System and method for authentication of caller identification

• US 6,324,271 B1
• Filed: 08/17/1999
• Issued: 11/27/2001
• Est. Priority Date: 08/17/1999
• Status: Expired due to Term

• Current Assignee: RPX Clearinghouse LLC (RPX Corporation)
• Original Assignee: Nortel Networks Limited (Nortel Networks Corporation)
• Inventors: Gilby, Christian P., O'Shaughnessey, Patrick Michael, Sawyer, W. Donald
• Primary Examiner(s): Kuntz, Curtis
• Assistant Examiner(s): BARNIE, REXFORD N
• Application Number:
  US09/375,396
• Time in Patent Office: 833 Days
• Field of Search: 379/142, 379/144, 379/67.1, 379/354, 379/355, 379/356, 379/357, 379/91.01, 379/112, 379/220, 379/221, 379/201, 379/142.01, 379/142.05, 379/142.09, 379/142.1
• US Class Current: 379/142.05
• CPC Class Codes: H04M 1/57 Arrangements for indicating or recording the number of the calling subscriber at the called subscriber's set at the operator set in a manual exchange H04M5/20
• CPC Class Codes: H04M 1/67 by electronic means
• CPC Class Codes: H04M 2242/22 Automatic class or number identification arrangements
• CPC Class Codes: H04M 3/387 using subscriber identification cards
• CPC Class Codes: H04M 3/42042 Notifying the called party of information on the calling party details within substation equipment H04M1/57, signalling details H04Q3/72

Abstract

A system and method for caller identification, named certified caller ID (CCID) provides an enhancement to existing calling line identification services by providing the terminating end of a telephone call with a cryptographically-certified identity of the caller, rather than the identity associated with the calling telephone line. Advantageously, in the operation of CCID, the caller'"'"'s identity is authenticated by a token, such as a smart card or other integrated circuit device which is capable of executing a cryptographic authentication protocol, optionally in conjunction with a Personal Identification Number (PIN) or biometric confirmation. Beneficially, CCID works in conjunction with several associated Customer Local Area Signalling Services (CLASS), e.g. Selective Call Acceptance, Selective Call Forwarding and Distinctive Ring to provide special call treatment based on the identity of the caller.

Claims

1. A process for caller identification comprising:

providing certification of caller identification (CCID) to a called party by;

receiving from an individual caller, called party information and a token associated uniquely with caller identification of the individual caller,

performing authentication of caller identification using the token,

and,

during alerting of a called party line, sending to a terminating set certified caller identification comprising the authenticated caller identification and an indication to the called party that the callers identification has been uniquely authenticated by the individual caller.

2. A process for caller identification according to claim 1 wherein the caller identification comprises a name of the individual caller, and the indication that the callers identification has been uniquely authenticated by the individual caller is a reserved symbol.

3. A process according to claim 2 wherein caller identification is provided using multiple data message format MDMF delivery protocol comprising user name N associated with the individual caller, user number D and reference R to a standard X.509 digital certificate, wherein the indication that the callers identification has been uniquely authenticated by the individual caller comprises a character of the name field in the form of a reserved symbol flagging the name as being certified.

4. A process according to claim 3 wherein the reserved symbol is the first character of the name field.

5. A process according to claim 1 wherein calling information delivery protocol comprises multiple data message format MDMF.

6. A process according to claim 5 wherein SDMF/MDMF information comprises user name N, user number D and reference R to a standard X.509 digital certificate.

7. A process according to claim 6 comprising asserting that a specific token linked to a uniquely defined person has been used at a specific time and date T, to place a call to a line with a terminating directory number DT.

8. A process according to claim 7 wherein the reference R comprises a parameter in the MDMF format.

9. A process according to claim 8 wherein R comprises a digital signal on the D, N, T, and DT.

10. A process according to claim 6 wherein a character of the callers name field comprises a reserved symbol flagging the name as being certified.

11. A process according to claim 10 wherein the reserved character is the first character of the callers name field.

12. A process according to claim 5 comprising a one way authentication protocol which is digitally time stamped.

13. A process according to claim 10 comprising displaying the callers name and number on a display, the reserved symbol indicating to the user that the name and number have been certified.

14. A process according to claim 1 implemented using a CLASS display telephone or CLASS display adjunct.

15. A process according to claim 5 wherein CCID is provided by a computer acting on the identity appearing in the MDMF sequence after verifying the signature.

16. A process of claim 6 wherein the process is implemented using a computer and further comprises a step of retrieving the digital certificate from a network server using R as the reference.

17. A process according to claim 1 wherein the process is implemented using TCP/IP protocol.

18. A process according to claim 1 wherein providing authentication comprises connecting to an intelligent peripheral (IP).

19. A process according to claim 18 wherein the IP Peripheral comprises an authentication server.

20. A process for caller identification comprising:

providing certification of caller identification (CCID) to a called party by;

receiving from an individual caller, called party information and a token associated uniquely with caller identification of the individual caller, the token being provided by an integrated circuit device capable of executing a cryptographic authentication protocol

performing cryptographic authentication of caller identification using the token,

and,

during alerting of a called party line, sending to a terminating set certified caller identification comprising the authenticated caller identification and an indication to the called party that the caller identification has been uniquely authenticated by the individual caller.

21. A process according to claim 20 wherein the integrated circuit device comprises a smart card.

22. A process according to claim 21 wherein authentication of the caller identification is based on a challenge/response protocol using a secret key contained within the token that is used to uniquely encrypt a random challenge (number) issued by an authentication server temporarily linked to the originating caller'"'"'s terminal, telephone or computing device.

23. A process according to claim 22 wherein cryptographic authentication is performed in conjunction with a personal identification number confirmation process.

24. A process according to claim 21 wherein cryptographic authentication is performed in conjunction with a biometric confirmation.

25. A system for caller identification comprising:

providing certification of caller identification (CCID) sent to a called party by;

means for receiving from an individual caller, called party information and a token associated uniquely with caller identification of the individual caller,

means for performing authentication of caller identification using the token,

and,

means for sending to a terminating set, during alerting of a called party line, certified caller identification comprising the authenticated caller identification with an indication to the called party that the caller identification has been uniquely authenticated by the individual caller.

26. A system according to claim 25 wherein the integrated circuit device comprises a smart card.

27. A system according to claim 26 wherein the means for authentication of the token holder identification uses a challenge/response protocol using a secret key contained within the token that is used to uniquely encrypt a random challenge (number) issued by an authentication server temporarily linked to the originating caller'"'"'s terminal, telephone or computing device.

28. A system according to claim 27 wherein the means for cryptographic authentication includes means for confirmation of a personal identification number.

29. A system according to claim 27 wherein means for cryptographic authentication includes means for biometric confirmation.

30. A system according to claim 25 comprises means for delivery of calling information using multiple data message format (MDMF).

31. A system according to claim 25 wherein SDMF/MDMF information comprises user name N, user number D and reference R to a standard X.509 digital certificate.

32. A system according to claim 31 comprising means for asserting that a specific token linked to a uniquely defined person has been used at a specific time and date T, to place a call to a line with a terminating directory number DT.

33. A system according to claim 31 wherein the reference R comprises a parameter in the MDMF format.

34. A system according to claim 30 wherein R comprises a digital signal on the D, N, T, and DT.

35. A system according to claim 31 wherein a character of the callers name field comprises a reserved symbol flagging the name as being certified.

36. A system according to claim 35 wherein the reserved character is the first character of the callers name field.

37. A system according to claim 33 comprising a one way authentication protocol which is digitally time stamped.

38. A system according to claim 36 comprising displaying the callers name and number on a display, the reserved symbol indicating to the user that the name and number have been certified.

39. A system according to claim 38 implemented using a CLASS display telephone or CLASS display adjunct.

40. A system according to claim 25 wherein the process is implemented using TCP/IP protocol.

41. A system according to claim 25 wherein providing authentication comprises connecting to an intelligent peripheral (IP).

42. A system according to claim 41 wherein the IP Peripheral comprises an authentication server.

43. A computer readable medium for implementing a method for caller identification with certification of caller identification (CCID), wherein certification comprises:

receiving from an individual caller, called party information and a token associated uniquely with caller identification of the individual caller,

performing authentication of caller identification using the token,

and,

during alerting of a called party line, sending to a terminating set certified caller identification comprising the authenticated caller identification and an indication to the called party that the callers identification has been uniquely authenticated by the individual caller.

44. A computer readable medium according to claim 43 wherein the step of authentication comprises communicating with a token comprising an integrated device capable of executing a cryptographic authentication protocol.