System and method for the secure enrollment of devices with a clearinghouse server for internet telephony and multimedia communications

• US 7,398,551 B2
• Filed: 08/14/2006
• Issued: 07/08/2008
• Est. Priority Date: 12/22/1999
• Status: Expired due to Fees

• Current Assignee: Transnexus Incorporated
• Original Assignee: Transnexus Incorporated
• Inventors: McManus, Rodney Scott, Vaughn, Rick, Thomas, Stephen
• Primary Examiner(s): JUNG, DAVID YIUK
• Application Number:
  US11/503,852
• Publication Number:
  US 20070033644A1
• Time in Patent Office: 694 Days
• Field of Search: 726/10, 726/5, 726/3
• US Class Current: 726/10
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 65/1073 Registration or de-registration
• CPC Class Codes: H04M 15/00 Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04M 15/48 Secure or trusted billing, e.g. trusted elements or encryption
• CPC Class Codes: H04M 15/56 for VoIP communications
• CPC Class Codes: H04M 2215/0156 Secure and trusted billing, e.g. trusted elements, encryption, digital signature, codes or double check mechanisms to secure billing calculation and information
• CPC Class Codes: H04M 2215/202 VoIP; Packet switched telephony
• CPC Class Codes: H04M 7/0078 Security; Fraud detection; Fraud prevention

Abstract

Enrolling devices with a clearinghouse server for Internet telephony and multimedia communications. Enrollment can be the process of taking a network device (such as a router, gateway, gatekeeper, etc.) and exchanging encrypted information with the clearinghouse server, so that later communications with that device can be secured. The enrollment is done with levels of security and verification that ensures the devices and clearinghouse server is legitimate.

Claims

1. A method for a clearinghouse or routing policy server to securely enroll a client device for an Internet transaction system, comprising the steps:

receiving a first message in a computer readable medium from a client Internet device that comprises an automated request to obtain an identity of one of an Internet transaction clearinghouse and Internet transaction policy server, the request further comprising an automated computer programming variable operation that is set equal to one of alphanumeric text and binary code, comprising ‘

getcacert’ and

that initiates a search for a certificate authority certificate;

responding to the request by transmitting a second message comprising the certificate authority certificate of one of an Internet transaction clearinghouse and Internet transaction policy;

receiving a third message comprising a certificate request from the client Internet transaction device;

responding to the client Internet device request by signing the certificate; and

transmitting a fourth message comprising the certificate signed by a certificate authority of one of the Internet transaction clearinghouse and the Internet transaction policy server, such that the client Internet device is enrolled in the Internet transaction system after transmission of the fourth message and wherein the clearinghouse or routing policy server is able to communicate securely with the client Internet device after transmission of the fourth message.

2. The method of claim 1, wherein the second message comprises a programming variable status that is set equal to one of alphanumeric text and binary code, comprising ‘

0&

certificate’

.

3. The method of claim 1, wherein the third message further comprises a computer programming variable operation that is set equal to at least one of a nonce value, a user'"'"'s name, a user'"'"'s password, an Internet device identifier, a customer identifier, and a certificate request to be signed.

4. The method of claim 1, wherein the fourth message further comprises a computer programming variable entitled status that is set equal to one of alphanumeric text and binary code, comprising ‘

0&

certificate’

.

5. A method for an Internet transaction clearinghouse or Internet transaction policy server to securely enroll a client Internet device for an Internet communication system, comprising the steps:

receiving a first message in a computer readable medium from a client Internet device that comprises an automated request to obtain an identity of one of an Internet transaction clearinghouse and Internet transaction policy server;

responding to the automated request by transmitting a second message comprising a certificate authority certificate of one of an Internet transaction clearinghouse and Internet transaction policy server to the client Internet device;

receiving a third message comprising a certificate request from the client Internet device, the certificate request comprising a nonce value, a user'"'"'s name, a user'"'"'s password, a Internet device identifier, a customer identifier, and a certificate request to be signed;

responding to the client Internet device request by signing the certificate; and

transmitting a fourth message comprising the certificate signed by the certificate authority of one of the Internet transaction clearinghouse and Internet transaction policy server, such that the client Internet device is enrolled in the Internet communication system after transmission of the fourth message and wherein the Internet transaction clearinghouse or Internet transaction policy server is able to communicate securely with the client Internet device after transmission of the fourth message.

6. The method of claim 5, wherein the first message further comprises a computer programming variable entitled operation that is set equal to one of alphanumeric text and binary code, comprising ‘

getcacert’

that initiates a search for a certificate authority certificate.

7. The method of claim 5, wherein the first message further comprises a POST message received via HTTP.

8. The method of claim 5, wherein the second message further comprises a certificate authority certificate.

9. The method of claim 5, wherein the second message further comprises a programming variable status that is set equal to one of alphanumeric text and binary code, comprising ‘

0&

certificate’

.

10. The method of claim 5, wherein the fourth message further comprises a computer programming variable entitled status that is set equal to one of alphanumeric text and binary code, comprising ‘

0&

certificate’

.

11. A method for a Internet transaction clearinghouse or Internet transaction policy server to securely enroll a client Internet device for an Internet communications system, comprising the steps:

receiving a first message in a computer readable medium from a client Internet device that comprises an automated request to obtain an identity one of an Internet transaction clearinghouse and Internet transaction policy server;

responding to the request by transmitting a second message comprising a certificate authority certificate of one of an Internet transaction clearinghouse and an Internet transaction policy server to the client Internet device, wherein the second message comprises a programming variable status that is set equal to one of alphanumeric text and binary code, comprising ‘

0&

certificate’

that indicates certificate authority information follows the alphanumeric text, or binary code;

receiving a third message comprising a certificate request from the client Internet device comprising a certificate request to be signed;

responding to the client Internet device request by signing the certificate; and

transmitting a fourth message comprising the certificate signed by the certificate authority of one of the Internet transaction clearinghouse and Internet transaction policy server, such that the client Internet device is enrolled in the Internet communications system after transmission of the fourth message and wherein the Internet transaction clearinghouse or Internet transaction policy server is able to communicate securely with the client Internet device after transmission of the fourth message.

12. The method of claim 11, wherein the first message further comprises an automated computer programming variable operation that is set equal to one of alphanumeric text and binary code, comprising getcacert that initiates a search for a certificate authority certificate.

13. The method of claim 11, wherein the first message further comprises a POST message received via HTTP.

14. The method of claim 11, wherein the second message further comprises the certificate authority certificate.

15. The method of claim 11, wherein the third message further comprises a computer programming variable operation that is set equal to at least one of a nonce value, a user'"'"'s name, a user'"'"'s password, an Internet device identifier, a customer identifier, and a certificate request to be signed.

16. The method of claim 11, wherein the fourth message further comprises a computer programming variable status that is set equal to one of alphanumeric text and binary code, comprising ‘

0&

certificate’

.