JP4227902B2 - IP phone system - Google Patents

Description

  The present invention relates to an IP telephone system, and more particularly to a technology for assigning a telephone number by voice authentication in order to prevent malicious impersonation in an IP telephone system.

  In recent years, with the explosive spread of the Internet, IP telephone services have attracted attention. The IP phone service is a voice call service realized by using an IP network infrastructure, which converts voice data and IP data using VoIP technology for exchanging voice data on the IP network, and improves line efficiency and By using a highly flexible IP network, the call charge is lower than that of the conventional voice telephone service.

  FIG. 7 shows a configuration diagram of a general IP telephone system. The IP telephone 1 accommodated in the exchange 3 does not have a fixed telephone number, and can be assigned a telephone number flexibly. When a telephone number is assigned to the IP telephone 1, the user dials the telephone number and a password for authentication. The dialed number is compared with the telephone number and personal identification number table 4 (see FIG. 8) of the exchange 3, and if they match, the telephone number is given and the IP telephone 1 can be used. As a result, the user can use his / her telephone number without being limited to a place or terminal.

  However, the personal identification number can be derived illegally, and if the personal identification number is leaked, the IP telephone may be illegally used due to malicious impersonation.

  In order to prevent spoofing in a conventional telephone service, there is a technique for identifying a user by voice authentication using a voice authentication server and judging service provision as shown in Patent Document 1. When using the voice authentication server, dial the voice authentication server from the telephone and connect to the voice authentication server. Impersonation can be prevented by sending voice from the telephone to the connected voice authentication server and authenticating with the voice authentication server.

JP 2003-233595 A

  However, in the case of an IP telephone system, it is necessary to perform voice authentication when assigning a telephone number to an IP telephone. However, an IP telephone cannot make a call without a telephone number, and the IP telephone is a voice authentication server. There was a problem that voice authentication could not be performed because it could not be connected.

  The present invention is an IP telephone system capable of flexibly assigning a telephone number to an IP telephone accommodated in an exchange, and the IP telephone is connected to the exchange and a voice authentication server via a gateway and an intranet. The exchange assigns a temporary number to the IP telephone when receiving a login request from the IP telephone, and the IP telephone transmits the connection to the voice authentication server using the assigned temporary number. The voice authentication server requests voice input to the IP telephone, determines whether the input voice pattern is a pre-registered voice pattern, and determines that the voice pattern is a pre-registered voice pattern. In this case, the gateway notifies the authentication success and exchanges the voice number corresponding to the previously registered voice pattern. When the gateway receives the authentication success notification, the gateway permits the IP telephone to connect to the intranet, and the exchange assigns the telephone number corresponding to the notified voice number to the IP telephone, The IP telephone is characterized in that the assigned temporary number is deleted and use is possible using the assigned telephone number.

  The present invention is also an IP telephone system capable of flexibly assigning a telephone number to an IP telephone accommodated in an exchange, wherein the IP telephone is connected to the exchange and the voice authentication server via a gateway and an intranet. The exchange gives a temporary number to the IP telephone when receiving a login request from the IP telephone, and the IP telephone uses the assigned temporary number to call the voice authentication server for connection. The voice authentication server requests voice input from the IP telephone, determines whether the input voice pattern is a pre-registered voice pattern, and determines that the voice pattern is not a pre-registered voice pattern. The gateway and the exchange are notified of the authentication failure, and the gateway receives the authentication failure notification before Prohibits the connection to the intranet IP telephone, the exchange notifies the authentication failure to the IP telephone, the IP telephone set is characterized in that impossible to use by removing the temporary number which is the granted.

  Furthermore, the IP telephone is characterized in that, when the temporary number is given, it automatically makes a call to the voice authentication server immediately.

  According to the IP telephone system of the present invention, voice authentication can be performed even with an IP telephone to which no telephone number is assigned, and unauthorized use due to impersonation can be prevented to a higher degree than conventional authentication using a personal identification number. I can do it.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a conceptual diagram showing an example of the configuration of an IP telephone system according to an embodiment of the present invention. In the case of the present embodiment, the IP phone 1, the exchange 3 that can accommodate the IP phone 1, and the voice authentication server 8 are included. The exchange has a table 9 (see FIG. 2) for associating the IP address and voice number of the IP telephone with the telephone number and password. The voice authentication server has a table 10 (see FIG. 3) that associates voice numbers with voice data. The exchange and the voice authentication server are connected to the intranet 2. The IP telephone 1 is connected to the Internet 6 via a router 5 and connected to the intranet 2 via a gateway 7.

  Next, the operation of this embodiment will be described in detail with reference to the drawings.

  First, voice authentication registration to be performed by the user in advance will be described with reference to FIG. When registering voice authentication, the user dials the voice authentication registration special number, telephone number, and password from the IP telephone 1 (S1), and makes a voice registration request to the exchange 3 (S2). It is assumed that the IP telephone 1 used for this voice authentication registration has already been given a telephone number. The exchange 3 compares the dialed telephone number and personal identification number with the telephone number and personal identification number table 9 (S3). As a result of comparison, if there is matching data and no voice number is registered, IP phone 1 and voice authentication server 8 are connected (S4 to S6). Next, when voice is input from the IP telephone 1 (S7, S8), the voice authentication server 8 registers a voice pattern in the table 10 that associates the voice number with the voice data (S9). When the voice number registered by the voice authentication server 8 is transmitted to the exchange (S10), the exchange registers the voice number in the table 10 associated with the telephone number and the password and validates the voice authentication. (S11). Thereafter, the exchange 3 disconnects communication with the IP telephone 1 and the voice authentication server 8 (S12, S13), and transmits a voice registration completion notification to the IP telephone 1 (S14). This completes prior voice authentication registration (S15).

  Next, the operation in the case where voice authentication is performed from an IP telephone to which no telephone number is assigned and the telephone number is assigned, which is the object of the IP telephone system of the present invention, will be described with reference to FIG. When the user off-hooks the IP telephone 1 (S16), the IP telephone 1 transmits a login request to the exchange 3 (S17). The gateway 7 that passes through transmits an authentication request to the voice authentication server 8 for authentication (S18). When the authentication source is the IP telephone 1, the voice authentication server 8 transmits an authentication request to the exchange 3 (S19). The exchange 3 notifies the IP telephone 1 of the temporary number for voice authentication (S20), and the temporary number is assigned to the IP telephone 1 (S21). When the temporary number is given, the IP telephone 1 immediately makes an automatic call to the voice authentication server 8 (S22), and the IP telephone 1 and the voice authentication server 8 are connected by the automatic response of the voice authentication server 8 (S23). In addition, it cannot be transmitted to other than the voice authentication server using a temporary number by being automatically transmitted.

  The voice authentication server 8 transmits a voice input request to the IP telephone 1 (S24). When the user inputs voice from the IP telephone 1 (S25, S26), the voice authentication server 8 searches the voice pattern with reference to the table 10 (S27). If there is a matching voice pattern, the voice authentication server 8 authenticates to the gateway 7. The success notification is transmitted (S28), and the gateway 7 permits the connection from the IP telephone 1 to the intranet 2 (S29). The voice authentication server 8 notifies the exchange 3 of the voice number (S30), and the exchange 3 refers to the table 9 and searches for a telephone number corresponding to the voice number (S31). When the corresponding telephone number is searched, when the telephone number is notified to the IP telephone 1 (S32), the temporary number is deleted and the notified telephone number is assigned (S33), and the IP telephone 1 can be used. (S34).

  A case where a user who has not registered voice makes use of an IP telephone will be described with reference to FIG. From the login request to voice authentication, the same processing as in FIG. 5 is performed (S16 to S27). Since there is no voice pattern that matches the table 10 in the voice authentication, the voice authentication server 8 transmits an authentication failure notification to the gateway 7 (S35), and the gateway 7 does not permit the intranet connection of the IP telephone 1 (S36). The voice authentication server 8 transmits an authentication failure notification to the exchange 3 (S37), and the exchange 3 transmits an authentication failure notification to the IP telephone 1 (S38). The IP phone that has failed in authentication deletes the temporary number (S39) and remains unusable (S40).

It is the block diagram which showed one Embodiment of the IP telephone system concerning this invention. 3 is a data table for IP telephone authentication possessed by the exchange 3 in the present embodiment. 3 is a data table for IP telephone authentication possessed by the voice authentication server 8 in the present embodiment. It is the sequence diagram which showed the audio | voice registration process in this Embodiment. It is the sequence diagram which showed the process at the time of the voice authentication success in this Embodiment. It is the sequence diagram which showed the process at the time of the voice authentication failure in this Embodiment. It is the block diagram which showed the conventional IP telephone system. It is a data table for IP telephone authentication which the exchange has in the conventional IP telephone system.

Explanation of symbols

1 IP telephone 2 Intranet 3 Switch 5 Router 6 Internet 7 Gateway 8 Voice authentication server

Claims (3)

An IP telephone system capable of flexibly assigning a telephone number to an IP telephone accommodated in an exchange, wherein the IP telephone is connected to the exchange and a voice authentication server via a gateway and an intranet. A temporary number is assigned to the IP telephone when a login request is received from the IP telephone, and the IP telephone transmits a connection to the voice authentication server using the assigned temporary number, and the voice authentication The server requests voice input to the IP telephone, determines whether the input voice pattern is a pre-registered voice pattern, and if it determines that the voice pattern is a pre-registered voice pattern, Notifying the success of authentication and notifying the exchange of the voice number corresponding to the registered voice pattern Upon receiving the authentication success notification, the gateway permits the IP telephone to connect to the intranet, the exchange assigns the IP telephone a telephone number corresponding to the notified voice number, and the IP telephone grants the grant An IP telephone system, wherein the provisional number is deleted and use is possible using the assigned telephone number. An IP telephone system capable of flexibly assigning a telephone number to an IP telephone accommodated in an exchange, wherein the IP telephone is connected to the exchange and a voice authentication server via a gateway and an intranet. A temporary number is assigned to the IP telephone when a login request is received from the IP telephone, and the IP telephone transmits a connection to the voice authentication server using the assigned temporary number, and the voice authentication The server requests voice input to the IP telephone, determines whether the input voice pattern is a pre-registered voice pattern, and determines that the input voice pattern is not a pre-registered voice pattern, the gateway and When the authentication is notified to the exchange, and the gateway receives the authentication failure notification, Prohibits the connection to serial intranet, IP telephone system the exchange notifies the authentication failure to the IP telephone, the IP telephone, characterized in that impossible to use by removing the temporary number which is the granted. 3. The IP telephone system according to claim 1, wherein the IP telephone automatically makes a call to the voice authentication server immediately when the temporary number is assigned.

Images