Adjunct processor for providing computer facility access protection via call transfer

• US 4,876,717 A
• Filed: 06/03/1988
• Issued: 10/24/1989
• Est. Priority Date: 09/30/1986
• Status: Expired due to Term

• Current Assignee: Avaya Technology Corporation Miami Lakes FLA US
• Original Assignee: American Telephone & Telegraph Company (AT&T, Inc.), At&T Information Systems (AT&T, Inc.)
• Inventors: Barron, Salvador, Coffman, James E.
• Primary Examiner(s): Buczinski, Stephen C.
• Assistant Examiner(s): GREGORY, BERNARR E
• Application Number:
  US07/205,054
• Time in Patent Office: 508 Days
• Field of Search: 380/3-5, 380/24, 380/47, 380/49, 380/50, 379/95, 340/825.31, 340/825.34
• US Class Current: 726/5
• CPC Class Codes: G06F 21/313 using a call-back technique via a telephone network
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: Y10S 379/903 Password

Abstract

This adjunct processor arrangement performs a centralized call screening function to provide computer port access security. Every call origination in the telephone switching system from a calling party to a protected computer port is interdicted by the telephone switching system and routed to the adjunct processor. The calling party receives a series of prompts from the adjunct processor to provide identification information, such as login, password, and voiceprint information. The adjunct processor validates the identity of the calling party using this identification indicia and initiates a callback operation. The adjunct processor disconnects the calling party from the connection, calls the calling party back and then uses the data call transfer capability of the telephone switching system to connect the calling party to the computer.

Claims

1. In a business communication system which serves a plurality of communication devices, each of which is connected by an associated port circuit to a switching network of said business communication system, and a plurality of computer facilities, each of which is connected to said switching network by one or more computer port circuits, said switching network having a plurality of ports, a method of providing computer port access security comprising the steps of:

interdicting all calls from any calling one of said communication devices to any of said plurality of computer facilities;

in response to a call request from said calling communication device, said call request defining one of said plurality of computer facilities, establishing a digital call connection from said calling communication device through said switching network to an adjunct processor connected to a first one of said plurality of ports of said switching network;

confirming the identity of the user at said calling communication device in said adjunct processor by exchanging information between said user and said adjunct processor;

disconnecting said calling communication device from said adjunct processor;

originating a new digital call connection from said adjunct processor to a preassigned telephone number associated with said user;

determining, by said adjunct processor, the one of said plurality of computer facilities defined by said call request; and

effecting, by said adjunct processor, data call transfer of said new digital call connection from said first port of said switching network connected to said adjunct processor, to a second one of said plurality of ports of said switching network, said second port being connected to one of said computer port circuits associated with one of said plurality of computer facilities determined by said adjunct processor.

3. The method of claims 1 or 2 wherein the step of interdicting includes the steps of:

comparing the number dialed by said user with a list of computer port numbers; and

substituting the number of said adjunct processor for said dialed number if said dialed number matches any number of said list of computer port numbers.

4. The method of claims 1 or 2 wherein the step of confirming includes the steps of:

providing said user with a prompt to supply identification information; and

comparing the response of said user to said prompt with predetermined identification information to confirm the identity of said user.

5. The method of claims 1 or 2 wherein the step of confirming includes the steps of:

providing said user with a prompt to supply identification information;

comparing the user response to said prompt with predetermined identification information;

transmitting a second prompt to said user to supply a voice response; and

measuring said user voice response with a prerecorded voiceprint from said user to verify the identity of said user.

2. In a business communication system which serves a plurality of communication devices, each of which is connected by an associated port circuit to a switching network of said business communication system, and a plurality of computer facilities, each of which is connected to said switching network by one or more computer port circuits, said switching network having a plurality of ports, a method of providing computer port access security comprising the steps of:

interdicting all calls from any calling one of said communication devices to any of said plurality of computer facilities;

in response to a call request from said calling communication device, said call request defining one of said plurality of computer facilities, establishing a digital call connection from said calling communication device through said switching network to an adjunct processor connected to a first one of said plurality of ports of said switching network;

confirming the identity of the user at said calling communication device in said adjunct processor by exchanging information between said user and said adjunct processor;

determining, by said adjunct processor, the one of said plurality of computer facilities defined by said call request; and

effecting, by said adjunct processor, data call transfer of said digital call connection from said first port of said switching network connected to said adjunct processor, to a second one of said plurality of ports of said switching network, said second port being connected to one of said computer port circuits associated with said one of said plurality of computer facilities determined by said adjunct processor.

6. In a business communication system which serves a plurality of communication devices, each of which is connected by an associated port circuit to a switching network of said business communication system, and a plurality of computer facilities, each of which is connected to said switching network by one or more computer port circuits, said switching network having a plurality of ports, a method of providing computer port access security comprising the steps of:

connecting a user originating a call from any one of said communication devices via a digital call connection through said switching network to an adjunct processor connected to a first one of said plurality of ports of said switching network in response to said user dialing the access code of said adjunct processor;

confirming the identity of said user at said calling communication device in said adjunct processor by exchanging information between said user and said adjunct processor;

obtaining from said user at said calling communication device an identification of one of said plurality of computer facilities;

disconnecting said calling communication device from said adjunct processor;

originating a new digital call connection from said adjunct processor to a preassigned telephone number associated with said user;

determining, by said adjunct processor, the one of said plurality of computer facilities identified by said identification obtained from user; and

effecting, by said adjunct processor, data call transfer of said new digital call connection from said first port of said switching network connected to said adjunct processor, to a second one of said plurality of ports of said switching network, said second port being connected to one of said computer port circuits associated with said one of said plurality of computer facilities determined by said adjunct processor.

8. The method of claims 6 or 7 wherein the step of confirming includes the steps of:

providing said user with a prompt to supply identification information; and

comparing said user'"'"'s response to said prompt with predetermined identification information.

9. The method of claims 6 or 7 wherein the step of confirming includes the steps of:

providing said user with a prompt to supply identification information;

comparing said user'"'"'s response to said prompt with predetermined identification information;

transmitting a second prompt to said user to supply a voice response; and

measuring said user'"'"'s voice response with a prerecorded voiceprint from said user to verify the identity of said user.

7. In a business communication system which serves a plurality of communication devices, each of which is connected by an associated port circuit to a switching network of said business communication system, and a plurality of computer facilities, each of which is connected to said switching network by one or more computer port circuits, said switching network having a plurality of ports, a method of providing computer port access security comprising the steps of:

connecting a user originating a call from any one of said communication devices via a digital call connection through said switching network to an adjunct processor connected to a first one of said plurality of ports of said switching network in response to said user dialing the access code of said adjunct processor;

confirming the identity of said user at said calling communication device in said adjunct processor by exchanging information between said user and said adjunct processor;

obtaining from said user at said calling communication device an identification one of said plurality of computer facilities;

determining, by said adjunct processor, the one of said plurality of computer facilities identified by said identification obtained from said user; and

effecting, by said adjunct processor, data call transfer of said digital call connection from said first port of said switching network connected to said adjunct processor, to a second one of said plurality of ports of said switching network, said second port being connected to one of said computer port circuits associated with said one of said plurality of computer facilities determined by said adjunct processor.

10. In a business communication system which serves a plurality of communication devices, each of which is connected by an associated port circuit to a switching network of said business communication system, and a plurality of computer facilities, each of which is connected to said switching network by one or more computer port circuits, said switching network having a plurality of ports, a computer port access security arrangement comprising:

adjunct processor means connected to a first one of said plurality of ports of said switching network and responsive to a user being connected through said switching network to said adjunct processor means for confirming the identity of said user and obtaining from said user an identification of one of said plurality of computer facilities; and

means responsive to the confirmation of the identity of said user by said adjunct processor means and to the obtaining of said identification of said one of said plurality of computer facilities by said adjunct processor means for effecting data call transfer of said user to a second one of said plurality of ports of said switching network, said second port being connected to one of said computer port circuits associated with said identified one of said computer facilities.

11. In a business communication system which serves a plurality of communication devices, each of which is connected by an associated port circuit to a switching network of said business communication system, and a plurality of computer facilities, each of which is connected to said switching network by one or more computer port circuits, said switching network having a plurality of ports, a computer port security arrangement comprising:

means, responsive to a user at any one of said communication devices originating a call to one of said plurality of computer facilities identified by a call request for said call, for interdicting said call;

means responsive to said interdicting means for establishing a digital call connection from said one communication device through said switching network to an adjunct processor connected to a first one of said plurality of ports of said switching network;

wherein said adjunct processor includes;

means responsive to information transmitted by said user to said adjunct processor over said connection to said adjunct processor for confirming the identity of said user;

means responsive to a positive identification of said user by said confirming means for disconnecting said one communication device from said adjunct processor;

means responsive to said disconnecting means for originating a new digital call connection through said switching network from said adjunct processor to a preassigned number associated with said user;

means responsive to said interdicting means for determining the one of said plurality of computer facilities identified by said call request; and

means responsive to said new call connection and to said determining means for effecting data call transfer of said new digital call connection from said first port of said switching network connected to said adjunct processor, to a second one of said plurality of ports of said switching network, said second port being connected to one of said computer port circuits associated with said one of said plurality of computer facilities determined by said determining means.

13. The system of claims 11 or 12 wherein said confirming means includes:

means for performing voiceprint identification of said user.

14. The system of claims 11 or 12 wherein said interdicting means includes:

means for transmitting the computer facility number dialed by said user to said adjunct processor.

12. In a business communication system which serves a plurality of communication devices, each of which is connected by an associated port circuit to a switching network of said switching system, and a plurality of computer facilities, each of which is connected to said switching network by one or more computer port circuits, said switching network having a plurality of ports, apparatus for providing computer port access security comprising:

means, responsive to a user at any one of said communication devices originating a call to one of said plurality of computer facilities identified by a call request for said call, for interdicting said call;

means responsive to said interdicting means for establishing a digital call connection from said one communication device through said switching network to an adjunct processor connected to a first one of said plurality of ports of said switching network;

wherein said adjunct processor includes;

means responsive to information transmitted by said user to said adjunct processor over said digital call connection to said adjunct processor for confirming the identity of said user;

means responsive to said interdicting means for determining the one of said plurality of computer facilities identified by said call request; and

means responsive to a positive identification of said user by said confirming means and to said determining means for effecting data call transfer of said digital call connection to said one communication device, to a second one of said plurality of ports of said switching network, said second port being connected to one of said computer port circuits associated with said one of said plurality of computer facilities determined by said determining means.