Method and apparatus for identifying a voice caller

• US 7,634,656 B2
• Filed: 09/12/2002
• Issued: 12/15/2009
• Est. Priority Date: 09/13/2001
• Status: Active Grant

• Current Assignee: Valtrus Innovations Limited (f/k/a Dolya Holdco 9 Limited) (Key Patent Innovations Limited)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Pearson, Siani Lynne
• Primary Examiner(s): Truong; Thanhnga B
• Application Number:
  US10/241,894
• Publication Number:
  US 20030051133A1
• Time in Patent Office: 2,651 Days
• Field of Search: 713/168, 713/177, 379 69- 70, 379/88.01, 379/88.02, 379/88.03, 379/207.13, 379/207.14, 379/67.1, 379/199, 379/355.04, 379/74, 379/211.02, 379/201.02, 379/142.01, 379/127.01, 379/142.15, 379/900, 379/132.04, 455/415, 4554121- 2, 455/412.2, 705/74, 370/328, 370/356, 370/352, 380/257
• US Class Current: 713/168
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04M 1/2535 adapted for voice communication over an Internet Protocol [IP] network Voice over Internet Protocol (VoIP) network equipment and services H04M7/006; implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP] H04L69/16
• CPC Class Codes: H04M 1/57 Arrangements for indicating or recording the number of the calling subscriber at the called subscriber's set at the operator set in a manual exchange H04M5/20
• CPC Class Codes: H04M 1/571 Blocking transmission of caller identification to called party
• CPC Class Codes: H04M 2242/22 Automatic class or number identification arrangements
• CPC Class Codes: H04M 3/42042 Notifying the called party of information on the calling party details within substation equipment H04M1/57, signalling details H04Q3/72
• CPC Class Codes: H04M 7/006 Networks other than PSTN/ISDN providing telephone service, e.g. Voice over Internet Protocol (VoIP) , including next generation networks with a packet-switched transport layer H04L65/00 takes precedence; aspects not specific to the type of network H04M3/00; special services in those networks H04M3/42

Abstract

A voice call system and a method and apparatus for identifying a voice caller are disclosed. The system includes a call originator apparatus 10 and a called party apparatus 20. At least one trusted user identity is formed at the call originator apparatus 10, ideally in a trusted platform module 12 configured according to a Trusted Computing Platform Alliance (TCPA) specification. The called party apparatus 20 checks the trusted user identity when establishing a new voice call. Advantageously, an identity of the voice caller using the call originator apparatus is confirmed in a reliable and trustworthy manner, even when the voice call is transported over an inherently insecure medium, e.g. an open computing system like the internet 30. Preferred embodiments of the invention use IP telephony, such as SIP (session initiation protocol) or H.323 standard voice telephony.

Claims

1. A method for identifying a voice caller, for use in a computing network arranged to carry a voice call from a call originating apparatus to a called party apparatus, the method comprising the steps of:

forming a user identity at the call originating apparatus, the user identity being a cryptographic identity according to an encryption algorithm; and

initiating a IP telephony voice call, including supplying the user identity from the call originating apparatus to the called party apparatus,

wherein the step of forming a user identity includes obtaining a signature from a privacy certifying authority.

2. The method of claim 1, comprising checking the signature at the called party apparatus using a signature checking key.

3. A call originating user apparatus arranged to originate a voice call over a computing network to a called party apparatus, the call originating user apparatus comprising:

a call unit arranged to initiate a voice call over the computing network; and

an identity unit arranged to form a cryptographic user identity, and to provide the cryptographic user identity to the called party apparatus,

wherein the identity unit is arranged to form a trusted user identity comprising an identity label, a public identity key formed as one part of an asymmetric encryption algorithm, and a signature obtained from a privacy certifying authority.

4. A call originating user apparatus arranged to originate a voice call over a computing network to a called party apparatus, the call originating user apparatus comprising:

a call unit arranged to initiate a voice call over the computing network; and

an identity unit arranged to form a cryptographic user identity, and to provide the cryptographic user identity to the called party apparatus,

wherein the identity unit comprises a TCPA trusted platform module and is arranged to form a trusted user identity comprising an identity label, and a public identity key, the public identity key being formed as one part of an asymmetric encryption algorithm.

5. A called party user apparatus arranged to receive a voice call from a call originating apparatus across a computing network, the called party user apparatus comprising:

a call unit arranged to receive an incoming voice call that includes a cryptographically-formed user identity; and

a check unit arranged to cryptographically check the user identity to identify a voice caller,

wherein the user identity comprises a user identity label, a public identity key, and a third-party signature, and the check unit is arranged to check the third-party signature using a signature checking key, cryptographically check the public identity key by interrogating the call originating apparatus, and then identify a voice caller with the user identity label.