Authentication of phone caller identity

Patent metadata

Field	Value
Publication number	US-9232394-B2
Application number	US-201313732838-A
Country	US
Kind code	B2
Filing date	Jan 2, 2013
Priority date	Jan 2, 2013
Publication date	Jan 5, 2016
Grant date	Jan 5, 2016

Abstract

According to one aspect of the present disclosure, a method and technique for caller authentication is disclosed. The method includes: responsive to initiation of a telephone call by a caller from a first telephone unit to a second telephone unit, retrieving an identification object comprising identification information corresponding to the caller; encrypting the identification object using an encryption key stored on the first telephone unit; and transmitting, as part of the telephone call, the encrypted caller identification object to a telephone network destined for the second telephone unit.

First claim

What is claimed is:

1. A method, comprising:
responsive to initiation of a telephone call by a caller from a first telephone unit to a second telephone unit, retrieving an identification object comprising identification information corresponding to the caller;
encrypting the identification object by the first telephone unit using an encryption key stored on the first telephone unit, the encryption key associated with a telephone number assigned to the first telephone unit; and
transmitting, as part of the telephone call, the encrypted caller identification object from the first telephone unit to a telephone network destined for the second telephone unit.

2. The method of claim 1 , further comprising:
registering the first telephone unit with a certificate authority; and
responsive to registering the first telephone unit with the certificate authority, receiving and storing, on the first telephone unit, the encryption key from the certificate authority.

3. The method of claim 2 , wherein registering the first telephone unit comprises registering the first telephone unit with a telephone service provider.

4. The method of claim 2 , further comprising, responsive to registering the first telephone unit with the certificate authority, receiving a decryption key from the certificate authority for decrypting the encrypted caller identification object.

5. The method of claim 4 , further comprising transmitting the decryption key to the telephone network destined for the second telephone unit.

6. The method of claim 4 , further comprising:
storing the decryption key on the first telephone unit; and
responsive to receiving an input requesting a transmission of the decryption key, automatically transmitting the decryption key to the telephone network destined for the second telephone unit.

7. The method of claim 1 , further comprising:
responsive to receiving a call from the second telephone unit, identifying an encrypted identification object received from the second telephone unit;
identifying a decryption key associated with the call from the second telephone unit;
decrypting the identification object received from the second telephone unit; and
verifying an identity of a caller placing the call from the second telephone unit based on the decrypted identification object.

8. The method of claim 7 , wherein identifying the decryption key associated with the call comprises identifying a telephone number associated with the call from the second telephone unit.

9. A system, comprising:
a first telephone unit having a processor and logic executable by the processor, the logic executable by the processor to:
responsive to initiation of a telephone call by a caller from the first telephone unit to a second telephone unit, retrieve an identification object comprising identification information corresponding to the caller;
encrypt the identification object using an encryption key stored on the first telephone unit, the encryption key associated with a telephone number assigned to the first telephone unit; and
transmit, as part of the telephone call, the encrypted caller identification object to a telephone network destined for the second telephone unit.

10. The system of claim 9 , wherein the logic is executable to, responsive to registering the first telephone unit with a certificate authority, receive and store, on the first telephone unit, the encryption key from the certificate authority.

11. The system of claim 10 , wherein the logic is executable to receive the encryption key from a telephone service provider as the certificate authority.

12. The system of claim 10 , wherein the logic is executable to, responsive to registering the first telephone unit with the certificate authority, receive a decryption key from the certificate authority for decrypting the encrypted caller identification object.

13. The system of claim 12 , wherein the logic is executable to transmit the decryption key to the telephone network destined for the second telephone unit.

14. The system of claim 12 , wherein the logic is executable to:
store the decryption key on the first telephone unit; and
responsive to receiving an input requesting a transmission of the decryption key, automatically transmit the decryption key to the telephone network destined for the second telephone unit.

15. The system of claim 9 , wherein the logic is executable to:
responsive to receiving a call from the second telephone unit, identify an encrypted identification object received from the second telephone unit;
identify a decryption key associated with the call from the second telephone unit;
decrypt the identification object received from the second telephone unit; and
verify an identity of a caller placing the call from the second telephone unit based on the decrypted identification object.

16. A computer program product for authentication of phone caller identity, the computer program product comprising:
non-transitory computer readable medium having computer readable program code embodied therewith, the computer readable program code comprising computer readable program code configured to:
responsive to initiation of a telephone call by a caller from a first telephone unit to a second telephone unit, retrieve an identification object comprising identification information corresponding to the caller;
encrypt the identification object by the first telephone unit using an encryption key stored on the first telephone unit, the encryption key associated with a telephone number assigned to the first telephone unit; and
transmit, as part of the telephone call, the encrypted caller identification object from the first telephone unit to a telephone network destined for the second telephone unit.

17. The computer program product of claim 16 , wherein the computer readable program code is configured to, responsive to registering the first telephone unit with a certificate authority, receive and store, on the first telephone unit, the encryption key from the certificate authority.

18. The computer program product of claim 17 , wherein the computer readable program code is configured to receive the encryption key from a telephone service provider as the certificate authority.

19. The computer program product of claim 16 , wherein the computer readable program code is configured to, responsive to registering the first telephone unit with the certificate authority, receive a decryption key from the certificate authority for decrypting the encrypted caller identification object.

20. The computer program product of claim 19 , wherein the computer readable program code is configured to transmit the decryption key to the telephone network destined for the second telephone unit.

21. The computer program product of claim 16 , wherein the computer readable program code is configured to:
responsive to receiving a call from the second telephone unit, identify an encrypted identification object received from the second telephone unit;
identify a decryption key associated with the call from the second telephone unit;
decrypt the identification object received from the second telephone unit; and
verify an identity of a caller placing the call from the second telephone unit based on the decrypted identification object.

22. A method, comprising:
responsive to receiving, by a first telephone unit, a call from a second telephone unit, identifying an encrypted identification object received from the second telephone unit;

Assignees

• IBM

Inventors

• Bombacino Vinicio
• Di Cocco Antonio
• Lanni Leonardo
• Tortosa Andrea

Classifications

• H04W12/08

  Access security · CPC title

• H04M3/42059

  Making use of the calling party identifier · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04W12/02 Primary

  Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] · CPC title

• H04W12/06 Primary

  Authentication · CPC title