Enhancing ENUM security

• US 8,510,793 B2
• Filed: 10/05/2010
• Issued: 08/13/2013
• Est. Priority Date: 11/30/2007
• Status: Active Grant

• Current Assignee: Telecom Italia S.p.A.
• Original Assignee: Telecom Italia S.p.A.
• Inventors: De Lutiis, Paolo, Silletta, Francesco
• Primary Examiner(s): Abrishamkar, Kaveh
• Application Number:
  US12/745,608
• Publication Number:
  US 20110016145A1
• Time in Patent Office: 1,043 Days
• Field of Search: None
• US Class Current: 726/1
• CPC Class Codes: H04L 2101/385 Uniform resource identifier for session initiation protocol [SIP URI]
• CPC Class Codes: H04L 61/30 Managing network names, e.g. use of aliases or nicknames name-to-address mapping H04L61/45
• CPC Class Codes: H04L 61/301 Name conversion
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/4557 Directories for hybrid networks, e.g. including telephone numbers
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04L 67/54 Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users
• CPC Class Codes: H04M 2203/354 Reverse directory service
• CPC Class Codes: H04M 2203/6009 Personal information, e.g. profiles or personal directories being only provided to authorised persons
• CPC Class Codes: H04M 3/4931 Directory assistance systems
• CPC Class Codes: H04M 7/128 Details of addressing, directories or routing tables

Abstract

A method of providing telecommunication services includes generating fictitious contact information univocally associated with a telephone number assigned to a subscriber; and storing the fictitious contact information in a database, like an ENUM database. Responsive to a request, received from a requester, of a contact information corresponding to the telephone number and adapted to allow contacting over the Internet the subscriber assignee of the telephone number, the method includes having the database providing the fictitious contact information; and conditioning a resolution of the fictitious contact information for the provisioning of the contact information to the satisfaction of at least one security rule adapted to assess properties of at least one among the requester and the request. In a case that the request from the requester satisfies the at least one security rule, the method resolves the fictitious contact information and provides the requester with the contact information.

Claims

1. A method of providing telecommunication services, comprising:

generating fictitious contact information univocally associated with a telephone number assigned to a subscriber;

storing the fictitious contact information in a database;

receiving, from a requester, a request for contact information corresponding to said telephone number, wherein the contact information is configured to allow the requester to contact, via the Internet, the subscriber assigned said telephone number;

in response to receiving the request, providing, from the database, said fictitious contact information to the requester;

receiving, from the requester, said fictitious contact information;

based on the received fictitious contact information, determining whether properties of at least one of said requester and said request satisfy at least one security rule; and

if properties of at least one of said requester and said request satisfy said at least one security rule, providing the contact information to the requester.

2. The method of claim 1, wherein said database is an ENUM database.

3. The method of claim 1, wherein said contact information includes a SIP URI univocally identifying said subscriber.

4. The method of claim 3, wherein said fictitious contact information includes a fictitious URI univocally associated with the SIP URI of said subscriber.

5. The method of claim 4, wherein said fictitious URI includes randomly-generated information.

6. The method of claim 5, wherein said fictitious URI includes a domain name univocally identifying a resolver system adapted to use the fictitious contact information to provide said contact information to the requester if properties of at least one of said requester and said request satisfy the at least one security rule.

7. The method of claim 1, wherein said at least one security rule defines one or more among:

telephony network operators entitled to receive the contact information, requesters entitled to receive the contact information, types of connectivity services the requester is entitled to exploit for contacting over the Internet the subscriber assigned said telephone number, and dates and times when requesters are allowed to contact the subscriber assigned said telephone number.

8. The method of claim 1, comprising:

enabling one or more of the subscriber assigned the telephone number and a telephony operator to which the subscriber has subscribed to define said at least one security rule.

9. The method of claim 1, comprising:

in response to determining that properties of at least one of said requester and said request satisfy said at least one security rule, replacing the fictitious contact information univocally associated with the telephone number assigned to the subscriber with new fictitious information.

10. A system for providing telecommunication services, comprising:

one or more processors; and

memory storing computer-readable instructions that, when executed by the one or more processors, cause the system to;

generate fictitious contact information univocally associated with a telephone number assigned to a subscriber, and to cause the fictitious contact information to be stored in a database;

receive, from a requester, a request for contact information corresponding to said telephone number, wherein the contact information is configured to allow the requester to contact, via the Internet, the subscriber assigned said telephone number; and

in response to receiving the request, provide, from the database, said fictitious contact information to the requester;

receiving, from the requester, said fictitious contact information;

based on the received fictitious contact information, determining whether properties of at least one of said requester and said request satisfy at least one security rule; and

if properties of at least one of said requester and said request satisfy said at least one security rule, providing the contact information to the requester.

11. The system of claim 10, wherein said database is an ENUM database.

12. The system of claim 10, wherein said contact information includes a SIP URI univocally identifying said subscriber.

13. The system of claim 12, wherein said fictitious contact information includes a fictitious URI univocally associated with the SIP URI of said subscriber.

14. The system of claim 13, wherein said fictitious URI includes randomly-generated information.

15. The system of claim 14, wherein said fictitious URI includes a domain name univocally identifying a security policy rules processor.

16. The system of claim 10, wherein said at least one security rule defines one or more among:

telephony operators entitled to receive the contact information, requesters entitled to receive the contact information, types of connectivity services the requester is entitled to exploit for contacting over the Internet the subscriber assigned said telephone number, and dates and times when requesters are allowed to contact the subscriber assigned said telephone number.

17. The system of claim 16, wherein said at least one security rule is in XML language.

18. The system of claim 10, wherein the memory stores computer-readable instructions that, when executed by the one or more processors, cause the system to:

allow one or more of the subscriber assigned the telephone number and a telephony operator to which the subscribed has subscribed to define said at least one security rule.

19. The system of claim 10, wherein the memory stores computer-readable instructions that, when executed by the one or more processors, cause the system to:

in response to determining that properties of at least one of said requester and said request satisfy said at least one security rule, replace the fictitious contact information univocally associated with the telephone number assigned to the subscriber with new fictitious contact information.