System and method for enabling encrypted voice communications between an external device and telephony devices associated with an enterprise network

Patent metadata

Field	Value
Publication number	US-9413882-B2
Application number	US-39422909-A
Country	US
Kind code	B2
Filing date	Feb 27, 2009
Priority date	Feb 27, 2009
Publication date	Aug 9, 2016
Grant date	Aug 9, 2016

Abstract

A telecommunication system that can selectively establish communications with one of a plurality of telephony devices associated with a particular telephone number for a device in an enterprise network. More particularly, the system is configured to route an incoming telephone call received from an external device, such as a mobile device for example, to one or more of a plurality of telephony devices associated with the telephone number. The plurality of telephony devices may include personal digital assistants and other remote devices. In one embodiment, the system comprises a network server configured to connect the incoming telephone call from an external device to a telephony device, where voice communications are encrypted for transmission by the network server to the external device from which the incoming telephone call is received, and encrypted voice communications received from the external device can be decrypted, re-encrypted and/or stored by the network server if required.

First claim

The invention claimed is:

1. A method for facilitating encrypted voice communications, the method comprising:
detecting at a network server an incoming telephone call to a primary telephone number from an external device operating outside an enterprise network, the primary telephone number associated with a remote device operating outside the enterprise network and with a telephony device operating within the enterprise network;
contacting both the remote device and the telephony device to route the incoming telephone call;
determining which of the remote device or the telephony device was answered; and
in response to detecting that the remote device was answered:
the network server transmitting a session key to the remote device via a data connection path between the remote device and the network server;
the network server transmitting the session key to the external device via a data connection path between the external device and the network server;
the network server connecting the incoming telephone call to the remote device via a first voice connection path between the network server and the external device, and via a second voice connection path between the network server and the remote device;
the network server receiving from the remote device encrypted first voice communication signals via the second voice connection path, the encrypted first voice communication signals having been encrypted by the remote device using the session key, and relaying the encrypted first voice communication signals to the external device via the first voice connection path; and
the network server receiving from the external device encrypted second voice communication signals via the first voice connection path, the encrypted second voice communication signals having been encrypted by the external device using the session key, and relaying the encrypted second voice communication signals to the remote device via the second voice connection path.

2. The method of claim 1 , wherein the external device comprises a mobile device.

3. The method of claim 1 , wherein transmitting the session key to the external device comprises transmitting the session key encrypted with a public key associated with the external device.

4. The method of claim 1 , wherein transmitting the session key to the external device comprises transmitting the session key via a message management server.

5. The method of claim 1 , wherein contacting the remote device comprises:
retrieving a first connection number for the remote device;
transmitting a first data signal to the remote device via a data connection path between the network server and the remote device, the first data signal inquiring whether the incoming call is to be accepted at the remote device; and
receiving a second data signal from the remote device,
wherein determining whether the remote device was answered is based on the second data signal.

6. The method of claim 1 , wherein the remote device comprises a mobile device.

7. The method of claim 1 , wherein the remote device comprises a land-based telephony device.

8. The method of claim 1 , wherein if the incoming telephone call is not accepted, the method further comprises diverting the incoming call to an enterprise voicemail box associated with the primary telephone number.

9. The method of claim 1 , further comprising performing user authentication for the remote device.

10. The method of claim 1 , wherein transmitting the session key to the remote device comprises transmitting the session key encrypted with a public key associated with the remote device.

11. An apparatus for facilitating encrypted voice communications, the apparatus comprising:
a computer readable storage medium, the computer readable storage medium for storing telephone numbers associated with a primary telephone number; and
a processor coupled to the computer readable storage medium, the processor adapted to perform acts of a method comprising:
detecting at a network server an incoming telephone call to the primary telephone number from an external device operating outside an enterprise network, the primary telephone number associated with a remote device operating outside the enterprise network and with a telephony device operating within the enterprise network;
contacting both the remote device and the telephony device to route the incoming telephone call;
determining which of the remote device or the telephony device was answered; and
in response to detecting that the remote device was answered:
transmitting a session key to the remote device via a data connection path between the remote device and the network server;
transmitting the session key to the external device via a data connection path between the external device and the network server;
connecting the incoming telephone call to the remote device via a first voice connection path between the network server and the external device, and via a second voice connection path between the network server and the remote device;
receiving from the remote device encrypted first voice communication signals via the second voice connection path at the network server, the encrypted first voice communication signals having been encrypted by the remote device using the session key, and relaying the first voice communication signals to the external device via the first voice connection path; and
receiving from the external device second voice communication signals via the first voice connection path at the network server, the encrypted second voice communication signals having been encrypted by the external device using the session key, and relaying the encrypted second voice communication signals to the remote device via the second voice connection path.

12. The apparatus of claim 11 , wherein transmitting the session key to the external device comprises transmitting the session key encrypted with a public key associated with the external device.

13. The apparatus of claim 11 , wherein transmitting the session key to the external device comprises transmitting the session key via a message management server.

14. The apparatus of claim 11 , wherein transmitting the session key to the remote device comprises transmitting the session key encrypted with a public key associated with the remote device.

15. A system for facilitating encrypted voice communications, the system comprising a processor configured to perform acts comprising:
detecting at a network server an incoming telephone call to a primary telephone number from an external device operating outside an enterprise network, the primary telephone number associated with a remote device operating outside the enterprise network and with a telephony device operating within the enterprise network;
contacting both the remote device and the telephony device to route the incoming telephone call;
determining which of the remote device or the telephony device was answered; and
in response to detecting that the remote device was answered:
transmitting a session key to the remote device via a data connection path between the remote device and the network server;
transmitting the session key to the external device via a data connection path between the external device and the network server;
connecting the incoming telephone call to the remote device via a first voice connection path between the network server and the external device, and via a second voice connection path between the network server and the remote device;
receiving from the remote device encrypted first voice communication signals via the second voice connection path at the network serve

Assignees

• Gisby Douglas
• Dodson Theron
• Yach David
• Gray Michael
• Blackberry Ltd

Inventors

• Gisby Douglas
• Dodson Theron
• Yach David
• Gray Michael

Classifications

• H04K1/00

  Secret communication · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04M2203/609

  Secret communication · CPC title

• H04L65/1069

  Session establishment or de-establishment · CPC title

• H04M3/42314 Primary

  in private branch exchanges · CPC title