Pre-authenticated calling for voice applications

• US 9,703,943 B2
• Filed: 11/09/2013
• Issued: 07/11/2017
• Est. Priority Date: 04/26/2007
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Saraf, Tal, Pall, Gurdeep Singh, Ramakrishna, Anand
• Primary Examiner(s): Lagor, Alexander
• Application Number:
  US14/076,174
• Publication Number:
  US 20140096209A1
• Time in Patent Office: 1,340 Days
• Field of Search: 726 5
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04W 12/062 Pre-authentication

Abstract

Architecture for providing pre-authenticated information from an endpoint for subsequently authenticating a device and/or user associated with the previously-authenticated information. A pre-authentication module of the architecture can be a trust component as part of an application that facilitates the utilization of user information and/or endpoint information in a media session protocol message to replace information that would otherwise be gathered via a dialog. In the context of IP-based voice communications, a call can be made from a client that is pre-authenticable, and no longer requires that an IP-based telephone interact with the phone user to facilitate sign-on.

Claims

1. An authentication method performed by a computer system executing machine-readable instructions, the method comprising acts of:

receiving, by a trust component at a first client, pre-authenticated credentials for voice communications services at a remote location from a trusted entity, wherein the voice communications services include an IP-based phone call;

transmitting, by a transmitting component, the pre-authenticated credentials to a second client of the user based on authentication of the first client;

receiving, by an application component at the first client, a request for a voice communications service from the second client of the user and providing the voice communications service based on the pre-authenticated credentials received by the trust component, wherein the pre-authenticated credentials include a level of permission related to the voice communications service that is provided by the application component; and

establishing the voice communications service for the second client.

2. The method of claim 1, wherein the pre-authenticated credentials are received via a media session protocol.

3. The method of claim 2, wherein the media session protocol is session initiation protocol (SIP).

4. The method of claim 1, wherein the trusted entity is a communications server, the pre-authenticated credentials include at least one of device identity data or user identity data, and the voice communications service facilitates voice communications between a mobile device and the communications server.

5. The method of claim 1, wherein the pre-authenticated credentials include a level of permission related to exposure of functionality of the voice communications service based on the credentials.

6. The method of claim 1, wherein the trusted entity receives the pre-authenticated credentials from another trusted entity.

7. The method of claim 1, further comprising selecting, by a permissions component, the voice communications service from one or more applications based on a permission associated with the pre-authenticated credentials.

8. The method of claim 1, wherein the trust component and the application component are of the first client that receives the pre-authenticated credentials for connecting the IP-based phone call via the second client to a remote destination.

9. The method of claim 1, further comprising employing, by a machine learning and reasoning component, at least one of a probabilistic and statistical-based analysis to prognose or infer an action that is desired to be automatically performed.

10. The method of claim 1, wherein the pre-authenticated credentials include user profile information that defines a quality-of-service for communicating with a destination device.

11. An authentication processing method performed by a computer system executing machine-readable instructions, the method comprising acts of:

receiving authenticated credentials generated for communications services at a remote location for a first client of a user, wherein the communications services include an IP-based phone call;

receiving a request for communications services from a second client of the user;

transmitting the authenticated credentials to the second client based on authentication of the first client; and

establishing the communications services for the second client based on the authenticated credentials, wherein the authenticated credentials include a level of permission related to the communications services such that a level of functionality of the communication services is reduced or increased based on the authenticated credentials.

12. The method of claim 11, further comprising accessing the remote location via a web interface, which remote location is a network-based middle-tier communications server that processes SIP-based communications from the first client.

13. The method of claim 11, wherein the first client or the second client is part of a voice-over-IP communications device.

14. The method of claim 11, further comprising including personality information in the authenticated credentials that changes how the second client, which is an automated attendant, interacts with a user.

15. The method of claim 11, further comprising employing more recently-used information based on the authenticated credentials to present information to the user for selection.

16. The method of claim 11, further comprising controlling quality-of-service parameters for the second client based on the authenticated credentials.

17. The method of claim 11, further comprising automatically exposing functionality of a personal virtual assistant based on the authenticated credentials, the functionality exposed based on knowledge of a contact list or buddy list.

18. The method of claim 11, further comprising selecting services from different applications of the first client based on the authenticated credentials and providing the selected services for communications by the second client.

19. The method of claim 11, further comprising learning and reasoning about client or user interactive behavior and automating presentation of information to the user based thereon.

20. An authentication method performed by a computer system executing machine-readable instructions, the method comprising acts of:

receiving, by a trust component at a first client, pre-authenticated credentials for voice communications services at a remote location from a trusted entity;

transmitting, by a transmitting component, the pre-authenticated credentials to a second client based on authentication of the first client; and

receiving, by an application component at the first client, a request for communications services from the second client of the user and providing an application service based on the pre-authenticated credentials received by the trust component, wherein the pre-authenticated credentials include a level of permission related to a type of the application service, and the trust component and the application component are of the first client that receives the pre-authenticated credentials for connecting an IP-based phone call via the second client to a remote destination.