SIP B2BUA Secure Transaction Digit Display Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Session Initiation Protocol (SIP) communication systems lack a mechanism to control the display of input digits at SIP endpoints, leading to potential exposure of sensitive information like passwords or authorization codes, as they either echo or do not echo input digits without user control.
Innovation Solution
A Back to Back User Agent (B2BUA) analyzes input digits and selectively manages the display by coupling SIP devices with a media server to suppress sensitive code inputs with placekeepers or completely hide them, while allowing display of non-sensitive inputs, enhancing security and user experience.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If SIP devices always echo input digits, then user feedback and confirmation are improved, but security of sensitive information deteriorates
Solution Approach 1:
The system dynamically adjusts the echo behavior based on the type of information being entered. The B2BUA receives control display information from the application server that indicates whether to echo, substitute with placekeepers, or suppress display entirely. This allows the echo function to transition from a static always-on state to a dynamic state that adapts to security requirements.
Solution Approach 2:
Different display treatments are applied to different portions of input based on their sensitivity. Sensitive information like passwords receives placekeeper substitution or suppression, while non-sensitive information like destination numbers receives normal echo. This local differentiation resolves the contradiction by applying appropriate security measures only where needed.
2Object-affected harmful factors
If SIP devices suppress all input digit display, then security of sensitive information is improved, but user feedback and confirmation deteriorate
Solution Approach 1:
The system applies different display strategies to different types of input. Non-sensitive information continues to be echoed normally for user feedback, while only sensitive information receives suppression or placekeeper substitution. This selective approach maintains user feedback for necessary information while protecting sensitive data.
Solution Approach 2:
The display behavior transitions from a static always-suppress state to a dynamic state controlled by the B2BUA based on real-time analysis of the transaction context. The system can switch between echo, placekeeper substitution, and suppression modes depending on what type of information is being entered at any given moment.
3Adaptability or versatility
If SIP protocol includes display control mechanism, then security control capability is improved, but protocol complexity deteriorates
Solution Approach 1:
The B2BUA acts as an intermediary component that handles the complexity of display control. It receives control display information from the application server and translates it into appropriate SIP protocol messages sent to the endpoint. This intermediary approach centralizes the complexity in a dedicated component rather than distributing it throughout the entire SIP protocol stack.
Solution Approach 2:
The control display information mechanism serves multiple functions: it controls echo behavior, enables placekeeper substitution, and provides security management. By creating a universal control mechanism that handles all these functions through a single protocol extension, the patent avoids creating separate complex mechanisms for each function.
Data Source
AI summary
A method of managing a communications network, managing secure transactions conducted by digital communications devices over a communications network and computer program product therefore. A Back to Back User Agent (B2BUA), for example, receives numerical input from a networked digital communications device, e.g., a Session Initiation Protocol (SIP) device, and determines when and whether the SIP device displays digits entered at the devices. The B2BUA analyzes received digits for an identification (ID) code and selectively couples the SIP devices with a media server capable of providing prompting the SIP devices. In cooperation with the media server, the B2BUA directs replacing sensitive codes (e.g., passwords or Personal Identification Number (PIN)) with placekeepers or suppressing display altogether. After sensitive code input is complete, digit entry display resumes.