Trust in physical networks

• US 9,537,890 B2
• Filed: 12/30/2008
• Issued: 01/03/2017
• Est. Priority Date: 12/31/2007
• Status: Active Grant

• Current Assignee: Genesys Telecommunications Laboratories Incorporated (Genesys Cloud Services Incorporated)
• Original Assignee: Genesys Telecommunications Laboratories Incorporated (Genesys Cloud Services Incorporated)
• Inventors: Ristock, Herbert Willi Artur, Galvin, Brian, Perlmutter, S. Michael, Ryabchun, Andriy, Fedorov, Sergey
• Primary Examiner(s): DAILEY, THOMAS J
• Application Number:
  US12/346,452
• Publication Number:
  US 20100169499A1
• Time in Patent Office: 2,926 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 12/1818 Conference organisation arrangements, e.g. handling schedules, setting up parameters needed by nodes to attend a conference, booking network resources, notifying involved parties
• CPC Class Codes: H04L 45/306 Route determination based on the nature of the carried application
• CPC Class Codes: H04L 45/64 using an overlay routing layer
• CPC Class Codes: H04L 51/08 Annexed information, e.g. attachments
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 65/4038 with floor control
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04N 7/15 Conference systems
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]

Abstract

A trust network has at least one transmission medium supporting transmission of data, wherein data transmitted is in at least some instances transmitted in discrete portions, two or more nodes terminating discrete legs in the transmission medium, and trust software executing from a machine-readable medium by a processor on one or more of the two or more nodes. The one or more nodes executing trust software apply trust logic to transmission of the discrete data portions.

Claims

1. A trust network, comprising:

at least one transmission medium supporting transmission of a data file from a caller initiating the transmission at a first communication device connected to the network to a receiver of the transmission at a second communication device at a final destination, wherein the data file is in at least some instances transmitted in discrete portions;

wherein two or more nodes are coupled to the transmission medium, the two or more nodes terminating discrete legs in the transmission medium including the entire transmission from the first communication device to the second communication device; and

a processor; and

a machine-readable medium coupled to the processor and storing trust software therein, the trust software including instructions that, when executed by the processor, cause the processor to;

apply trust logic to transmission of the discrete data portions and the trust logic is related to stored information associated with the caller and/or receiver of the data file, the caller and receiver being at least an enterprise or a person,

determine whether or not a tag is associated with the data file for indicating that the data file is a high-security data file; and

in response to determining the tag is associated with the electronic data file, transmit a signal to a trusted node in the trust network to transmit the electronic data file only through another trusted node for display of the electronic data file by the second communication device.

2. The network of claim 1 wherein the at least one transmission medium is one or more of wireless electromagnetic radiation or transmission over a land line with hardwired connections to nodes.

3. The network of claim 1 wherein the trust network includes one or more wireless networks and one or more land-line connected networks.

4. The network of claim 1 wherein the discrete data portions are data packets transmitted in a packet data protocol (PDP), and at least one of the nodes is a packet routing node in the Internet.

5. The network of claim 4 wherein the trust logic is used in determination of a receiver at a next node to which to transmit a data packet.

6. The network of claim 1 wherein the discrete data portions are telephony events between the caller and receiver, one of the nodes includes routing functionality for telephony events, and the trust logic is used in determining a receiver at a destination to which to route the telephony event.

7. The network of claim 6 wherein the node with routing functionality is a switch in a contact center with the routing functionality provided by a separate server connected to, and monitoring and controlling the switch.

8. The network of claim 6 wherein the node with routing functionality is a packet router in a data packet network, the node routing a packetized telephone event, and wherein the trust logic is used in determining common routing for all packets associated with the telephone event.

9. The network of claim 1 wherein the discrete portion is an email message, and the trust logic is used in determining a receiver of the email.

10. The network of claim 9 wherein one or more attachments are associated with the email, and the trust logic is used in determining whether to forward the email with or without the one or more attachments.

11. A method for trust treatment in a network, the method comprising:

receiving, by a processor, a signal indicating an electronic data file is to be transmitted from a first communication device to a second communication device;

executing trust software from a machine-readable medium by the processor on one or more nodes terminating discrete legs in the network;

applying, by the processor, trust logic by execution of the trust software to data transmitted from a caller in discrete portions in the network, the caller initiating the data transmission from a communication device connected to the network to a receiver of the data transmission at a communication device connected to the network at a final destination, the trust logic related to stored information associated with the caller and/or receiver of the electronic data file, the caller and receiver being at least an enterprise or a person;

determining, by the processor via the trust software applying trust logic, whether or not a tag is associated with the electronic data file for indicating that the electronic data file is a high-security data file; and

in response to determining the tag is associated with the electronic data file, transmitting, by the processor, a signal to a trusted node in the trust network to transmit the electronic data file only through another trusted node for display of the electronic data file by the second communication device.

12. The method of claim 11 wherein the network comprises one or more wireless networks and one or more land-line connected networks.

13. The method of claim 11 wherein the discrete data portions are data packets transmitted in a packet data protocol (PDP), and at least one of the nodes is a packet routing node in the Internet.

14. The method of claim 13 wherein the trust logic is used in determination of a receiver to which to transmit a data packet.

15. The method of claim 11 wherein the discrete data portions are telephony events, one of the nodes includes routing functionality for telephony events, and the trust logic is used in determining a receiver to which to route the telephony event.

16. The method of claim 15 wherein the node with routing functionality is a switch in a contact center with the routing functionality provided by a separate server connected to, and monitoring and controlling the switch.

17. The method of claim 15 wherein the node with routing functionality is a packet router in a data packet network, the node routing a packetized telephone event, and wherein the trust logic is used in determining common routing for all packets associated with the telephone event.

18. The method of claim 11 wherein the discrete portion is an email message, and the trust logic is used in determining a receiver of the email.

19. The method of claim 18 wherein one or more attachments are associated with the email, and the trust logic is used in determining whether to forward the email with or without the one or more attachments.