Conference Bridge Eavesdropping Prevention via Dual-Code Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current conferencing systems lack secure access control, allowing unauthorized participants to join conference calls if they know the participant code, especially when caller IDs are blocked or unknown.
Innovation Solution
Implementing a system that requires a personal verification code, which generates a one-time conference passcode for validated users, ensuring secure access by verifying both the passcode and participant code before allowing entry into the conference call and displaying the user's name in participant lists.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a participant code is provided for all participants, then ease of operation is improved, but security deteriorates as unauthorized users can join by knowing the code
Solution Approach 1:
The authentication system is segmented into two distinct components: a participant code that provides easy access and a one-time conference passcode that ensures security. The participant code remains static for ease of use, while the one-time passcode changes for each conference instance, dividing the authentication function into accessibility and security layers.
Solution Approach 2:
The system performs preliminary action by generating and distributing one-time conference passcodes to authorized participants before the conference call begins. This advance preparation ensures that only pre-authenticated users receive valid passcodes, preventing unauthorized access while maintaining ease of operation through the simple participant code.
2Reliability
If caller ID is used for identification, then reliability of participant identification is improved, but ease of operation deteriorates when caller ID is blocked or unknown
Solution Approach 1:
The one-time conference passcode serves as an intermediary authentication mechanism that bridges the gap between blocked/unknown caller IDs and reliable participant identification. Instead of relying directly on caller ID, the system uses the passcode as a mediator to verify identity, allowing participants with blocked caller IDs to join seamlessly while maintaining accurate identification through the passcode validation.
3Reliability
If a one-time conference passcode system is implemented, then security is improved, but device complexity increases due to additional verification steps
Solution Approach 1:
The conference bridge system performs multiple functions: it validates both the participant code and one-time passcode, manages participant identification, controls access permissions, and maintains participant lists. By making the conference bridge universal and multi-functional, the patent avoids adding separate complex authentication devices, instead integrating security features into the existing conference infrastructure.
Data Source
AI summary
To provide more secure access to a conference call, a request is received from a user to retrieve a one-time conference passcode; the request includes a personal verification code. In one embodiment, the personal verification code is a digital certificate. The personal verification code is validated. In response to the personal verification code being valid, the user is sent the one-time conference passcode. The user then requests to join the conference call by presenting the one-time conference passcode and a participant code. The one-time conference passcode and the participant code are verified. In response to verifying the one-time conference passcode and the participant code, the user is allowed to join the conference call. The user's name is then displayed in a list of conference participants. This overcomes the security problem of not knowing exactly who is participating in the conference call.