Dynamic Encryption Switching in IVR Systems

Solution Overview

Problem

Conventional encryption methods for VoIP calls, such as SRTP and IPsec, place a significant burden on network resources and DSP hardware, limiting the number of simultaneous sessions that can be supported by a gateway device or IVR server.

Innovation Solution

Implementing an encrypted mode only during specific secure sessions in VoIP calls, using SRTP for sensitive information exchange and reverting to unencrypted RTP for non-sensitive communications, allowing the IVR system to initiate and terminate encryption dynamically based on the context of the IVR session.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional encryption methods (SRTP and IPsec) are used for all VoIP calls, then security of sensitive information is improved, but network resource consumption and DSP hardware burden increase significantly

Engineering Contradiction:

Improvesecurity of sensitive informationVSAvoidnetwork resource consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent segments the VoIP call into different phases: unencrypted phase (before sensitive information exchange) and encrypted phase (during sensitive information exchange). The system dynamically switches between encryption and unencryption based on the call context, applying encryption only when sensitive information is being transmitted rather than continuously throughout the entire call.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent applies partial encryption by encrypting only the portions of the VoIP call that involve sensitive information exchange, rather than encrypting the entire call duration. This partial application of encryption reduces the overall computational burden on network resources and DSP hardware while maintaining security where needed.

Inventive Principle:

Principle #16Partial or excessive action

2Reliability

If conventional encryption methods (SRTP and IPsec) are used for all VoIP calls, then security of sensitive information is improved, but the number of simultaneous sessions supported by gateway device or IVR server is limited

Engineering Contradiction:

Improvesecurity of sensitive informationVSAvoidnumber of simultaneous sessions

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent segments the VoIP call into different phases: unencrypted phase (before sensitive information exchange) and encrypted phase (during sensitive information exchange). The system dynamically switches between encryption and unencryption based on the call context, applying encryption only when sensitive information is being transmitted rather than continuously throughout the entire call.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent applies partial encryption by encrypting only the portions of the VoIP call that involve sensitive information exchange, rather than encrypting the entire call duration. This partial application of encryption reduces the overall computational burden on network resources and DSP hardware while maintaining security where needed.

Inventive Principle:

Principle #16Partial or excessive action

3Reliability

If encryption is applied throughout the entire VoIP call, then security is maintained, but network bandwidth and DSP hardware capacity are substantially limited

Engineering Contradiction:

ImprovesecurityVSAvoidbandwidth availability and DSP hardware capacity

Core Design Contradiction:

ReliabilityVSQuantity of substance

Solution Approach 1:

The patent segments the VoIP call into different phases: unencrypted phase (before sensitive information exchange) and encrypted phase (during sensitive information exchange). The system dynamically switches between encryption and unencryption based on the call context, applying encryption only when sensitive information is being transmitted rather than continuously throughout the entire call.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent applies partial encryption by encrypting only the portions of the VoIP call that involve sensitive information exchange, rather than encrypting the entire call duration. This partial application of encryption reduces the overall computational burden on network resources and DSP hardware while maintaining security where needed.

Inventive Principle:

Principle #16Partial or excessive action

Data Source

PatentUS7986773B2Interactive voice response system security

Publication Date: 2011.07.26 CISCO TECHNOLOGY INC

AI summary

In one embodiment, a method includes initiating an interactive voice response (IVR) session with a user over an IP network, identifying an imminent secure session event, and initiating an encrypted mode for the IVR session.