Secure LAN/internet telephony

• US 6,233,234 B1
• Filed: 06/03/1997
• Issued: 05/15/2001
• Est. Priority Date: 06/03/1997
• Status: Expired due to Term

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Bell Atlantic Network Services, Inc. (Verizon Communications Inc.)
• Inventors: Curry, James E., Farris, Robert D.
• Primary Examiner(s): Pham, Chi H.
• Assistant Examiner(s): YAO, KWANG BIN
• Application Number:
  US08/867,762
• Time in Patent Office: 1,442 Days
• Field of Search: 370/352, 370/353, 370/354, 370/355, 370/356, 370/357, 370/360, 370/389, 370/400, 370/401, 370/402, 370/403, 370/404, 370/405, 370/409, 370/410, 370/466, 370/467, 379/219, 379/220, 379/229
• US Class Current: 370/356
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04M 7/0078 Security; Fraud detection; Fraud prevention
• CPC Class Codes: H04M 7/009 in systems involving PBX or KTS networks
• CPC Class Codes: H04M 7/121 Details of network access arrangements or protocols
• CPC Class Codes: H04M 7/126 Interworking of session control protocols
• CPC Class Codes: H04M 7/128 Details of addressing, directories or routing tables
• CPC Class Codes: H04M 7/1295 Details of dual tone multiple frequency signalling
• CPC Class Codes: H04Q 11/04 for time-division multiplexing H04Q11/0001 takes precedence
• CPC Class Codes: H04Q 2213/13003 Constructional details of switching devices
• CPC Class Codes: H04Q 2213/13034 A/D conversion, code compression/expansion
• CPC Class Codes: H04Q 2213/1305 Software aspects
• CPC Class Codes: H04Q 2213/13093 Personal computer, PC
• CPC Class Codes: H04Q 2213/13096 Digital apparatus individually associated with a subscriber line, digital line circuits
• CPC Class Codes: H04Q 2213/13103 Memory
• CPC Class Codes: H04Q 2213/13106 Microprocessor, CPU
• CPC Class Codes: H04Q 2213/13141 Hunting for free outlet, circuit or channel
• CPC Class Codes: H04Q 2213/13179 Fax, still picture
• CPC Class Codes: H04Q 2213/13196 Connection circuit/link/trunk/junction, bridge, router, gateway
• CPC Class Codes: H04Q 2213/13204 Protocols
• CPC Class Codes: H04Q 2213/13205 : Primary rate access, PRI
• CPC Class Codes: H04Q 2213/13209 : ISDN
• CPC Class Codes: H04Q 2213/1322 : PBX
• CPC Class Codes: H04Q 2213/13298 : Local loop systems, access network
• CPC Class Codes: H04Q 2213/13339 : Ciphering, encryption, security
• CPC Class Codes: H04Q 2213/13345 : Intelligent networks, SCP
• CPC Class Codes: H04Q 2213/13377 : Recorded announcement
• CPC Class Codes: H04Q 2213/13378 : Speech recognition, speech analysis
• CPC Class Codes: H04Q 2213/13389 : LAN, internet

Abstract

A system and method for providing telephony communication through a packet switched data network such as the Internet and an organization having telephone and computer terminals connected to a local area network. Selectable security is provided for the telephony applications through the use of an access gateway between the local area network and the packet switched data network operating in conjunction with an intelligent control network in a public switched telephone network. The access gateway includes storage and a processor for storing security data and running selectable applications based on pre-conditions established for the telephone terminals. Information is obtained from a party seeking to connect to a telephone terminal connected to the local area network both by dialing and by voice prompt and voice recognition dialog.

Claims

1. A method of telephony communication via a public packet switched data network from a first terminal to a second terminal connected to a local area network comprising the steps of:

a) initiating from said first terminal a first address signal;

b) translating said first address signal to a second address signal to effect a link to a first interface to said public data switched network;

c) establishing a virtual link through said public data switched network to a second interface to said public data switched network;

d) establishing a packet data link from said second interface to said public data switched network to an access gateway to said local area network;

e) transmitting from said second interface to said public packet switched data network to said access gateway a designation including information initiated by said first terminal, which information includes identification of said second terminal;

f) comparing the information provided by said first terminal with a storage of information maintained by said access gateway which includes information relating to said second terminal;

g) upon establishing a match between at least certain of said information provided by said first terminal and information stored in said storage relating to said second terminal, linking said first terminal to said second terminal through said public packet switched data network and said access gateway and said local area network for interactive voice telephony communication between said first and second stations.

2. A method according to claim 1 wherein said first and second terminals are telephone terminals.

3. A method according to claim 2 including the step of connecting said local area network to said second terminal through a private branch exchange switching system.

4. A method according to claim 2 including the step of connecting said second terminal direct to said local area network.

5. A method according to claim 1 including the step of connecting said first terminal to said first interface of said public data switched network through a switched telephone network.

6. A method according to claim 1 including the step of connecting said first terminal to said first interface of said public data switched network through a switched telephone network and a telephony to packet data server connected to said first interface to said public packet switched data network.

7. A method according to claim 6 wherein said public packet switched data network is the Internet, and said first and second terminals are telephone terminals, and said information initiated by said first terminal includes identification of the domain name of said access gateway.

8. A method according to claim 7 including the step of identifying said domain name in said information initiated by said first station through voice recognition.

9. A method according to claim 6 wherein said public packet switched data network comprises the Internet, and said first and second terminals are telephone terminals, and said information initiated by said first terminal includes identification of the domain name of said access gateway and a direct inward dial number for said second terminal.

10. A method of telephony communication via a public packet switched data network from a first telephone terminal connected to a public switched telecommunications network to a second telephone terminal connected to a local area network connected to a plurality of telephone terminals for interactive voice providing voice communication therebetween, said local area network being connected to an access gateway comprising the steps of:

a) dialing from said first terminal a predetermined designation for said access gateway to attempt to establish a telephony link with said second telephone terminal;

b) responsive to said dialing of said predetermined designation establishing a link from said public switched telecommunications network to a telephony to packet data server and from said data server to a first interface to said public packet switched data network;

c) establishing a link from said first interface to said public packet data switched network through said network to a second interface to said public packet data switched network and from said second interface to said access gateway;

d) pre-storing in data storage in said access gateway tables of access data and processing routines;

e) receiving at said access gateway data provided by said first telephone terminal including an address identifying said second telephone terminal;

f) comparing said data provided by said first telephone terminal with data in said access gateway tables using at least one of said processing routines; and

g) upon identifying a match between at least certain of said data provided by said first telephone terminal with said pre-stored data, processing said attempt to establish a telephony link with said second telephone terminal by establishing a link from said access gateway through said local area network to one of said plurality of telephone terminals connected to said local area network, the identity of said one of said plurality of terminals depending upon the outcome of processing indicated by the correspondence of data provided by said first telephone station with data pre-stored in said storage and conditions established in said processing routines.

11. A method according to claim 10 wherein said public packet switched data network comprises the Internet.

12. A method according to claim 11 including obtaining said information from said first telephone terminal by interactive voice prompt and voice recognition dialog.

13. A method according to claim 12 wherein said information includes identification of an address for said access gateway.

14. A method according to claim 13 wherein said information also includes a direct inward dial number for said second telephone terminal.

15. A method according to claim 13 wherein said identification of an address for said access gateway comprises the domain name of said access gateway.

16. A hybrid telephony communication system comprising:

a switched telecommunications network including interconnected switching systems serving telephone terminals and having a separate packet switched control network which includes a controller and signal transfer points and service switching points associated with said switching systems;

a public packet switched data network having router interfaces;

a packet network server connected between one or more of said switching systems and one or more of said router interfaces;

a local area network providing communication between a plurality of telephone terminals associated therewith;

an access gateway connected between said local area network and one or more of said router interfaces; and

security storage associated with said access gateway and having stored therein data relating to at least certain of said plurality of telephone terminals associated with said local area network;

said access gateway including a processor selectively running application routines associated with certain of said plurality of terminals and said data stored in said security storage, wherein;

a caller using one of said telephone terminals served by said switching systems establishes telephonic communication with one of said plurality of terminals associated with said local area network by a link through said telecommunications network and said packet network server and said public packet switched data network and said access gateway and said local area network after inputting information corresponding to data in said security storage and satisfying criteria imposed by said processor running an application routine associated with the telephone terminal with which said caller using one of said telephone terminals served by said switching systems establishes telephonic communication.

17. A communication system according to claim 16 including an intelligent peripheral platform associated with said control network and having voice prompt and voice recognition capability, said intelligent peripheral platform obtaining at least certain of said information inputted by said caller using one of said telephone terminals served by said switching systems.

18. A communication system according to claim 17 wherein said intelligent peripheral platform is connected to said controller via a data link.

19. A communication system according to claim 18 wherein said telephonic communication which is established is initiated by said caller dialing a number which causes suspension of the call, accessing said controller, signaling between said controller and said intelligent peripheral platform, and voice communication between said intelligent peripheral platform and said caller.

20. A communication system according to claim 19 wherein said public packet switched data network comprises the Internet.

21. A communication system according to claim 16 including a private branch exchange switching system connecting said plurality of terminals to said local area network.

22. A communication system according to claim 21 including a separate connection of said private branch exchange switching system to one of said switching systems in said switched telecommunications network.

23. A communication system according to claim 22 including computers connected to said local area network, and a local area network to packet switched data network server connected between said local area network and one or more of said router interfaces to said packet switched data network.

24. A communication system according to claim 23 wherein said local area network to packet switched data network server blocks telephony communication signals.