SECURE POLICY MANAGER

• US 20170054755A1
• Filed: 08/21/2015
• Published: 02/23/2017
• Est. Priority Date: 08/21/2015
• Status: Abandoned Application

• Current Assignee: Avaya Incorporated
• Original Assignee: Avaya Incorporated
• Inventors: Mendiratta, Harsh V., Brunson, Gordon R., Shekh-Yusef, Rifaat
• Application Number:
  US14/832,064
• Publication Number:
  US 20170054755A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24

Abstract

An event that changes the security of a communication session between communication endpoints is determined. The event that changes the security of the communication session between the communication endpoints occurs after the communication session is established. For example, the event may be where a user has enabled a speakerphone. In response to determining the event that changes the security of the communication session between the communication endpoints, a message is sent to the communication endpoints that indicates a changed security level. The communication endpoints display the changed security level to the participants of the communication session. For example, the changed security level when the speakerphone is enabled may indicate that the communication session is now unsecure.

Claims

1. A method comprising:

determining that an event changes the security of a communication session between a plurality of communication endpoints, wherein the event that changes the security of the communication session between the plurality of communication endpoints occurs during or after the communication session is established; and

in response to determining the event that changes the security of the communication session between the plurality of communication endpoints, sending a changed security level indication to at least a first one of the plurality communication endpoints.

2. The method of claim 1, wherein determining the event that changes the security of the communication session between the plurality of communication devices is determined in a second one of the plurality communication endpoints and wherein the second one of the plurality of communication endpoints sends the changed security level to the at least first one of the plurality of communication endpoints.

3. The method of claim 2, further comprising:

downloading a security manager and a security policy to the second one of the plurality of communication devices.

4. The method of claim 2, further comprising:

downloading a security manager to the first and second one of the plurality of communication endpoints;

downloading a first security policy to the first one of the plurality of communication endpoints; and

downloading a second security policy to the second one of the plurality of the communication endpoints, wherein the first security policy is different from the second security policy.

5. The method of claim 1, wherein determining the event that changes the security of the communication session between the plurality of communication devices is determined in a centralized security manager and wherein the centralized security manager sends the changed security level to the at least first one of the plurality of communication endpoints.

6. The method of claim 5, wherein the centralized security manager is a Back-to-Back User Agent (B2BUA).

7. The method of claim 1, wherein the event is where a speakerphone has been activated or deactivated in one of the plurality of communication endpoints.

8. The method of claim 1, wherein the event is at least one of:

determining a high signal to noise ratio in an audio stream of one of the plurality of communication endpoints, determining a low signal to noise ratio in the audio stream the one of the plurality of communication endpoints, and determining a connection or disconnection of a wireless headset to the one of the plurality of communication endpoints.

9. The method of claim 1, wherein the event is at least one of:

determining a person leaving a secure area, determining the person entering the secure area, a visual detection of another person in a room, detection of an unrecognized or unauthorized face print, an audio detection of the another person speaking, detection an unknown or unauthorized voice print, detection of a specific sound, detection of a local recording on one of the plurality of communication endpoints, detection of one of the plurality of communication endpoints leaving the secure area, a door being opened, a door being closed, detection of a person in a nearby area, an motion sensor alarm outside a confidence room, a Global Positioning Satellite (GPS) criteria for a location, and detection of one of the plurality of communication endpoints entering the secure area.

10. The method of claim 1, wherein the sending the changed security level is changed based on a Session Initiation Protocol (SIP) UPDATE message.

11. A system comprising:

a security manager configured to determine that an event changes the security of a communication session between a plurality of communication endpoints, wherein the event that changes the security of the communication session between the plurality of communication endpoints occurs during or after the communication session is established; and

a communication interface configured to send a changed security level indication to at least a first one of the plurality communication endpoints in response to determining the event that changes the security of the communication session between the plurality of communication endpoints.

12. The system of claim 11, wherein determining the event that changes the security of the communication session between the plurality of communication devices is determined in a second one of the plurality communication endpoints and wherein the second one of the plurality of communication endpoints sends the changed security level to the at least first one of the plurality of communication endpoints.

13. The system of claim 12, further comprising:

a policy manager configured to download the security manager and a security policy to the second one of the plurality of communication devices.

14. The system of claim 12, further comprising:

a policy manager configured to download the security manager to the first and second one of the plurality of communication endpoints, download a first security policy to the first one of the plurality of communication endpoints, and download a second security policy to the second one of the plurality of the communication endpoints, wherein the first security policy is different from the second security policy.

15. The system of claim 11, wherein determining the event that changes the security of the communication session between the plurality of communication devices is determined in a centralized security manager and wherein the centralized security manager sends the changed security level to the at least first one of the plurality of communication endpoints.

16. The system of claim 15, wherein the centralized security manager is a Back-to-Back User Agent (B2BUA).

17. The system of claim 11, wherein the event is where a speakerphone has been activated or deactivated in one of the plurality of communication endpoints.

18. The system of claim 11, wherein the event is at least one of:

determining a high signal to noise ratio in an audio stream of one of the plurality of communication endpoints, determining a low signal to noise ratio in the audio stream the one of the plurality of communication endpoints, and determining a connection or disconnection of a wireless headset to the one of the plurality of communication endpoints.

19. The system of claim 11, wherein the event is at least one of:

determining a person leaving a secure area, determining the person entering the secure area, a visual detection of another person in a room, detection of an unrecognized or unauthorized face print, an audio detection of the another person speaking, detection an unknown or unauthorized voice print, detection of a specific sound, detection of a local recording on one of the plurality of communication endpoints, detection of one of the plurality of communication endpoints leaving the secure area, a door being opened, a door being closed, detection of a person in a nearby area, an motion sensor alarm outside a confidence room, a Global Positioning Satellite (GPS) criteria for a location, and detection of one of the plurality of communication endpoints entering the secure area.

20. A non-transitory computer readable medium having stored thereon instructions that, when executed, cause a processor to perform a method, the instructions comprising:

instructions to determine that an event changes the security of a communication session between a plurality of communication endpoints, wherein the event that changes the security of the communication session between the plurality of communication endpoints occurs during or after the communication session is established; and

instructions to send a changed security level indication to at least a first one of the plurality communication endpoints in response to determining the event that changes the security of the communication session between the plurality of communication endpoints.