CA2341111C - Registering an ip phone with an ip phone switch - Google Patents

Abstract

A method and apparatus for registering IP phones with an IP phone switc h using access codes or personal identification numbers for authentication and for associating directory numbers to MAC addresses of IP phones.

Description

REGISTERING AN IP PHONE WITH AN IP PHONE SWITCH
Field of Invention This invention relates to Internet Protocol (IP) telephony and in particular to a method and apparatus for registering an IP phone with an IP phone switch.
Background of the Invention An IP phone switch is a phone system switch which has ports for connections to data networks to enable telephone connectivity and voice transport, and may to further include connections to a public switched telephone network (PSTNI.
A data network herein includes at least one of a local area network (LAN), a wide area network (WAN), and the global Internet. IP phone switches feature Voice over the Internet (VoIP) or IP telephony. VoIP is anticipated to replace the PSTN as the dominant voice transport system in due course.
The development of IP telephony has resulted in IP-based network telephone systems for enterprises. Such systems have 1P phones. Each IP phone is programmed with a unique Media Access C',ontrol (MAC) address that allows it to be recognized by the IP phone switch at any point in the network. Each IP phone and its associated communications server communicate over a local area network (LAN) using an IP
address (layer 3) and MAC address (layer 2). The IP phone switches are programmed with a list of valid MAC addresses and their associated telephone numbers, extension numbers or directory numbers. Typically such MAC addresses are manually entered into an IP phone switch.
The disadvantages of manual entry of MAC addresses include attendant keyboarding errors. and difficulty in re-associating the directory numbers with other MAC addresses when people move within an enterprise.
Summary of the Invention According to an aspect of the present invention, there is provided a method 3o and apparatus for registering IP phones with an IP phone switch using access codes or personal identification nurmbers for authentication and for associating directory numbers to MAC addresses of IP phones.
The advantages oil associating a directory number to a new IP phone by inputting an access code include permitting different access codes for different purposes such as an access code for initializing an IP phone for a limited time period;
permitting a directory or telephone number to travel with a person so that wherever the person may be he or she may receive telephone calls on the same telephone number; and relieving the administrator of the IP phone switch from having to manually input the MAC address or the IP address of the IP phone.
Brief Description of the Drawings The present invention will be described in detail with reference to the accompanying drawings, in which like numerals denote like parts, and in which Figure 1 illustrates <~n overview of a phone system including an IP phone switch and a plurality of IP phones;
Figure 2 illustrates some of the functional blocks of the IP phone switch shown in Figure 1;
Figure 3 is a data flow diagram showing registration of an IP phone according to the phone system of Figure 1;
Figure 4 is a data flow diagram showing registration of a previously registered IP phone according to the phone system of Figure 1;
Figure 5 is a daW flow diagram showing registration of a replacement IP
phone according to the phone system of Figure 1;
2o Figure 6 is a data flow diagram showing registration of an IP phone where an incorrect personal identification number has being provided according to the phone system of Figure 1;
Figure 7 illustrates an overview of an alternate phone system including an IP
phone switch connected to remote IP phones over the Internet.
Figure 8A illustrates an overview of another alternate phone system including an IP phone switch, an Administrator, and a plurality of IP phones; and Figure 8B illustrates some of the functional blocks of the Administrator shown in Figure 8A.
Detailed Description of the Preferred Embodiments Turning to Figure L, a phone system is shown which comprises of an IP phone switch 100 managing a plurality of IP phones 102 over a LAN 104. The phone system is also connectable to a PSTN 106 and to the Internet 108. The IP phone switch 100 routes and switches call traffic of the IP phones 102 over the PS'f'N 106 and the Interxiet 108, and betr~~een the IP phones 102.
Each IP phone 102 is an intelligent phone device that is uniquely identified by an associated Media Access ('ontrol address. When the IP phone 102 is powered, it establishes an IP socket with the IP phone switch 100 and uses Dynamic Host Configuration Protocol (DHCP) to obtain an IP address from the IP phone switch 100.
The IP phone 102 further supports the ability to prompt a user on its display to enter a personal identification number (PIN) and to forward the PIN to the IP phone switch 100. Further, the IP phone 1 G2 has a feature, which locks up (i.e. renders inoperable) the IP phone upon receiving a lock set command.
Referring to Figure 2, the IP phone switch 100 of Figure 1 is better illustrated.
As can be seen, IP phone switch 100 includes three primary functional blocks namely:
an IP phone service provider 202, a set registration process 204, and an OAM
(Operations, Administration and Maintenance) 206. The IP phone switch also includes a DHCP server 302 and a TFTP (Trivial File Transfer Protocol) server for establishing IP sockets The IP phone service provider 202, establishes an IP socket between the IP
phone 102 and the rest of the IP phone switch 100 to permit communications between the two entities.
The set registration process 204, obtains current database information from OAM 206 to determine which IP phones 102 have already been registered. This data is in the forn of a Physical Location Identifier (PLID), which is a 4 byte field that provides a unique database reference for each IP phone, the directory number (DN) assigned to the IP phone 102 and the MAC. address of the IP phone 102 (this field may be blank if an IP phone has not been registered). Upon IP phone 102 boot up, the set registration process 204 receives the MAC address from the IP phone 102 via the IP Phone Service Provider 202 to determine if the IP phone 102 needs to be registered. 'The set registration process 204 requests the IP phone 102 to display an IP
phone registration prompt and receive data input from a user if the IP phone 102 has not been registered.
The OAM 206 comprises a database that stores: the DN for each IP phone 102 against its PLID; an access code for registering an IP phone 102; a separate access code to override the current DN to IP phone relationship; a programmable threshold n, which disables the override access code when greater than n consecutive attempts to override fail due to an invalid access code; and the PLID to DN to IP phone relationship, which is based on the unique MAC address associated with each IP
phone 102 (PLID/lookup table).
Figure 3 shows a data flow for registration of an unregistered IP phone 102 on the IP phone switch 100 where a PIN has been assigned to a user, but a MAC
address has not been associated with the PIN. The composition of the PIN includes an access 1 o code and a DN.
To initialize the IP phone switch 100, the set registration process 204 requests 310 and receives 312 the information from the OAM 206 database for the lookup table. In order to boot-up the IP phone 102 for the IP phone switch 100, the IP phone 102 has to establish an IP soc:ket with the IP phone switch 100, and send a request 320 for registration to the IP phone switch 100. Specifically, the IP phone 102 communicates with the DI-IC'P server 302 to obtain an IP address for itself as shown at 314. The DHCP server 302 fiirther directs the IP phone 102 to get the necessary socket software from a 'Trivial File Transfer Protocol (TFTP) server 304. The IP
phone 102 downloads 316 and executes the software to establish the IP socket to the 2o IP phone service provider 202. The IP phone 102 then sends a request 318 for registration to the IP phone service provider 202, which includes its MAC
address and set type. The IP phone service provider 202 then sends an Open Port request 320 with the MAC address, the set type, and the IP address (associated information) to the set registration process 204 for registration of the IP phone 102.
The set registration process 204 upon receiving the Open Port request 320 checks the information against its lookup table of data shared with OAM 206 as shown at 322. In the present example of an unregistered IP phone 102, as there is no match 324 for the MAC address, the set registration process 204 sends a message to request a PIN 326, 328 from the user of the lP phone 102. The IP phone 102 in turn displays a message requesting the user to enter a PIN. Upon receipt of the PIN
from the user, the IP phone sends the PIN 330 to the IP phone service provider 204, which then sends an Open Port PIhd request 332 with the PIN and associated information to the set registration process 204. The set registration process 204 in turn sends a validation request 334 with the PIN and the MAC address to the OAM 206.
The (JAM 206, upon receipt of the validation request 334, strips the access code and DN from the PIN. The access code is then validated. The association of the 5 DN with the MAC address is set up in the OAM 206 for directing calls accordingly.
Upon completion of the set up, the OAM 206 sends a message, Valid PIN 336, to the set registration process 2014 indicating that the set is registered. The lookup table is then updated in both the OAM 206 and the set registration process 204.
To complete the registration, the 1P phone 102 is provided with strings, prompts, and information for operation in the phone system. The information includes the user's name. Specifically, the set registration process 204 sends an Open Port Ack 338 (Acknowledgement) to the IP phone service provider 202, which sends a registration acknowledgement 340 to the IP phone 102. Upon receipt of the registration acknowledgement 340, the IP phone 102 sends a Report Set ID (set type) 342 to the OAM 206.
The OAM 206 and the set registration process 204 then downloads strings and prompts 344 desired for operation of the II' phone 102 in the phone system and, at 346, further updates the IP phone display with any information desired to be displayed by the IP phone 102. It is noted that the strings and prompts downloaded to an IP
phone include a sequence (not shown) for a user to communicate with the IP
phone switch to change a directory number associated with the IP phone to another.
Figure 4 shows a data flow for registration of a previously registered IP
phone 102 on the IP phone switch 100. The IP phone switch 100 and the IP phone 102 are initialized and booted-up by processes 310 to 320 as previously described in reference to Figure 3. Once booted-up, the LP phone service provider 202 sends an Open Port request 320 with the MAC address, the set type, and the IP address (associated information) to the set registration process 204 for registration of the IP
phone 102.
Upon receiving the Open Port request 320, the set registration process 204 checks the information against its lookup table of data shared with OAM 206 as shown at 322,. In the present example, where the IP phone 102 has been previously registered, there is a match for the MAC address in the lookup table as shown at 410.

To complete the registration, the processes 338 to 346, as previously described in reference to Figure 3, are carried out.
Figure 5 shows a data flow for registration of an IP phone 102 on the IP phone switch 100 where the IP phone 102 is a replacement of a previous IP phone.
Further, a PIN has been assigned to the user for IP phone replacement. The MAC address of the previous IP phone has also been associated with the PIN in the IP phone switch 100. The IP phone 102 has riot been previously registered with the IP phone switch 100. The composition of the PIN includes an access code and a Directory Number (DN).
l0 The IP phone switch 100 and the IP phone 102 are initialized and booted-up by processes 310 to 320 as previously described in reference to Figure 3. Once booted-up, the IP phone service provider 202 sends an Open Port request 320 with the MAC address, the set type, and the 1P address (associated information) to the set registration process 204 for registration of the IP phone 102.
Upon receiving the Open Port Request 322, the set registration process 204 checks the information against its lookup table of data shared with OAM 206 as shown at 322. In this case of a replacement LP phone, as there is no match for the MAC address as shown at 510, the set registration process 204 sends a message 512, 514 to the IP phone 102 requesting a PIN from the user. The IP phone 102 displays the message requesting the user to enter a I'IN. When the PIN is received from the user, the IP phone 100 sends the information to the IP phone service provider 204 as shown at 516, which sends an Open Port PIN request 518 with the PIN and associated information to the set registration process 204. The set registration process 204 in turn sends a validation request 520 with the PIN and the MAC address to the OAM
206.
The OAM 206, upon receipt of the validation request 520, strips the registration access code and DN from the I'IN. The access code is validated.
The MAC address of the previous 1P phone is replaced with the MAC address of the replacement IP phone 102 in the OAM 206 for directing calls accordingly as shown at 522. The OAM 206 then sends a message, Valid PIN 524, to the set registration process 204 indicating that the new set is registered. The lookup table is updated in both the OAM 206 and the set registration process 204. To complete the registration, the processes 338 to 346, as previously described in reference to Figure 3, are carried out.
Figure 6 shows a dat<~ flow for registration of an unregistered IP phone 102 on the IP phone switch 100 where the IP phone 102 has not been previously registered with the IP phone switch 100 and where a user enters an incorrect, or fraudulent, PIN
into the IP phone 102 for registration. The IP phone switch 100 and the IP
phone 102 are initialized and booted-u.p by processes 310 to 320 as previously described in reference to Figure 3. Oncev booted-up, the IP phone service provider 202 sends an Open Port request 320 with the MAC address, the set type, and the IP address t0 (associated information) to the set registration process 204 for registration of the IP
phone 102.
Upon receiving the tJpen Port Request 320, the set registration process 204 checks the information against its lookup table of data shared with OAM 206 as shown at 322. In the present example of an unregistered phone, there is no match for the MAC address as shown at 610, so the set registration process 204 sends a message to the IP phone 102 requesting a PIN 612, 614 from the user. The IP phone 102 displays the message requesting the user to enter a PIN. Upon receipt of the PIN from the user, the IP phone 102 sends the PIN to the IP phone service provider 204 as shown at 616, which in turn sends an Open Port PIN request 618 with the PIN
and associated information to the set registration process 204. 'the set registration process 204 sends a validation rec~uf;st Ei20 with the PIN and the MAC address to the OAM
206.
The OAM 206, upon receipt of the validation request 620, strips the registration access code and DN from the PIN. As the PIN is incorrect, as shown at 622 the access code is not validated and the IP phone 102 registration attempt fails.
In addition, the OAM 206 tracks the number of consecutive failed registration attempts at 624. In the event that the number of consecutive failed registration attempts exceed a security threshold 626, the OAM 206 sends a lock set request to the set registration process 204, which blocks accesses to the IP phone switch 100 from the MAC address of the IP phone 102. Further, the set registration process 204 sends an Open Port Neg Ach instruction 630 containing the lock set command to the IP phone service provider 202 for execution 632.

Turning to Figure 7, an alternative embodiment is shown of a phone system including IP phones 102 and an IP phone switch 100 interconnected by a LAN 104 as shown. In addition, the phone system includes remote IP phones 702 that communicate to the IP phone switch 100 via the Internet 108. A phone service provider 704 connects the 1:P phones 702 to the Internet 108. The phone service provider 704 has the same :Function as, and replaces, the IP phone service provider 202 for the IP phones 702. In this alternate embodiment, a PIN identifies a user as being authorized and identifies the user of an IP phone 702, where the IP
phone 702 has a MAC address and an IP address. The MAC address and IP address are then to associated with the DN contained within the PIN in the IP phone switch 100.
Users are able to remotely access ~:he services of the IP phone switch 100 over the Internet 108. Further, since their dirf:ctory numbers are contained within their PINs, each user is able to receive telephone calls at his/her directory number wherever they may be by connecting an IP phone to the Internet 108.
Turning to Figures 8A and 8B, another alternate embodiment of a phone system is shown including IP phones 102, an Administrator 152, an DHC'.P
Server 154, an TFTP Server 156, and IP phone switches 150 interconnected by a LAN
104.
As shown in Figure 8B, the Administrator 152 includes the three primary functional blocks, namely - lP phone service provider 202, set registration process 204 and OAM 206 - of the IP phone switch 100 of Figure 2. The Administrator 152 further includes an IP phone switch configurator 810 to configure IP phone switches to associate directory numbers with the IP phones 102. The Administrator 152 configures IP phone switch 1 SO over a direct line 158, or optionally over network line 160. The Administrator 15:? may further configure more than one IP phone switch, such as, for example, IP phone switch 151 over lines 162 and 164.
The process to establish an IP socket is well known. The DHCP and TFTP
servers do not have to be pan of an IP phone switch, these servers can be independent of the IP phone switch, such as, for example, as shown in Figure 8A.
A number of further alternatives are described below. A user may specify a DN, at will, to associate witlh a PIN, which as previously noted has a separate access code. Provided the specified DN is not being used, the DN can be associated with the user. A user may be assigned several f 1Ns for the same directory number where each PIN has a different purpose, for example, a PIN for an unsecured IP phone, which expires after one use, and another PIN for a different directory number. A
user may have a number of different directory numbers associated with one IP phone. A
PIN
may also associate a DN to an IP phone temporarily, such as 24 hours, for a user to receive calls for the DN wherever he or she may be temporarily located.
It will also be understood by those skilled in the art that further alternate embodiments for connecting; telephones to fP phone switches are available, such as, by direct line to the IP phone switches instead of via a network.
It will also be understood by those skilled in the art that, while MAC
addresses 1o of IP phones disclosed herein are unique, such uniqueness is not essential provided that there is a unique address code for each IP phone where the address codes are unique within the network to which they are connected.
Although preferred embodiments of the invention have been described herein, it will be understood by those skilled in the art that variations may be made thereto without departing from the .scope of the invention or the scope of the appended claims.

Claims (9)

What is claimed is:

1. A method for an If phone switch to register an IP phone over an network, the IP phone having an unique address code within the network, comprising the steps of:
(a) associating a personal identification number with a directory number at the IP
phone switch;
(b) establishing communications between the IP phone and the IP phone switch;
(c) receiving the address code of the IP phone and the personal identification number from the IP phone;
(d) authenticating the personal identification number;
(e) associating the directory number with the address code for routing and switching call traffic to and from the IP phone;
(f) repeating step (c) in the event that the personal identification number fails authentication in step (d); and (g) sending a lock set command to the IP phone in the event that step (d) has been repeated in excess a predetermined number of consecutive times due to the personal identification number failing authentication.

2. The method of claim 1, wherein the directory number is a part of the personal identification number.

3. The method of claim 1, wherein the address code includes at least one of a Media Access Control address to the IP phone, an IP address to the IP phone, and set type of the IP phone.

4. An IP phone switch, comprising:
a database having personal identification numbers associated directory numbers;
a communications system for establishing communications between IP phones and the IP
phone switch; and an OAM for associating directory numbers with address codes of IP phones for routing and switching call traffic to and from the IP phones;
wherein, after communications is established between an IP phone and the IP
phone switch, an address code and a personal identification number is sent from the IP phone to the IP
phone switch for registration of the IP phone, the address code and personal identification number is received by the communication system and passed to the OAM where the OAM attempts authentication of the personal identification number with the personal identification numbers in the database and if successful then associates the directory number with the address code of IP phone for routing and switching call traffic to and from the IP phone, and if authentication is not successful then attempts re-authentication a predetermined number of times after which a lock set command is sent to the IP phone.

5. A method for an IP phone switch to register an IP phone over a network, the IP phone having a unique address code within the network, said address code including a Media Access Control address, said method comprising:
(a) associating a personal identification number with a directory number at the IP phone switch;
(b) establishing communications between the IP phone and the IP phone switch;
(c) receiving the address code of the IP phone and the personal identification number from the IP phone;
(d) authenticating the personal identification number; and (e) associating the directory number with the Media Access Control address for routing and switching call traffic to and from the IP phone.

6. The method of claim 5, wherein the directory number is a part of the personal identification number.

7. The method of claim 5, wherein the address code further includes at least one of an IP address to the IP phone, and set type of the IP phone.

8. The method of claim 5, wherein step (c) is repeated in the event that the personal identification number fails authentication in step (d).

9. The method of claim 8, further comprising a step to determine if step (d) has been repeated in excess a predetermined number of consecutive times due to the personal identification number failing authentication and in response sending a lock set command to the IP phone.