Protection against unsolicited communication

Patent metadata

Field	Value
Publication number	US-9762583-B2
Application number	US-91059610-A
Country	US
Kind code	B2
Filing date	Oct 22, 2010
Priority date	Oct 23, 2009
Publication date	Sep 12, 2017
Grant date	Sep 12, 2017

Abstract

Methods and apparatus are disclosed to provide protection against Unsolicited Communication (UC) in a network, such as, without limitation, an Internet Protocol (IP) Multimedia Subsystem (IMS). A communication may originate from a sending device and may be intended for delivery to a receiving device. A network may determine authentication information associated with the sending device. The network may send the authentication information to a receiving entity to evaluate if the communication is unsolicited using the authentication information. If the communication is determined to be acceptable, a connection associated with the communication may be allowed.

First claim

What is claimed:

1. A method for preventing delivery of an unsolicited communication, the method comprising:
receiving, at an identity gateway in a sending domain, an indication of a communication from a sending device in the sending domain, wherein the communication is intended to be delivered to a receiving device in a receiving domain, and wherein the identity gateway provides authentication information, relating to one or more sending devices in the sending domain, to domains other than the sending domain;
determining the authentication information relating to the sending device;
determining information associated with a trustworthiness of the identity gateway in the sending domain, the information associated with the trustworthiness of the identity gateway comprising a network asserted identity that is incapable of being manipulated and
sending the authentication information and the information associated with the trustworthiness of the identity gateway to at least one of a receiving network or the receiving device in the receiving domain, wherein the authentication information and the information associated with the trustworthiness of the identity gateway are capable of being evaluated to determine if the communication is unsolicited, wherein the authentication information and the information associated with the trustworthiness of the identity gateway are part of a Session Initiation Protocol Invite that is sent to at least one of the receiving network or the receiving device in the receiving domain, wherein determining authentication information comprises determining a sender identity associated with the sending device.

2. The method of claim 1 , wherein determining authentication information further comprises determining a strength of the sender identity associated with the sending device.

3. The method of claim 1 , wherein the strong sender identity comprises a network asserted identity.

4. The method of claim 1 , wherein the sender identity is incapable of being manipulated by a sender of the communication.

5. The method of claim 1 , wherein the authentication information comprises state information relating to a health status of the sending device.

6. The method of claim 5 , wherein the health status relates to a virus protection software status on the sending device.

7. The method of claim 5 , further comprising at least one of:
removing malware from the sending device; or
removing malware from a network element associated with the sending device.

8. The method of claim 1 , wherein the authentication information comprises a credential issued by the identity gateway.

9. The method of claim 8 , wherein the credential issued by the identity gateway is a network asserted identity.

10. A method for preventing delivery of an unsolicited communication, the method comprising:
receiving, at a receiving domain, authentication information associated with a sending device at a sending domain wherein the authentication information is received from at least one of: the sending device or a sending network at the sending domain, wherein the authentication information indicates that an identity gateway at the sending domain has performed an authentication of the sending device, and wherein the identity gateway provides authentication information, relating to one or more sending devices in the sending domain, to domains other than the sending domain;
receiving, at the receiving domain, information associated with a trustworthiness of the identity gateway, the information associated with the trustworthiness of the identity gateway comprising a network asserted identity that is incapable of being manipulated by the identity gateway; and
determining from the authentication information and the information associated with the trustworthiness of the identity gateway, if a communication from the sending device associated with the authentication information is unsolicited, wherein the authentication information and the information associated with the trustworthiness of the identity gateway are part of a Session Initiation Protocol Invite, and wherein a personal routing profile from a Home Subscriber Server (HSS) is used along with the Session Initiation Protocol Invite to determine whether to drop the proposed communication, wherein the authentication information comprises a sender identity associated with the sending device.

11. The method of claim 10 , wherein the sender identity comprises a network asserted identity.

12. The method of claim 10 , wherein the sender identity is incapable of being manipulated by a sender of the communication.

13. The method of claim 10 , wherein the sender identity is bound to the sending device and is incapable of use with another device.

14. The method of claim 10 , further comprising collecting sender identity information and creating a score relating to the sender identity information, wherein the score is capable of being used to assess trustworthiness of the sending device.

15. The method of claim 10 , further comprising receiving a score and storing the score in a trusted environment on the sending device, wherein the score is capable of re-use by the sending device and incapable of use by other devices.

16. The method of claim 10 , wherein the authentication information comprises state information relating to a health status of the sending device.

17. The method of claim 10 , wherein the authentication information comprises a credential issued by the identity gateway.

18. The method of claim 17 , wherein the credential issued by the identity gateway is a network asserted identity.

Assignees

• Guccione Louis J
• Cha Inhyok
• Schmidt Andreas
• Leicher Andreas
• Greiner David G
• Howry Dolores F
• Interdigital Patent Holdings Inc

Inventors

• Guccione Louis J
• Cha Inhyok
• Schmidt Andreas
• Leicher Andreas
• Greiner David G
• Howry Dolores F

Classifications

• G06F21/36

  by graphic or iconic representation · CPC title

• H04L63/101 Primary

  Access control lists [ACL] · CPC title

• H04L65/1016

  IP multimedia subsystem [IMS] · CPC title

• G06F21/33

  using certificates · CPC title

• H04L63/0869

  for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273) · CPC title