WO2007036399A1

WO2007036399A1 - Method and device for blocking reception of unwanted messages in an ip communication network

Info

Publication number: WO2007036399A1
Application number: PCT/EP2006/065503
Authority: WO
Inventors: Joachim Charzinski
Original assignee: Nokia Siemens Networks Gmbh & Co. Kg
Priority date: 2005-09-28
Filing date: 2006-08-21
Publication date: 2007-04-05
Also published as: DE102005046376A1; DE102005046376B4

Abstract

The invention relates to a method for blocking reception of unwanted messages, particularly spam over Internet telephony (SPIT) messages, in an IP communication network. According to said method, a connection request is transmitted to a terminal of a second user by a terminal of a first user in order to establish a communication link, a transaction number being transmitted to the terminal of the second user by the terminal of the first user during the connection request in order to prove his/her trustworthiness.

Description

description

Method and apparatus for preventing the reception of unwanted messages in an IP communication network

The invention relates to a method and a device for preventing the reception of unwanted messages, in particular so-called spam over Internet telephony messages, abbreviated SPIT messages, in an IP communication network.

The term "spamming" refers to the mass sending of unwanted messages ("spam"). "Spamming" benefits from easy and affordable access to electronic media, which can usually be used to send messages to a large number of recipients at low cost and time, and the content of such "spam" messages is often more commercial "Spam" is the most prevalent type of "spam." A very well-known form of "spam" is mass mailing of e-mails for advertising purposes. In addition to e-mail "spam" there are other forms such as "spam" regarding instant messaging, Usenet newsgroups, WWW search engines, weblogs or mobile communications.

As already mentioned "spam" is favored by the fact that the

Cause "spamming" to almost no effective cost apart from managing email addresses by "spamming." In addition to the obvious disadvantages of sending unsolicited messages to recipients, "spamming" causes now high costs that are borne by the general public. These are on the one hand indirect costs that arise, for example, through loss of productivity or overcrowded electronic mailboxes. Furthermore, the respective infrastructure providers concerned, such as Internet Service Providers (ISP), incur costs: Frequency π rr iqf P i np Au fqfnr Vn n π ή (r r r r r r rp p pn Vana 7 it t pn nnf wpn - because the available bandwidths are no longer sufficient to handle the flood of "spams".

Although "spamming" is outlawed by the general public and the legal situation in Germany and other countries is currently being adjusted, "spamming" tends to increase as the hurdle for this type of message delivery is very low.

With the increasing use of Internet telephony (Voice over IP, VoIP for short), it is expected that VoIP subscribers will increasingly be exposed to so-called SPIT (SPAM over Internet telephony). Currently, calls to conventional Public Switched Telephone Network (PSTN) subscribers are normally always charged to the caller. Calls to VoIP subscribers, on the other hand, can be conducted almost free of charge for the caller due to the deviating billing model, which can be expected to generate a massive amount of SPIT for the future. In particular, the ability to send recorded voice files in bulk at virtually no cost to the sender may be interesting for advertisers. It can be assumed that the affected VoIP subscribers will ask their respective VoIP provider for appropriate measures to be protected against unwanted calls.

While in the PSTN connections are circuit-switched or can be made in the mobile identification via the SIM card of the caller, an identification of a caller in the IP telephony is problematic: The communication between two participants takes place here only virtually from end to end, since these are packet-switched connections.

As a countermeasure against SPIT, so-called white lists are used. A whitelist contains for a participant X subscriber-specific information on such other participants Y in the communication network that has been classified as trustworthy and thus authorized to call subscriber X.

The use of white lists, however, complicates an initial contact between two participants and thus reduces a significant advantage that public IP communication networks, for example, have over private peer-to-peer organizations on the Internet.

The object of the invention is to provide a method and a device for preventing the reception of unwanted messages in an IP communication network.

This object is achieved by the features of claim 1 with regard to the method and by the features of claims 8 and 11 with respect to the devices. Further developments of the invention are specified in the subclaims.

The invention relates to a method for preventing the reception of unwanted messages, in particular so-called spam over Internet telephony messages, abbreviated SPIT messages, in an IP communication network, accordingly from a terminal of a first subscriber for the purpose of establishing a communication connection, a connection request to a Terminal of a second subscriber is transmitted, being transmitted from the terminal of the first subscriber to prove its trustworthiness in the course of the connection request, a transaction number to the terminal of the second subscriber and the connection request is accepted only if the transaction number is valid.

Furthermore, the invention relates to a device for carrying out the illustrated method.

The invention has the advantage that the reception of unwanted messages is considerably reduced. An embodiment of the invention is illustrated in the drawings and will be described in more detail below.

Show it:

Fig. 1: A method for transmitting a transaction number by Cha11enge response transmission

Fig. 2: A method for transmitting a transaction number with immediate entry of the transaction number

Fig. 3: Method with not transmitted transaction number

4 shows a method for transmitting a transaction number for a negative transaction number

5 shows a method for transmitting a transaction number by means of an interception box

6 shows a method for transmitting a transaction number by means of an interception box and server system TPS

FIG. 1 shows an embodiment of the inventive method with a first subscriber A and a second subscriber B. FIG. 1 illustrates the basic method with integration of the transmission of a transaction number into the SIP connection setup, whereby the input of the transaction number is performed manually by the first subscriber Participant A over one

Numeric keypad is made. As part of a business contact, the second participant B hands over in step 1 to his business partner, the first subscriber A, a business card with a printed transaction number, which entitles the first subscriber A to a one-time call. At a later time, represented in step 2, the first subscriber A starts a connection attempt to the second subscriber B, in which the first subscriber A dials the telephone number of the second subscriber B. The terminal of the second subscriber B equipped with a list of valid transaction numbers sends back in step 3 a SIP response "409 TAN required" to the terminal of the first subscriber A and sends a challenge according to the challenge-response method. ge value x for encrypting the transaction number with. Alternatively, the list of valid transaction numbers may be stored on a signaling entity in the communication network. In step 4, the first subscriber A enters the transaction number printed on the business card via a number pad in his terminal. The terminal of the first subscriber A encrypts the entered transaction number using the challenge value x and in step 5 transmits the result y in an INVITE message in an additional header to the terminal of the second subscriber B. After the second subscriber B transmits the message received in step 6, the validity of the transaction number is checked against the list of valid transaction numbers. If the transmitted transaction number is valid, this transaction number is deleted from the list of valid transaction numbers in step 7 and the call is signaled to the second subscriber B by a ringing tone. In one embodiment of the invention, in the case of a valid transmitted transaction number, subscriber-specific data relating to the first subscriber A are stored in a whitelist of the second subscriber B, ie in a list associated with the second subscriber B for the administration of subscriber-specific data of trusted subscribers. After the second party B has answered the call, the telephone conversation is performed in step 8.

In a further embodiment of the invention, the first subscriber A does not transmit a valid transaction number in step 4. In this case, the terminal of the second subscriber B forwards the call, for example, to an answering machine (see steps 2 and 3, FIG. 3). Alternatively, the call is rejected in the case of an invalid transaction number.

In a further embodiment of the invention, the INVITE message is acknowledged in step 3 by the terminal of the second subscriber B with the SIP response "407 Proxy Authorization Required", whereupon the first subscriber A delivers the challenge information x supplied with this SIP reply used to encrypt the transaction number. Optionally, instead of the SIP response "407 Proxy Authorization Required", an alternate SIP response may be used.

Figure 2 shows an embodiment of the inventive method for transmitting a transaction number with immediate entry of the transaction number. In the event that no call-response procedure is required, the transaction number x is transmitted in step 2 simultaneously with the telephone number of the second subscriber B. In step 3, the terminal of the second party B checks the transmitted transaction number x and accepts the call if the transaction number x is valid. The further course of the method corresponds to that shown in FIG.

FIG. 3 shows an embodiment of the method according to the invention for the case where the first subscriber A does not transmit a transaction number. In step 1, the first party A calls the second party B. The absence of the transaction number in the respective transmitted INVITE message is recognized in step 2 by the terminal of the second subscriber B and the call is diverted to an answering machine in step 3, for example.

FIG. 4 shows an embodiment of the method according to the invention in the case of a negative transaction number. For example, the second subscriber B carries, in addition to the list of valid transaction numbers, a second list of negative transaction numbers, ie transaction numbers that are invalid and thus in the case of transmission in the course of a transmission Communication attempts lead to a rejection of the communication attempt. If the first subscriber A transmits a negative transaction number x in the course of a communication attempt in step 2, the terminal after checking the transaction number x in step 3 returns the relevant call in step 4. Alternatively, the communication attempt in question in step 4, for example, be redirected to an answering machine. Another age native provides to store subscriber-specific data of the first subscriber A in the case of transmission of a negative transaction number x in a list associated with the second subscriber B to manage subscriber-specific data for untrusted subscriber (English Black list) to recognize future communication attempts of the first subscriber A. and reject it. Advantageously, negative transaction numbers can be used, for example, to reject unwanted business contacts by, for example, distributing a business card printed with a negative transaction number in step 1. After its first use, the negative transaction number x preferably remains on the list of negative transaction numbers, so that this transaction number x can continue to be used to reject unwanted calls.

Figure 5 illustrates an embodiment of the inventive method, wherein the terminal of the second subscriber B an Interception Box IB is connected upstream.

Steps 1 and 2 correspond to the previously described variants of the method according to the invention. In step 3, the interception box IB generates an outgoing message which is transmitted to the first subscriber A. The content of the announcement text is, for example, a request to enter a transaction number. In step 4, the first party A transmits the requested transaction number x. This can be done for example by means of a tone dialing. The interception box IB takes over the verification of the transmitted transaction number x in step 5. In the case of a valid transaction number x, the interception box IB forwards the call in step 6 to the terminal of the second party B, wherein the first caller A an internal dial tone is signaled. The second subscriber B, the incoming call is signaled by a bell, for example. In step 7, the second party B receives the conversation. The interception box IB deletes the transaction number x transmitted by the first subscriber A from the List of valid transaction numbers. Optionally, subscriber-specific data relating to the first subscriber A are stored in the whitelist of the second subscriber B. In the case of an invalid transaction number x, in a further variant of the inventive method, for example, a rejection of the communication attempt or alternatively the diversion to, for example, an answering machine. Optionally, the Interception Box IB can be connected via an interface to a data device for managing lists of valid transaction numbers. Another option for generating and transmitting valid transaction numbers is a software program that automatically generates valid transaction numbers and, for example, enters the list of valid transaction numbers and an e-mail at the same time, through which the recipient of the e-mail has the option of sending the sender of the e-mail E-mail to reach by phone.

FIG. 6 shows an embodiment of the method according to the invention, in which the variant illustrated in FIG. 5 additionally has a network-based server system TPS for checking a

Transaction number is extended. Steps 1 to 4 in the variant of the presented method shown in FIG. 6 proceed according to steps 1 to 4 of FIG. 5. In step 5, the interception box IB sends the transaction number transmitted by the first subscriber A to the

Server system TPS. In step 6, the server system TPS checks the validity of the transmitted transaction number. In the case of a valid transaction number, the server system TPS sends in step 7 a positive response to the interception box IB. The following steps 8 and 9 correspond to steps 6 to 7 of FIG. 5. In the case of an invalid transaction number, the server system TPS transmits a negative response to the interception box IB, which then rejects the communication attempt or optionally redirects the call to an answering machine.

In one embodiment of the invention, the interception box IB manages the whitelist of the second subscriber B. In the case of In the case of a positive response from the server system TPS in step 7, the interception box IB stores subscriber-specific data relating to the first subscriber A after receiving the positive answer in the white list.

In a further embodiment of the invention, the connection establishment takes place between the interception box IB and the server system TPS by means of a trust relationship, preferably via public key infrastructure, abbreviated PKI or alternatively based on a shared secret method.

In a further embodiment of the invention, the verification of the transmitted transaction number is performed by a service provider.

In a further embodiment of the invention takes place in the case of transmission of an invalid transaction number in the course of a communication attempt by the first party A an entry in the second participant B associated list for the management of subscriber-specific data posted untrusted participants (English Black list).

In a further embodiment of the invention, the entry of subscriber-specific data relating to the first subscriber A into the black list of the second subscriber B takes place after a previously determined maximum number of communication attempts rejected due to invalid transaction numbers. This advantageously prevents the first subscriber A from trying out a large number of transaction numbers in the course of a large number of communication attempts.

Claims

claims

1) A method for preventing the receipt of unwanted messages, in particular so-called spam over Internet Telephony messages, abbreviated SPIT messages, in an IP communication network, accordingly from a terminal of a first subscriber (A) for the purpose of establishing a communication connection, a connection request is transmitted to a terminal of a second subscriber (B), characterized in that a transaction number is transmitted from the terminal of the first subscriber (A) to prove its trustworthiness in the course of the connection request to the terminal of the second subscriber (B) ,

2) A method according to claim 1, characterized in that a check of the transmitted transaction number made by a comparison with the second participant (B) associated list of valid transaction numbers and the transaction number is either valid or invalid, in the case of valid as one transaction number, this transaction number is deleted from the list of valid transaction numbers after the communication connection has been terminated.

3) Method according to claims 1 to 2, characterized in that accepted in the case of a validated as a transaction number, the connection request and the communication connection is established.

4) Method according to claims 1 to 2, characterized in that the connection request is rejected in the event of a negative or invalidated transaction number.

5) Method according to claim 3, characterized in that

Sender data (D) of the first subscriber (A) in one stored list for managing subscriber-specific data, English White list, trusted subscriber.

6) Method according to claim 4, characterized in that sender data (D) of the first subscriber (A) in a second subscriber (B) associated list for the management of subscriber-specific data posted untrustworthy participants, English Black list, are stored.

7) Method according to claim 4, characterized in that

Sender data (D) of the first subscriber (A) after a predetermined maximum number due to invalid transaction numbers rejected communication attempts in the second participant (B) associated list for managing subscriber-specific data regarding untrustworthy participants, English Black list stored.

8) Device for preventing the reception of unwanted messages, in particular so-called spam over Internet telephony messages, abbreviated SPIT messages, in an IP communication network with means for transmitting a connection request for the purpose of establishing a communication connection from a terminal of a first subscriber (A) to a terminal of a second party (B), characterized by

Means for transmitting a transaction number in the course of the connection request from the terminal of the first subscriber (A) to the terminal of the second subscriber (B).

9) Apparatus according to claim 8, characterized in that it is a subscriber terminal upstream communication device. 10) Device according to claim 8, characterized in that it is a telephone.

11) Device having means for storing the list for managing subscriber-specific data concerning trusted subscribers.

12) Device according to claim 11, characterized in that it is a subscriber terminal.

13) Apparatus according to claim 11, characterized in that it is a server system in the IP communication network.