Automatic authentication system

• US 5,737,701 A
• Filed: 10/03/1995
• Issued: 04/07/1998
• Est. Priority Date: 10/03/1995
• Status: Expired due to Term

• Current Assignee: AT&T Corporation (AT&T, Inc.)
• Original Assignee: AT&T Corporation (AT&T, Inc.)
• Inventors: Zaleski, Michael, Rosenthal, Eugene J., Silverman, David Phillip
• Primary Examiner(s): Bost, Dwayne
• Assistant Examiner(s): JOHNSON, BRIAN
• Application Number:
  US08/538,679
• Time in Patent Office: 917 Days
• Field of Search: 379/58, 379/59, 379/91, 379/111, 379/112, 379/113, 379/114, 379/144, 379/120, 379/200, 379/199, 379/188, 379/189, 379/196, 379/197, 340/825.31, 340/825.3, 340/825.33, 340/825.34, 380/23, 455/33.1, 455/410, 455/411, 455/415, 455/564, 455/565, 455/405, 455/406, 455/409
• US Class Current: 455/411
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04M 3/382 using authorisation codes or passwords
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 12/72 Subscriber identity

Abstract

A communications system is designed to exempt communications services users, such as wireless communications subscribers and calling card callers, from entering an authentication code for calls directed to pre-selected destination numbers, notwithstanding the authentication code entry requirement implemented by the communications services provider for all other calls.

Claims

1. A method of processing a call initiated by a caller, said method comprising the steps of:

receiving a destination telephone number and identification information associated with said call, and

overriding a requirement of receiving an authentication code to complete said call when a) an authentication code is required to process said call, and b) said destination telephone number is identified in a profile that is retrieved using said identification information associated with said call.

2. The method of claim 1 wherein said call is a wireless call and said identification information associated with said call is an electronic serial number for a wireless end-user device from which said call was initiated.

3. The method of claim 1 wherein said call is a wireless call and said identification information associated with said call is a mobile identification number for a wireless end-user device from which said call was initiated.

4. The method of claim 1 wherein said call is a credit card call and wherein said identification information is a calling card number.

5. A method of preventing theft of communications services, said method comprising the steps of:

storing in a computer'"'"'s storage area

a first table which contains i) information associated with at least one user of a communications network, and ii) an authentication code which is required to be entered to allow said at least one user to receive at least one communications service from said communications network;

a second table which contains a plurality of destination addresses for which said authentication code requirement is waived for said at least one user;

determining whether a particular destination address received in conjunction with a communications service request from said at least one user matches an entry in said second table for said at least one user; and

in response to said determination, satisfying said communications services request when no authentication code is provided by said at least one user only if a match is found in said second table.

6. The method of claim 5 further comprising the step of:

denying said communications service request when a) no match is found in said second table for said particular destination number, and b) said authentication code stored in said first table is not provided by said at least one user.

7. The method of claim 5 further comprising the step of:

prompting said at least one user to enter said authentication code that is stored in said first table when no match is found for said particular destination address in said second table.

8. The method of claim 5 further comprising the step of:

storing said particular destination address in said second table when a) no match is found for said particular destination address in said second table, and b) said authorization code stored in said first table is provided by said at least one user.

9. A method of processing a wireless call, said method comprising the steps of:

receiving as part of the call origination information a destination telephone number and information associated with a wireless end-user device being used by a caller;

completing said call to said received destination number when said received destination number is identified in a profile that is retrieved based on said information associated with said wireless end-user device;

prompting said caller for an authorization code when said received destination number is absent from said profile; and

in response to receiving a valid authorization code from said caller, storing said received destination number in said profile, and completing said call.

10. The method of claim 9 wherein said information associated with said wireless end-user device is selected from a group which includes an electronic serial number and a mobile identification number.

11. The method of claim 9 further comprising the step of:

terminating said call in response to receiving an invalid authorization code.

12. The method of claim 9 wherein said profile stores a plurality of destination numbers and wherein said storing step includes the step of:

selecting a particular destination number for removal from said profile in order to free up storage area for storing said received destination number.

13. The invention of claim 12 wherein said particular destination number is selected for removal on a first-stored-first-removed basis.

14. The invention of claim 12 wherein said particular destination number is selected for removal on a least-recently-used basis.

15. A method of processing a calling card call initiated by a caller, said method comprising the steps of:

receiving a destination telephone number and identification information associated with said call, said identification information including a calling card number;

determining that no authentication code has been provided by said caller with said calling card number;

searching a database to match the received destination telephone number to an entry stored in said database for said calling card number;

completing said call when a match is found in said database; and

storing said destination number in said database for said calling card number such that no authentication code is required to be entered for a subsequent calling card call that is charged to said calling card number, and that is directed to said destination number.

16. The method of claim 15 further comprising the step of:

prompting said caller to enter said authorization code when no match is found; and

completing said call in response to receiving a valid authorization code from said caller.

17. The method of claim 16 further comprising the step of:

terminating said call when an invalid authentication code is provided by said caller.

18. A communications system for authenticating users comprising:

a computer'"'"'s storage area containing

a first table which stores i) information associated with at least one user of a communications network, and ii) an authentication code which is required to be entered to allow said at least one user to receive at least one communications service from said communications network;

a second table which stores a plurality of destination addresses for which said authentication code requirement is waived for said at least one user;

a processor which determines whether a particular destination address received in conjunction with a call initiated by a caller alleging he is said at least one user matches an entry in said second table; and

a switch which completes said call when a match is found for said particular destination address in said second table.

19. The system of claim 18 further comprising:

a voice information system which prompts said caller for said authentication code when no match is found for said particular destination address.

20. The system of claim 18 further comprising:

means for denying said communications service request when an invalid authorization code is provided by said caller in response to a prompt from said information system.

21. An authentication system for use in a communications network, said system comprising:

a switching system which receives as part of a request to complete a call a destination number and information associated with a caller who initiated said call; and

a processor which a) determines whether an authentication code is required to be provided by said caller for completion of calls of the type of said call, and if so, b) waives said authentication code requirement only if said destination number is included in a profile associated with said user.

22. The system of claim 21 wherein said information associated with said caller is used as a search key by said processor to retrieve said profile.

23. The system of claim 21 further comprising:

a voice information system which a) prompts said caller for said authentication code when said destination number is not included in said profile.

24. The system of claim 23 further comprising:

means for storing said destination number in said profile after completion of said call.