Encryption of telephone calling card codes

• US 5,978,459 A
• Filed: 12/28/1995
• Issued: 11/02/1999
• Est. Priority Date: 12/28/1995
• Status: Expired due to Term

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: MCI Communications Corporation (Verizon Communications Inc.)
• Inventors: McMahon, Kevin, Reed, Elaine
• Primary Examiner(s): Kuntz, Curtis A.
• Assistant Examiner(s): TIEU, BINH KIEN
• Application Number:
  US08/580,207
• Time in Patent Office: 1,405 Days
• Field of Search: 379/112, 379/114, 379/144, 379/145, 379/95, 379/91, 379/201, 379/222, 379/91.01, 379/91.02, 379/93.02, 379/93.06, 379/93.12, 379/93.15, 379/355, 379/356 , 379/357, 380/3, 380/4, 380/30, 380/23, 380/24, 340/825.33, 340/825.34, 340/825.35, 235/375, 235/380, 235/382, 235/384, 235/385
• US Class Current: 379/145
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: H04M 15/00 Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04M 3/382 using authorisation codes or passwords

Abstract

A cost-efficient method that utilizes encryption techniques to prevent the unauthorized use of telephone customer calling card account and personal identification numbers (access codes), by electronic telephone network eavesdroppers and telephone company employees. The access codes are encrypted by the telecommunications carrier'"'"'s access code collection device. The encrypted access codes are subsequently used instead of the clear-text access codes in all subsequent transmissions and subsequent processes that make use of access codes including billing and printing of calling card access codes.

Claims

1. A method for preventing unauthorized use of a telephone calling card for accessing telecommunication services over a telephone network, said method comprising the steps of:

(1) receiving, at an access code collection device, a clear-text calling card access code;

(2) encrypting said clear-text calling card access code into an encrypted calling card access code;

(3) accessing a computer data base system having a pre-defined list of valid encrypted calling card access codes;

(4) comparing said encrypted calling card access code with said pre-defined list of valid encrypted calling card access codes; and

(5) authorizing use of the telephone calling card if said encrypted calling card access code matches an entry in said pre-defined list of valid encrypted calling card access codes.

2. The method of claim 1, further comprising the step of using said encrypted calling card access code instead of said clear-text access code in subsequent telephone network transmissions.

3. The method of claim 1, further comprising the step of entering an encrypted calling card access code into said predefined list of valid encrypted calling card access codes, pursuant to a new order entry for a telephone calling card account.

4. The method of claim 1, wherein said clear-text calling card access code is N digits in length, comprising a clear-text P digit PIN and a clear-text N-P digit account number.

5. The method of claim 4, wherein step (2) further includes:

(a) generating as a first output, an encrypted N-P digit account number from a first input comprising said clear-text N-P digit account number;

(b) generating as a second output, an encrypted P digit PIN from a second input comprising said clear-text N digit access code;

(c) generating an N digit encrypted access code by combining said first output with said second output, wherein all of said N digit encrypted access codes being generated by clear-text access codes having common account numbers, have common encrypted account numbers, and all said N digit encrypted access codes being generated by clear-text access codes having common account numbers and different PINs, have common encrypted account numbers and different encrypted PINs.

6. The method of claim 1 further comprising the step of using said encrypted calling card access code instead of said clear-text calling card access code, in subsequent telecommunications carrier processes and procedures.

7. An apparatus for preventing unauthorized access to telephone calling card access codes calls that are transmitted over a telephone signaling network, and used to enable telephone calls, the apparatus comprising:

an encryption device coupled to an access code collection device, wherein said encryption device creates an encrypted calling card access code from a clear-text access code;

a computer data base system connected to said originating switch, said computer data base system including a pre-defined list of valid encrypted calling card access codes;

means coupled to said computer data base system, for comparing said encrypted calling card access code with said pre-defined list of valid encrypted calling card access codes; and

means for enabling the telephone call, if said encrypted calling card access code matches one of the entries in said list of pre-defined valid encrypted calling card access codes.

8. The apparatus of claim 7, further comprising a means for transmitting said encrypted calling card access code instead of said clear-text access code in subsequent transmissions over the telephone network.

9. The apparatus of claim 7, further comprising a means for processing said encrypted calling card access code instead of said clear-text access code for subsequent telecommunications processing.

10. A computer program product, comprising a computer useable medium having computer program logic stored therein, said computer program logic for enabling a computer to prevent unauthorized use of telephone calling cards for accessing telecommunication services over a telephone network,

wherein said computer program logic comprises:

means for enabling the computer to receive, at an access code collection device, a clear-text calling card access code;

means for enabling the computer to encrypt said clear-text calling card access code into a encrypted calling card access code;

means for enabling the computer to access a computer data base system having a pre-defined list of valid encrypted calling card access codes;

means for enabling the computer to compare said encrypted calling card access code with said pre-defined list of valid encrypted calling card access codes; and

means for enabling the computer to authorize the use of the telephone calling card if said encrypted calling card access code matches an entry in said pre-defined list of valid encrypted calling card access codes.

11. The computer program logic of claim 10, wherein said computer program logic further comprises:

means for enabling the computer to transmit said encrypted calling card access code instead of said clear-text access code over the telephone network in subsequent telephone network transmissions.

12. The computer program logic of claim 10, wherein said computer program logic further comprises:

means for enabling the computer to enter an encrypted a calling card access code into said predefined list of valid encrypted calling card access codes, pursuant to a new order entry for a telephone calling card account.

13. The computer program logic of claim 10, wherein said computer program logic further comprises:

means for enabling the computer to process clear-text calling card access codes having N digits comprising a clear-text P digit PIN and a clear-text N-P digit account number.

14. The computer program logic of claim 13, wherein said computer program logic further comprises:

means for enabling the computer to generate as a first output, an encrypted N-P digit account number, from a first input comprising said clear-text N-P digit account number;

means for enabling the computer to generate as a second output, an encrypted P digit PIN, from a second input comprising said clear-text N digit access code;

means for enabling the computer to generate an N digit encrypted access code by combining said first output with said second output, wherein all of said N digit encrypted access codes being generated by clear-text access codes having common account numbers, have common encrypted account numbers, and all said N digit encrypted access codes being generated by clear-text access codes having common account numbers and different PINs, have common encrypted account numbers and different encrypted PINs.

20. The computer program logic of claim 10, wherein said computer program logic further comprises:

means for enabling the computer to use said encrypted calling card access code instead of said clear-text calling card access code, in subsequent telecommunications carrier processes and procedures.

15. A system for preventing unauthorized use of a telephone calling card for accessing telecommunication services over a telephone network, comprising:

a database, having stored therein a predefined list of valid encrypted calling card access codes;

an access code collection device configured to receive a clear-text calling card access code;

an encryption device having as an input, said clear-text calling card access code, and having as an output, an encrypted calling card access code;

means for accessing said database;

means for comparing said encrypted calling card access code with said predefined list of valid encrypted calling card access codes in said database; and

means for authorizing use of the telephone calling card if said encrypted calling card access code matches an entry in said pre-defined list of valid encrypted calling card access codes.

16. The system of claim 15, further comprising a means for using said encrypted calling card access code instead of said clear-text access code in subsequent telephone network transmissions.

17. The system of claim 15, further comprising a means for entering an encrypted calling card access code into said database pursuant to a new order entry for a telephone calling card account.

18. The system of claim 15, wherein said clear-text calling card access code is N digits in length, comprising a clear-text P digit PIN and a clear-text N-P digit account number.

19. The system of claim 18 wherein said input comprises a first input and a second input, said first input comprising said clear-text N-P digit account number and said second input comprising said clear-text N digit access code, said encryption device further includes:

means for generating as a first output, an encrypted N-P digit account number from said first input;

means for generating as a second output, an encrypted P digit PIN from said second input;

means for generating an N digit encrypted access code by combining said first output with said second output, wherein all of said N digit encrypted access codes being generated by clear-text access codes having common account numbers, have common encrypted account numbers, and all said N digit encrypted access codes being generated by clear-text access codes having common account numbers and different PINs, have common encrypted account numbers and different encrypted PINs.