System and method for enabling encryption/authentication of a telephony network

• US 6,857,072 B1
• Filed: 09/27/1999
• Issued: 02/15/2005
• Est. Priority Date: 09/27/1999
• Status: Expired due to Term

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: 3Com Corporation (HP Inc.)
• Inventors: Grabiec, Jacek A., Sidhu, Ikhlaq S., Sidhu, Sagan S., Schuster, Guido M.
• Primary Examiner(s): Morse, Gregory
• Assistant Examiner(s): Brown, Christopher J
• Application Number:
  US09/405,981
• Time in Patent Office: 1,968 Days
• Field of Search: 380/277, 713/160
• US Class Current: 713/160
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04M 2203/609 Secret communication
• CPC Class Codes: H04M 7/006 Networks other than PSTN/ISDN providing telephone service, e.g. Voice over Internet Protocol (VoIP) , including next generation networks with a packet-switched transport layer H04L65/00 takes precedence; aspects not specific to the type of network H04M3/00; special services in those networks H04M3/42
• CPC Class Codes: H04M 7/0078 Security; Fraud detection; Fraud prevention

Abstract

A system and method for enabling encryption and/or authentication services on a telephony network. A portable information device, such as a personal digital assistant is used to exchange encryption and/or authentication data with a second portable information device. The portable information devices may be linked to the telephony network to enable encryption and/or authentication services using the encryption and/or authentication data exchanged by the portable information devices.

Claims

1. A method for resolving a shared secret on a data network telephony system, the data network telephony system comprising a plurality of Portable Information Devices (PIDs) coupled to data network telephones within the data network telephony system, the method comprising in combination:

transmitting a suggested shared secret to one or more PIDSs from a first PID;

receiving the suggested shared secret on the one or more PIDs;

rejecting the suggested shared secret by at least one of the one or more PIDs and suggesting an alternative shared secret by the first PID prior to accepting the suggested shared secret at each of the one or more PIDs; and

confirming the suggested shared secret by sending at least one acknowledgement message from the one or more PIDs to the first PID.

2. The method of claim 1 wherein the suggested shared secret is generated by a random-number within the first PID.

3. The method of claim 1 wherein the suggested shared secret is generated by a pseudo-random-number generator the first PID.

4. The method of claim 1 wherein the suggested shared secret is selected from the group consisting of encryption/authentication data, and encryption/decryption data.

5. The method of claim 1 wherein the suggested shared secret is accepted by at least one of the one or more PIDs by meeting a predetermined length requirement.

6. A method for resolving a shared secret on a data network telephony system, the data network telephony system comprising a plurality of Portable Information Devices (PIDs) coupled to data network telephones within the data network telephony system, the method comprising in combination:

transmitting a suggested shared secret to one or more PIDSs from a first PID;

receiving the suggested shared secret on the one or more PIDs;

transmitting a plurality of suggested shared secrets to at least one of the one or more PIDs by the first PID prior to confirming the suggested shared secret at the one or more PIDs; and

confirming the suggested shared secret by sending at least one acknowledgement message from the one or more PIDs to the first PID.

7. The method of claim 6 wherein at least one of the one or more PIDs selects one of the plurality of suggested shared secrets based on criteria selected from the group consisting of a suggested shared secret length, a suggested shared secret alphanumeric character redundancy, a suggested shared secret averaging, a timestamp of transmission of suggested shared secrets, and a pre-selection of suggested shared secrets.

8. The method of claim 7 further comprising agreeing upon a selected suggested shared secret by at least one of the one or more PIDs and storing the agreed upon selected suggested shared secret.

9. The method of claim 8 wherein the at least one of the one or more PIDs stores the agreed upon selected suggested shared secret in a user attribute database within the at least one or more PIDs.

10. The method of claim 8 wherein the at least one of the one or more PIDs store the agreed upon selected suggested shared secret in a private encryption/authentication field in an address book application located within the at least one of the one or more PIDs.

11. The method of claim 6 wherein the suggested shared secret is generated by a random-number generator within the first PID.

12. The method of claim 6 wherein the suggested shared secret is generated by a pseudo-random-number generator the first PID.

13. The method of claim 6 wherein the suggested shared secret is selected from the group consisting of encryption/authentication data, and encryption/decryption data.

14. The method of claim 6 wherein the suggested shared secret is accepted by at least one of the one or more PIDs by meeting a predetermined length requirement.

15. A method for resolving a shared secret on a data network telephony system, the data network telephony system comprising a plurality of Portable Information Devices (PIDs) coupled to data network telephones within the data network telephony system, the method comprising an electronic business card exchange.

16. The method of claim 15 wherein the suggested shared secret is generated by a random-number generator within the first PID.

17. The method of claim 15 wherein the suggested shared secret is generated by a pseudo-random-number generator the first PID.

18. The method of claim 15 wherein the suggested shared secret is selected from the group consisting of encryption/authentication data, and encryption/decryption data.

19. The method of claim 15 wherein the suggested shared secret is accepted by at least one of the one or more PIDs by meeting a predetermined length requirement.