System and method for bringing an in-line device on-line and assuming control of calls

• US 6,687,353 B1
• Filed: 09/28/2000
• Issued: 02/03/2004
• Est. Priority Date: 12/11/1998
• Status: Expired due to Term

• Current Assignee: SecureLogix Corporation
• Original Assignee: SecureLogix Corporation
• Inventors: Brysch, Michael, Applonie, Robert R., Pickens, Keith S., Heilmann, Craig
• Primary Examiner(s): BUI, BING Q
• Application Number:
  US09/672,530
• Time in Patent Office: 1,223 Days
• Field of Search: 379/93.24, 379/156, 379/157, 379/188, 379/189, 379/196, 379/200, 379/201.01, 379/88.01, 379/93.03, 379/93.11, 379/265.09, 713/201, 713/202, 713/153, 713/154
• US Class Current: 379/189
• CPC Class Codes: H04L 63/0218 Distributed architectures, e.g. distributed firewalls
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04M 2203/2066 Call type detection of indication, e.g. voice or fax, mobile of fixed, PSTN or IP
• CPC Class Codes: H04M 3/22 Arrangements for supervision, monitoring or testing
• CPC Class Codes: H04M 3/38 Graded-service arrangements, i.e. some subscribers prevented from establishing certain connections queuing arrangements H04Q3/64
• CPC Class Codes: H04M 3/42314 in private branch exchanges
• CPC Class Codes: H04M 3/436 Arrangements for screening incoming calls , i.e. evaluating the characteristics of a call before deciding whether to answer it based on the calling party profile H04M3/42059; based on location H04M3/42348; based on presence H04M3/42365; diversion H04M3/54
• CPC Class Codes: H04M 7/0078 Security; Fraud detection; Fraud prevention

Abstract

A telephony security system and method for controlling and logging access between an enterprise'"'"'send-user stations at a plurality of customer sites and their respective circuits into the public switched telephone network (PSTN). The system and method includes a discrete line sensor within the customer sites for determining a call type of the call, and taking actions on the call based on predetermined security rules.

Claims

1. A telephony security system for controlling and logging call access between an enterprise'"'"'send-user stations at a plurality of customer sites and their respective circuits into the public switched telephone network (PSTN), comprising:

a discrete line sensor within the customer sites for determining a call type of the call, wherein said discrete line sensor does not interfere with existing communications;

a public branch exchange (PBX) within the customer sites connected to the line sensor;

a central office switch connected to said discrete line sensor and the PBX; and

a firewall management server connected to said discrete line sensor.

2. The system of claim 1 wherein said discrete line sensor determines whether the call-type is one of voice, fax or data (modem), and applies security rules which permit or deny a call.

3. The system of claim 2 wherein said security rules specify one or more actions to be taken, said one or more actions being selected from a group including:

redirecting the call, logging the call, providing an alert, said alert being selected from a group including;

electronic mail notification, pager dialing, console messaging, and a simple network management protocol (SNMP) trap.

4. The system of claim 1 wherein said discrete line sensor determines one or more other call attributes, said one or more other call attributes being selected from a group including:

call-type, call date, call time, call duration (in seconds), station extension, inbound number, and outbound number dialed.

5. A method for controlling and logging call access between an enterprise'"'"'send-user stations at a plurality of customer sites and their respective circuits to the public switched telephone network (PSTN), said method comprising the steps of:

discretely sensing the type of call line by lines within the customer sites wherein said step of discretely sensing the type of call does not interfere with existing communications and further includes;

routing data through a line sensor without altering the data;

routing said data through said line sensor by storing and copying said data; and

transmitting new data through said line sensor.

6. The method of claim 5 wherein of said type of the call is one of voice, fax or data (modem), and wherein security rules specify the actions of permitting or denying a call based on the type of call sensed.

7. The method of claim 6 further including the step of sensing one or more other call attributes wherein said one or more call attributes are selected from a group including:

call date, call time, call duration (in seconds), station extension, inbound number, and outbound number dialed.

8. The method of claim 6 wherein said security rules specify one or more actions to be taken, said one or more actions being selected from a group including redirecting the call, logging the call, and providing an alert, said alert being selected from a group including:

electronic mail notification, pager dialing, console messaging, and a simple network management protocol (SNMP) trap.

9. A telephony security system for controlling and logging call access between an enterprise'"'"'send-user stations at a plurality of customer sites and their respective circuits into the public switched telephone network (PSTN) comprising:

a discrete line sensor within the customer sites for determining a call type of the call, wherein said discrete line sensor does not interfere with existing communications and wherein said discrete line sensor includes;

a pair of relays for routing data through said line sensor without altering the data;

a pair of transceivers and a processing unit for routing data through said discrete line sensor by storing and copying the data and for transmitting new data through said discrete line sensor;

a public branch exchange within the customer sites connected to said discrete line sensor;

a central office switch connected to said discrete line sensor and the public branch exchange; and

a firewall management server connected to said discrete line sensor.

10. The system of claim 9 wherein said discrete line sensor includes means for performing actions on selected calls.

11. The system of claim 10 further including a remote log server for logging all access to each of the end-user stations and any actions taken on each of the end user stations.

12. The system of claim 9 wherein said discrete line sensor determines whether the call-type is voice, fax or data (modem), and applies security rules which permit or deny a call.

13. The system of claim 12 wherein said security rules specify one or more actions to be taken, said one or more actions being selected from a group including:

redirecting the call, logging the call, and providing an alert, whereby said alert being selected from a group including;

electronic mail notification, pager dialing, console messaging, and a simple network management protocol (SNMP) trap.

14. The system of claim 9 wherein said discrete line sensor determines one or more other call attributes said one or more other call attributes being selected from a group including:

call date, call time, call duration (in seconds), station extension, inbound number, and outbound number dialed.

15. The system of claim 9 further including a remote management station connected to said discrete line sensor, said remote management station constructed and arranged to contain a database of security rules and to download a subset of said security rules to said discrete line sensor.

16. The system of claim 9 wherein the telephony security system is constructed and arranged for installation on the enterprise side of a local telephony company'"'"'s central office.

17. The system of claim 9 wherein said discrete line sensor is placed between the end-user station and a telephony company'"'"'s central office.