Internet appliance integrating telephone function security and guidance features

• US 8,495,728 B2
• Filed: 01/11/2001
• Issued: 07/23/2013
• Est. Priority Date: 01/11/2001
• Status: Active Grant

• Current Assignee: ServiceNow Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Challener, David Carroll, Manson, Peter Alexander, Trent, Douglas Morgan
• Primary Examiner(s): Abrishamkar, Kaveh
• Application Number:
  US09/758,927
• Publication Number:
  US 20020091941A1
• Time in Patent Office: 4,576 Days
• Field of Search: 713/201, 713/200, 726/4
• US Class Current: 726/17
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

An Internet appliance has added hardware and software functionality to allow communication where a dialing action request is authorization is verified using a personal identification means (PIM). A user first selects a communication access number by requesting a dialing action on a actual or a virtual keypad or by clicking a “hot spot” on a Web page. Selecting an access number (e.g., dialing of a telephone number), alerts the user of the Internet appliance of the selection process whether the user instigates or the selection is attempted from a remote device using the Internet appliance facilities. Either method will trigger software commands that prompt the user to enter a PIM either to authorize his own use or another one'"'"'s use of the Internet appliance. The PIM may comprise, but is not limited to, keying in a personal identification number (PIN), a biometric identification, or a smart card stored number. The PIM is correlated to an authorization means that verifies that the user so identified is authorized to make or allow the prescribed connection. The Internet appliance has a security protocol that is used to encrypt and decrypt the PIM data. Also the device drivers used to execute a dialing action are also encrypted by the security protocol and are only decrypted on granting of authorized use of the Internet appliance. If the user so requests and is authorized, they may also select to use the security protocol to execute secure communication. The security protocol includes but is not limited to a Public/Private symmetric key technology.

Claims

1. A method of integrating telephony function with security and guidance features on an Internet appliance comprising the steps of:

selecting a communication access number using a selection means, said communication access number operable to access a communication link via said Internet appliance;

alerting a user of said Internet appliance when an attempt is made to select said communication link via a dialing action of said Internet appliance using said communication access number;

receiving an authorization for said dialing action by said user of said Internet appliance;

using a security protocol for encrypting and decrypting information transmitted on said communication link in response to authorizing said dialing action for said communication link; and

using a built-in key escrow function to notify a trusted server of a current dynamic host configuration protocol (DHCP) assigned IP address along with a key indicating authenticity of transmission so that voice over IP services between devices and a web page server lookup may be performed in a DHCP environment without side-channel communication for call or web reference look-up.

2. The method of claim 1 wherein said authorization comprises the sub steps of:

prompting said user to enter a user personal identification means (PIM) in response to selecting said communication access number;

initiating a pre-determined security protocol to retrieve a corresponding secure PIM for comparison;

correlating said user personal identification means with said secure PIM;

authorizing or rejecting said dialing action in response to said correlation;

retrieving secure device driver code for executing said dialing action using said security protocol in response to said authorization;

displaying, if said dialing action is authorized, a connectivity cost alert for said communication link; and

executing said dialing action using said device driver code for said communication link in response to said authorization and a user response to said connectivity cost alert.

3. The method of claim 1, wherein said security protocol is a Public/Private key encryption protocol.

4. The method of claim 1, wherein a PIM is used to grant or block access to certain area or country telephony codes.

5. The method of claim 1, further comprising the step of:

matching said communication access number with an actual system entered communication access number.

6. The method of claim 1, further comprising the steps of:

monitoring an incoming call for a caller ID; and

answering and routing said incoming call to a receiving device on the basis of said incoming telephone number.

7. The method of claim 1, wherein activating said selected communication access number comprises selecting said communication access number from a displayed Internet web page hot spot.

8. The method of claim 1, wherein said communication access number is selected using an actual or virtual keypad of said Internet appliance.

9. The method of claim 1, wherein said communication link comprises a non-concurrent shared dial-up public switched telephone network (PSTN) connection between a telephone connection and an Internet connection.

10. The method of claim 1, wherein said communication link has separate connections for an Internet connection and a telephone connection.

11. The method of claim 1, wherein said communication link comprises a concurrent communication link for an Internet and a telephone connection.

12. A system for integrating telephony function with security and guidance features on an Internet appliance (IA):

one or more personal identification means (PIM) input units coupled to a system bus in an ICA, said PIM input units operable to generate unique PIM signals;

a security protocol circuit operable to encrypt, decrypt, store and retrieve said PIM signals and device driver code;

a PIM verification circuit operable to receive said PIM signals and compare them to a secure predetermined PIM signals, said PIM verification circuit generating a verification signal;

one or more Modems coupled to a dialing action controller and to communication lines;

said Modems operable to send and receive communication data;

a dialing action controller (DAC) coupled to said system bus and said Modems, said DAC operable to receive a dialing action request and to alert a user of said dialing action and to enable or disable said dialing action to said Modems in response to said verification signal and a user signal;

wherein said DAC uses a built-in key escrow function to notify a trusted server of a current dynamic host configuration protocol (DHCP) assigned IP address along with a key indicating authenticity of transmission so that voice over IP services between devices and a web page server lookup may be performed in a DHCP environment without side-channel communication for call or web reference look-up.

13. The system of claim 12, wherein an authorization unit comprises:

a smart card reader;

a biometric input unit;

a personal identification number input unit; and

a voice recognition input unit.

14. The system of claim 12, wherein a Modem of said Modems comprises:

a digital subscriber line (DSL) Modem.

15. The system of claim 12, wherein a Modem of said Modems comprises:

a wireless cellular modem.

16. The system of claim 12, wherein a Modem of said Modems comprises:

a wireless personal communication system (PCS) modem.

17. The system of claim 12, wherein a Modem of said Modems comprises:

a cable Modem.

18. The system of claim 12, wherein a Modem of said Modems comprises a public subscriber telephone network (PSTN) Modem.

19. The system of claim 12, wherein said DAC alerts said user of a dialing action by display on a user display screen coupled to said IA.

20. The system of claim 12, wherein said DAC retrieves a connectivity cost and alerts said user of a connectivity cost associated with a requested dialing action if said dialing action is authorized.

21. The system of claim 12, wherein said user signal is a response by said user to a connectivity cost alert for said dialing action.

22. The system of claim 12, wherein said user is given an option of communicating on an established communication link in response to an authorized and enabled dialing action using a security protocol.

23. The system of claim 12, wherein said dialing action request comprises:

entering a communication access number via a keyboard keypad, a virtual display keypad, or by clicking a “

hot spot”

on a Web page.

24. The system of claim 12, wherein said connectivity cost alert notifies a user of an actual toll call cost for a communication link corresponding to said authorized and enabled dialing action.

25. The system of claim 12, wherein said user is alerted of said dialing action whether said dialing action was initiated locally or remote by another user.

26. The system of claim 12, wherein DAC monitors incoming communication access numbers and directs communication to a answering or recording device or forwards the communication to another communication link in response to comparing said incoming communication access numbers to a predetermined, stored communication access numbers list.

27. An Internet appliance, comprising:

a central processing unit (CPU);

a read only memory (RAM);

a random access memory (RAM);

a user interface adapter coupled to a keyboard and a mouse;

a display interface adapter coupled to a user display;

an I/O interface adapter;

a system bus;

a communication adapter; and

a security processing unit,

said security processing unit further comprising;

one or more personal identification means (PIM) input units coupled to a system bus in an ICA, said PIM input units operable to generate unique PIM signals;

a security protocol circuit operable to encrypt, decrypt, store and retrieve said PIM signals and device driver code;

a PIM verification circuit, said PIM verification circuit operable to receive said PIM signals and compare them to secure predetermined PIM signals, said PIM verification circuit generating a verification signal;

one or more Modems coupled to a dialing action controller and to communication lines, said Modems operable to send and receive communication data;

a dialing action controller (DAC) coupled to said system bus and said Modems, said DAC operable to receive a dialing action request and to alert a user of said dialing action and to enable or disable said dialing action to said Modems in response to said verification signal and a user signal; and

wherein said DAC uses a built-in key escrow function to notify a trusted server of a current dynamic host configuration protocol (DHCP) assigned IP address along with a key indicating authenticity of transmission so that voice over IP services between devices and a web page server lookup may be performed in a DHCP environment without side-channel communication for call or web reference look-up.

28. The Internet appliance of claim 27, wherein a PIM input unit of said PIM input units comprises:

a smart card reader;

a biometric input unit;

a personal identification number input unit; and

a voice recognition input unit.

29. The Internet appliance of claim 27, wherein said Modem comprises:

a digital subscriber line (DSL) Modem.

30. The Internet appliance of claim 27, wherein a Modem of said Modems comprises:

a wireless cellular modem.

31. The Internet appliance of claim 27, wherein a Modem of said Modems comprises:

a wireless personal communication system (PCS) modem.

32. The Internet appliance of claim 27, wherein a Modem of said Modems comprises a cable Modem.

33. The Internet appliance of claim 27, wherein a Modem of said Modems comprises a public subscriber telephone network (PSTN) Modem.

34. The Internet appliance of claim 27, wherein said DAC alerts said user of a dialing action by display on a user display screen coupled to said IA.

35. The Internet appliance of claim 27, wherein said DAC retrieves a connectivity cost and alerts said user of a connectivity cost associated with a requested dialing action if said dialing action is authorized.

36. The Internet appliance of claim 27, wherein said user signal is a response by said user to a connectivity cost alert for said dialing action.

37. The Internet appliance of claim 27, wherein said user is given an option of communicating on an established communication link in response to an authorized and enabled dialing action using data encryption.

38. The Internet appliance of claim 27, wherein said dialing action request comprises:

entering a communication access number via a keyboard keypad, a virtual display keypad, or by clicking a “

hot spot”

on a Web page.

39. The Internet appliance of claim 27, wherein said connectivity cost alert notifies a user of an actual toll call cost for a communication link corresponding to said authorized and enabled dialing action.

40. The Internet appliance of claim 27, wherein said user is alerted of said dialing action whether said dialing action was initiated locally or remote by another user.

41. The Internet appliance of claim 27, wherein DAC monitors incoming communication access numbers and directs communication to a answering or recording device or forwards the communication to another communication link in response to comparing said incoming communication access numbers to a predetermined, stored communication access numbers list.