Peer-to-peer telephone system

• US 8,009,572 B2
• Filed: 07/14/2004
• Issued: 08/30/2011
• Est. Priority Date: 07/16/2003
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Skype Limited (Microsoft Corporation)
• Inventors: Heinla, Ahti, Kasesalu, Priit
• Primary Examiner(s): Ngo; Ricky
• Assistant Examiner(s): OVEISSI, MANSOUR
• Application Number:
  US10/890,160
• Publication Number:
  US 20050122965A1
• Time in Patent Office: 2,603 Days
• Field of Search: 370/375, 370/356, 370/238, 370/401, 370/352, 370/252, 379/113, 379/114, 709/205, 709/228
• US Class Current: 370/252
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 67/1091 Interfacing with client-server systems or between P2P systems
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04M 15/47 Fraud detection or prevention means
• CPC Class Codes: H04M 15/55 for hybrid networks
• CPC Class Codes: H04M 15/70 Administration or customization aspects; Counter-checking correct charges
• CPC Class Codes: H04M 15/8005 Flat-fee
• CPC Class Codes: H04M 2203/609 Secret communication
• CPC Class Codes: H04M 2215/0148 Fraud detection or prevention means
• CPC Class Codes: H04M 2215/2046 Hybrid network
• CPC Class Codes: H04M 2215/70 Administration aspects, modify settings or limits or counter-check correct charges
• CPC Class Codes: H04M 3/382 using authorisation codes or passwords
• CPC Class Codes: H04M 7/0063 where the network is a peer-to-peer network

Abstract

There is provided a peer-to-peer telephone system comprising a plurality of end-users and a communication structure through which one or more end-users are couplable for communication purposes. The system is distinguished in that the communication structure is substantially de-centralized with regard to communication route switching therein for connecting the one or more end-users. One or more end-users are operable to establish their own communication routes through the structure based on exchange of one or more authorization certificates, namely User Identity Certificates (UIC), to acquire access to the structure. The structure comprises an administration arrangement for issuing said one or more certificates to said one or more end-users.

Claims

1. A peer-to-peer system, comprising:

a VoIP peer-to-peer system including;

a substantially de-centralized peer-to-peer communication structure interconnecting a plurality of authorized end-user devices to facilitate VoIP calls over a VoIP communication route, the plurality of authorized end-user devices including a calling authorized end-user device and a called authorized end-user device;

the peer-to-peer communication structure providing authorized end user identification by associating a respective username to each of the plurality of authorized end-user devices, where the username is useable as a telephone number in the peer-to-peer communication structure;

the peer-to-peer communication structure including an administration node that is configured to circumvent unauthorized and fraudulent use of the peer-to-peer communication structure by issuing an authorization certificate to each of the plurality of authorized end-user devices to facilitate proof of authorized access in the peer-to-peer communication structure;

the plurality of authorized end-user devices are configured to refuse to accept VoIP calls via the peer-to-peer communication structure where there exists an absence of proof of authorized access;

said calling authorized end-user device is configured to receive information regarding an address of said called authorized end-user device and verify, prior to commencing a VoIP call, an authorization certificate provided by said called authorized end-user device, such that verifying the authorization certificate enables access to the peer-to-peer communication structure to establish a call over the VoIP communication route to said called authorized end-user device; and

the calling authorized end-user device is configured to verify the authorization certificate from the called authorized end-user device to establish the VoIP call without needing to communicate with the administration node responsible for issuing the authorization certificate.

2. A peer-to-peer system according to claim 1, wherein the administration node is configured to generate one or more private-public key pairs, maintain said one or more private keys secret, and distribute said one or more corresponding public keys within the peer-to-peer communication structure for certificate authentication purposes.

3. A peer-to-peer system according to claim 2, wherein the administration node is configured to generate private-public key pairs using a Rivest-Shamir-Adelman (RSA) method.

4. A peer-to-peer system according to claim 1, wherein the administration node is configured to perform at least one of:

(a) providing an end-user accounts database;

(b) providing a synchronizing time reference for the peer-to-peer communication structure;

(c) providing globally-configurable settings for the peer-to-peer system;

(d) providing peer discovery during bootstrap of the peer-to-peer communication structure;

(e) handling new end-user registration; and

(f) monitoring operation of the peer-to-peer communication structure for controlling desired modes of operation thereof.

5. A peer-to-peer system according to claim 1, configured to operate concurrently with POTS and/or PSTN.

6. A peer-to-peer system according to claim 1, wherein the administration node is implemented by way of one or more computer servers.

7. A peer-to-peer system according to claim 1, wherein the administration node is configured to apply a heuristics fraud detection analysis of end-user registration and system usage data for detecting fraudulent access to the peer-to-peer communication structure by end-users.

8. A peer-to-peer system according to claim 1, wherein the communication route is for a call.

9. A peer-to-peer system according to claim 1, configured to perform at least one of the following functions:

(a) handling end-user preferences;

(b) providing end-user identification by way of one or more of the following;

node identification (ID), username, and end-user profile data;

(c) maintaining basic statistics; and

(d) maintaining firewall and/or “

Network Address Translation”

(NAT) traversal via random peer nodes within the network functioning as ad hoc proxies supporting communication therethrough.

10. A peer-to-peer system according to claim 1, in which an end user identification in the form of a user name is used as a telephone number to establish a call through the peer-to-peer communication structure;

the call is one of a telephone call, a video call, and a conference call; and

the communication route is established for text messaging.

11. A method of establishing a call in a peer-to-peer communication structure, comprising:

managing access to a VoIP peer-to-peer system that includes;

a substantially de-centralized peer-to-peer communication structure interconnecting a plurality of authorized end-user devices to facilitate VoIP calls over a VoIP communication route, the plurality of authorized end-user devices including a calling authorized end-user device and a called authorized end-user device;

the peer-to-peer communication structure providing authorized end user identification by associating a respective username to each of the plurality of authorized end-user devices, where the username is useable as a telephone number in the peer-to-peer communication structure;

the peer-to-peer communication structure including an administration node that is configured to circumvent unauthorized and fraudulent use of the peer-to-peer communication structure by issuing an authorization certificate to each of the plurality of authorized end-user devices to facilitate proof of authorized access in the peer-to-peer communication structure; and

the plurality of authorized end-user devices are configured to refuse to accept VoIP calls via the peer-to-peer communication structure where there exists an absence of proof of authorized access;

receiving, at the calling authorized end-user device, at least one authorization certificate from the administration node;

receiving, at the calling authorized end-user device, information regarding the address of the called authorized end-user device;

verifying, at the calling authorized end-user device and prior to commencing a call, an authorization certificate provided by the called authorized end-user device, such that verifying the authorization certificate enables access to the VoIP peer-to-peer communication structure; and

establishing, based on verifying the authorization certificate provided by the called authorized end-user device, the VoIP call over the VoIP communication route in the peer-to-peer communication structure to said called authorized end-user device.

12. A method according to claim 11, wherein the administration node is configured to generate one or more private-public key pairs, maintain said one or more private keys secret, and distribute said one or more corresponding public keys to authorized end-user devices for certificate authentication purposes.

13. A method according to claim 12, wherein the administration node is configured to generate private-public key pairs using a Rivest-Shamir-Adelman (RSA) method.

14. A method according to claim 11, wherein the administration node is configured to perform at least one of:

(a) providing an end-user accounts database;

(b) providing a synchronizing time reference for the peer-to-peer communication structure;

(c) providing globally-configurable settings for the peer-to-peer communication structure;

(d) providing peer discovery during bootstrap of the peer-to-peer communication structure;

(e) handling new end-user registration; and

(f) monitoring operation of the peer-to-peer communication structure for controlling desired modes of operation thereof.

15. A method according to claim 11, wherein the peer-to-peer communication structure is arranged to be configurable to operate concurrently with POTS and/or PSTN.

16. A method according to claim 11, wherein the administration node is implemented by way of one or more central computer servers.

17. A method according to claim 11, wherein the administration node is configured to apply an heuristics fraud detection analysis of end-user registration and system usage data for detecting fraudulent access to the peer-to-peer communication structure by end-users.

18. A computer program product, embodied on a non-transitory computer-readable storage medium, comprising computer code executed by at least one computer processor to establish a call in a VoIP peer-to-peer system by:

facilitating VoIP communication in the VoIP peer-to-peer system, the VoIP peer-to-peer system including;

a substantially de-centralized peer-to-peer communication structure interconnecting a plurality of authorized end-user devices to facilitate VoIP calls over a VoIP communication route, the plurality of authorized end-user devices including a calling authorized end-user device and a called authorized end-user device;

the peer-to-peer communication structure providing authorized end user identification by associating a respective username to each of the plurality of authorized end-user devices, where the username is useable as a telephone number in the peer-to-peer communication structure;

the peer-to-peer communication structure including and an administration node that is configured to circumvent unauthorized and fraudulent use of the peer-to-peer communication structure by issuing an authorization certificate to each of the plurality of authorized end-user devices to facilitate proof of authorized access in the peer-to-peer communication structure;

the plurality of authorized end-user devices are configured to refuse to accept VoIP calls via the peer-to-peer communication structure where there exists an absence of proof of authorized access;

said calling authorized end-user device is configured to receive information regarding an address of said called authorized end-user device and verify, prior to commencing a call, an authorization certificate provided by said called authorized end-user device, such that verifying the authorization certificate enables access to the peer-to-peer system to establish a call over a communication route to said called authorized end-user device; and

the calling authorized end-user device is configured to verify the authorization certificate from the called authorized end-user device to establish the VoIP call without needing to communicate with the administration node responsible for issuing the authorization certificate.

19. A computer program product, embodied on a non-transitory computer-readable storage medium, comprising computer code executed by at least one computer processor to establish a VoIP call in a VoIP peer-to-peer system, the VoIP peer-to-peer system including:

a substantially de-centralized peer-to-peer communication structure interconnecting a plurality of authorized end-user devices to facilitate VoIP calls over a VoIP communication route, the plurality of authorized end-user devices including calling authorized end-user device and a called authorized end-user device;

the peer-to-peer communication structure providing authorized end user identification by associating a respective username to each of the plurality of authorized end-user devices, where the username is useable as a telephone number in the peer-to-peer communication structure;

the peer-to-peer communication structure including and an administration node that is configured to circumvent unauthorized and fraudulent use of the peer-to-peer communication structure by issuing an authorization certificate to each of the plurality of authorized end-user devices to facilitate proof of authorized access in the peer-to-peer communication structure;

the plurality of authorized end-user devices are configured to refuse to accept VoIP calls via the peer-to-peer communication structure where there exists an absence of proof of authorized access;

the computer code executed by the at least one processor establishes the VoIP call in the VoIP peer-to-peer system by facilitating;

receiving, at the calling authorized end-user device, at least one authorization certificate from an administration node;

receiving, at the calling authorized end-user device, information regarding the address of the called authorized end-user device; and

verifying, at the calling authorized end-user device and prior to commencing the VoIP call, an authorization certificate provided by the called authorized end-user device, such that verifying the authorization certificate enables access to the VoIP peer-to-peer system;

where the calling authorized end-user device is configured to verify the authorization certificate from the called authorized end-user device to establish the VoIP call without needing to communicate with the administration node responsible for issuing the authorization certificate.

20. A peer-to-peer system, comprising:

a VoIP peer-to-peer system using a substantially de-centralized peer-to-peer communication structure configured to interconnect a plurality of authorized end-user devices to facilitate VoIP calls over a VoIP communication route, the plurality of authorized end-user devices including a calling authorized end-user device, and a called authorized end-user device;

the peer-to-peer communication structure is configured to facilitate authorized end user identification by associating a respective username to each of the plurality of authorized end-user devices, where the username is useable as a telephone number in the peer-to-peer communication structure;

the peer-to-peer communication structure is configured to include an administration node that is configured to circumvent unauthorized and fraudulent use of the peer-to-peer communication structure by issuing an authorization certificate to each of the plurality of authorized end-user devices to facilitate proof of authorized access in the peer-to-peer communication structure;

the plurality of authorized end-user devices configured to refuse to accept VoIP calls via the peer-to-peer communication structure where there exists an absence of proof of authorized access;

said calling authorized end-user device is configured to receive information regarding an address of said called authorized end-user device and verify, prior to commencing a call, an authorization certificate provided by said called authorized end-user device, such that verifying the authorization certificate enables access to the peer-to-peer communication structure to establish a VoIP call over the VoIP communication route to said called authorized end-user device; and

the calling authorized end-user device is configured to verify the authorization certificate from the called authorized end-user device to establish the VoIP call without needing to communicate with the administration node responsible for issuing the authorization certificate.

21. A peer-to-peer system according to claim 20, wherein the administration node is configured to generate one or more private-public key pairs, maintain said one or more private keys secret, and distribute said one or more corresponding public keys within the peer-to-peer communication structure for certificate authentication purposes.

22. A peer-to-peer system according to claim 21, wherein the administration node is configured to generate private-public key pairs using a Rivest-Shamir-Adelman (RSA) method.

23. A peer-to-peer system according to claim 20, wherein the administration node is configured to perform at least one of:

(a) providing an end-user accounts database;

(b) providing a synchronizing time reference for the peer-to-peer communication structure;

(c) providing globally-configurable settings for the peer-to-peer system;

(d) providing peer discovery during bootstrap of the peer-to-peer communication structure;

(e) handling new end-user registration; and

(f) monitoring operation of the peer-to-peer communication structure for controlling desired modes of operation thereof.

24. A peer-to-peer system according to claim 20, configured to operate concurrently with POTS and/or PSTN.

25. A peer-to-peer system according to claim 20, wherein the administration node is implemented by way of one or more computer servers.

26. A peer-to-peer system according to claim 20, wherein the administration node is configured to apply a heuristics fraud detection analysis of end-user registration and system usage data for detecting fraudulent access to the peer-to-peer communication structure by end-users.

27. A peer-to-peer system according to claim 20, wherein the communication route is for a call.

28. A peer-to-peer system according to claim 20, configured to perform at least one of the following functions:

(a) handling end-user preferences;

(b) providing end-user identification by way of one or more of the following;

node identification (ID), username, and end-user profile data;

(c) maintaining basic statistics; and

(d) maintaining firewall and/or “

Network Address Translation”

(NAT) traversal via random peer nodes within the network functioning as ad hoc proxies supporting communication therethrough.

29. A peer-to-peer system according to claim 20, in which an end user identification in the form of a user name is used as a telephone number to establish a call through the peer-to-peer communication structure;

the call is one of a telephone call, a video call, and a conference call; and

the communication route is established for text messaging.

37. A method according to claim 21, wherein the administration node is configured to apply an heuristics fraud detection analysis of end-user registration and system usage data for detecting fraudulent access to the peer-to-peer communication structure by end-users.

30. A computer program product, embodied on a non-transitory computer-readable storage medium, comprising computer code executed by at least one computer processor to establish a call in a VoIP peer-to-peer system by:

managing VoIP communication in the VoIP peer-to-peer system with a calling authorized end-user device, a called authorized end-user device;

the VoIP peer-to-peer system including;

a substantially de-centralized peer-to-peer communication structure interconnecting a plurality of authorized end-user devices to facilitate VoIP calls over a VoIP communication route, the plurality of authorized end-user devices including the calling authorized end-user device and a called authorized end-user device;

the peer-to-peer communication structure providing authorized end user identification by associating a respective username to each of the plurality of authorized end-user devices, where the username is useable as a telephone number in the peer-to-peer communication structure;

the peer-to-peer communication structure including an administration node that is configured to circumvent unauthorized and fraudulent use of the peer-to-peer communication structure by issuing an authorization certificate to each of the plurality of authorized end-user devices to facilitate proof of authorized access in the peer-to-peer communication structure;

the plurality of authorized end-user devices are configured to refuse to accept VoIP calls via the peer-to-peer communication structure where there exists an absence of proof of authorized access;

said calling authorized end-user device is configured to receive information regarding an address of said called authorized end-user device and verify, prior to commencing a call, an authorization certificate provided by said called authorized end-user device, such that verifying the authorization certificate enables access to the peer-to-peer system to establish a call over the VoIP communication route to said called authorized end-user device; and

the calling authorized end-user device is configured to verify the authorization certificate from the called authorized end-user device to establish the VoIP call without needing to communicate with the administration node responsible for issuing the authorization certificate.

31. A method of establishing a call in a peer-to-peer communication structure, comprising:

facilitating access to a VoIP peer-to-peer system that includes;

a substantially de-centralized peer-to-peer communication structure interconnecting a plurality of authorized end-user devices to facilitate VoIP calls over a VoIP communication route, the plurality of authorized end-user devices including a calling authorized end-user device and a called authorized end-user device;

the peer-to-peer communication structure providing authorized end user identification by associating a respective username to each of the plurality of authorized end-user devices, where the username is useable as a telephone number in the peer-to-peer communication structure;

the peer-to-peer communication structure including an administration node that is configured to circumvent unauthorized and fraudulent use of the peer-to-peer communication structure by issuing an authorization certificate to each of the plurality of authorized end-user devices to facilitate proof of authorized access in the peer-to-peer communication structure; and

the plurality of authorized end-user devices are configured to refuse to accept VoIP calls via the peer-to-peer communication structure where there exists an absence of proof of authorized access;

receiving, at the calling authorized end-user device, at least one authorization certificate from the administration node;

receiving, at the calling authorized end-user device, information regarding the address of the called authorized end-user device;

verifying, at the calling authorized end-user device and prior to commencing a call, an authorization certificate provided by the called authorized end-user device, such that verifying the authorization certificate enables access to the VoIP peer-to-peer communication structure; and

establishing, based on verifying the authorization certificate provided by the called authorized end-user device, the call over the VoIP communication route in the peer-to-peer communication structure to said called authorized end-user device;

where the calling authorized end-user device is configured to verify the authorization certificate from the called authorized end-user device to establish the VoIP call without needing to communicate with the administration node responsible for issuing the authorization certificate.

32. A method according to claim 31, wherein the administration node is configured to generate one or more private-public key pairs, maintain said one or more private keys secret, and distribute said one or more corresponding public keys to authorized end-user devices for certificate authentication purposes.

33. A method according to claim 32, wherein the administration node is configured to generate private-public key pairs using a Rivest-Shamir-Adelman (RSA) method.

34. A method according to claim 31, wherein the administration node is configured to perform at least one of:

(a) providing an end-user accounts database;

(b) providing a synchronizing time reference for the peer-to-peer communication structure;

(c) providing globally-configurable settings for the peer-to-peer communication structure;

(d) providing peer discovery during bootstrap of the peer-to-peer communication structure;

(e) handling new end-user registration; and

(f) monitoring operation of the peer-to-peer communication structure for controlling desired modes of operation thereof.

35. A method according to claim 31, wherein the peer-to-peer communication structure is arranged to be configurable to operate concurrently with POTS and/or PSTN.

36. A method according to claim 31, wherein the administration node is implemented by way of one or more central computer servers.

38. A computer program product, embodied on a non-transitory computer-readable storage medium, comprising computer code executed by at least one computer processor to establish a VoIP call in a VoIP peer-to-peer system including:

a substantially de-centralized peer-to-peer communication structure interconnecting a plurality of authorized end-user devices to facilitate VoIP calls over a VoIP communication route, the plurality of authorized end-user devices including calling authorized end-user device and a called authorized end-user device;

the peer-to-peer communication structure providing authorized end user identification by associating a respective username to each of the plurality of authorized end-user devices, where the username is useable as a telephone number in the peer-to-peer communication structure;

the peer-to-peer communication structure including and an administration node that is configured to circumvent unauthorized and fraudulent use of the peer-to-peer communication structure by issuing an authorization certificate to each of the plurality of authorized end-user devices to facilitate proof of authorized access in the peer-to-peer communication structure; and

the plurality of authorized end-user devices are configured to refuse to accept VoIP calls via the peer-to-peer communication structure where there exists an absence of proof of authorized access;

the computer program product including computer code executed by the at least one processor for;

receiving, at the calling authorized end-user device, at least one authorization certificate from the administration node;

receiving, at the calling authorized end-user device, information regarding the address of the called end-user device;

verifying, at the calling end-user device and prior to commencing a call, an authorization certificate provided by the called authorized end-user device, such that verifying the authorization certificate enables access to the VoIP peer-to-peer system; and

establishing, based on verifying the authorization certificate provided by the called end-user device, the VoIP call over the VoiP communication route in the peer-to-peer system to said called authorized end-user device;

where the calling authorized end-user device is configured to verify the authorization certificate from the called authorized end-user device to establish the VoIP call without needing to communicate with the administration node responsible for issuing the authorization certificate.