APPARATUS AND METHOD FOR AUTHENTICATING CALLER IN COMMUNICATION SYSTEM

• US 20190311107A1
• Filed: 11/01/2017
• Published: 10/10/2019
• Est. Priority Date: 11/07/2016
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: KIM, Hyeongseon
• Granted Patent: US 11,288,357 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06Q 20/38 Payment protocols; Details thereof
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 65/1076 Screening of IP real time communications, e.g. spam over Internet telephony [SPIT]
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04M 3/436 Arrangements for screening incoming calls , i.e. evaluating the characteristics of a call before deciding whether to answer it based on the calling party profile H04M3/42059; based on location H04M3/42348; based on presence H04M3/42365; diversion H04M3/54

Abstract

The present disclosure relates to an apparatus and a method for authenticating a caller in a communication system. An operating method of a terminal for authenticating a caller may comprise the steps of: generating an identifier and information corresponding to the identifier, on the basis of an identification number related to the terminal and an identification number related to another terminal; generating a digital signature for the information; encrypting the information; and transmitting, to a server, a message including the identifier, the digital signature, and the encrypted information.

Claims

1. A method for operating a terminal in a communication system, the method comprising:

generating an identifier and information corresponding to the identifier based on an identification number regarding the terminal and an identification number regarding another terminal;

generating a digital signature for the information;

encrypting the information; and

transmitting, to a server, a message comprising the identifier, the digital signature, and the encrypted information.

2. The method of claim 1, further comprising:

transmitting, to the another terminal, an outgoing call; and

after transmitting the outgoing call, establishing an encrypted channel among the terminal, the another terminal, and the server, based on the identifier,

wherein the message comprising the identifier, the digital signature, and the encrypted information is delivered over the encrypted channel.

3. The method of claim 1, further comprising:

encrypting other information corresponding to the identifier; and

transmitting the encrypted other information to the another terminal,

wherein the other information comprises at least one of information requiring caller authentication and payment related information.

16. The method of claim 1, wherein the identification number regarding the terminal comprises a mobile identification number (MIN) for a user of the terminal.

17. The method of claim 1, wherein the identification number regarding the another terminal comprises a mobile identification number (MIN) for a user of the another terminal.

18. The method of claim 1, wherein the information comprises information regarding at least one of authentication on the identification number regarding the terminal, and a user and an institution which uses the terminal.

4. A method for operating a terminal in a communication system, the method comprising:

generating an identifier based on an identification number regarding the terminal and an identification number regarding another terminal;

transmitting, to a server, a message for requesting information corresponding to the generated identifier;

receiving, from the server, the information; and

displaying the received information.

5. The method of claim 4, further comprising:

receiving, from the another terminal, an outgoing call; and

after receiving the outgoing call, establishing an encrypted channel among the terminal, the another terminal, and the server, based on the generated identifier,

wherein the message for requesting information corresponding to the generated identifier and the information is delivered over the encrypted channel.

6. The method of claim 4, further comprising:

identifying a digital signature included in the received information.

7. The method of claim 4, further comprising:

receiving, from the another terminal, encrypted other information corresponding to the identifier; and

in response to the reception, storing information of a digital signature generated at the another terminal,

wherein the other information comprises at least one of information requiring caller authentication and payment related information.

19. The method of claim 4, wherein the identification number regarding the terminal comprises a mobile identification number (MIN) for a user of the terminal.

20. The method of claim 4, wherein the identification number regarding the another terminal comprises a mobile identification number (MIN) for a user of the another terminal.

21. The method of claim 4, wherein the information comprises information regarding at least one of authentication on the identification number regarding the terminal, and a user and an institution which uses the terminal.

8. A method for operating a server in a communication system, the method comprising:

receiving, from a terminal, a message comprising encrypted information and a digital signature;

decrypting the information;

identifying the digital signature; and

transmitting, to another terminal, a message comprising the decrypted information and the digital signature.

9. The method of claim 8,

wherein the encrypted information comprises information by encrypting information corresponding to the identifier generated based on an identification number regarding the terminal and an identification number regarding the another terminal using a public key of the server, and

wherein the digital signature comprises a digital signature generated using a private key of the terminal.

10. The method of claim 8, further comprising:

transmitting, to the another terminal, a message for notifying that authenticated information is stored in the server.

11. The method of claim 8, further comprising:

generating a digital signature for the information using a private key of the server.

22. The method of claim 8, wherein the identification number regarding the terminal comprises a mobile identification number (MIN) for a user of the terminal.

23. The method of claim 8, wherein the identification number regarding the another terminal comprises a mobile identification number (MIN) for a user of the another terminal.

24. The method of claim 8, wherein the information comprises information regarding at least one of authentication on the identification number regarding the terminal, and a user and an institution which uses the terminal.

12-15. -15. (canceled)