Apparatus and methods for telecommunication authentication

• US 7,460,653 B2
• Filed: 03/07/2003
• Issued: 12/02/2008
• Est. Priority Date: 03/07/2003
• Status: Expired due to Fees

• Current Assignee: CallWave Communications, LLC
• Original Assignee: FuzeBox, Inc.
• Inventors: Brahm, David, Trandal, David
• Primary Examiner(s): Gauthier; Gerald
• Application Number:
  US10/385,204
• Publication Number:
  US 20040174965A1
• Time in Patent Office: 2,097 Days
• Field of Search: 379/142.05, 379/88.19, 379/210.01, 705/67, 705/26
• US Class Current: 379/88.19
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: H04M 15/00 Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04M 15/41 Billing record details, i.e. parameters, identifiers, structure of call data record [CDR]
• CPC Class Codes: H04M 15/48 Secure or trusted billing, e.g. trusted elements or encryption
• CPC Class Codes: H04M 2201/18 Comparators
• CPC Class Codes: H04M 2203/105 Financial transactions and auctions, e.g. bidding auctioneering devices in packet switching networks H04L12/1804
• CPC Class Codes: H04M 2203/1058 Shopping and product ordering
• CPC Class Codes: H04M 2215/0156 Secure and trusted billing, e.g. trusted elements, encryption, digital signature, codes or double check mechanisms to secure billing calculation and information
• CPC Class Codes: H04M 2215/0164 Billing record, e.g. Call Data Record [CDR], Toll Ticket[TT], Automatic Message Accounting [AMA], Call Line Identifier [CLI], details, i.e. parameters, identifiers, structure
• CPC Class Codes: H04M 3/382 using authorisation codes or passwords
• CPC Class Codes: H04M 3/493 Interactive information services, e.g. directory enquiries ; Arrangements therefor, e.g. interactive voice response [IVR] systems or voice portals
• CPC Class Codes: H04M 7/12 for working between exchanges having different types of switching equipment, e.g. power-driven and step by step or decimal and non-decimal

Abstract

The present invention is related to telecommunications, and in particular to systems and methods of using telecommunication services for user authentication. Account information is stored for a user, the account information including at least a first phone number associated with the user. A user order is received. A verification phone call is received from the user, the call including charge phone number information. The charge number information is compared to the first phone number to authenticate that the user is associated with the first phone number. Based at least in part on the comparison, the user order is selectively caused to be fulfilled.

Claims

1. A method of authenticating a user identity using telephony signaling, comprising:

storing account information for a user, the account information including at least a first phone number associated with the user;

receiving a user order;

receiving a call from the user, the call including associated SS7 signaling information, including charge phone number information;

comparing the charge number information with the stored first phone number to authenticate that the user is associated with the first phone number; and

based at least in part on the comparison, selectively causing the user order to be fulfilled.

2. The method as defined in claim 1, further comprising comparing Caller-ID signaling information with the first phone number in order to authenticate that the first user is associated with the first phone number.

3. The method as defined in claim 1, further comprising causing a computer terminal associated with the user to automatically place the call.

4. The method as defined in claim 1, wherein the call is placed by the user.

5. The method as defined in claim 1, wherein the order includes at least request to add, change, or remove a phone service.

6. The method as defined in claim 1, wherein the order is for a product.

7. A method of authenticating a user identity using telephony signaling, comprising:

receiving at a call processing system from a first user a call handling instruction for calls placed to a first telephone number;

causing, via the call processing system, a computer terminal associated with the first user to place a call to a second telephone number, the call including corresponding call signaling information;

receiving the call and corresponding call signaling information;

comparing at least a portion of the corresponding call signaling information with the first telephone number; and

based at least in part on the comparison, determining if the call instruction is to be complied with.

8. The method as defined in claim 7, wherein the call handling instruction is received from the computer terminal via an IP network.

9. The method as defined in claim 7, wherein the call handling instruction is an instruction to forward calls placed to the first telephone number upon the occurrence of at least a first condition.

10. The method as defined in claim 7, wherein the portion of the corresponding signaling information being compared includes charge number information.

11. The method as defined in claim 7, wherein the portion of the corresponding signaling information being compared includes caller identification information.

12. A method of authenticating a caller identity using SS7 signaling, comprising:

receiving a user order for a good and/or a service;

requesting that the user provide a phone number associated with a first telephone line;

receiving at a call processing system the user provided phone number;

instructing, via the call processing system, a client application executing on a user computer to initiate a call to the call processing system, the call associated with SS7 signaling information including caller-ID information and charge number information, wherein the user computer places the call using the first telephone line;

verifying that the caller-ID information and/or charge number information corresponds to the phone number provided by the user; and

providing the good and/or the service at least partly in response to verifying that the caller-ID information and/or charge number information corresponds to the phone number provided by the user.

13. The method as defined in claim 12, wherein the user order is received over an IP network from a terminal associated with the user.

14. The method as defined in claim 12, further comprising instructing the user computer to stop accessing the Internet before placing the call.

15. The method as defined in claim 12, wherein the client application detects when the user computer has ceased accessing the Internet and then automatically places the call.

16. A method of processing telephony signaling information, comprising:

receiving a user order;

requesting that the user provide a phone number associated with a first telephone line of the user;

initiating a call using the first telephone line of the user to a call processing system, the call associated with signaling information including SS7 charge number information;

verifying that the SS7 charge number information corresponds to the phone number provided by the user; and

complying with the order at least partly in response to verifying that the charge number information corresponds to the phone number provided by the user.

17. The method as defined in claim 16, wherein the act of initiating the call further comprises instructing the user to place the call.

18. The method as defined in claim 16, wherein the act of initiating the call further comprises automatically causing a computer terminal associated with the user to place the call.

19. A method of authenticating a caller identity using SS7 signaling, comprising:

receiving at a call processing system a user request over the Internet via a computer terminal associated with the user, wherein the computer terminal is accessing the Internet using a first telephone line;

causing, via the call processing system, the computer terminal to cease accessing the Internet using the first telephone line;

causing, via the call processing system, the computer terminal to call a first telephone number using the first telephone line;

receiving the call and corresponding signaling information, wherein the signaling information includes a phone number associated with the first telephone line; and

at least partly in response to the signaling information, selectively responding to the user request.

20. The method as defined in claim 19, wherein the user request is received at a call processing system server.

21. The method as defined in claim 19, further comprising transmitting an instruction to cease accessing the Internet over the Internet to the computer terminal.

22. The method as defined in claim 19, further comprising transmitting an instruction to call the first telephone number over the Internet to the computer terminal.

23. The method as defined in claim 19, wherein the signaling information includes a charge-to phone number.

24. The method as defined in claim 19, wherein the act of causing the computer terminal to call the first telephone number is performed without user intervention.

25. The method as defined in claim 19, wherein the computer terminal is a personal computer.

26. A method of processing telephony signaling information, comprising:

receiving a request for a password from a user;

requesting that the user call a first phone number in response to receiving the user request;

receiving a call from the user to the first phone number, the call including signaling information;

verifying that the call originated from the user based at least in part on the signaling information, including at least SS7 charge number information; and

providing the user with the password at least partly in response to verifying that the call originated from the caller.

27. The method as defined in claim 26, wherein the request is user received over the Internet via a user IP terminal.

28. The method as defined in claim 26, wherein the request that the user call the first phone number is transmitted over the Internet to a user IP terminal.

29. The method as defined in claim 26, wherein the signaling information used to verify the call originated from the user includes callerID information.

30. A method of verifying a user identity, comprising:

receiving from a first user a phone service instruction related to a first telephone number;

providing to the first user a verification code via a computer terminal associated with the first user;

causing a verification instruction to be provided to the first user, wherein the verification instruction includes an instruction to call a second telephone number and to enter the verification code;

receiving a call, including call signaling information, and the verification code from the first user;

comparing at least a portion of the call signaling information with the first telephone number; and

at least partly in response to the comparison, determining whether to cause the phone service instruction to be complied with.

31. The method as defined in claim 30, wherein the phone service instruction is a call forwarding instruction.

32. The method as defined in claim 30, wherein the verification code is received from the user as DTMF tones.

33. The method as defined in claim 30, wherein the verification code is received verbally from the user.

34. A method of verifying a user identity, comprising:

receiving from a first user a phone service instruction for calls placed to a first telephone number, wherein the first user provided the phone service instruction via a client application executing on an online computer terminal, and the online computer terminal is online via a telephone line associated with the first telephone number;

transmitting a first code to the first user via the online computer terminal;

informing the first user that a call will be placed to the first user and that the first user is to provide the first code during the call;

causing the computer terminal to go offline;

placing the call to the first telephone number;

receiving a code entry from the first user during the call;

comparing the code entry to the first code; and

at least partly in response to the comparison, determining if the phone service instruction is to be executed.

35. The method as defined in claim 34, further comprising requesting that the user instruct the computer terminal to go offline.

36. The method as defined in claim 34, further comprising transmitting an instruction over a network to the computer, wherein the instruction instructs the computer terminal to go offline.

37. The method as defined in claim 34, further comprising transmitting the client application to the computer terminal for installation.

38. A method of verifying a user identity, comprising:

receiving from a first user a phone service instruction for a first telephone number, wherein the first user provided the phone service instruction via a client application executing on an online computer terminal, and the online computer terminal is online via a telephone line associated with the first telephone number;

transmitting a first code to the first user via the online computer terminal;

requesting the first user to call a second telephone number and to provide the first code during the call;

receiving the first user call to the second telephone phone number;

receiving a code entry from the first user during the call;

comparing the code entry to the first code; and

at least partly in response to the comparison, determining if the phone service instruction is to be executed.

39. The method as defined in claim 38, wherein the code is transmitted to the user over an IP network.

40. An apparatus for authenticating a user identity using telephony signaling, comprising:

a first computer readable memory that stores account information for a user, the account information including at least a first phone number associated with the user;

program instructions stored in computer readable memory configured to;

receive a user order;

receive a call from the user, the call including SS7 charge phone number information; and

compare the SS7 charge number information to the first phone number to authenticate that the user is associated with the first phone number, and based at least in part on the comparison, selectively causing the user order to be fulfilled.

41. The apparatus as defined in claim 40, the program instructions further configured to compare Caller-ID signaling information with the first phone number in order to authenticate that the first user is associated with the first phone number.

42. The apparatus as defined in claim 40, the program instructions further configured to command a computer terminal associated with the user to automatically place the call.

43. The apparatus as defined in claim 40, wherein the call is placed by the user.

44. The apparatus as defined in claim 40, wherein the order is a call forwarding order.

45. The method as defined in claim 40, wherein the order is for a product.

46. An authentication apparatus, comprising:

a PSTN interface;

a data network interface; and

a call processing system configured to;

receive via the data network interface a phone service instruction for a first telephone number account from a first user;

cause a user computer terminal to place a call to a second telephone number, the call including corresponding call signaling information;

receive the call and corresponding call signaling information via the PSTN interface;

compare at least a portion of the corresponding call signaling information with the first telephone number; and

based at least in part on the comparison, determine if the call instruction is to be complied with.

47. The apparatus as defined in claim 46, wherein the phone service instruction includes at least a request to add, change, or remove a phone service.

48. The apparatus as defined in claim 46, wherein the portion of the corresponding signaling information being compared includes charge number information.

49. The apparatus as defined in claim 46, wherein the portion of the corresponding signaling information being compared includes caller identification information.

50. An apparatus for verifying a user identity, comprising:

a PSTN interface;

a data network interface; and

a call processing system configured to;

receive via the PSTN interface from a first user computer terminal a call handling instruction for calls placed to a first telephone number;

transmit a first code to the first user via the computer terminal;

inform the first user that a call will be placed to the first user and that the first user is to provide the first code during the call;

place the call to an account telephone number provided by the first user;

receive a code entry from the first user during the call;

compare the code entry to the first code;

at least partly in response to the comparison, determine if the call handling instruction is to be executed.

51. The apparatus as defined in claim 50, wherein the call processing system is further configured to request that the user instruct the computer terminal to go offline.

52. The apparatus as defined in claim 50, wherein the call processing system is further configured to transmit an instruction over a network to the computer terminal, wherein the instruction instructs the computer terminal to go offline.