes generating a fictitious contact information univocally associated with a telephone number assigned to a subscriber; and storing the fictitious contact information in a database, like an ENUM database. Responsive to a request, received from a requester, of a contact information corresponding to the telephone number and adapted to allow contacting over the Internet the subscriber assignee of the telephone number, the method includes having the database providing the fictitious contact information; and conditioning a resolution of the fictitious contact information for the provisioning of the contact information to the satisfaction of at least one security rule adapted to assess properties of at least one among the requester and the request. In a case that the request from the requester satisfies the at least one security rule, the method resolves the fictitious contact information and provides the requester with the contact information.

Claims

1. A method of providing telecommunication services, comprising:

generating a fictitious contact information univocally associated with a telephone number assigned to a subscriber;

storing the fictitious contact information in a database;

responsive to a request, received from a requester, of a contact information corresponding to said telephone number and adapted to allow contacting over the Internet the subscriber assignee of said telephone number, having the database providing said fictitious contact information;

conditioning a resolution of the fictitious contact information for the provisioning of the contact information to the satisfaction of at least one security rule adapted to assess properties of at least one among said requester and said request, and

in case the request from the requester satisfies said at least one security rule, resolving the fictitious contact information and providing to the requester the contact information.

2. The method of claim 1, wherein said database is an ENUM database.

3. The method of claim 1, wherein said contact information includes a SIP URI univocally identifying said subscriber.

4. The method of claim 3, wherein said fictitious contact information includes a fictitious URI univocally associated with the SIP URI of said subscriber.

5. The method of claim 4, wherein said fictitious URI includes randomly-generated information.

6. The method of claim 5, wherein said fictitious URI includes a domain name univocally identifying a resolver system adapted to resolve the fictitious contact information conditioned to the satisfaction of the at least one security rule.

7. The method of claim 1, wherein said at least one security rule defines one or more among:

telephony network operators entitled to resolve the fictitious contact information, requesters entitled to resolve the fictitious contact information, types of connectivity services the requester is entitled to exploit for contacting over the Internet the subscriber assignee of said telephone number, indications on dates and times when requesters are allowed to contact the subscriber assignee of said telephone number.

8. The method of claim 1, comprising:

enabling either the subscriber assignee of the telephone number or a telephony operator to which the subscriber has subscribed define said at least one security rule.

9. The method of claim 1, wherein said generating a fictitious contact information univocally associated with the telephone number assigned to the subscriber includes generating a new fictitious information after said resolving the fictitious contact information.

10. A system for providing telecommunication services, comprising:

a generator adapted to generate fictitious contact information univocally associated with a telephone number assigned to a subscriber, and to cause the fictitious contact information to be stored in a database as a contact information of said subscriber;

a security policy rules enforcer adapted to;

receive from a requester a request of resolution of said fictitious contact information for obtaining a contact information corresponding to said telephone number, said contact information being adapted to allow contacting over the Internet of a subscriber having said telephone number; and

to

condition a resolution of the fictitious contact information and the provision to the requester of the contact information to at least one security rule adapted to assess properties of at least one among said requester and said request.

11. The system of claim 10, wherein said database is an ENUM database.

12. The system of claim 10, wherein said contact information includes a SIP URI univocally identifying said subscriber.

13. The system of claim 12, wherein said fictitious contact information includes a fictitious URI univocally associated with the SIP URI of said subscriber.

14. The system of claim 13, wherein said fictitious URI includes randomly-generated information.

15. The system of claim 14, wherein said fictitious URI includes a domain name univocally identifying the security policy rules enforcer.

16. The system of claim 10, wherein said at least one security rule defines one or more among:

telephony operators entitled to resolve the fictitious contact information, requesters entitled to resolve the fictitious contact information, types of connectivity services the requester is entitled to exploit for contacting over the Internet the subscriber assignee of said telephone number, indications on dates and times when requesters are allowed to contact the subscriber assignee of said telephone number.

17. The system of claim 16, wherein said at least one security rule is in XML language.

18. The system of claim 10, comprising a security rule manager adapted to allow either the subscriber assignee of the telephone number or a telephony operator to which the subscribed has subscribed define said at least one security rule.

19. The system of claim 10, wherein a new fictitious contact information univocally associated with the telephone number assigned to the subscriber is generated after said resolving the fictitious contact information.