SYSTEM AND METHOD FOR ENCRYPTING AND RECORDING MEDIA FOR A CONTACT CENTER

• US 20140270154A1
• Filed: 08/30/2013
• Published: 09/18/2014
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Genesys Cloud Services Incorporated
• Original Assignee: Genesys Telecommunications Laboratories Incorporated (Genesys Cloud Services Incorporated)
• Inventors: Filonov, Vladimir, Blander, Daniel, Subramaniam, Somasundaram, Cicchitto, Angelo, Lum, Henry R., Culbert, Jeffrey, Gvildys, Paul
• Granted Patent: US 9,596,344 B2
• Time in Patent Office: Days
• US Class Current: 380/28
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 65/104 in the network
• CPC Class Codes: H04L 65/1045 Proxies, e.g. for session initiation protocol [SIP]
• CPC Class Codes: H04L 65/1063 Application servers providing network services systems providing special services to telephonic subscribers H04M3/42
• CPC Class Codes: H04L 65/1076 Screening of IP real time communications, e.g. spam over Internet telephony [SPIT]
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04L 65/765 intermediate
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04M 1/656 for recording conversations
• CPC Class Codes: H04M 2203/551 Call history
• CPC Class Codes: H04M 2203/609 Secret communication
• CPC Class Codes: H04M 3/22 Arrangements for supervision, monitoring or testing
• CPC Class Codes: H04M 3/2218 Call detail recording
• CPC Class Codes: H04M 3/28 Automatic routine testing ; Fault testing; Installation testing; Test methods, test equipment or test arrangements therefor
• CPC Class Codes: H04M 3/42221 Conversation recording systems at the subscriber's set H04M1/656
• CPC Class Codes: H04M 3/42348 Location-based services which utilize the location information of a target
• CPC Class Codes: H04M 3/51 Centralised call answering arrangements requiring operator intervention , e.g. call or contact centers for telemarketing
• CPC Class Codes: H04M 3/5175 Call or contact centers supervision arrangements
• CPC Class Codes: H04M 3/5183 Call or contact centers with computer-telephony arrangements
• CPC Class Codes: H04Q 3/00 : Selecting arrangements H04Q5/00 - H04Q11/00 take precedence
• CPC Class Codes: H04W 12/04 : Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 24/04 : Arrangements for maintaining operational condition
• CPC Class Codes: H04W 4/16 : Communication-related supplementary services, e.g. call-transfer or call-hold
• CPC Class Codes: H04W 40/20 : based on geographic position or location

Abstract

A system and method for recording media for a contact center where a processor is configured to determine that media exchanged between first and second communication devices during a telephony call is to be recorded; bridge a media path between the first and second communication devices; cause replicating of the media exchanged in the media path; encrypt the replicated media via a first cryptographic key for storing the encrypted media in a data storage device; and encrypt the first cryptographic key via a second cryptographic key for storing the encrypted first cryptographic key as metadata for the encrypted media.

Claims

8-1. The method of claim 1, wherein the data storage device is configured to store media recordings for a plurality of contact centers, the data storage device being accessible over a wide area network.

10. A system for recording media for a contact center comprising:

a processor; and

a memory, wherein the memory has stored thereon instructions that, when executed by the processor, cause the processor to;

determine that media exchanged between first and second communication devices during a telephony call is to be recorded;

bridge a media path between the first and second communication devices;

cause replicating of the media exchanged in the media path;

encrypt the replicated media via a first cryptographic key for storing the encrypted media in a data storage device; and

encrypt the first cryptographic key via a second cryptographic key for storing the encrypted first cryptographic key as metadata for the encrypted media.

11. The system of claim 10 wherein the first cryptographic key is a symmetric key and the second cryptographic key is a public encryption key.

12. The system of claim 11, wherein the first cryptographic key is a session key, wherein the instructions further cause the processor to randomly generate the session key.

13. The system of claim 11, wherein the instructions further cause the processor to:

identify a third cryptographic key;

re-encrypt the first cryptographic key via the third cryptographic key; and

modify the stored metadata based on the re-encrypted first cryptographic key.

14. The system of claim 10, wherein the instructions further cause the processor to:

retrieve the encrypted first cryptographic key from a metadata record associated with the encrypted media;

decrypt the first cryptographic key based on a decryption key corresponding to the second cryptographic key;

decrypt the encrypted media based on the first cryptographic key; and

provide an audible rendering of the decrypted media.

15. The system of claim 14, wherein the instructions further cause the processor to:

receive a passphrase; and

access the decryption key based on the passphrase.

16. The system of claim 10, wherein the instructions that cause the processor to determine that media exchanged is to be recorded is based on receipt of a request to record the media, wherein the request is transmitted by a call controller configured to set up and tear down the media path between the first and second communication devices.

17. The system of claim 16, wherein the instructions which cause the processor to bridge the media path further cause the processor to:

receive from the call controller first and second media session information corresponding to the telephony call for respectively the first and second communication devices;

establish a first portion of the media path with a first communication device based on the first media session information; and

establish a second portion of the media path with a second communication device based on the second media session information.

18. The system of claim 10 further comprising:

a call controller in a first geographic region, the call controller being configured to;

establish the telephony call between the first and second communication devices;

identify a second geographic location associated with a resource involved in the telephony call; and

identify the processor based on location of the processor in the identified second geographic location.

19. The system of claim 10, wherein the processor is a first media controller, the system further comprising:

a call controller configured to;

identify the first media controller currently assigned to the telephony call;

detect failure of the first media controller during the telephony call, wherein the failure of the media controller tears down the media path;

in response to detecting the failure, bridge a second media path between the first and second communication devices until a second media controller is identified; and

in response to the second media controller being identified, signal the second media controller to bridge and record media exchanged during the telephony call.

20. The system of claim 10 further comprising a second processor configured to:

receive call metadata for the telephony call, the call metadata including a link to a recording of media exchanged during the telephony call;

receive a call event associated with the telephony call, the call event including a timestamp of when the event occurred during the telephony call;

store the call metadata and the call event in a database record;

retrieve the database record for displaying the call event on a display device;

receive a user command identifying the call event in response to the display on the display device; and

retrieve a portion of the recording associated with the call event in response to the user command for providing an audible rendering of the retrieved portion of the recording.