JPH08336170A - Caller identity confirming system - Google Patents

Abstract

PURPOSE: To provide a caller identity confirming system from a public network in an unfair access preventing system of a private network permitting the service access, etc., within the private network. CONSTITUTION: When a call requesting the service within a private network or the service connected to this private network is received from a public network, the exchange of this private network automatically transfers this incoming call to the extension of the private network which is preliminarily registered within the exchange corresponding to the information specifying the caller. Thus, the identity of the caller is requested and the pertinent service access of this incoming call is permitted or controlled based on the response of the identity confirmation result for the caller from this extension.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an unauthorized access prevention system in a private branch exchange or a private communication network which allows services and access in a private network from a public network, and more particularly, to the identity of a sender from the public network. The present invention relates to a sender identification method for confirmation.

With the development of private exchange networks and private communication networks in recent years, services and functions such as access to services within the private network from the public network, use of specific functions within the private network, and reaccess to the public network. However, in such cases, it is possible to prevent unauthorized use of these services and functions without impairing the serviceability and functionality of access from an unspecified number of people in the public network. The current situation is that there is no reliable, effective, or technical means to do so.

Therefore, in an existing exchange network or communication network, a new hardware is not required, and only a slight change in a program for switching and communication operation is performed, so that the user does not feel inconvenience and public There is a need for an inexpensive and reliable caller identity confirmation method that can confirm the caller in the network.

[0004]

2. Description of the Related Art Conventionally, in a private branch exchange or a private communication network which permits service access (public-private connection) and public network re-access (public-private-public connection) from the public network, , After entering the access code, etc. at the time of an incoming call from the sender of the public network, enter the user ID (Identifier) code for service access and the subsequent password, etc., within the private network of the sender. service·
Access and public network re-access were allowed.

However, a person other than the user of the private network, a private network user, a person who misuses the usage qualification of another user, or a previous private network user. , If the sender's ID or password is leaked or detected for those who have currently lost the usage qualifications, such persons will not be able to access the private network services or access the public network again. There was no effective means to prevent unauthorized use.

[0006]

Therefore, conventionally, once the private network user's ID or password is leaked, the person who is actually trying to access the service or function in the private network from the public network can use it properly. There is a problem that it is not possible for the private network side to judge whether the user is an unauthorized person or an unauthorized person.

The present invention is intended to solve the problems of the prior art as described above, in which an incoming call from the public network, which sends a service access code to the private network, is
Based on information such as the caller's ID number, transfer to a person in the private network that can confirm the identity of the caller, and after the intention of the person's identity confirmation result is displayed, service access for the incoming call The purpose is to prevent unauthorized access by outsiders, such as access to services in the private network via the public network and re-access to the public network.

[0008]

[Means for Solving the Problems]

(1) In a private network that allows services within the private network or services that mediate this private network according to access from the public network, service access with information identifying the sender from the public network When an incoming call requesting a call arrives, the private network exchange automatically transfers the incoming call to an extension of the private network that is pre-registered in the exchange corresponding to the information identifying the caller. Requesting the identity verification of the caller, and permitting or restricting the corresponding service access of the incoming call based on the response of the identity verification result to the caller from this extension.

(2) In the case of (1), when the identity of the caller on the extension can be confirmed as a result of confirming the identity of the caller, the transfer call is re-transferred from this extension to a specific telephone number. Continue to allow the caller access to the service.

(3) In the case of (1), if the caller's identity cannot be confirmed as a result of the identity confirmation of the caller at the extension, the transfer call from this extension is retransferred to a specific telephone number. It sends information indicating that the identity could not be confirmed to the caller and regulates the corresponding service access.

(4) In the case of (1), when the identity of the caller cannot be confirmed as a result of the identity confirmation of the caller at the extension, the call forwarded from this extension is set in advance in the private network. In the private network, by repeating the process of re-transferring to another existing extension and again confirming the identity of the caller,
Be able to verify the identity of the caller multiple times.

(5) In the case of (1), when the caller receives a predetermined number of calls, which are predetermined as data in the exchange, requesting service access, the identity of the caller at the extension is confirmed. Do.

(6) In the case of (1) or (4), the telephone number of the extension to be transferred next for confirming the identity is determined in advance in the exchange in correspondence with the caller. Automatically extracted and displayed according to the extension information.

In the cases of (7) and (4), when the extension is checked for identity the last time and the line is disconnected or transferred to a specific telephone number, the caller is placed in the corresponding order in advance in the exchange. The extension is automatically transferred to the next extension for identification confirmation in accordance with the information of the extension defined with.

(8) In the case of (1) or (7), at the time of transfer for identity confirmation, requesting the identity confirmation, and processing when the identity can be confirmed, when the identity is not confirmed A voice guidance explaining a process and a process when the service access is determined to be an unauthorized access is automatically sent from the exchange to the transferred extension.

(9) In the case of (1) or (4) or (7),
When the caller sends specific information to the private network, the identification of the caller is postponed until the number of times predetermined as data in the exchange of the private network.

(10) (1) or (4) or (7) or (9)
In this case, when the identity of the caller cannot be confirmed, service access to the caller from the next time onward in the private network is restricted.

(11) In the case of (10), after the service access control in the private network for the caller, in the private network,
After the maintainer and caller change the data to respond to unauthorized service / access, etc., the restriction on service / access within the private network for this caller is lifted.

[0019]

[Operation] (1) When a call requesting service access from the public network arrives, the incoming call is automatically transferred to an extension in the private network, and the identity of the caller is requested. Permit or restrict appropriate service access for incoming calls based on the identity response to the caller from the extension.

Therefore, according to the present invention, when there is service access to the private network from the public network, the identity of the caller for preventing unauthorized access requires complicated and expensive hardware. Can be done accurately without.

(2) In the case of (1), when the identity of the caller can be confirmed, the transfer call is re-transferred from this extension to a specific telephone number so that the caller can continue to receive the corresponding service. -Since access is allowed, the processing when the identity is confirmed can be performed quickly.

(3) In the case of (1), if the identity of the caller cannot be confirmed, the transfer call from this extension is re-transferred to a specific telephone number to allow the caller to access the corresponding service. Since it is regulated, it is possible to quickly perform the processing when the identity cannot be confirmed.

(4) In the case of (1), if the identity of the caller cannot be confirmed, the transfer call from the extension is re-transferred to another extension in the private network, and the identity of the caller is confirmed again. By repeating the process of performing, the identity of the caller can be confirmed multiple times by different persons.

(5) In the case of (1), when a call requesting service access is received from the caller a predetermined number of times,
Since the identity of the caller on the extension is confirmed, it is possible to avoid the trouble of confirming the identity every time.

(6) In the case of (1) or (4), the telephone number of the extension to be transferred next for identification confirmation is automatically extracted and displayed according to predetermined information. Therefore, the process at the time of transfer to the next person whose identity can be confirmed becomes easy.

(7) In the case of (4), when the line is disconnected or transferred to a specific telephone number in the extension whose identification was confirmed last time, the next extension for the identification is automatically added. Is performed, the transfer process for confirming the identity to the next person whose identity can be confirmed becomes easy.

(8) In the case of (1) or (7), voice guidance of necessary information is automatically sent from the exchange to the transferred extension at the time of transfer for identity confirmation request or retransfer. Since it is sent out automatically, an accurate explanation can be easily given to the identity confirmation requester every time.

(9) In the case of (1) or (4) or (7),
When the caller sends specific information to the private network, the identification of the caller is postponed, so that the service access can be permitted without performing the identification.

(10) (1) or (4) or (7) or (9)
In this case, when the identity of the caller cannot be confirmed, service access to the caller from the next time onward in the private network is restricted, so that such a caller can be quickly and accurately regulated. .

In the cases of (11) and (10), after the service access to the caller is restricted, the maintenance person and the caller change the data to cope with the unauthorized service / access, and then privately set the caller. Since the regulation of service access in the network can be released, such post-regulation processing for the caller can be properly performed.

[0031]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS FIG. 1 shows an apparatus configuration of an embodiment of the present invention, showing an example of the configuration of an exchange processing apparatus (exchange) in a private network exchange network or a communication network. In the figure, 1
Is a network, and terminals A, B in the private network,
..., the extension for the terminal X, the station line A, the station line B for the public network, ..., the station line X, the relay lines A, B for the dedicated line, and various devices 2 in the network such as a computer, Make the connection. 3 is a computing device, which is a network 1
And the main storage device 4, and executes the exchange operation execution processing program 5 based on various data 6 for exchange operation execution processing in the main storage device 4 to control the network and the like.

A tone generator 7 generates various tone signals to be sent from the network to subscribers of extension lines, office lines and trunk lines. 8 is a voice guidance device,
It stores and generates various guidances to be sent to subscribers.
Reference numeral 9 denotes a maintenance console for diagnosing a failure of the network 1 and inputting various maintenance and control data.

Hereinafter, based on FIG. 2 to FIG. 13, a caller in the public network who receives an incoming call from the station line A to the station line X and tries to access various devices in the private network, the station line and the relay line, etc. An example of the process of confirming the identity of the sender during the exchange process will be described. In the figure, the program is
In the existing exchange operation execution processing program, the flow of the program to be newly given to realize the method of the present invention is represented, and the related data is newly added in various data for exchange operation execution processing in order to execute this flow. This is the data to give.

FIG. 2 shows an embodiment (1) of the present invention, which is a flow chart showing the basic operation of the method of the present invention. In a private network such as a private branch exchange network or a private communication network that allows services within the private network or services that mediate this private network, such as private network service access from the public network and public network re-access,
Services that request such services from the public network
When the access code is sent, the exchange performs the following operation based on the program.

That is, the exchange, based on the information such as the telephone number of the person who can confirm the identity of the caller, which is registered in the related data in advance and corresponds to the ID of the caller, makes the incoming call to the private line. Automatically transfer to a designated extension in the exchange network and request identification.

Then, based on the intention of the identification result of the sender by the person whose identity can be confirmed at the extension, the O.S. If K, then the transfer operator allows service access for the incoming call and If it is not K, the tone generator 7 is connected and ROT (Re-Order Tone) indicating the service failure is sent to the caller, or the voice guidance device 8 is connected to access the service concerned. Send voice guidance, etc. to the effect that it is not allowed.

FIG. 3 shows an embodiment (2) of the present invention. When the identity of the caller can be confirmed at the time of judgment by the person who can confirm the identity at the transfer destination of the incoming call from the public network in the embodiment (1), the transfer operator makes the transfer call concerned in the private network. Re-transfer to a specific phone number.

As a result, the transferee of the specific telephone number is notified that the caller's access to the service has been determined, and accordingly, the caller is continuously informed. Access to services is allowed.

FIG. 4 shows an embodiment (3) of the present invention. If the identity of the caller cannot be confirmed as a result of the judgment by the person who can confirm the identity at the transfer destination of the incoming call from the public network in the embodiment (1), the transfer operator sends the transfer call to the private network. Re-transfer to a specific telephone number in.

As a result, the exchange connects the tone generator 7 and the voice guidance device 8 to the network 1, notifies that the identity of the caller could not be confirmed, and regulates the service access.

FIG. 5 shows an embodiment (4) of the present invention, and in the embodiment (1), a process in the case where it is possible to confirm the identity of the caller a plurality of times is a flowchart. It is shown by.

As shown in the figure, when it is determined that the identity of the caller cannot be confirmed by the person who can confirm the identity of the extension for the service access from the public network, the person who can confirm the identity. Refers to information such as the telephone number of the person who can confirm the identity of the caller (first rank to nth rank) registered in the relevant data in advance, and transfers the incoming call to another extension. , By this, the next person whose identity can be confirmed in the extension confirms the identity of the caller.

When the identity of the sender can be confirmed as a result of the determination by the next person whose identity can be confirmed, the sender is permitted to access the service.

On the other hand, as a result of the determination of the identity confirmation of the sender by the next person who can confirm the identity, if the identity of the sender cannot be confirmed, the person who can confirm the identity continues to determine the identity of the sender. When the judgment is to be continued depending on the intention of the user and the necessity of continuing the judgment of the identity confirmation, the transfer call is re-transferred to the next person who can confirm the identity.

When it is determined that there is no intention to continue the determination of the identity confirmation or there is no need to continue the determination of the identity confirmation, the tone generator 7 is connected to send the ROT to the caller or the voice guidance device 8 To send a voice guidance to the caller to the effect that the service access is not permitted.

When the identity of the sender cannot be confirmed by repeating such processing,
Within the private network, the identity of the sender from the public network can be verified multiple times.

FIG. 6 shows an embodiment (5) of the present invention. In the embodiment (1), the identity is confirmed only when the caller makes a service access a predetermined number of times. This process is shown by a flowchart.

As shown in the figure, when the service access code of the caller from the public network is received, the exchange specifies the number of times of access, which is registered in the relevant data in advance, for the identification. By referring to the numerical data, it is determined whether the number of times the service is accessed by the sender matches the designated number of times.

When the number of times does not match the specified number of times (when the number of times does not reach the specified number of times), the caller's service access is permitted without identification. On the other hand, when the number of times the service is accessed from the same sender increases and matches the specified number of times registered in the related data, the number of the person whose identity can be confirmed, which is registered in the related data in advance, is Transfers an incoming call to an identifiable person by referring to the information,
This confirms the identity of the caller.

When the identity of the caller is confirmed, the caller will be appointed until the specified number of times.
The service access of the caller is permitted without the identification, but when the specified number of times is reached, the identification is performed again.

FIG. 7 shows an embodiment (6) of the present invention. In the embodiment (1) or (4), the telephone number of the next person whose identity can be confirmed is automatically notified. This process is shown by a flowchart.

As shown in the figure, when the person who can confirm the identity judges that the identity of the caller cannot be confirmed for the service access from the public network and notifies the exchange, the exchange automatically sets the related data. With reference to information (first rank to nth rank) such as the telephone numbers of persons who can confirm the identity of the sender, which is registered in advance, Information such as the telephone number of the next person whose identity can be confirmed is displayed on the display (not shown) for the caller, or the voice synthesizer 7 is connected to give a voice instruction.

As a result, the current identifiable person transfers the incoming call to the next identifiable person.

FIG. 8 shows an embodiment (7) of the present invention. In the embodiment (4), a flow chart of a process when it is possible to confirm the identity of the caller plural times It is shown by.

As shown in the figure, when it is judged that the person whose identity can be confirmed cannot confirm the identity of the sender for the service access from the public network, and as in the embodiment (4), When the confirmation judgment is continued, the exchange is registered in advance in the relevant data by disconnecting the line or transferring to a specific telephone number by the person whose current identity can be confirmed.
The incoming call is automatically transferred to the next person whose identity can be confirmed by referring to the information such as the telephone number of the person whose identity can be confirmed (first rank to nth rank).

As a result, when confirming the identity after the second time,
Transfer of an incoming call for identification to a person who can confirm the identification is automatically performed.

FIG. 9 shows an embodiment (8) -1 of the present invention. In the embodiment (1) or (7), the first person whose identity can be confirmed is identified at the time of identity confirmation. The processing (1) in the case of automatically explaining the operation method is shown by a flowchart.

When there was a service access from the public network, the exchange could transfer the incoming call to the person whose identity could be confirmed, and connected the voice guidance device 8 to confirm the identity and confirm the identity. In this case, if the identity cannot be confirmed, or if it is determined that the access is unauthorized, the operation method is automatically explained.

As a result, depending on the person whose identity can be confirmed,
The caller's identity will be verified correctly.

FIG. 10 shows an embodiment (8) -2 of the present invention. In the embodiment (1) or (7), the identity verification is performed on the person who can verify the identity after the second time. The processing (2) in the case of automatically explaining the operating method at the time is shown by a flowchart.

In the case of service access from the public network, if the first person who can confirm the identity cannot confirm the identity of the caller and it is necessary to continue the determination of the identity confirmation,
The exchange has information such as the telephone numbers of persons who can confirm the identity of the caller, which is registered in the relevant data in advance (first to nth
(Up to the order), the call was forwarded to the next person whose identity can be confirmed, and the voice guidance device 8 was connected to confirm the identity. If the identity could be confirmed, the identity could not be confirmed. In case, and when it is determined that the access is unauthorized, the operation method is automatically explained.

As a result, the identity of the sender can be correctly confirmed by the next person whose identity can be verified.

FIG. 11 shows an embodiment (9) of the present invention. In the embodiment (1) or (4) or (7), the process for enabling postponement of identity confirmation is shown in FIG. , Shown by a flowchart.

In response to a service access from the public network, if the caller himself / herself inputs an intention to postpone the identity confirmation of the caller by sending a specific code to the private network, the exchange will be Determine whether or not the number of postponements of identification has exceeded the specified number of times by referring to the numerical data pre-registered in the data corresponding to the sender ID and defining how many times the identification can be postponed. To do.

When the prescribed number of times is not exceeded, 1 is added to the number of postponed calls for the sender to allow service access. When the number of times exceeds the predetermined number, the voice guidance device 8 is connected to notify the caller by voice guidance that the number of postponements of the identity confirmation exceeds the specified number, and the person who can confirm the identity is notified. Transfers an incoming call.

On the other hand, when the caller does not input the intention to postpone the caller confirmation, the exchange immediately transfers the incoming call to the person who can confirm the identity.

As a result, the caller can postpone the identity confirmation by the person whose identity can be confirmed up to a predetermined number of times.

FIG. 12 shows an embodiment (10) of the present invention, which is an embodiment (1) or (4) or (7) or (9).
In the above, when the identity of the caller cannot be confirmed, a process for restricting service access of the caller in the private network is shown by a flowchart.

When the exchange cannot confirm the identity of the caller, it connects the tone generator 7 to the ROT.
Is output or voice guidance is output by connecting the voice guidance device 8, and the service access permitted flag corresponding to the ID of the caller who has accessed / accessed the service from the public network in the related data is set. ,
Change during regulation.

As a result, it is possible to regulate the service access to the private network from the next time onward for the caller whose identity cannot be confirmed.

FIG. 13 shows an embodiment (11) of the present invention. In the embodiment (10), the service of the sender is
After access control, the processing to release the restriction,
It is shown by a flow chart.

When the service access restricted flag corresponding to the caller's ID in the related data is set, the switchboard switches from the maintenance console 9 to the caller's ID in the private network. When the corresponding action for the unauthorized access such as the change of the password is performed, it is possible to change the service / access restriction flag corresponding to the caller ID to the allowable state from the maintenance console 9 as well. To do.

As a result, the caller is allowed to access the service by the caller ID.

Next, when there is a service access from the public network, the exchange refers to the service access permitting flag corresponding to the caller ID in the related data and refers to the service access of the caller. When the caller's service access is not permitted, the voice synthesizer 7 is connected to output the ROT, or the voice guidance device 8 is operated. To output voice guidance to the effect that service access is not permitted.

[0075]

As described above, according to the present invention, when there is a service access from the public network in the private network, the identity of the caller can be confirmed without the need for complicated and expensive hardware. Can be done accurately.

According to the present invention, when the identity can be confirmed by the transfer to the specific telephone number based on the determination result of the identity confirmation of the sender, the service access is permitted, and when the identity cannot be confirmed, The process of restricting service access can be performed quickly.

According to the present invention, it is possible to sequentially request a plurality of persons to confirm the identity of the sender.

According to the present invention, it is possible to avoid the troublesomeness of confirming the identity each time, by confirming the identity only when the number of times the service access of the sender reaches a predetermined number.

According to the present invention, the person who confirms the identity of the sender is automatically notified of the telephone number of the next person whose identity can be confirmed, thereby facilitating the process at the time of transfer to the next person whose identity can be confirmed. Can be

According to the present invention, the person who has confirmed the identity of the caller can easily and easily perform the next predetermined identity verification by disconnecting the line or transferring to a specific telephone number. The identity confirmation process can be transferred to.

According to the present invention, the person who requests the identity confirmation of the sender can easily obtain an accurate description by using voice guidance to explain the identification confirmation request and the method of processing based on the identification result. Can be done

According to the present invention, the time period for confirming the identity of the sender can be postponed, so that service access can be permitted without performing the identity confirmation under special circumstances.

According to the present invention, when the identity of the caller cannot be confirmed, the process of restricting subsequent service access by the caller can be performed quickly and accurately.

According to the present invention, even if a particular caller is restricted in service access, the restriction can be lifted and service access can be permitted by taking a predetermined measure.

[Brief description of drawings]

FIG. 1 is a diagram showing a device configuration of an embodiment of the present invention.

FIG. 2 is a diagram showing an embodiment (1) of the present invention.

FIG. 3 is a diagram showing an embodiment (2) of the present invention.

FIG. 4 is a diagram showing an embodiment (3) of the present invention.

FIG. 5 is a diagram showing an embodiment (4) of the present invention.

FIG. 6 is a diagram showing an embodiment (5) of the present invention.

FIG. 7 is a diagram showing an embodiment (6) of the present invention.

FIG. 8 is a diagram showing an embodiment (7) of the present invention.

FIG. 9 is a diagram showing an embodiment (8) -1 of the present invention.

FIG. 10 is a diagram showing an embodiment (8) -2 of the present invention.

FIG. 11 is a diagram showing an embodiment (9) of the present invention.

FIG. 12 is a diagram showing an embodiment (10) of the present invention.

FIG. 13 is a diagram showing an embodiment (11) of the present invention.

[Explanation of symbols]

 1 Network 2 Various Devices in Network 3 Computing Device 4 Main Storage Device 5 Exchange Operation Execution Processing Program 6 Various Data for Exchange Operation Execution Processing 7 Tone Generator 8 Voice Guidance Device 9 Maintenance Console

Claims (11)

[Claims] 1. In a private network that allows a service within the private network or a service that mediates the private network according to access from the public network, information for identifying a sender from the public network is added, When a call requesting service access arrives, the exchange of the private network sends the incoming call to an extension of the private network that is pre-registered in the exchange in correspondence with the information identifying the caller. Requesting the identity verification of the caller by automatically forwarding and permitting or restricting the corresponding service access of the incoming call based on the response of the identity verification result from the extension to the caller. Characteristic sender identification method. 2. The caller identity confirmation method according to claim 1, wherein when the identity of the caller can be confirmed as a result of identity verification of the caller at the extension, the transfer call is identified from the extension. A caller identification method characterized by allowing the caller to continue access to the corresponding service by re-transferring to a telephone number. 3. The caller identification method according to claim 1, wherein when the identity of the caller cannot be confirmed as a result of the identity verification of the caller at the extension, the transfer call is made from the extension. By re-transferring to a specific telephone number,
A sender identification method, which sends information indicating that the identity could not be confirmed to the sender and restricts access to the corresponding service. 4. The caller identity verification method according to claim 1, wherein when the identity of the caller cannot be confirmed as a result of identity verification of the caller at the extension, the transfer call is made from the extension. , By repeating the process of re-transferring to another predetermined extension in the private network and again confirming the identity of the caller, it is possible to confirm the identity of the caller multiple times in the private network. A sender identification method characterized by the above. 5. The caller identification method according to claim 1, wherein the caller requests the service access a predetermined number of times, which is predetermined as data in the exchange, from the caller. , A method of confirming the identity of a caller at the extension. 6. The caller identification method according to claim 1 or 4, wherein the extension telephone numbers to be transferred next for identity confirmation are preliminarily assigned in the exchange corresponding to the callers. A caller identity verification method characterized by automatically extracting and displaying according to the extension information specified by 7. The caller identity confirmation method according to claim 4, wherein when the extension of which the identity has been confirmed last time is disconnected or transferred to a specific telephone number, the caller in the exchange is called. A caller identity confirmation method characterized by automatically transferring to the next extension for identity verification in accordance with the information of the extension, which is determined by prioritizing in accordance with. 8. The caller identification method according to claim 1 or 7, wherein at the time of the transfer for the identification confirmation, the confirmation of the identification is requested, and if the identification can be confirmed, the identification and confirmation can be performed. A caller's identity characterized in that voice guidance explaining the processing when there is no such access and the processing when the service access is determined to be an unauthorized access is automatically sent from the exchange to the transferred extension. Confirmation method. 9. The caller identity confirmation method according to claim 1, 4 or 7, wherein when the caller sends specific information to the private network, it is determined as data in advance in a switch of the private network. A sender identification method, wherein the identification confirmation is postponed to the sender up to a specified number of times. 10. The caller identity verification method according to claim 1, 4 or 7 or 9, and when the identity of the caller cannot be confirmed, service access to the caller from the next time onward in the private network. A caller identity verification method that is characterized by restricting calls. 11. The caller identity confirmation method according to claim 10, wherein after the service access control in the private network to the caller is restricted, the maintainer and the caller in the private network access the unauthorized service. A method for confirming the originator of a caller, wherein the restriction of service access to the caller in the private network is released after the data is changed to comply with the above.