# US 10,771,453 B2 · User-to-user information (UUI) carrying security token in pre-call authentication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,771,453 B2 - Document ID: US10771453B2 - Status: Granted - Kind: B2 - Application number: 15/397,757 - Filed: 2017-01-04 - Published: 2018-07-05 - Granted: 2020-09-08 - Earliest claimed: 2017-01-04 - Assignees: Cisco Technology, Inc. - Applicants: Cisco Technology, Inc. - Inventors: Kim Nam; Dusko Zgonjanin - Web page: https://patentgrep.com/patent/US10771453B2 ## CPC - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/126: {the source of the received data} - H04L 65/1016: IP multimedia subsystem [IMS] - H04L 65/1033: Signalling gateways - H04L 65/1045: Proxies, e.g. for session initiation protocol [SIP] - H04L 65/1069: Session establishment or de-establishment - H04L 65/1104: Session initiation protocol [SIP] - H04M 3/436: Arrangements for screening incoming calls {, i.e. evaluating the characteristics of a call before deciding whether to answer it (based on the calling party profile H04M3/42059; based on location H04M3/42348; based on presence H04M3/42365; diversion H04M3/54)} - H04L 63/0838: {using one-time-passwords} - H04L 63/0846: {using time-dependent-passwords, e.g. periodically changing passwords} - H04M 2203/6027: Fraud preventions - H04M 2203/6081: Service authorization mechanisms - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04M: TELEPHONIC COMMUNICATION (circuits for controlling other apparatus via a telephone cable and not involving telephone switching apparatus G08) ## Abstract In one embodiment, a telecommunication apparatus includes a processor to generate a telephone call set-up message including a user-to-user information (UUI) field, and include a security token in the UUI field of the telephone call set-up message, and a network interface to send the telephone call set-up message to a telephone network. Related apparatus and methods are also described. ## Claims ### Claim 1 A telecommunication apparatus, comprising: a hardware processor in a caller station where telephone calls are initiated, the hardware processor configured to: generate a telephone call set-up message associated with a telephone call, the telephone call set-up message including a user-to-user information (UUI) field, generate a security token which includes an authentication key that is embedded in the security token at the caller station prior to initiating the telephone call, include the security token in the UUI field of the telephone call set-up message, and establish the telephone call once an authentication subsystem in a telecommunication component of a telecommunication system authenticates the authentication key that is embedded in the security token of the UUI field of the telephone call set-up message, wherein the authentication subsystem sends a response message to the telecommunication component after authenticating the authentication key that is embedded in the security token, wherein if the security token is deemed valid based on the authenticating, the response message indicates that a telephone call establishment process should continue, further wherein if the security token is deemed invalid based on the authenticating, the response message indicates that the telephone call is unauthorized or that the telephone call should be released; and a network interface configured to: send the telephone call set-up message through a telephone network to the authentication subsystem before the telephone call is established with a subscriber. ### Claim 2 (depends on 1) The apparatus according to claim 1, wherein: the security token is a one-time use security token; and the processor is operative to generate a new security token to include in the UUI field for a new telephone call that is initiated. ### Claim 3 (depends on 1) The apparatus according to claim 1, wherein the security token is used by an authentication service which authenticates the security token in order to determine whether a telephone call originating from the telecommunication apparatus should be established. ### Claim 4 (depends on 1) The apparatus according to claim 1, wherein the telecommunication component comprises a Serving Call Session Control Function (S-CSCF). ### Claim 5 (depends on 4) The apparatus according to claim 4, wherein the telephone call set-up message comprises a CAMEL Application Part (CAP) initial detection point (IDP) message and the response message comprises a CAP Continue (CUE) message. ### Claim 6 (depends on 1) The apparatus according to claim 1, wherein the telecommunication component comprises a Gateway Mobile Switching Centre (GMSC). ### Claim 7 (depends on 6) The apparatus according to claim 6, wherein the telephone call set-up message comprises a Session Initiation Protocol (SIP) INVITE message and the response message comprises a SIP INVITE message. ### Claim 8 An authentication system, comprising: a network interface device to receive a message from a telecommunication component of a telecommunication system prior to a telephone call being established, the message generated by a caller station where telephone calls are initiated and including a user-to-user information (UUI) field associated with the telephone call; and a hardware processor executing on the network device to: extract an authentication key embedded in a security token from the UUI field of the message, wherein the security token is generated with an authentication key at the caller station prior to initiating the telephone call; authenticate the authentication key yielding a result; and prepare a response message based on the result for sending to the telecommunication component, wherein if the security token is deemed valid based on the authentication, the processor is operative to prepare the response message indicating that a telephone call establishment process should continue for the telephone call, further wherein if the security token is deemed invalid based on the authentication, the processor is operative to prepare the response message indicating that the telephone call is unauthorized or that the telephone call should be released, wherein the network interface is operative to send the response message to the telecommunication component, wherein, when the authentication system authenticates the authentication key in the UUI field of the message, the telephone call is established subsequent to the telecommunication component receiving the response message. ### Claim 9 (depends on 8) The system according to claim 8, wherein the telecommunication component comprises a Gateway Mobile Switching Centre (GMSC). ### Claim 10 (depends on 9) The system according to claim 9, wherein the message comprises a CAMEL Application Part (CAP) initial detection point (IDP) message and the response message comprises a CAP Continue (CUE) message. ### Claim 11 (depends on 8) The system according to claim 8, wherein the telecommunication component comprises a Serving Call Session Control Function (S-CSCF). ### Claim 12 (depends on 11) The system according to claim 11, wherein the message comprises a Session Initiation Protocol (SIP) INVITE message and the response message comprises a SIP INVITE message. ### Claim 13 An authentication method, comprising: receiving a message from a telecommunication component of a telecommunication system prior to a telephone call being established, the message generated by a caller station where telephone calls are initiated and including a user-to-user information (UUI) field and being associated with the telephone call; extracting an authentication key embedded in a security token from the UUI field of the message, wherein the security token is generated with an authentication key at the caller station prior to initiating the telephone call; authenticating the authentication key yielding a result; preparing a response message based on the result for sending to the telecommunication component, wherein if the security token is deemed valid based on the authentication, the response message is prepared indicating that a telephone call establishment process should continue for the telephone call, further wherein if the security token is deemed invalid based on the authentication, the response message is prepared indicating that the telephone call is unauthorized or that the telephone call should be released; and sending the response message to the telecommunication component, wherein, when the authentication system authenticates the authentication key in the UUI field of the message, the telephone call is established subsequent to the telecommunication component receiving the response message. ### Claim 14 (depends on 13) The method according to claim 13, wherein the telecommunication component comprises a Gateway Mobile Switching Centre (GMSC). ### Claim 15 (depends on 14) The method according to claim 14, wherein the message comprises a CAMEL Application Part (CAP) initial detection point (IDP) message and the response message comprises a CAP Continue (CUE) message. ### Claim 16 (depends on 13) The method according to claim 13, wherein the telecommunication component comprises a Serving Call Session Control Function (S-CSCF). ### Claim 17 (depends on 16) The method according to claim 16, wherein the message comprises a Session Initiation Protocol (SIP) INVITE message and the response message comprises a SIP INVITE message.