Method and system indicating a level of security for VoIP calls through presence

• US 8,015,403 B2
• Filed: 03/28/2005
• Issued: 09/06/2011
• Est. Priority Date: 03/28/2005
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Jennings, Cullen F., FitzGerald, Cary W.
• Primary Examiner(s): Najjar; Saleh
• Assistant Examiner(s): PAN, PEILIANG
• Application Number:
  US11/092,782
• Publication Number:
  US 20060218399A1
• Time in Patent Office: 2,353 Days
• Field of Search: 713/1, 713/2, 713/168, 713/188, 713/194, 713/153, 713/160, 380/200, 380/201, 380/255, 380/277, 726/2, 726/26, 726/25, 709/219, 709/255, 709/225, 709/238, 709/239, 455/410, 455/411
• US Class Current: 713/168
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

In accordance with a particular embodiment of the present invention, a method for providing security information associated with a prospective communication session to a user includes providing at least one communication network for the establishment of a prospective communication session between a first network device and a second network device. A security rating is assigned to the prospective communication session, and security information is provided to a user associated with the first network device that includes the security rating.

Claims

1. A method for providing security information associated with a communication session to a user, comprising:

facilitating the establishment of a communication session between a selected one of;

a first network device associated with a first user and a second network device associated with a second user that traverses a first communication network and a second communication network; and

the first network device and a third network device associated with the second user that traverses a third communication network and a fourth communication network;

determining security information of the first communication network, the second communication network, the third communication network and the fourth communication network;

assigning a security rating to the communication session based on the determined security information, the assigning a security rating comprising;

identifying a first communication path for the communication session between the first network device and the second network device, the first communication path traversing the first communication network and the second communication network;

identifying a second communication path for the communication session between the first network device and the third network device, the second communication path traversing the third communication network and the fourth communication network;

determining a security level provided by each of the first communication network, the second communication network, the third communication network and the fourth communication network;

identifying a lowest security level of the security levels; and

assigning a security rating to the communication session based on the identified lowest security level; and

before establishing the communication session, providing security information for the communication session to a user associated with the first network device that includes the assigned security rating; and

based on the provided security information, receiving a user selection from the first user, the user selection selecting one of the first communication path and the second communication path for the communication session.

2. The method of claim 1, wherein facilitating the establishment of communication session comprises providing the first communication network and the second communication network for the communication of signaling.

3. The method of claim 1, wherein facilitating the establishment of the communication session comprises providing the first communication network for the communication of media.

4. The method of claim 1, wherein assigning the security rating further comprises obtaining security information pertaining to the ability of the second network device to ensure that the communication session will be secure.

5. The method of claim 1, further comprising:

assigning an insecure security rating to the communication session if one or more of the first communication network and the second communication network has a security level of insecure; and

assigning a secure security rating to the communication session if the first communication network and the second communication network have a security level of secure.

6. The method of claim 1, further comprising:

assigning an insecure security rating to the communication session if a selected one of the first communication network and the second communication network comprise an unencrypted network; and

assigning a secure security rating to the communication session if the first communication network and the second communication network are encrypted networks.

7. The method of claim 1, wherein providing the security information to the user associated with the first network device includes displaying an icon identifying the security rating on an endpoint used by the first user.

8. The method of claim 1, further comprising providing presence information to the first user.

9. The method of claim 8, wherein providing the presence information comprises:

determining the availability of a user associated with the second network device to the establishment of the communication session between the first network device and the second network device; and

displaying the availability of the user associated with the second network device to the user associated with the first network device.

10. The method of claim 1, further comprising:

maintaining an association list identifying a plurality of end users with whom the user associated with the first network device is associated;

obtain security information for a plurality of prospective communication sessions between the first network device and the plurality of end users;

assigning a security rating to each of the plurality of prospective communication sessions; and

providing security information to the user associated with the first network device that includes the security rating assigned to each of the plurality of prospective communication sessions.

11. The method of claim 10, further comprising:

receiving a user selection, from the user associated with the first network device, identifying a selected prospective communication session from the plurality of prospective communication sessions; and

establishing the communication session in response to receiving the user selection.

12. A system for providing security information associated with a prospective communication session to a user, comprising:

a plurality of endpoints operable to establish one or more communication sessions over a network; and

a processor coupled to the network, the processor operable to;

provide at least one communication network for the establishment of a communication session between a first network device and a second network device;

facilitate the establishment of a communication session between a selected one of;

a first network device associated with a first user and a second network device associated with a second user that traverses a first communication network and a second communication network; and

the first network device and a third network device associated with the second user that traverses a third communication network and a fourth communication network;

determine security information of the first communication network, the second communication network, the third communication network and the fourth communication network;

assign a security rating to the communication session based on the determined security information, the assigning a security rating comprising;

identifying a first communication path for the communication session between the first network device and the second network device, the first communication path traversing the first communication network and the second communication network;

identifying a second communication path for the communication session between the first network device and the third network device, the second communication path traversing the third communication network and the fourth communication network;

determining a security level provided by each of the first communication network, the second communication network, the third communication network and the fourth communication network;

identifying a lowest security level of the security levels; and

assigning a security rating to the communication session based on the identified lowest security level; and

before establishing the communication session, provide security information for the prospective communication session to a user associated with the first network device that includes the assigned security rating; and

based on the provided security information, receiving a user selection from the first user, the user selection selecting one of the first communication path and the second communication path for the communication session.

13. The system of claim 12, wherein the first communication network and the second communication network provide for the communication of signaling.

14. The system of claim 12, wherein the first communication network and the second communication network provide for the communication of media.

15. The system of claim 12, wherein the processor is further operable to assign the security rating by obtaining security information pertaining to the ability of the second network device to ensure that the communication session will be secure.

16. The system of claim 12, wherein the processor is further operable to:

assign an insecure security rating to the communication session if one or more of the first communication network and the second communication network has a security level of insecure; and

assign a secure security rating to the communication session if the first communication network and the second communication network have a security level of secure.

17. The system of claim 12, wherein the processor is further operable to:

assign an insecure security rating to the communication session if one or more of the first communication network and the second communication network comprise an unencrypted network; and

assign a secure security rating to the communication session if the first communication network and the second communication network are encrypted networks.

18. The system of claim 12, wherein the processor is further operable to provide the security information to the user associated with the first network device by displaying an icon identifying the security rating on an endpoint used by the first user.

19. The system of claim 12, wherein the processor is further operable to provide presence information to the first user.

20. The system of claim 19 wherein the processor is further operable to provide the presence information by:

determining the availability of a user associated with the second network device to the establishment of the communication session between the first network device and the second network device; and

displaying the availability of the user associated with the second network device to the user associated with the first network device.

21. The system of claim 12, wherein the processor is further operable to:

maintain an association list identifying a plurality of end users with whom the user associated with the first network device is associated;

obtain security information for a plurality of prospective communication sessions between the first network device and the plurality of end users;

assign a security rating to each of the plurality of prospective communication sessions; and

provide security information to the user associated with the first network device that includes the security rating assigned to each of the plurality of prospective communication sessions.

22. The system of claim 21, wherein the processor is further operable to:

receive a user selection, from the user associated with the first network device, identifying a selected prospective communication session from the plurality of prospective communication sessions; and

establish the communication session in response to receiving the user selection.

23. A system for providing security information associated with a communication session to a user, comprising:

means for facilitating the establishment of a communication session between a selected one of;

a first network device associated with a first user and a second network device associated with a second user that traverses a first communication network and a second communication network; and

the first network device and a third network device associated with the second user that traverses a third communication network and a fourth communication network;

means for determining security information of the first communication network, the second communication network, the third communication network and the fourth communication network;

means for assigning a security rating to the communication session based on the determined security information, the assigning a security rating comprising;

identifying a first communication path for the communication session between the first network device and the second network device, the first communication path traversing the first communication network and the second communication network;

identifying a second communication path for the communication session between the first network device and the third network device, the second communication path traversing the third communication network and the fourth communication network;

determining a security level provided by each of the first communication network, the second communication network, the third communication network and the fourth communication network;

identifying a lowest security level of the security levels; and

assigning a security rating to the communication session based on the identified lowest security level; and

means for, before establishing the communication session, providing security information for the communication session to a user associated with the first network device that includes the assigned security rating; and

means for, based on the provided security information, receiving a user selection from the first user, the user selection selecting one of the first communication path and the second communication path for the communication session.

24. A non-transitory computer readable storage medium comprising logic, the logic operable, when executed on a processor, to:

facilitate the establishment of a communication session between a selected one of;

a first network device associated with a first user and a second network device associated with a second user that traverses first communication network and a second communication network; and

the first network device and a third network device associated with the second user that traverses a third communication network and a fourth communication network;

determine security information of the first communication network, the second communication network, the third communication network and the fourth communication network;

assign a security rating to the communication session based on the determined security information, the assigning a security rating comprising;

identifying a first communication path for the communication session between the first network device and the second network device, the first communication path traversing the first communication network and the second communication network;

identifying a second communication path for the communication session between the first network device and the third network device, the second communication path traversing the third communication network and the fourth communication network;

determining a security level provided by each of the first communication network, the second communication network, the third communication network and the fourth communication network;

identifying a lowest security level of the security levels; and

assigning a security rating to the communication session based on the identified lowest security level; and

before establishing the communication session, provide security information for the communication session to a user associated with the first network device that includes the assigned security rating; and

based on the provided security information, receiving a user selection from the first user, the user selection selecting one of the first communication path and the second communication path for the communication session.