Authentication systems and methods using a packet telephony device

• US 8,635,454 B2
• Filed: 07/27/2009
• Issued: 01/21/2014
• Est. Priority Date: 07/27/2009
• Status: Expired due to Fees

• Current Assignee: Vonage America Incorporated (Telefonaktiebolaget LM Ericsson)
• Original Assignee: Vonage Network LLC (Telefonaktiebolaget LM Ericsson)
• Inventors: Petillo, Richard
• Primary Examiner(s): ARMOUCHE, HADI S
• Application Number:
  US12/509,589
• Publication Number:
  US 20110022841A1
• Time in Patent Office: 1,639 Days
• Field of Search: 713/150, 713/155, 713/168, 713/170, 726/4, 726/15, 726/21
• US Class Current: 713/170
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

Authentication systems and methods for increasing the security of online account access and transactions by leveraging the use of customer equipment provided by VoIP service providers. A method includes registering a packet telephony device with a packet telephony service provider for subsequent packet telephony communication, where the registration is based at least on an encoded encryption key. On a subsequent request to access an account, instructions are transmitted which require physical access to the packet telephony device to perform. Upon receipt of an indication that the instructions were successfully performed, the request is authenticated and access to the account is granted. Authentication may require a secure connection be automatically established between a web-enabled device and a packet telephony device. The instant disclosure leverages the security in the customer equipment hardware such as a Terminal adaptor (TA) or router so that a compromised account may be recovered.

Claims

1. A method for authenticating a user request from a web-enabled device comprising:

registering a VoIP packet telephony device with a VoIP packet telephony service provider for subsequent VoIP packet telephony communication based at least on an encryption key encoded therein;

receiving the request from the web-enabled device;

subsequent to registering the VoIP packet telephony device with the VoIP packet telephony service;

transmitting an instruction to the web-enabled device, the performance of which requires physical access to said VoIP packet telephony device by the user;

receiving an indication of the performance of the instruction; and

authenticating the request based upon the indication of the performance of the instruction;

wherein the VoIP packet telephony device is configured for VoIP communication via internet protocol voice packets over a packet switched network and the VoIP packet telephony service provider provides voice communication via internet protocol voice packets over the packet switched network; and

,

wherein the step of receiving the indication of the performance of the instruction comprises receiving a translated code via the web-enabled device, the translated code being a first code translated based at least in part on the encryption key in the VoIP packet telephony device.

2. The method of claim 1, wherein performance of the instruction comprises:

receiving a first code into the VoIP packet telephony device;

translating the first code based upon the encryption key in the VoIP packet telephony device to produce a translated code;

displaying the translated code on the VoIP packet telephony device; and

receiving the translated code in the web-enabled device.

3. The method of claim 1, wherein the instruction is text displayed on the web-enabled device, whereby the user can read and comply with the instruction.

4. The method of claim 1, wherein the VoIP packet telephony device communicates with the web-enabled device over a wireless connection in a wireless local area network or wireless personal area network.

5. The method of claim 4, wherein the wireless connection is a frequency hopping spread spectrum connection in the 2.4 Ghz short-range radio frequency band.

6. The method of claim 1, wherein the VoIP packet telephony device communicates with the web-enabled device over a secure network.

7. The method of claim 1, wherein the step of receiving a request further comprises receiving a user name and password.

8. The method of claim 1, wherein the step of authenticating the request is performed after a subscriber account related to the request has been identified as compromised.

9. The method of claim 1, wherein the request is a request to access a subscriber account.

10. The method of claim 9, wherein the subscriber account is a non-telephony account.

11. A method for authenticating a user request from a web-enabled device comprising:

registering a VoIP packet telephony device with a VoIP packet telephony service provider for subsequent VoIP packet telephony communication based at least on an encryption key encoded therein;

receiving the request from the web-enabled device;

subsequent to registering the VoIP packet telephony device with the VoIP packet telephony service;

transmitting an instruction to the web-enabled device, the performance of which requires physical access to said VoIP packet telephony device by the user;

receiving an indication of the performance of the instruction; and

authenticating the request based upon the indication of the performance of the instruction;

wherein the VoIP packet telephony device is configured for VoIP communication via internet protocol voice packets over a packet switched network and the VoIP packet telephony service provider provides voice communication via internet protocol voice packets over the packet switched network; and

,

wherein the instruction is a software-based instruction prompting an automated communication between the web-enabled device and the VoIP packet telephony device, and wherein the automated communication is the performance that requires physical access to the device.