KR20180042354A - Security Policy Manager - Google Patents

Abstract

An event that changes the security of a communication session between communication endpoints is determined. An event that changes the security of a communication session between endpoints occurs after a communication session is established. For example, the event may be that the user activates the speakerphone. In response to determining that the event alters the security of the communication session between the communication endpoints, a message indicating the changed security level is sent to the communication endpoint. The communication endpoint displays the changed security level to the participants of the communication session. For example, if the speakerphone is activated, the changed security level may indicate that the communication session is currently not secure.

Description

Security Policy Manager

The systems and methods disclosed herein relate to secure communications, and in particular, to the management of secure communications.

The ability to provide secure communications is an integral part of government and corporate communications networks. In many cases, it is essential that the information provided in a communication session, such as a voice or video communication session, be highly secure. One way is to provide a security indication function that indicates whether the communication session is secure, thereby allowing the party of the communication session to know if the communication session is secure. In this way, the party of the communication session will be able to determine if the call is secure. However, current end-to-end call security indication may not always accurately provide the security level of the call. For example, a person who is not intended to listen to a communication session may overhear a communication session. In such a case, the security of the communication session may be impaired without the other party of the communication session not realizing that the communication session is corrupted.

Systems and methods are provided to address these and other problems and weaknesses of the prior art. An event that changes the security of a communication session between communication endpoints is determined. An event that changes the security of a communication session between endpoints occurs after a communication session is established. For example, the event may be that the user activates the speakerphone. In response to determining that the event alters the security of the communication session between the communication endpoints, a message indicating the changed security level is sent to the communication endpoint. The communication endpoint displays the changed security level to the participants of the communication session. For example, if the speakerphone is activated, the changed security level may indicate that the communication session is currently not secure.

1 is a block diagram of a first exemplary system for providing a secure state during a communication session in a peer-to-peer environment.
2 is a block diagram of a second exemplary system for providing a secure state during a communication session in a centralized environment.
3 is a flow diagram of a process for providing a secure state during a communication session.
4 is a flow diagram of a process for managing security policies.
5 is a diagram of an exemplary display of a secure message on a communication endpoint.

1 is a block diagram of a first exemplary system 100 for providing a secure state during a communication session in a peer-to-peer environment. The first exemplary system 100 includes a communications endpoint 101A-101N, a network 110, a policy server 120, and a sensor 130. [

The communication endpoint 101 is connected to the network 110 such as a personal computer (PC), a telephone, a video system, a cellular telephone, a personal digital assistant (PDA), a tablet device, a notebook device, a smart phone, Or any communication endpoint capable of communicating over the Internet. As shown in FIG. 1, any number of communication devices 101A-101N may be connected to the network 110. FIG.

The communication endpoint 101A further includes a processor 102A, a display 103A, a security manager 104A, one or more security policies 105A, and a network interface 106. [ Although the communication endpoints 101B-101N are not shown as including a processor 102, a display 103, a security manager 104, one or more security policies 105 and a network interface 106, 101B-101N may comprise a subset of all elements 102-106 or elements 102-106. For example, communication device 101B may include elements 102-106 (although not shown, 102B-106B).

Although not shown, communication endpoint 101 may include other hardware devices for communicating or receiving information such as a speaker, microphone, headset, video camera, touch screen, and / or sensor 130, The hardware device may be used to detect security events and / or notify the security status of the communication session. For example, a speaker may be used to communicate the security level of the communication session.

Although not shown, the communication endpoint 101 described herein may include other modules used to provide security, such as a cryptographic module and / or a secure boot. The cryptographic module and the secure boot may be used to ensure that each communication endpoint 101 is a trusted communication endpoint 101. Each of the communication endpoints 101 needs to be a trusted communication endpoint 101 so that the communication session can be considered secure.

The processor 102 may be any hardware processing device that processes firmware / software, such as a microprocessor, a computer, a multi-core processor, a digital signaling processor and / or a microcontroller, or may include any hardware processing device. The display 103 may be or be a device capable of providing a display to a person such as a liquid crystal display (LCD), a light emitting diode (LED) display, a plasma display, a cathode ray tube, a video projector and / . Display 103 may include an indicator, such as a single lamp or LED, that conveys whether the call is secure.

The security manager 104 may be any hardware / software capable of managing the security of the communication session. The security manager 104 may manage the security of one or more communication sessions between any number of communication endpoints 101A-101N.

The one or more security policies 105 may or may not be rules or policies that define that the security events are to be managed, displayed, communicated, and so forth. One or more security policies 105 may be downloaded to the communication endpoint 101 with the security manager 104.

Network interface 106 may be any hardware that cooperates with firmware / software that may communicate on network 110, or may include any hardware. For example, the network interface 106 may be an Ethernet interface, a cellular interface, a fiber optic interface, a wireless interface, a WiFi interface, an 802.11 interface, and / or a wired interface. The network interface 106 may be implemented using any one or more of the following protocols: Internet Protocol, Transport Protocol (TCP), User Datagram Protocol (UDP), SIP, proprietary protocol, video protocol, IM (Instant Messaging) protocol, WebRTC .323 and / or Voice over IP (VoIP).

The network 110 may comprise one or more of the following: an Internet, a wide area network (WAN), a local area network (LAN), a Voice over IP network (VoIP), a public switched telephone network (PSTN), a packet switched network, a circuit switched network, Or any combination of communication devices capable of transmitting and receiving the same electronic communication. The network 110 may use various electronic protocols such as Ethernet, Internet Protocol (IP), Session Initiation Protocol (SIP), Integrated Services Digital Network (ISDN), and / or proprietary protocols. Thus, the network 110 is an electronic communications network configured to deliver messages via packet and / or circuit-switched communications.

Policy server 120 may be or may comprise any hardware capable of cooperating with software capable of managing secure communications. The policy server 120 further includes a policy manager 121 and a network interface 106. Policy manager 121 may be or may include any hardware / software capable of managing secure communications. The policy manager 121 further includes a security manager 104 and one or more security policies 105. The security policy 105 of the policy manager 121 may include the same or different policies for each of the communication endpoints 101A-101N. Policy manager 121 may download security manager 104 and / or security policy 105 to each (or selected) of communication endpoints 101A-101N. Although not shown, the policy manager 121 may include other modules such as an encryption module.

The sensor (s) 130 may be a radio frequency identification (RFID), a card reader, a Global Positioning Satellite (GPS) locator, a camera, a barcode scanner, a Bluetooth beacon or similar device, a voiceprint identification system, And may be any sensor used to identify an event, such as a communication stream analyzer. For example, the sensor 130 may be a card reader in a conference room. The sensor 130 may include other types of sensors such as a door sensor (e.g., door opening and closing), a detector for detecting a person in a nearby area, a motion sensor alert outside the conference room, and / or a Global Positioning Satellite . ≪ / RTI > For example, an event may be that a call is considered unsafe as long as the room is open and / or the call is unsecured if the room is open.

Sensor (s) 130 are shown as being separate from communication endpoint 101 and policy server 120. However, in some embodiments, the sensor (s) 130 may reside in the communication endpoints 101A-101N and / or the policy server 120. [ For example, sensor 130 may be a video camera or touch screen within communication endpoint 101A.

For illustrative purposes, the following exemplary description relates to a communication session between communication endpoints 101A and 101B. Although not shown, a communication session can be established using a network element such as a proxy server. A communication session may be a communication session between two or more communication endpoints 101A and 101B. The communication session may be a voice, video, multimedia or instant messaging (IM) communication session. Policy manager 121 downloads security manager 104 and security policy 105 to communication endpoints 101A-101B. The downloaded security policy 105A may be different from the downloaded security policy 105B.

The communication endpoint 101A establishes a peer-to-peer communication session to the communication endpoint 101B. Once a peer-to-peer communication session is established between the communication endpoints 101A-101B, the security manager 104A determines the event that changes the security of the communication session. The event is determined based on the security policy 105. In response to determining an event that changes the security of the communication session, the communication endpoint 101A sends the modified security level to the communication endpoint 101B.

For purposes of illustration, assume that a voice call is established between communication endpoints 101A-101B. For example, SIP is used to establish a SIP voice call (e.g., communication endpoint 101A sends a SIP INVITE, receives a SIP 200 OK, and sends a SIP ACK). Security policy 105A defines whether one of the communication devices 101A-101B activates a speakerphone whose call is deemed unsafe. The user of communication endpoint 101A activates the speakerphone of communication endpoint 101A. In response, the communication endpoint 101A sends a communication SIP UPDATE message to the communication endpoint 101B indicating a change in the security level of the communication session (the SIP update is more secure than the out-of-dialog SIP message) SIP message). A change in security is that the communication session is not currently secure. Communication endpoint 101B displays a message indicating that the call is unsafe because the user of communication endpoint 101A uses the current speakerphone. If the communication endpoint 101N is also in a call state, the communication endpoint 101A may also send a message to the communication endpoint 101N indicating that the call is unsecured.

In one embodiment, the sensor 130 may send an event to one or more communication endpoints 101. For example, sensor 130 may be an RFID scanner in a video conference room that includes communication endpoint 101A. When an unauthorized person for a video call enters the conference room during a video call (e.g., by scanning his or her RFID card), the RFID card may send an event to the communication endpoint 101A. In response to the RFID event, the communication endpoint 101A may send a message to the other communication endpoint 101 in the call indicating that the video call is currently unsafe because a person not authorized for the video call is in the conference room .

2 is a block diagram of a second exemplary system 200 for providing a secure state during a communication session in a centralized environment. The second exemplary system 200 includes communication endpoints 101A-101N, network 110, communication manager 220 and sensor (s) In this embodiment, the communication endpoints 101A-101N include a processor 102, a display 103 and a network interface 106. [

The communication manager 220 may be any hardware capable of being combined with software / firmware capable of establishing a communication session such as a private branch exchange, a central office switch, a router and / or a proxy server, Or may include. The communication manager 220 further includes a policy manager 221 and a network interface 106.

The policy manager 221 may be or may include any hardware / software capable of managing the security of the communication session. The policy manager 221 further includes a security manager 204 and a security policy 205. Although not shown, the policy manager 221 may include other modules, such as an encryption module.

The security manager 204 is similar to the security manager 104. However, in this embodiment, the security manager 204 is a centralized security manager 204. The security manager 204 manages security for two or more communication endpoints 101A-101N. Although not shown, the security manager 204 may be distributed. For example, security manager 204 may reside in communication manager 220 and communication endpoints 101A-101N. Alternatively, the security manager 204 may reside separately from the communication manager 130. For example, in the policy server 120. In one embodiment, the security manager 204 is a Back-to-Back User Agent (B2BUA) that is sequenced into the call / media flow of the communication session.

For purposes of explanation, the following exemplary description is for a communication session established between communication endpoints 101A and 101B via communication manager 220. [ However, a communication session may be established between two or more communication endpoints 101A-101N.

A communication session is established between communication endpoints 101A-101B. Once the communication session is established, the communication manager 204 determines the event that changes the security of the communication session between the communication endpoints 101A-101B. In response, the security manager 204 sends a message to the communication endpoint 101A-101N indicating that the security level has changed.

For example, let's look at an event where the speakerphone is active. After the communication session between the communication endpoints 101A-101B is established through the communication manager 220, the user of the communication endpoint 101A activates the speakerphone of the communication endpoint 101A. The status of the activated speakerphone is transmitted to the security manager 204 by the communication end point 101A. In response to the security policy 205 indicating that the call is not secure when one of the communication endpoints 101A-101B is on the speakerphone, the security manager 204 determines that the security of the communication session has changed. As a result, the security manager 204 sends a message to all of the communication endpoints 101A-101B indicating that the security of the communication session is currently insecure.

3 is a flow diagram of a process for providing a secure state during a communication session. Illustratively, communication endpoints 101A-101N, display 103, security manager 104/204, network interface 106, policy server 120, policy manager 121/221, communication manager 220 ) And sensor 130 may be embodied in a computer, processor 102, and computer, or any combination thereof, that performs the methods described herein and the methods described herein by executing program instructions stored in non-volatile computer readable storage media, Use the same stored program control entity. Although the methods shown in Figures 3 and 4 are shown in a particular order, those skilled in the art will recognize that the steps of Figures 3 and 4 may be implemented and / or implemented in a different order or in a multi-threaded environment . Also, various steps may be deleted or added based on the implementation.

The process of Figures 3 and 4 will operate for the embodiment described in Figures 1 and 2. [ The process begins at step 300. A communication session is established between two or more (multiple) communication endpoints 101 in step 302. For example, an encrypted communication session is established between communication endpoints 101A-101N.

The security manager 104/204 determines in step 304 whether an event has been received or detected. In step 304, the security manager 104/204 may receive events from one of the sensors 130, other devices and / or applications. The security manager 104/204 may locally detect the event at step 304 via a speaker, camera, or the like.

The event may be any event that can change the security level of the communication session. For example, the event may be that the speakerphone is activated or deactivated at communication endpoint 101. An event may be that a high signal to noise ratio is detected in the audio stream of one or more communication endpoints 101. [ For example, if the background noise of the caller is high, it may indicate that the person is in an area where another person can listen to or view a video or video communication session. Alternatively, detecting a low signal-to-noise ratio in an audio stream (formerly high signal-to-noise ratio) may now indicate that the call may be secure. The event may be that the wireless headset is connected to or disconnected from the communication endpoint 101. The connection of the wireless headset can make the call unsafe because someone unauthorized can use the headset or the user can move to an unsafe position while wearing the headset. Also, the wireless headset is typically not encrypted at all or is too weakly encrypted to secure the wireless stream. The wireless headset may use a different level of encryption than the encryption used by the communication session. This results in a less secure communication session. Other events include visual detection of persons leaving the security zone, people entering the security zone, persons entering the non-security zone, persons leaving the non-security zone, others in the room, unidentified or unauthorized face- (detection of a specific sound) (dog bark, automobile sound, etc.), detection of an unknown voice (detection of a voice), detection of a voice of another person who is speaking Detection of unauthorized voice print, detection of local recording at one of the communication endpoints 101, communication endpoint 101 deviating from the secure area and / or communication endpoint 101 entering the secure area, .

If an event is not received in step 304, the process determines in step 306 whether the communication session is terminated. If the communication session is terminated at step 306, the process ends at step 308. If the communication has not been terminated, the process proceeds to step 304 in step 306.

If an event is received or detected in step 304, the process determines in step 310 whether the security level has changed due to the event. The change in security level due to an event is based on security policy 105/205. The event may be specific to the communication endpoint 101. For example, a user of communication endpoint 101A may cause a change in security if communication endpoint 101 is on a speakerphone (unsecured). However, if communication endpoint 101B is on a speakerphone, communication endpoint 101B may not result in a change in security level. For example, the communication endpoint 101B may be in a secure conference room where it is considered safe to be on the speakerphone. In a peer-to-peer environment, communication endpoints 101A-101N may have different security policies 105A-105N. In a centralized environment, each of the communication endpoints 101A-101N may have a separate security policy 205. In some embodiments, all of the communication endpoints 101A-101N may use a single security policy 105/205. In some embodiments, only a subset of communication endpoints 101 may have an associated security policy 105/205.

If the security level is not changed in step 310, the process proceeds to step 306. When the security level is changed in step 310, the security manager 104/204 sends the changed security level via the network interface 106 to the communication endpoint (s) 101 of the communication session in step 312 do. The communication endpoint 101 displays the security level to the participants of the communication session. For example, a security LED may be turned on or off to communicate whether the communication session is secure.

In the process of Figure 3, step 304 is shown to occur after the communication session is established. However, in some embodiments, step 304 may occur during establishment of the communication session. For example, if the caller speaks in an insecure location, this indicates that the call is unsafe. However, the security level may be changed based on other messages / information not communicated with the regular call message (as described in step 310). For example, it is based on a calendar event indicator that indicates if the location is actually safe. Alternatively, other events that may occur during the establishment of the communication session include automatic speakerphone events (speakerphone is automatically used), detection of local recording and / or similar events when the user's headset is connected during establishment of the communication session .

Figure 4 is a flow diagram of a process for managing security policy 105/205. The process of FIG. 4 extends from step 310 of FIG. After the event is received or detected in step 304, the security manager 104/204 obtains the security policy (s) 105/205 in step 400. [ The security manager 104/204 determines in step 402 if the event is defined in the security policy (s) 105/205. If the event is not defined or the security level is not changed in step 402, the process proceeds to step 306. [

If an event is defined and the security level is changed, the security manager 104/204 determines in step 404 how the event affects the security level of the communication session based on the security policy (s) 105/205 do. The manner in which an event affects the security level can be defined in a variety of ways, such as making a communication session secure or unsecured. Alternatively, the security level may have multiple levels, such as safe, potentially unsafe, unsafe. In one embodiment, a numerical range (e.g., 1-10) is used to indicate the used security level. The security level may be based on a plurality of events. For example, a communication session may not be considered insecure until the two communication endpoints 101 have a high signal-to-noise ratio. Alternatively, the security level may be gradually changed. For example, the communication session may be determined to be unsafe when it is determined that the first communication endpoint is on the speakerphone, potentially unsafe, and more than one communication endpoint 101 is on the speakerphone.

The security manager 104/204 creates a message based on the security policy (s) 105/205 at step 406. [ The message may vary depending on the implementation. For example, the message can turn the security LED on or off. Alternatively, the message may be based on a descriptive text message, such as text messages 500A-500N in FIG. In one embodiment, the message may vary based on the ability of the communication endpoint 101 to receive the message. For example, the message sent to the communication endpoint 101A may be to turn off the security LED, and the message sent to the communication endpoint 101B may be to display the message 500A.

The security manager 104/204 determines at step 408 the communication endpoints 101A-101N to send a change in security level based on the security policy (s) 105/205. For example, the security manager 104/204 may send a message only to the communication endpoint 101A, which is the communication endpoint 101A of the moderator of the communication session. The process then proceeds to step 312.

FIG. 5 is a diagram of an exemplary display 103 of a secure message on a communication endpoint 101. FIG. Display 103 includes security messages 500A-500N. The messages shown in Figure 5 are examples of events that may occur during one or more communication sessions. Those skilled in the art will appreciate that the secure message 500 may be displayed in various forms for any event described herein.

Security message 500A is for an active speakerphone event. Security message 500A indicates that the user 'Jane Doe' activates her speakerphone to insure that the security level is not secure. The identity of the user may be captured in a variety of ways, such as using caller ID, voice recognition, face recognition, and / or RFID card scanning.

Security message 500B is for a disabled speakerphone event. The security message 500B indicates that the user 'Jane Do' has disabled her speakerphone and that the security level is secure.

Security message 500C is for an event of a wireless headset connection. Security message 500C indicates that the user ' Fred Smith ' connects to the wireless headset and the security level is potentially unsafe.

Security message 500D is for an unauthorized user event. The security message 500D indicates that 'Wilma Jones' enters the conference room 500A-1. The security manager 104/204 has a list of participants that may be on the call. In this example, 'Wilma Jones' is not on the list, so the security level is potentially unsafe.

Security message 500E is for a high signal-to-noise ratio event. Security message 500E indicates that the audio stream to communication device 101 associated with 'Jack Hammer' has a high signal-to-noise ratio and thus the security level is not potentially secure.

Security message 500F is for an event where the caller leaves the secure location. Security message 500F indicates that the caller from endpoint 123-456-7890 has left the secure location (e.g., based on the GPS location of the mobile phone) and the security level is not secure.

Security message 500G is for the second person's event at the call location. For example, security policy 105/205 may indicate that only a single user ('Jim Williams') is allowed to talk at his communication endpoint (101). The second person can be detected through voice print recognition, audio detection of a second person, video detection of a second person, and voice print recognition. As a result, the security level is set to unsafe.

Security message 500H is for an unrecognized pace print event. Security message 500H indicates that the security level is not secure because the caller of telephone number 111-222-3333 has an unrecognized faceprint.

Security message 500N is for a specific sound event. In this example, the specific sound is traffic noise. Security message 500N indicates that security level 104 is potentially unsafe because security manager 104/204 detects traffic noise in the audio stream of " Fred Smith ".

The communication sessions and messages of FIGS. 1-5 may be implemented using various communication protocols such as SIP, Web Real-Time Protocol (WebRTC), H.323, TCP / IP UDP / IP, video protocols, . Certain message types may be used. For example, the SIP SUBSCRIBE / SIP NOTIFY, SIP PUBLISH, and SIP OPTIONS messages may be used to send the secure message 500.

Of course, various changes and modifications to the above-described exemplary embodiments will be apparent to those skilled in the art. Such changes and modifications may be made without departing from the spirit and scope of the systems and methods, and without diminishing the attendant advantages. The following claims specify the scope of the invention. Those skilled in the art will appreciate that the various functions described above may be combined in various ways to form various modifications of the invention. As a result, the invention is not limited to the specific embodiments described above, but is limited only by the following claims and equivalents thereof.

Claims (20)

The method comprising the steps of: determining whether an event alters the security of a communication session between a plurality of communication endpoints, the event changing the security of a communication session between the plurality of endpoints, Occurs after a communication session is established -
Responsive to a determination that the event alters the security of a communication session between the plurality of communication endpoints, sending a modified security level indication to at least a first one of the plurality of communication endpoints
Way.
The method according to claim 1,
Wherein the determination that the event alters the security of a communication session between the plurality of communication endpoints is determined at a second communication endpoint of the plurality of communication endpoints and wherein the second one of the plurality of communication endpoints And transmitting a modified security level to at least the first communication endpoint of the plurality of communication endpoints
Way.
3. The method of claim 2,
Further comprising downloading a security manager and a security policy to the second one of the plurality of communication endpoints
Way.
3. The method of claim 2,
Downloading a security manager to the first communication endpoint and the second communication endpoint of the plurality of communication endpoints,
Downloading a first security policy to the first one of the plurality of communication endpoints;
Further comprising downloading a second security policy to the second one of the plurality of communication endpoints,
Wherein the first security policy is different from the second security policy
Way.
The method according to claim 1,
Wherein a determination is made by the centralized security manager that the event alters security of a communication session between the plurality of communication endpoints and wherein the centralized security manager transmits a modified security level to at least the first communication Send to the endpoint
Way.
6. The method of claim 5,
The centralized security manager is a back-to-back user agent (B2BUA)
Way.
The method according to claim 1,
Wherein the event is one in which the speakerphone is activated or deactivated in one of the plurality of communication endpoints
Way.
The method according to claim 1,
The event
Determining a high signal to noise ratio in an audio stream of one of the plurality of communication endpoints,
Determining a low signal-to-noise ratio in the one of the plurality of communication endpoints;
Determining whether to connect or disconnect the wireless headset to the one of the plurality of communication endpoints
At least one of
Way.
The method according to claim 1,
The event
Determining a person leaving the security area,
Determining the person entering the secure area,
Visual detection of other people in the room,
Detection of unrecognized or unauthorized face print,
Audio detection of said person's speech,
Detection of an unknown or unauthorized voice print,
Detection of a specific sound,
Detecting a local recording at one of the plurality of communication endpoints,
Detecting one of the plurality of communication end points deviating from the secure area,
The door opened,
With the door closed,
Detecting a person in a nearby area,
Motion sensor alarms outside the conference room,
GPS (Global Positioning Satellite) criteria for location,
Detecting one of the plurality of communication endpoints entering the secure area
At least one of
Way.
The method according to claim 1,
The step of transmitting the changed security level may be modified based on a Session Initiation Protocol (SIP) UPDATE message
Way.
A security manager configured to determine whether an event alters the security of a communication session between a plurality of communication endpoints, the event comprising: communication between the plurality of communication endpoints during the establishment of the communication session or after the communication session is established; Changes the security of the session - and,
And a communication interface configured to transmit a modified security level indication to at least a first one of the plurality of communication endpoints in response to a determination that the event alters the security of the communication session between the plurality of communication endpoints doing
system.
12. The method of claim 11,
Wherein determining whether the event alters the security of a communication session between the plurality of communication endpoints is determined at a second one of the plurality of communication endpoints, Transmits the modified security level to at least the first communication endpoint of the plurality of communication endpoints
system.
13. The method of claim 12,
Further comprising a policy manager configured to download the security manager and the security policy to the second one of the plurality of communication endpoints
system.
13. The method of claim 12,
Downloading the security manager to the first communication endpoint and the second communication endpoint of the plurality of communication endpoints, downloading a first security policy to the first one of the plurality of communication endpoints, Further comprising a policy manager configured to download a second security policy to the second one of the plurality of communication endpoints,
Wherein the first security policy is different from the second security policy
system.
12. The method of claim 11,
Wherein determining whether the event alters the security of a communication session between the plurality of communication endpoints is determined at a centralized security manager and wherein the centralized security manager is configured to determine at least one of the plurality of communication endpoints And transmits the changed security level
system.
16. The method of claim 15,
The centralized security manager is a back-to-back user agent (B2BUA)
system.
12. The method of claim 11,
Wherein the event is one in which the speakerphone is activated or deactivated at one of the plurality of communication endpoints
system.
12. The method of claim 11,
The event
Determining a high signal-to-noise ratio in an audio stream of one of the plurality of communication endpoints,
Determining a low signal-to-noise ratio in the one of the plurality of communication endpoints;
Determining whether to connect or disconnect the wireless headset to the one of the plurality of communication endpoints
At least one of
system.
12. The method of claim 11,
The event
Determining a person leaving the security area,
Determining the person entering the secure area,
Visual detection of other people in the room,
Detection of unrecognized or unauthorized faceprints,
Audio detection of said person's speech,
Detection of an unknown or unauthorized voice print,
Detection of a specific sound,
Detecting a local recording at one of the plurality of communication endpoints,
Detecting one of the plurality of communication end points deviating from the secure area,
The door opened,
With the door closed,
Detecting a person in a nearby area,
Motion sensor alarms outside the conference room,
GPS (Global Positioning Satellite) criteria for location,
Detecting one of the plurality of communication endpoints entering the secure area
At least one of
system.
18. A non-transitory computer readable medium storing instructions that, when executed, cause a processor to perform a method,
The command
Instructions for determining if an event alters the security of a communication session between a plurality of communication endpoints, the event changing the security of a communication session between the plurality of endpoints, while the communication session is established, And -
And sending a modified security level indication to at least a first one of the plurality of communication endpoints in response to a determination that the event alters the security of the communication session between the plurality of communication endpoints
Non-transitory computer readable medium.

Images