System and method for providing authentication and verification services in an enhanced media gateway

• US 7,305,550 B2
• Filed: 12/29/2000
• Issued: 12/04/2007
• Est. Priority Date: 12/29/2000
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Oliver, Neal C., Yudkowsky, Michael A.
• Primary Examiner(s): Sheikh; Ayaz
• Assistant Examiner(s): CHEN, SHIN HON
• Application Number:
  US09/750,227
• Publication Number:
  US 20020087858A1
• Time in Patent Office: 2,531 Days
• Field of Search: 713155-156, 713/173, 713/182, 713200-202, 380/247, 380/47, 709223-229
• US Class Current: 713/156
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

A system and method for facilitating authentication or identification services including an authentication server configured to provide an authentication certificate to a user of a first client device for authentication or identification of a user of a second client device. The first and second client devices are configured to communicate with each other and the authentication server. Each of the first and second client devices includes a user control program configured to communicate data to and from the authentication server. A media gateway is coupled to the authentication server to enable communication of media data from the first and second client devices to the authentication server. The user control program of the first client device is configured to receive a certificate corresponding to the user of the second client device and the authentication certificate from the authentication server. The user control program of the first client device is configured to authenticate the user of the second client device by comparing the certificate corresponding to the second client device and the authentication certificate.

Claims

1. A method for providing authentication or identification services to a first user regarding a second user, the method comprising:

establishing a telephone call between the first user and the second user through a media gateway;

detecting a voice command from the first user during the telephone call;

requesting a certificate corresponding to the second user from an authentication server in response to the voice command;

returning the certificate corresponding to the second user;

requesting authentication of the certificate corresponding to the second user from a control program associated with the second user;

returning an authentication certificate from the control program associated with the second user; and

verifying authentication by comparing the authentication certificate corresponding to the second user and received from the control program associated with the second user with the certificate received from the authentication server.

2. The method according claim 1, wherein the first user communicates with the second user through a media gateway.

3. The method according to claim 1, further comprising monitoring the communication between the first user and the second user so that the authentication server may notify the first user if the second user changes or becomes untrustworthy.

4. The method according to claim 1, wherein the requesting of the certificate corresponding to the second user from the authentication server, requesting authentication of the certificate corresponding to the second user and the verifying authentication is performed by a control program associated with the first user.

5. The method according to claim 1, wherein the first and second users are using client devices configured to communicate with each other and with the authentication server.

6. The method according to claim 5, wherein the client devices are smart phones.

7. The method according to claim 1, wherein the authentication server has authenticated an organization and the second user is a member of the authenticated organization.

8. The method according to claim 1, wherein verifying authentication determines a level of trust between the first user, the authentication server and the second user.

9. The method according to claim 8, wherein the level of trust is a value corresponding to the probability that the authentication certificate corresponding to the second user and received from the control program associated with the second user is the same as the certificate received from the authentication server.

10. The method according to claim 1, wherein the authentication certificate corresponding to the second user and received from the control program associated with the second user includes a portion indicating the second user'"'"'s identity.

11. A system for facilitating authentication services comprising:

an authentication server configured to provide an authentication certificate to a user of a first client device for authentication or identification of a user of a second client device, the first and second client devices being configured to communicate with each other and the authentication server, each of the first and second client devices including a user control program configured to communicate data to and from the authentication server, and a media gateway coupled to the authentication server and enabling communication of media data from the first and second client devices to the authentication server,

wherein, the user control program of the first client device, in response to a voice command of the first user requesting authentication of the second user, is configured to receive a certificate corresponding to the user of the second client device and the authentication certificate from the authentication server and being configured to authenticate the user of the second client device by comparing the certificate corresponding to the second client device and the authentication certificate.

12. The system according to claim 11, wherein the authentication server is configured to monitor the communication between the first user and the second user.

13. The system according to claim 11, wherein the authentication server is configured to continuously monitor the communication between the first user and the second user so as to notify the first user if the second user changes or becomes untrustworthy.

14. The method according to claim 11, wherein the control program associated with the first user is configured to request the certificate corresponding to the second user from the authentication server, request authentication of the certificate corresponding to the second user and verify authentication.

15. The system according to claim 14, wherein verifying authentication determines a level of trust between the first user, the authentication server and the second user.

16. The system according to claim 15, wherein the level of trust is a value corresponding to the probability that the authentication certificate corresponding to the second user and received from the control program associated with the second user is the same as the certificate received from the authentication server.

17. The system according to claim 11, wherein the first and second users use client devices configured to communicate with each other and with the authentication server.

18. The system according to claim 17, wherein the client devices are smart phones.

19. The system according to claim 11, wherein the authentication server has authenticated an organization and the second user is a member of the authenticated organization.

20. The system according to claim 11, wherein die authentication certificate corresponding to the second user and received from the control program associated with the second user includes a portion indicating the second user'"'"'s identity.