Computer-implemented system and method for individual message encryption using a unique key

• US 9,514,329 B2
• Filed: 03/29/2013
• Issued: 12/06/2016
• Est. Priority Date: 03/30/2012
• Status: Active Grant

• Current Assignee: Intellisist, Inc. dba Spoken Communications (Avaya Incorporated)
• Original Assignee: Intellisist, Inc. dba Spoken Communications (Avaya Incorporated)
• Inventors: Odinak, Gilad
• Primary Examiner(s): Nguyen, Thuong
• Application Number:
  US13/853,972
• Publication Number:
  US 20140129831A1
• Time in Patent Office: 1,348 Days
• Field of Search: 713/165, 713/168, 713/193, 380/283, 380/277, 380/268, 380/270
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06Q 30/0281 Customer communication at a business location, e.g. providing product or service information, consulting
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04M 2203/301 Management of recordings
• CPC Class Codes: H04M 2203/609 Secret communication
• CPC Class Codes: H04M 3/42221 Conversation recording systems at the subscriber's set H04M1/656
• CPC Class Codes: H04M 3/5175 Call or contact centers supervision arrangements

Abstract

A computer-implemented system and method for individual record encryption is provided. A plurality of records associated with incoming calls to a call center are maintained. A unique encryption key is randomly generated for each record. The records are each encrypted using the encryption key generated for that record. The keys are stored in a location separate from the encrypted records.

Claims

1. A computer-implemented system for individual record encryption, comprising:

a telephonic device to transmit a call to a call center; and

a server comprising a central processing unit, memory, an input port to receive records associated with the call incoming from the telephonic device, and an output port, the central processing unit configured to;

randomly generate for each of the records of the call a unique encryption key by receiving seed information for the unique encryption key for one such record of the call to be encrypted, obtaining a key counter unique to the one such record, and combining the seed information and unique key counter as the unique encryption key for the one such record of the call;

uniquely encrypt the records using the encryption key generated for that record;

associate each such encrypted record of the call and the unique encryption key for that encrypted record with an identification code; and

store the unique encryption keys with their associated identification codes in a location separate from the encrypted records that are also stored with the associated identification codes.

2. A system according to claim 1, wherein the seed information comprises entropy from two or more servers and the key counter is one of selected by an agent and incremented by a number of two or more from a previous key counter.

3. A system according to claim 1, wherein time is encrypted with the unique encryption key.

4. A system according to claim 3, wherein the time comprises one of a time the incoming call was received, a time the incoming call was handled, and a time at which the incoming call was completed.

5. A system according to claim 1, further comprising:

a counter module to increase the key counter during at least one of after every record and after every n records.

6. A system according to claim 1, further comprising:

a compression module to compress one or more of the records prior to encryption.

7. A system according to claim 1, further comprising:

a decryption module to decrypt at least one of the encrypted records, comprising;

an identification module to determine an identification code assigned to the encrypted record; and

a location module to locate the unique encryption key used to encrypt the encrypted record via the identification code.

8. A system according to claim 7, wherein the encryption module encrypts the decrypted record using a different unique 10 encryption key.

9. A system according to claim 1, wherein the records each comprise one of text, voice, and images.

10. A computer-implemented method for individual record encryption, comprising:

receiving a call into a call center via at least one telephonic device;

generating via a server a record for each of the incoming calls, wherein the server comprises a central processing unit, memory, an input port to receive the call incoming from the telephonic device, and an output port;

randomly generating for each of the records a unique encryption key, comprising;

receiving seed information for the unique encryption key for one such record to be encrypted;

obtaining a key counter unique to the one such record of the call; and

combining the seed information and unique key counter as the unique encryption key for the one such record of the call;

uniquely encrypting the records using the unique encryption key generated for that record;

associating each such encrypted record of the call and the unique encryption key for that encrypted record with an identification code; and

storing the unique encryption keys with the associated identification codes in a location separate from the encrypted records that are also stored with the associated identification codes.

11. A method according to claim 10, further comprising:

obtaining the seed information from two or more servers;

receiving the key counter that is one of selected by an agent and incremented by a number of two or more from a previous key counter.

12. A method according to claim 10 further comprising:

encrypting at least one of the key content and time with the unique encryption key.

13. A method according to claim 12, wherein the time comprises one of a time the associated incoming call was received, a time the incoming call was handled, and a time at which the incoming call was completed.

14. A method according to claim 10, further comprising:

increasing the key counter during at least one of after every record and after every n records.

15. A method according to claim 10, further comprising:

compressing one or more of the records prior to encryption.

16. A method according to claim 10, further comprising:

decrypting at least one of the encrypted records, comprising;

determining an identification code assigned to the encrypted record; and

locating the unique encryption key used to encrypt the encrypted record via the identification code.

17. A method according to claim 16, further comprising:

encrypting the decrypted record using a different unique encryption key.

18. A method according to claim 10, wherein the records each comprise one of text, voice, and images.