Call-Processing Server Signal Verification for Terminal Privilege Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing telecommunications systems face challenges in securely granting privileges to terminals, as malicious software can designate other terminals for toll fraud without user knowledge, and password-based security techniques are fallible.
Innovation Solution
A call-processing server transmits a first signal to a user's terminal and requires a second signal from a designated terminal, where the user responds on a different communication channel, ensuring the signals have a human-readable but machine-unreadable relationship to verify terminal privileges, thereby reducing malware control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If password-based authentication is used to designate terminals, then ease of operation is improved, but security deteriorates because malware can steal credentials
Solution Approach 1:
The patent introduces an intermediary verification process using a call-processing server that mediates between the user's terminal and the designated terminal. The server transmits a first signal to the user's terminal and requires a second signal from the designated terminal, verifying their relationship without exposing passwords or credentials to potential malware.
Solution Approach 2:
The patent replaces the mechanical/password-based authentication system with a signal-based verification system. Instead of relying on secret passwords that can be stolen, the system uses transmitted and received signals with specific relationships to verify terminal authorization, making credential theft ineffective.
2Ease of operation
If softphone applications store user credentials for convenience, then ease of operation is improved, but security deteriorates as malware can access stored credentials
Solution Approach 1:
The call-processing server acts as an intermediary that eliminates the need for storing credentials in the softphone application. The server manages authentication through signal transmission and verification, so user credentials never need to be stored locally, preventing malware from accessing them.
Solution Approach 2:
The patent extracts the credential storage function from the softphone application and places it on the secure call-processing server. This separation removes the vulnerability of local credential storage while maintaining convenient terminal interaction through the server-mediated signal verification process.
3Productivity
If malware controls a terminal, then productivity is maintained, but harmful factors increase due to toll fraud and unauthorized calls
Solution Approach 1:
The patent implements a feedback mechanism where the call-processing server verifies the relationship between terminals through signal transmission and reception. The server receives a second signal from the designated terminal and determines whether to grant privileges based on the relationship between the first and second signals, creating a closed-loop verification system that prevents unauthorized use.
Solution Approach 2:
The system applies preliminary anti-action by requiring verification through signal relationship validation before granting terminal privileges. This preventive measure stops potential toll fraud and unauthorized calls before they can occur, while still allowing legitimate terminal functionality to proceed.
Data Source
AI summary
A method and apparatus are disclosed that enable a data-processing system, such as a server, to determine whether or not to grant a telecommunications terminal one or more privileges, without some of the disadvantages of the prior art. Specifically, in accordance with the illustrative embodiments of the present invention, a call-processing server transmits, to a first terminal, a first signal for verifying a second terminal, such as one that has been designated by a user. The user is then required to transmit a second signal to the call-processing server via the second terminal. The call-processing server then examines the received second signal with respect to the first signal and determines whether or not to grant the second terminal a privilege (e.g., handling calls on behalf of the user, etc.), based on the relationship between the first and second signals.