System and method for implementing adaptive security zones

• US 20110099602A1
• Filed: 10/28/2009
• Published: 04/28/2011
• Est. Priority Date: 10/28/2009
• Status: Active Grant

• Current Assignee: Serenova LLC (Lifesize Communications Incorporated)
• Original Assignee: Liveops Incorporated
• Inventors: Bailey, Scott, King, Jeremy, Apparao, Vidur, Browne, Niall
• Granted Patent: US 8,683,547 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 30/016 After-sales
• CPC Class Codes: G06Q 30/0281 Customer communication at a business location, e.g. providing product or service information, consulting
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A system for managing adaptive security zones in complex business operations, comprising a rules engine adapted to receive events from a plurality of event sources and a security manager coupled to the rules engine via a data network, wherein upon receiving an event, the rules engine determines what rules, if any, are triggered by the event and, upon triggering a rule, the rules engine determines if the rule pertains to security and, if so, sends a notification message to the security manager informing it of the triggered event, and wherein the security manager, on receiving a notification message from the rules engine, automatically establishes a new security zone based at least in part on the contents of the notification message, is disclosed

Claims

1. A system for managing adaptive security zones in complex business operations, comprising:

a rules engine adapted to receive events from a plurality of event sources; and

a security manager coupled to the rules engine via a data network;

wherein upon receiving an event, the rules engine determines what rules, if any, are triggered by the event and, upon triggering a rule, the rules engine determines if the rule pertains to security and, if so, sends a notification message to the security manager informing it of the triggered event; and

wherein the security manager, on receiving a notification message from the rules engine, automatically establishes a new security zone based at least in part on the contents of the notification message.

2. The system of claim 1, in which at least one of the event sources is a communications system or device.

3. The system of claim 1, in which at least one of the event sources is a call manager.

4. The system of claim 1, in which the security zone extends to at least one remote independent agent.

5. The system of claim 4, in which the security zone precludes the use of at least one software tool or program that is otherwise available to the remote independent agent.

6. The system of claim 4, in which the security zone requires at least an additional authentication step before the remote independent agent is allowed to take a specific action.

7. The system of claim 1, in which the security zone causes sensitive information to be automatically made inaccessible within a call recording.

8. A system for managing adaptive security zones in customer service operations involving remote independent customer service agents, comprising:

a call manager server adapted at least to receive and control telephony sessions;

a rules engine adapted to receive events from at least the call manager; and

a security manager coupled to the rules engine via a data network;

wherein upon receiving an event, the rules engine determines what rules, if any, are triggered by the event and, upon triggering a rule, the rules engine determines if the rule pertains to security and, if so, sends a notification message to the security manager informing it of the triggered event; and

wherein the security manager, on receiving a notification message from the rules engine, automatically establishes a new security zone based at least in part on the contents of the notification message.

9. A method for adaptively managing security zones in complex business operations, comprising the steps of:

(a) receiving an event pertaining to the business operation;

(b) determining if any rules are triggered by the received event;

(c) determining if any triggered rules pertain to security; and

(d) establishing a new security zone based at least in part on the identity and contents of a triggered security-related rule.

10. The method of claim 9, in which the complex business operation is a customer service operation.

11. The method of claim 9, in which the event is generated by a communications server or device.

12. The method of claim 9, in which the event is generated by a call manager.

13. The method of claim 9, in which the security zone extends to at least one remote independent agent.

14. The method of claim 13, in which the security zone precludes the use of at least one software tool or program that is otherwise available to the remote independent agent.

15. The method of claim 13, in which the security zone requires at least an additional authentication step before the remote independent agent is allowed to take a specific action.

16. The method of claim 9, in which the security zone causes sensitive information to be automatically made inaccessible within a call recording.