Trusted Platform Module Caller Identity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In open computing networks like the internet, providing reliable and trustworthy caller identification for voice calls is challenging due to the lack of infrastructure for trusted caller display information, making it difficult to inhibit impersonation and ensure the accuracy of caller identity.
Innovation Solution
A method and apparatus that form a trusted user identity using cryptographic keys and asymmetric encryption, such as RSA, with a Privacy Certifying Authority's signature, allowing the called party to verify the caller's identity through a trusted platform module, even in insecure networks like IP telephony.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If caller display information is provided in open computing networks like the internet, then voice calls can be established using IP telephony, but the reliability and trustworthiness of caller identification deteriorates due to lack of infrastructure
Solution Approach 1:
The patent introduces a trusted third party (certificate authority) as an intermediary that issues digital certificates to verify caller identities. This mediator binds the caller's identity to a public key through a digitally signed certificate, allowing the called party to trust the caller display information even in the insecure IP network environment.
Solution Approach 2:
The patent replaces the traditional telephony infrastructure-based trust mechanism with cryptographic mechanisms. Instead of relying on physical network infrastructure to guarantee caller identity, the system uses public key cryptography and digital signatures to verify identities, substituting mechanical/physical trust with mathematical trust.
2Reliability
If traditional caller display systems are used in fixed-line networks, then caller identification is reliable and trustworthy, but the system cannot be applied to open computing networks like the internet
Solution Approach 1:
The patent replaces the fixed-line network's infrastructure-based identity verification with cryptographic verification. The called party apparatus verifies the caller's digital certificate using public key cryptography, substituting the mechanical trust relationship of traditional telephony with a cryptographic trust model that works in IP networks.
Solution Approach 2:
The patent creates a universal caller display system that can operate across different network types (fixed-line and IP networks) by using cryptographic verification that is network-agnostic. The digital certificate mechanism provides a unified approach to identity verification that adapts to various network environments.
3Reliability
If cryptographic identity verification is implemented in IP telephony, then caller identification becomes reliable and impersonation is inhibited, but the system complexity increases
Solution Approach 1:
The patent performs identity verification in advance by requiring the caller to present a pre-issued digital certificate before the call is connected. The called party verifies the certificate's digital signature using the certificate authority's public key, establishing trust before the communication begins, which simplifies the overall verification process.
Solution Approach 2:
The patent uses digital certificates as cryptographic copies of identity information that can be transmitted and verified without exposing the actual identity data. The certificate contains a public key that serves as a verifiable copy of the caller's identity credentials, allowing verification without revealing sensitive information.
Data Source
AI summary
A voice call system and a method and apparatus for identifying a voice caller are disclosed. The system includes a call originator apparatus 10 and a called party apparatus 20. At least one trusted user identity is formed at the call originator apparatus 10, ideally in a trusted platform module 12 configured according to a Trusted Computing Platform Alliance (TCPA) specification. The called party apparatus 20 checks the trusted user identity when establishing a new voice call. Advantageously, an identity of the voice caller using the call originator apparatus is confirmed in a reliable and trustworthy manner, even when the voice call is transported over an inherently insecure medium, e.g. an open computing system like the internet 30. Preferred embodiments of the invention use IP telephony, such as SIP (session initiation protocol) or H.323 standard voice telephony.


