Protecting sensitive information provided by a party to a contact center

• US 9,787,835 B1
• Filed: 02/24/2016
• Issued: 10/10/2017
• Est. Priority Date: 04/11/2013
• Status: Active Grant

• Current Assignee: Alvaria Cayman
• Original Assignee: Noble Systems Corporation
• Inventors: Pycko, Marcin, Koster, Karl H.
• Primary Examiner(s): King, Simon
• Application Number:
  US15/051,930
• Time in Patent Office: 594 Days
• CPC Class Codes: H04M 2201/40 using speech recognition
• CPC Class Codes: H04M 2203/5009 Adding a party to an existing conference
• CPC Class Codes: H04M 2203/6009 Personal information, e.g. profiles or personal directories being only provided to authorised persons
• CPC Class Codes: H04M 2203/6027 Fraud preventions
• CPC Class Codes: H04M 2203/609 Secret communication
• CPC Class Codes: H04M 3/493 Interactive information services, e.g. directory enquiries ; Arrangements therefor, e.g. interactive voice response [IVR] systems or voice portals
• CPC Class Codes: H04M 3/5166 in combination with interactive voice response systems or voice portals, e.g. as front-ends
• CPC Class Codes: H04M 3/56 Arrangements for connecting several subscribers to a common circuit, i.e. affording conference facilities video conference systems H04N7/15
• CPC Class Codes: H04M 7/1295 Details of dual tone multiple frequency signalling

Abstract

In one embodiment, a secure mechanism operates in conjunction with a three-way bridge in a contact center to protect against inadvertent exposure of sensitive information provided during a call. During the call, an agent may bridge on an interactive voice response system (“IVR”) onto the call prompting the party to enter sensitive information, such as a credit card account number, to effect a payment. The information may be provided by the party using dual-tone multiple frequency (“DTMF”) tones or speech. The IVR may provide a confirmatory announcement indicating the sensitive information received. A switch may be controlled by the IVR so that any sensitive information expected from the party or provided by the IVR in a confirmatory announcement is not presented to the agent or to a recording system. In this manner, the IVR suppresses the exposure of sensitive information to the agent and/or a recording system.

Claims

1. A system comprising:

a three-way bridge connected to a call between a remote party and an agent; and

an interactive voice response (“

IVR”

) unit, wherein the IVR unit is bridged onto the call via the three-way bridge and is configured to;

determine whether a first announcement to be played to the remote party by the IVR unit conveys a first piece of sensitive information, and

control the three-way bridge so that the first piece of sensitive information is not conveyed to the agent upon determining the first announcement conveys the first piece of sensitive information.

2. The system of claim 1, wherein the three-way bridge is configured to:

receive a request from the agent to bridge the IVR unit onto the call; and

bridge the IVR unit onto the call in response to receiving the request.

3. The system of claim 1, wherein the IVR unit is further configured to:

determine whether a response to the first announcement from the remote party is expected to convey a second piece of sensitive information; and

control the three-way bridge so that at least a portion of the response comprising the second piece of sensitive information is not conveyed to the agent upon determining the response is expected to convey the second piece of sensitive information.

4. The system of claim 3, wherein the IVR unit is further configured to cause a dummy tone or a masking sound to be presented to the agent in lieu of the second piece of sensitive information.

5. The system of claim 3, wherein the second piece of sensitive information in the response from the remote party comprises keypad information originating from the remote party and received by the IVR unit.

6. A method for controlling a three-way bridge connecting a call between a remote party, an agent, and an interactive voice response (“

IVR”

) unit, the method comprising;

retrieving by the IVR unit a first announcement to be provided to the remote party by the IVR unit;

controlling the three-way bridge by the IVR unit to prevent at least a portion of the first announcement comprising a first piece of sensitive information to be conveyed to the agent upon determining the first announcement conveys the first piece of sensitive information; and

providing the first announcement to the remote party.

7. The method of claim 6, further comprising:

receiving a request at the three-way bridge from the agent to bridge the IVR unit onto the call; and

bridging the IVR unit onto the call in response to receiving the request.

8. The method of claim 6, further comprising:

determining by the IVR unit whether a response to the first announcement from the remote party is expected to convey a second piece of sensitive information; and

controlling the three-way bridge by the IVR unit to prevent at least a portion of the response comprising the second piece of sensitive information to be conveyed to the agent upon determining the response is expected to convey the second piece of sensitive information.

9. The method of claim 8, further comprising causing a dummy tone or a masking sound to be presented to the agent in lieu of the second piece of sensitive information.

10. The method of claim 8, wherein the second piece of sensitive information in the response from the remote party comprises keypad information originating from the remote party and received by the IVR unit.

11. A non-transitory, computer-readable medium comprising instructions that when executed by a computer processor cause the computer processor to:

bridge onto a call between a remote party and an agent;

retrieve a first announcement to be provided to the remote party;

control a switch to prevent at least a portion of the first announcement comprising a first piece of sensitive information to be conveyed to the agent upon determining the first announcement conveys the first piece of sensitive information; and

provide the first announcement to the remote party.

12. The non-transitory, computer-readable medium of claim 11 further comprising instructions that when executed by the computer processor cause the computer processor to:

determine whether a response to the first announcement is expected to convey a second piece of sensitive information; and

control the switch to prevent at least a portion of the response comprising the second piece of sensitive information to be conveyed to the agent upon determining the response is expected to convey the second piece of sensitive information.

13. The non-transitory, computer-readable medium of claim 12 further comprising instructions that when executed by the computer processor cause the computer processor to provide a dummy tone or a masking sound to the agent in lieu of the second piece of sensitive information.

14. The non-transitory, computer-readable medium of claim 12, wherein the second piece of sensitive information in the response from the remote party comprises keypad information originating from the remote party and received by an IVR unit.