Trusted environment for communication between parties

• US 8,416,933 B2
• Filed: 10/30/2008
• Issued: 04/09/2013
• Est. Priority Date: 10/30/2008
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated (Kyndryl Holdings, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Hartley, John Bryan, Lei, Io Tong, Muscat, David
• Primary Examiner(s): SING, SIMON P
• Application Number:
  US12/261,180
• Publication Number:
  US 20100111276A1
• Time in Patent Office: 1,622 Days
• Field of Search: 379/142.05
• US Class Current: 379/142.05
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04M 15/06 Recording class or number of calling , i.e. A-party or called party , i.e. B-party

Abstract

A method of establishing communication including providing a communication by a sending party to a receiving party, and verifying the sending party'"'"'s identity by a trusted instrumentality. The trusted instrumentality can be at least the sending party communication controller and is usually both the sending and receiving parties'"'"' communication controllers. The communication controllers should be certified and preferably be certified by a mutually trusted communication controller certification authority. Also disclosed is a system for establishing communication.

Claims

1. A method of establishing communication, the method comprising the steps of:

providing a communication by a sending party to a receiving party; and

verifying the sending party'"'"'s identity by a trusted instrumentality wherein the trusted instrumentality is a certified sending party communication controller and a certified receiving party communication controller and wherein at least the certified sending party communication controller has been certified by a third party communication controller certification authority that is mutually trusted by the sending party and receiving party.

2. A method of establishing communication comprising:

receiving a communication by a receiving party from a sending party;

verifying the sending party'"'"'s identity by a trusted instrumentality wherein the trusted instrumentality is a certified sending party communication controller and a certified receiving party communication controller and wherein at least the certified sending party communication controller has been certified by a third party communication controller certification authority that is mutually trusted by the sending party and receiving party; and

handling the communication by the receiving party.

3. A method of establishing communication, the method comprising the steps of:

providing a public address by each of a sending party and a receiving party to a public directory;

requesting a communications session between the sending and receiving parties using the parties'"'"' respective public addresses comprising contacting the receiving party through the sending party communication controller;

verifying the sending party'"'"'s identity by the receiving party through a trusted instrumentality wherein the trusted instrumentality is a certified sending party communication controller and a certified receiving party communication controller, the receiving party checking that the certified sending party communication controller has been certified by a third party communication controller certification authority that is mutually trusted by the sending party and receiving party; and

handling the communication by the receiving party.

4. The method of claim 3 wherein the step of contacting the receiving party comprises looking up the receiving party'"'"'s public address, contacting the receiving party communication controller and providing the public address of the sending party to the receiving party communication controller.

5. The method of claim 3 wherein the step of handling comprises explicitly indicating to the receiving party that the identity of the sending party has been validated by the receiving party communication controller and performing an action according to rules predetermined by the receiving party.

6. The method of claim 3 wherein the step of handling comprises explicitly indicating to the receiving party that the identity of the sending party has not been validated by the receiving party communication controller such that the communication cannot be trusted by the receiving party and performing an action according to rules predetermined by the receiving party.

7. A computer readable storage medium storing instructions that, when executed by a computer, causes the computer to perform a method of establishing communication, the method comprising the steps of:

receiving a communication by a receiving party from a sending party;

verifying the sending party'"'"'s identity by the receiving party through a trusted instrumentality wherein the trusted instrumentality is a certified sending party communication controller and a certified receiving party communication controller, the receiving party checking that the certified sending party communication controller has been certified by a third party communication controller certification authority that is mutually trusted by the sending party and receiving party; and

handling the communication by the receiving party.

8. The computer readable storage medium of claim 7 wherein the step of handling comprises explicitly indicating to the receiving party that the identity of the sending party has been validated by the receiving party communication controller and performing an action according to rules predetermined by the receiving party.

9. The computer readable storage medium of claim 7 wherein the sending party communication controller and receiving party communication controller have been certified by a third party communication controller certification authority that is mutually trusted by the sending party and receiving party.

10. The computer readable storage medium of claim 9 further comprising the step of sending a trusted response by the receiving party communication controller to the sending party communication controller.

11. The computer readable storage medium of claim 7 wherein the step of handling comprises explicitly indicating to the receiving party that the identity of the sending party has not been validated by the receiving party communication controller such that the communication cannot be trusted by the receiving party and performing an action according to rules predetermined by the receiving party.

12. A system for establishing communication comprising:

a first communication controller for communicating by a first party;

a second communication controller for communicating by a second party;

a network connecting the first communication controller and the second communication controller; and

a trusted instrumentality for verifying the identity of the first party sending a communication to the second party wherein the trusted instrumentality is certification of the first communication controller and second communication controller by a third party communication controller certification authority that is mutually trusted by the first party and second party.

13. The system of claim 12 further comprising a first user device connected to the first communication controller and a second user device connected to the second communication controller, the first and second user devices forming a part of the network.

14. The system of claim 13 wherein the first user device has been authenticated to the first communication controller and to the network and the second user device has been authenticated to the second communication controller and to the network.