US 10,771,624 B1Granted

Data store for communication authentication

AssigneeMicrosoft Technology Licensing, LLC

InventorsRussell Andrew Penar, Amer Aref Hassan

Life of this patent

Estimating the term…

Loading patent…

Abstract

Techniques for authenticating pending communication sessions between user devices are disclosed herein. In an example, a data store performs operations to: store device authentication information for an initiating device specific to a pending communication session between the initiating device and a receiving device, wherein the first authentication information comprises at least a timestamp and identifier for the initiating device; store second authentication information from a service provider of the initiating device; provide the second authentication information to a service provider of the receiving device to authenticate the pending communication session prior to routing the pending communication to the receiving device; and provide the first authentication information to the receiving device to verify authenticity of the pending communication session.

Claims20

Dependent claims

A method comprising:

transmitting first authentication information to a data store from an initiating device of a pending communication session based on a trusted relationship with the data store, the first authentication information comprising at least a timestamp and identifier for the initiating device;
storing, by the data store, the first authentication information;
generating, by an initiating service provider, second authentication information indicating that the initiating device is a trusted device on a network of the initiating service provider in response to the initiating device initiating the pending communication session on the network of the initiating service provider;
transmitting the second authentication information to the data store;
storing, by the data store, the second authentication information;
providing, by the data store, the second authentication information to a receiving service provider in response to the pending communication session being routed to a network of the receiving service provider;
routing the pending communication session to a receiving device of the pending communication session in response to the receiving service provider confirming authenticity of the initiating device using the second authentication information;
and
providing, by the data store, the first authentication information to the receiving device to verify authenticity of the pending communication session.

6 more elements

A system comprising:

a data store for providing authentication for a pending communication session;
an initiating device configured to transmit first authentication information to the data store for the pending communication session based on a trusted relationship with the data store, the first authentication information comprising at least a timestamp and identifier for the initiating device, wherein the data store is configured to store the first authentication information;
an initiating service provider configured to generate second authentication information indicating that the initiating device is a trusted device on a network of the initiating service provider in response to the initiating device initiating the pending communication session on the network of the initiating service provider, wherein the initiating service provider is configured to transmit the second authentication information to the data store, and wherein the data store is configured to store the second authentication information;
a receiving device;
and
a receiving service provider configured to receive the second authentication information in response to the pending communication session being routed to a network of the receiving service provider, wherein the receiving service provider is configured to route the pending communication session to the receiving device in response to confirming authenticity of the initiating device using the second authentication information;
wherein the receiving device is configured to receive the first authentication information to verify authenticity of the pending communication session.

4 more elements

A system comprising:

means for generating first authentication information based on a trusted relationship of an initiating device of a pending communication session, the first authentication information comprising at least a timestamp and identifier for the initiating device;
means for storing the first authentication information;
means for generating second authentication information indicating that the initiating device is a trusted device on a network of an initiating service provider in response to the initiating device initiating the pending communication session on the network of the initiating service provider;
means for storing the second authentication information;
means for providing the second authentication information to a receiving service provider in response to the pending communication session being routed to a network of the receiving service provider;
means for routing the pending communication session to a receiving device of the pending communication session in response to the receiving service provider confirming authenticity of the initiating device using the second authentication information;
and
means for the first authentication information to the receiving device to verify authenticity of the pending communication session.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/375,599Filed 4 Apr 2019
Granted: 8 Sep 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification16 codes

H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
H04M 3/436
Systems providing special services or facilities to subscribers: arrangements for screening incoming calls , i.e. evaluating the characteristics…
G06F 21/42
User authentication: using separate channels for security data
H04L 9/3239
Using cryptographic hash functions: involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD

Family

No related US applications are recorded in the indexed filing history.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key