KR100461860B1 - Apparatus and method for preventing a forgery/an alteration of a conversation data in computer telephony integration - Google Patents

Abstract

An apparatus and method are disclosed for preventing forgery / falsification of call data in a computer telephony integration (CTI) system. An anti-counterfeiting device is installed in parallel or in series between a predetermined telephone line in the CTI system and an internal telephone. The forgery / falsification prevention device performs a process for preventing forgery / falsification of data before the call data transmitted through the telephone line is stored in the storage device. This is done by embedding a watermark in the call data, encrypting the call data with a predetermined encryption key, or inserting a hash value in the call data. Accordingly, it is possible to check whether the stored call data is forged or forged.

Description

Apparatus and method for preventing forgery / falsification of call data in computer phone integrated system {APPARATUS AND METHOD FOR PREVENTING A FORGERY / AN ALTERATION OF A CONVERSATION DATA IN COMPUTER TELEPHONY INTEGRATION}

The present invention relates to an apparatus and method for preventing forgery / falsification of call data in a computer telephone integrated system. More specifically, the present invention relates to an apparatus and a method for preventing forgery and forgery of a call history stored in a computer telephone integrated system, an internet phone, and a PC call center, and for confirming a case where forgery or forgery is performed.

Computer Telephony Integation (CTI) refers to a technology for controlling telephone systems such as telephone and fax through a computer. In other words, by connecting a workstation or file server on a LAN to a telephone exchange, the computer controls the switch so that the telephone can be connected to the surrounding area.

CTI is generally classified into inbound call centers such as counseling centers and after-sales centers, and outbound call centers such as credit centers, telemarketing centers, marketing and customer surveys. In addition, CTI is classified into PBX and unPBX depending on the use of an exchange.

A private branch exchange (PBX) is a telephone exchange system that allows all employees to share a certain number of external telephone lines used in a company and automatically connects telephones among internal users connected to the extension.

A CTI system is a set of software and hardware that enables the integration of telephone services into computers and servers, PBX devices, and other computing devices.

1 is a block diagram showing the configuration of a general CTI system 10.

Referring to FIG. 1, the CTI system 10 uses a PBX 40, a PBX 40, and a CTI-Link that receive a telephone signal from an external wired or wireless telephone 20 through the PSTN 30. A CTI telephone server 50 to be connected, and a plurality of telephones (for example, an agent's phone in the case of a call center) to be connected to the CTI telephone server 50.

Hereinafter, a process performed in the CTI system will be described using the call center management system as an example.

The incoming call signal contains the caller's ID or ANI (Automatic Number Identification). The telephone exchange recognizes and interprets the telephone number of the incoming external telephone and sends it to the computer. The computer finds information about the phone number and sends it back to the exchange, while at the same time giving control instructions on how the exchange will handle the call. The exchange then connects the call to the particular counselor's phone or back to the counselor's phone that was just before.

The general functions of CTI are as follows.

(a) Call control function: Using a PC and a modem, a call or similar equipment is used to control a call based on a database or directly entered phone number.

(b) The function of using a PC as a telephone. If there is an appropriate line board (eg Dialogic board), the PC may be used as a telephone substitute by displaying the standard functions as graphic icons.

(c) Automatic recording of the call content: It can automatically save the call and similar messages (fax, e-mail, and voicemail).

(d) Fax management function: Receives a fax message or automatically connects it to an appropriate fax.

(e) Text To Speech (TTS) or Speech To Text (STT) function

(f) Function to display call information on monitor

(g) Multiple call handling functions via computer screen interface

CTI system that performs the above functions can access / query / process various information, such as monitoring and statistical analysis related to the call, it is possible to efficiently manage personnel and systems.

Next, Voice over Internet Protocol (VoIP) refers to IP telephone technology for a series of facilities that deliver voice information using IP (Internet Protocol). In general, VoIP means sending voice information in digital form in discrete packets, rather than a traditional circuit-based protocol like PSTN.

2 is a block diagram showing the configuration of an Internet telephony call system 100 using VoIP.

Referring to FIG. 2, a telephone signal via a general telephone line (PSTN) is connected to the Internet network 130 via a telephone gateway (A) 120a via a PBX (A) 110a. A telephone gateway is a device that converts an analog signal into a packet signal or a packet signal into an analog signal in a reverse direction in order to transmit a telephone signal by connecting a PSTN to the Internet network.

The packet signal entering the Internet network 130 is connected to the telephone gateway (B) 120b based on the IP address, and the connected signal is converted into a signal accessible to the general telephone network by the telephone gateway (B) 120b. It passes through PBX (B) 110b. The passed signal is connected to the appropriate user based on the phone book.

3 is a block diagram showing the configuration of an IP telephony system 200 using an IP gateway with a PBX infrastructure.

Referring to FIG. 3, an external telephone via PBX telephone 210 or PSTN 230 connected to PBX 220 passes through telephone gateway 240a via PBX 220 to access Internet network 280. Is connected to.

Signals connected to the Internet network 280 are forwarded to the IP address specified in the telephone gateway 240a to transfer telephone data to the IP telephone 260, or to the general telephone 250 via another telephone gateway 240b. You can pass phone data.

In the above-described CTI system, there are many cases where it is necessary to record the call contents and store them in a storage medium. For example, a call center introduced by a company for customer management stores and stores currency data that may be subject to future disputes, such as customer ordering information on Internet shopping, customer selling and buying ordering information at securities companies. .

However, due to the lack of trust between the company and the consumer operating the CTI, the security that can prevent such forgery and forgery of the stored currency data, as well as the ease of forgery and forgery of the stored currency data, The request for a solution is urgent.

In this regard, the conventional method of preventing forgery / falsification of stored call data in the CTI system has mainly focused on blocking physical access. In other words, preventing an external intruder from accessing the data storage device storing the call data was the main method of security of the call data.

However, such a security method has a problem that the enterprise can not prevent the forgery / forgery of the stored data by the internal administrator or people who are familiar with the system. In other words, if someone has forged / modulated the stored data (whether external or internal), there is a need for a security system that can determine whether or not to forge / false the authenticity of the stored data.

The present invention is to solve the problems described above, in the present invention, a device capable of preventing forgery / forgery of data in the CTI system, that is, a watermark insertion device that allows later to check the forgery / forgery of the data, encryption A device or a hash value insertion device.

Accordingly, when the call data is stored in the CTI system, a technology for preventing or confirming forgery or forgery of the data in real time is used, so that if the call data needs to be confirmed, it is possible to check whether the stored call data has been forged / modulated. System is provided.

1 is a block diagram showing the configuration of a general CTI system.

2 is a block diagram showing the configuration of an Internet telephony call system using VoIP.

3 is a block diagram showing the configuration of an IP telephony system using an IP gateway with a PBX infrastructure.

4 is a block diagram illustrating a configuration in which a forgery / falsification preventing apparatus according to the present invention is applied to a CTI system.

5 is a block diagram showing a configuration in which a forgery / falsification prevention apparatus according to the present invention is applied to a CTI system using an Internet telephone.

FIG. 6 is a block diagram illustrating a configuration in which a forgery / falsification preventing device according to the present invention is applied to a system in which a telephone is directly connected to a PSTN in a CTI system using an Internet telephone.

7 is a block diagram showing a configuration in which the forgery / forgery prevention apparatus according to the present invention is applied to a PC call center.

8A is a block diagram illustrating a configuration in which a forgery / falsification preventing apparatus according to the present invention is connected in parallel between a telephone and a PSTN.

8B is a block diagram showing a configuration in which the forgery / falsification preventing apparatus according to the present invention is connected in series between the telephone and the PSTN.

8C is a block diagram illustrating a configuration in which a forgery / falsification preventing apparatus according to the present invention is connected in a CTI server.

8D is a block diagram illustrating a configuration in which a forgery / falsification preventing device according to the present invention is connected to a CTI server, and the CTI server does not include a storage device.

9A is a diagram illustrating a process of embedding and detecting a watermark according to the first embodiment of the present invention.

9B is a block diagram showing the construction of a watermark embedding apparatus according to a first embodiment of the present invention.

Fig. 9C is a block diagram showing the configuration of the watermark embedding apparatus according to the first embodiment of the present invention, in which the watermark embedding apparatus is connected in series between the telephone and the PSTN.

10A is a diagram illustrating an encryption and decryption process according to a second embodiment of the present invention.

10B is a block diagram showing the configuration of an encryption apparatus according to a second embodiment of the present invention.

11A is a diagram illustrating a data authentication process using a hash function according to a third embodiment of the present invention.

Fig. 11B is a block diagram showing the structure of a hash value insertion device according to a third embodiment of the present invention.

Explanation of symbols on the main parts of the drawings

310: telephone line 320: telephone

330: telephone line interface unit 340: anti-counterfeiting device

350: storage device 720: watermark insertion device

722: input signal control unit 724: A / D converter

726: digital signal processor or microcontroller

728: power supply 920: encryption device

1020: hash value inserting device

In order to achieve the above object, the present invention is connected to each of the plurality of internal telephones, the plurality of internal telephones and the telephone line, and to control the connection of the telephone call from the external telephone to the plurality of internal telephones In a computer integrated telephone system (CTI) system having a CTI server and a storage device for storing call data between each of the plurality of internal telephones and the external telephone, information for preventing forgery / falsification of data in the stored call data. A forgery / falsification preventing device for inserting a device, wherein the forgery / falsification preventing device is installed between a predetermined telephone line in the system and the internal telephone, so that the call data transmitted through the predetermined telephone line is stored in the storage device. Insert information to prevent forgery / falsification into the call data in real time Provides the up / tamper-proof device.

According to the first embodiment of the present invention, the real-time insertion process of the information for preventing the forgery / forgery is made by inserting a watermark in the call data, the confirmation of the forgery / forgery of the stored call data It is performed as detection of the embedded watermark.

According to the second embodiment of the present invention, the real-time insertion process of the information for preventing the forgery / forgery is made by encrypting the call data with a predetermined encryption key, and whether or not the stored call data forgery / forgery Confirmation is performed as decryption of the encrypted call data using a predetermined decryption key corresponding to the predetermined encryption key.

According to the third embodiment of the present invention, the real-time insertion process of the information for preventing the forgery / forgery is made by inserting the hash value of the call data in the call data, the inserted hash value is the call The data is obtained by applying the data to a predetermined hash function, and the confirmation of the forgery / falsification of the stored call data is performed by newly applying the hash value inserted in the stored call data and the stored call data to the predetermined hash function. It is performed as confirmation of whether the hash values are equal.

Advantageously, the anti-counterfeiting device is implemented in the computer integrated telephone system in the form of a general purpose PCB board, DSP chipboard, FPGA board, ASIC board, or software program.

Also preferably, the anti-counterfeiting device is connected in parallel between the predetermined telephone line in the system and the internal telephone, and the storage device is connected in series with the anti-counterfeiting device.

Also preferably, the anti-counterfeiting device is connected in series between the predetermined telephone line in the system and the internal telephone, and the storage device is connected in parallel with the anti-counterfeiting device.

Also preferably, the anti-counterfeiting device is installed in the CTI server.

Also preferably, the forgery / modulation prevention device comprises: an A / D converter for converting an input analog call data signal into a digital signal; A digital signal processor or microcontroller that inserts information for preventing the forgery / modulation into the converted digital call data signal in real time and transmits the information to the storage device; And a power supply device for supplying power to the digital signal processor or microcontroller.

In order to achieve the other object of the present invention, the present invention is connected to each of a plurality of internal telephones, the plurality of internal telephones and a telephone line, and to control the connection of a telephone call from an external telephone to the plurality of internal telephones In a computer integrated telephone system (CTI) system having a CTI server and a storage device for storing call data between each of the plurality of internal telephones and the external telephone, information for preventing forgery / falsification of data in the stored call data. CLAIMS 1. A method of inserting, comprising: (a) receiving call data between each of the plurality of internal telephones and the external telephone transmitted through a predetermined telephone line in the system; (b) inserting information into the call data in real time to prevent the forgery / falsification into the received call data; And (c) storing the call data with the information inserted therein.

According to a first embodiment of the present invention, the step (a) includes inserting a watermark into the received call data, and checking whether the stored call data is forged / falsified. As detection.

According to a second embodiment of the present invention, the step (a) includes encrypting the received call data with a predetermined encryption key, and the confirmation of whether the stored call data is forged or forged is determined. It performs as decryption of the said encrypted call data using the predetermined decryption key corresponding to an encryption key.

According to a third embodiment of the present invention, the step (a) includes inserting a hash value of the call data into the received call data, wherein the inserted hash value is a predetermined hash function of the call data. The identification of whether the stored currency data is forged / modulated is determined by applying the hash value inserted into the stored call data and the stored call data to the predetermined hash function. It is performed as confirmation.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

First, the CTI system is a forgery / forgery prevention apparatus (which may be a watermark insertion apparatus, an encryption apparatus, or a hash value insertion apparatus, which will be described later in detail with reference to FIGS. 9 to 11) in the CTI system. A configuration applied to various various embodiments of the system will be schematically described with reference to FIGS. 4 to 7.

4 is a block diagram showing a configuration in which a forgery / falsification preventing apparatus according to the present invention is applied to a CTI system, and FIG. 4A relates to an unPBX CTI system that does not require a PBX, and FIG. 4B shows a CTI system that requires a PBX. It is about.

Referring to FIG. 4A, the anti-counterfeiting device and the storage device are installed in parallel with all the lines available to the CTI server, and the anti-counterfeiting device and the anti-counterfeiting device separately for each internal telephone (ie, each of the agent phones). Both ways in which the storage device is installed are shown in FIG. 4A.

Referring to the operation of the system, the outside calls to the CTI system (ie, call center) via wired or wireless telephone. The telephone signal is transmitted through the PSTN to the CTI server managing the telephone. The CTI server connects the call to one of the agent phones connected to the CTI server.

At this time, the call signal transmitted through the telephone line is connected to the input of the anti-counterfeiting device. The input of the forgery / tamper prevention device accepts both an external caller's voice call signal and an agent's voice call signal. That is, when the connected agent starts the call, the forgery / falsification prevention device and the data storage device operate simultaneously to insert the information to prevent the forgery into the voice call signal in real time (that is, the watermark as described in detail later). It can be inserted, the application of encryption algorithm, or the insertion of hash value) It also stores the voice call signal in real time.

4B is the same as the system of FIG. 4A except that the entire system must have a separate PBX since there is no PBX in the CTI server, and thus a detailed description thereof will be omitted.

FIG. 5 is a block diagram showing a configuration in which a forgery / falsification prevention device according to the present invention is applied to a CTI system using an Internet telephone. FIG. 5A relates to an unPBX CTI system that does not require a PBX, and FIG. 5B shows a PBX. A CTI system is needed.

Referring to FIG. 5A, an embodiment in which a phone is mounted on a PC and connected to a PSTN is illustrated. However, the Internet phone may be connected to the PSTN alone. The anti-counterfeiting device and the storage device may be connected to a CTI server or may be located in the middle of the connection between the phone and the PSTN.

Referring to the operation of the system, a wired or wireless telephone is used to access the Internet network using a telephone station, a wireless base station, and a gateway. In Internet telephony, the billing server and database server are also connected for billing and necessary data services.

The connected telephone signal is connected to the PC or Internet telephone to which the telephone is connected via the PBX and CTI server through the Internet network. All voice signals passing through the telephone line are also provided as inputs to the anti-counterfeiting device. The forgery / falsification prevention device inserts information to prevent forgery into the voice call signal in real time, and the storage device stores the voice call signal in real time.

5B is the same as the system of FIG. 5A except that the CTI server does not have a PBX, so the entire system should have a separate PBX, and thus a detailed description thereof will be omitted.

FIG. 6 is a block diagram showing a configuration in which a forgery / falsification prevention device according to the present invention is applied to a system in which a telephone is directly connected to a PSTN in a CTI system using an Internet telephone. FIG. 6A is an unPBX CTI system that does not require a PBX. 6b is directed to a CTI system requiring a PBX.

6A and 6B show a case where the agent phones are not phones connected to a PC or an internet phone as in the case of FIG. 5, but are phones directly connected to a PSTN. Therefore, a small gateway that converts the packet signal received through the Internet network into a signal suitable for the PSTN should be added to the system.

In the embodiment of FIG. 6, the forgery / falsification prevention device and the storage device are installed between the phone and the PSTN, and are the same as the system of FIG. 5 except that a small capacity gateway is added.

7 is a block diagram showing a configuration in which a forgery / falsification prevention apparatus according to the present invention is applied to a PC call center, FIG. 7A relates to an unPBX PC call center that does not require a PBX, and FIG. 7B illustrates a PC call center that requires a PBX. It is about.

FIG. 7 illustrates an embodiment in which a PC call center is implemented using a card having a telephone function in a PC, not a CTI system. The PC sends and receives telephone calls using a modem card. In the case of the PC call center, it is necessary to store the contents of the call. In this case, the anti-counterfeiting device and the storage device are installed between the phone and the PSTN.

Hereinafter, how the forgery / falsification preventing apparatus according to the present invention is specifically connected in the CTI system will be described in detail with reference to FIGS. 8A to 8D.

8A is a block diagram illustrating a configuration in which a forgery / falsification preventing apparatus according to the present invention is connected in parallel between a telephone and a PSTN.

Referring to FIG. 8A, the forgery / falsification prevention device 340 is connected in parallel between the telephone line PSTN 310 and the counselor phone 320. Specifically, the voice call signal of the outsider and the counselor voice call signal transmitted through the phone line 310 is input to the forgery / tamper prevention device 340 through the phone line interface unit 330, to prevent forgery / modulation The voice call signal into which information can be inserted is input to the storage device 350 and stored.

The telephone line interface unit 330 performs an interface function of extracting only an audio audio signal from a general telephone line (ie, PSTN). For example, the speech network IC used in the telephone may be an example.

The forgery / falsification prevention device 340 may be a watermark insertion device, an encryption device, or a hash value insertion device, which will be described later in detail with reference to FIGS. 9 to 11.

The storage device 350 may be located anywhere in the CTI system as a part in which the contents of the call are stored. As a storage medium used for the storage device 350, a digital audio storage device such as a hard disk or a DAT may be used.

8B is a block diagram showing a configuration in which the forgery / falsification preventing apparatus according to the present invention is connected in series between the telephone and the PSTN.

Referring to FIG. 8B, the forgery / falsification prevention device 440 is connected in series between a telephone line (PSTN) 410 and an agent phone 420. Specifically, the voice call signal of the outsider transmitted through the telephone line 410 and the voice call signal of the counselor from the counselor phone 420 are provided through the telephone line interface units 430a and 430b, respectively. The voice call signal, which is inputted to the terminal and inserts information for preventing forgery / falsification, is input to the storage device 450 connected in parallel with the telephone line interface units 430a and 430b and the forgery / falsification preventing device 440. And stored.

Since the forgery / tamper prevention device 440 is connected in series between the telephone line (PSTN) 410 and the counselor phone 420, in this embodiment, the telephone line interface unit is provided at the front and the rear of the forgery / tamper prevention device, respectively.

8C is a block diagram illustrating a configuration in which the forgery / falsification preventing apparatus according to the present invention is connected in the CTI server 530.

That is, the CTI server 530 includes a telephone line interface unit 534, a forgery / falsification prevention device 536, and a storage device 538, in addition to the CTI function block 532. The telephone line interface unit 534, the forgery / falsification prevention device 536, and the storage device 538 are connected in parallel between each telephone 520 of the counselor and the telephone line 510. Specifically, the voice call signal of the outsider and the voice call signal of the counselor transmitted through the telephone line 510 are input to the forgery / tamper prevention device 536 through the telephone line interface unit 534 and prevent forgery / modulation. The voice call signal into which the information is inserted is input to the storage device 538 and stored.

8D is a block diagram illustrating a configuration in which the forgery / falsification preventing apparatus according to the present invention is connected to the CTI server, and the CTI server 630 does not include a storage device.

Even in this case, the overall operation process and the connection relationship are similar to those of the embodiment of FIG. 8C, and the forgery / tamper prevention device 644 and the storage device 646 operate under the control of the CTI server 630.

8A to 8D, the anti-counterfeiting device 340, 440, 536, and 644 includes a general-purpose PCB board, a DSP chip board, a flexible program gate array (FPGA) board, an application specific integrated circuit (ASIC) board, Or it may be implemented in the form of a software program.

Hereinafter, a specific forgery and alteration prevention technique according to the first, second, and third preferred embodiments of the present invention used in the forgery and forgery prevention device 340, 440, 536, and 644 described above and the forgery and forgery prevention device The internal configuration of 340, 440, 536, and 644 will be described in detail.

A first embodiment of the present invention is an implementation of a forgery and alteration prevention device by a watermarking method.

9A is a diagram illustrating a process of embedding and detecting a watermark according to the first embodiment of the present invention.

Referring to FIG. 9A, the watermark inserting unit inserts a watermark into an input voice call signal (ie, audio data). The inserted watermark information is information that can prove the authenticity of the audio data later. The watermark insertion unit means the forgery / falsification preventing apparatus of the present invention described above. Subsequently, the audio data in which the watermark is inserted is stored in the storage device, so that the insertion process of information for preventing forgery / falsification according to the present invention is terminated.

Types of watermarks that can be used in this embodiment include Robust Watermark (RW), Semi-Fragile Watermark (SFW), and Fragile Watermark (SFW), which are external attacks. Or the degree to which the watermark withstands deformation.

Robust watermark refers to a watermark that can extract watermark information even in attacks such as compression, A / D conversion, D / A conversion and noise addition. Semi-watermarks have the characteristic that the watermark survives an attack such as compression, and the watermark is broken in a malicious attack that modulates audio data. Soft watermarks have the property of breaking watermarks even with slight deformations. Therefore, in the case of using the soft watermark in the present invention, the watermark should be inserted after the compression of the audio data when the data is compressed and stored.

According to the present invention, the audio data in which the watermark is inserted in the forgery / falsification prevention device is a separate off-line watermark extractor (when a software program is implemented on a PC) when there is a problem of whether forgery or forgery of the data later occurs. Watermark extraction process is performed. The extraction of the watermark may be authentication of the information itself embedded as a watermark, or may be a confirmation of whether the stored audio data is forged / modulated by whether the watermark is broken.

9B is a block diagram showing the construction of a watermark embedding apparatus 720 according to the first embodiment of the present invention. That is, the forgery / falsification preventing apparatus of FIGS. 8A to 8D is implemented as a watermark embedding apparatus according to the first embodiment of the present invention.

Referring to FIG. 9B, the watermark embedding apparatus 720 according to the first embodiment of the present invention may include an input signal controller 722, an A / D converter 724, a digital signal processor or a microcontroller 726, And a power supply 728.

The input signal adjusting unit 722 adjusts the analog input signal 710 (ie, an audio signal) input from the above-described telephone line interface unit to match the input range of the A / D converter 724. The adjusted analog audio signal is converted into a digital audio signal by the A / D converter 724.

The converted audio signal is inserted into a watermark in the digital signal processor or the microcontroller 726, and the audio signal in which the watermark is inserted is stored in the storage device 730 after being compressed. Power supply 728 provides the digital signal processor or microcontroller 726 with the necessary power.

Fig. 9C is a block diagram showing the configuration of another watermark embedding apparatus 820 according to the first embodiment of the present invention, in which the watermark embedding apparatus is connected in series between the telephone and the PSTN.

That is, the embodiment according to FIG. 9C is a watermark embedding apparatus 820 according to the case where the watermark embedding apparatus is connected in series between the telephone and the PSTN as in the embodiment of FIG. 8B described above. In this embodiment, since audio signals from outsiders and audio signals from internal counselors are input in different directions, the A / D or D / A converters 824 respectively before and after the digital signal processor or the microcontroller 826, respectively. And 826 and input signal controllers or output signal controllers 822 and 830.

A second embodiment of the present invention is an implementation of an apparatus for preventing forgery by using an encryption algorithm.

10A is a diagram illustrating an encryption and decryption process according to a second embodiment of the present invention.

Referring to Fig. 10A, input audio data is encrypted by a predetermined encryption algorithm. At this time, a predetermined encryption key is used for encryption. The encrypted data is stored in the storage device.

According to the present invention, the audio data encrypted by a predetermined encryption key in the forgery / falsification prevention device is a separate off-line decryption device (when a software program is implemented on a PC) when a problem of forgery / modulation of the data later occurs. By performing the decryption process of the encrypted data, it is possible to check whether the stored audio data is forged / modulated.

A type of encryption system according to a preferred embodiment of the present invention includes a symmetric cryptography system (also called a public key cryptography system) and an asymmetric cryptography system (also called a secret key cryptography system). In the symmetric key encryption system, the encryption key and the decryption key are the same, and in the asymmetric key encryption system, the encryption key and the decryption key are different from each other.

The symmetric key encryption algorithm has a fast encryption and decryption speed, and includes DES, 3DES, SEED, and Rijndael. Asymmetric key encryption algorithms are difficult to solve mathematically and take a long time to decrypt, and include RSA, ElGamal, and ECC. In the present invention, any encryption algorithm may be used.

In a preferred embodiment of the present invention, the experiment was conducted using a 128-bit Rijndael algorithm adopted as the Advanced Encryption Standard (AES) by NIST in the United States, and the experimental results are shown below. The following experimental results show the resources required to make 256 bytes of encrypted data into 256 bytes of decrypted raw data when the Rijndael algorithm is implemented using a TI digital signal processor (TI DSP) in the United States.

* Resource used when decoding from TI DSP (TMS 320VC5410): 256 Byte

* Operation capacity: about 20 MIPS (Million Instruction Per Second)

* Program code memory size used when decoding in TI DSP: 10KB (10,714 Byte)

* Data memory size used when decoding in TI DSP: 1KB (1024 Byte)

FIG. 10B is a block diagram showing the configuration of the encryption apparatus 920 according to the second embodiment of the present invention. Unlike FIG. 9B, the digital signal processor or the microcontroller 926 does not have a function of embedding a watermark. The description in FIG. 9B applies the same except that the function of encrypting the audio data using the encryption key is applied.

A third embodiment of the present invention is an implementation of an anti-forgery apparatus using a hash function.

11A is a diagram illustrating a data authentication process using a hash function according to a third embodiment of the present invention.

Referring to FIG. 11A, input audio data is input to a hash function, which is represented by Equation 1 below. As a hash function usable, MD5 (Message Digest 5) is preferably used, but not limited thereto.

M ₁ = H (I)

Here, I is input data, H (x) is a hash function, and M ₁ is a calculated hash value.

The hash value M ₁ , which is an output value of the hash function, is inserted into the input audio data, and the audio data is stored in the storage medium with the hash value M ₁ inserted.

The hash function is characterized by being a one-way function. In other words, input data inputted to a hash function cannot be inferred using only a hash value.

According to the present invention, if the hash value is inserted into the hash value calculated by the predetermined hash function in the forgery / falsification prevention device, the hash value authentication device (PC) of a separate offline is used when the forgery / falsification of the data later becomes a problem. It is possible to check whether the stored audio data is forged / modulated by performing the authentication process of the hash value.

The specific process of hash value authentication is as follows. The stored audio data consists of the input audio data itself and a hash value M ₁ calculated by applying a hash function to the data. A new hash value (M ₂ ) is obtained from the input data using the same hash function as that used in the hash value inserting device (i.e., the forgery / falsification preventing device of the present invention). If the hash value M ₁ inserted into the stored audio data and the newly obtained hash value M ₂ are equal to each other, the stored audio data is an unmodulated original. If the two hash values are different from each other, the stored audio data is stored. The data is considered to be forged / modulated.

FIG. 11B is a block diagram showing the configuration of the hash value inserting apparatus 1020 according to the third embodiment of the present invention. Unlike FIG. 9B, the digital signal processor or the microcontroller 1026 has a function of embedding a watermark. Rather, the description in FIG. 9B applies the same except that the hash value of the digital audio data is calculated and the calculated hash value is inserted into a specific portion of the audio data.

While the invention has been particularly shown and described with reference to the above embodiments, it has been used merely for the purpose of illustration and those of ordinary skill in the art to which the invention pertains may have as defined in the appended claims. It should be understood that various modifications may be made without departing from the spirit and scope.

According to the present invention as described above, when the call data is stored in the CTI system is used a technology that can prevent or verify the forgery / tampering of the data in real time, so that the stored call data is forged / forgery when confirmation of the call data It is effective to check whether or not.

Claims (13)

A plurality of internal telephones, each of which is connected to the plurality of internal telephones via a telephone line, and a CTI server which controls connecting a telephone call from an external telephone to the plurality of internal telephones, and each of the plurality of internal telephones and the external In a computer integrated telephone system (CTI) system having a storage device for storing call data between telephones, the anti-counterfeiting device for inserting information to prevent forgery / falsification of data in the stored call data, comprising: The forgery / falsification prevention device is installed between a predetermined telephone line in the system and the internal telephone, so that the information for preventing the forgery / falsification is stored before the call data transmitted through the predetermined telephone line is stored in the storage device. Anti-counterfeiting device, characterized in that the insertion into the call data in real time. The method of claim 1, The real-time embedding process of the information for preventing forgery / falsification is performed by inserting a watermark into the call data, and the confirmation of whether the stored call data is forged / modulated is performed as the detection of the inserted watermark. Forgery / tamper prevention device characterized in that. The method of claim 1, The real-time insertion process of the information for preventing the forgery / forgery is made by encrypting the call data with a predetermined encryption key, and whether the forgery or forgery of the stored call data corresponds to the predetermined encryption key. And forgery / modulation prevention device characterized in that it is performed as decryption of said encrypted call data using a predetermined decryption key. The method of claim 1, The real-time insertion process of information for preventing forgery / falsification is performed by inserting a hash value of the call data into the call data, and the inserted hash value is obtained by applying the call data to a predetermined hash function. Lose, Checking whether the stored call data is forged / modulated is performed as a check whether the hash value inserted into the stored call data and the stored call data are equal to a hash value newly obtained by applying the stored call function to the predetermined hash function. Anti-falsification device. The method according to any one of claims 1 to 4, And the forgery / tamper protection device is implemented in the computer integrated telephone system in the form of a general purpose PCB board, DSP chip board, FPGA board, ASIC board, or software program. The method according to any one of claims 1 to 4, And the anti-counterfeiting device is connected in parallel between the predetermined telephone line in the system and the internal telephone, and the storage device is connected in series with the anti-counterfeiting device. The method according to any one of claims 1 to 4, And the anti-counterfeiting device is connected in series between the predetermined telephone line in the system and the internal telephone, and the storage device is connected in parallel with the anti-counterfeiting device. The method according to any one of claims 1 to 4, The forgery / tamper prevention device is characterized in that installed in the CTI server. The method according to any one of claims 1 to 4, The anti-falsification device is An A / D converter for converting an input analog call data signal into a digital signal; A digital signal processor or microcontroller that inserts information for preventing the forgery / modulation into the converted digital call data signal in real time and transmits the information to the storage device; And And a power supply device for supplying power to the digital signal processor or the microcontroller. A plurality of internal telephones, each of which is connected to the plurality of internal telephones via a telephone line, and a CTI server which controls connecting a telephone call from an external telephone to the plurality of internal telephones, and each of the plurality of internal telephones and the external In a computer integrated telephone system (CTI) system having a storage device for storing call data between telephones, a method for inserting information to prevent forgery / falsification of data in the stored call data, comprising: (a) receiving call data between each of the plurality of internal telephones and the external telephone transmitted through a predetermined telephone line in the system; (b) inserting information into the call data in real time to prevent the forgery / falsification into the received call data; And (c) storing the call data with the information inserted therein. The method of claim 10, The step (a) includes the step of embedding a watermark in the received call data, characterized in that the confirmation of the forgery / forgery of the stored call data is performed as the detection of the inserted watermark. The method of claim 10, The step (a) includes encrypting the received call data with a predetermined encryption key, and confirming whether the stored call data is forged or forged, using a predetermined decryption key corresponding to the predetermined encryption key. And decrypting the encrypted call data used. The method of claim 10, The step (a) includes inserting a hash value of the call data into the received call data, wherein the inserted hash value is obtained by applying the call data to a predetermined hash function, Checking whether the stored call data is forged / modulated is performed as a check whether the hash value inserted into the stored call data and the stored call data are equal to a hash value newly obtained by applying the stored call function to the predetermined hash function. How to.