Recording using proxy servers

CA 02567232 2006-11-07

RECORDING USING PROXY SERVERS

TECHNICAL FIELD

The present disclosure is generally related to recording media streams associated with interactions between customers and agents.

BACKGROUND

A traditional passive tap recording technique includes recorders that are deployed along routes of communications. In this technique, each recorder operates similar to a “sniffer” by analyzing pass-by communication packets. The recorder records the packets corresponding to certain communication sessions based on its configuration.

In an IP telephony environment at, for example, a customer center, recorders are typically deployed either at a voice gateway, which interfaces between the Internet Protocol (IP) network and the public switched telephone network (PSTN), or at switches in order to stay along the routes of the communications. This technique has the advantages, among others, of (1) minimum intrusion into a communication system, (2) cost effectiveness in deployment for companies with centralized office locations, and (3) easy scalability for compliance recording.

To communicate with any agents at the customer center, a customer communication device, such as a time domain multiplexing (TDM) or a voice over Internet Protocol (VOIP) phone, first sends communication signals to a callprocessing device of the customer center, such as a soft switch. The communication signals can be sent either directly to the call-processing device in case of IP to IP communications or via a media processing device, such as a voice gateway in case of TDM to IP. The communication network can be a PSTN network or an IP-based network.

Once the communication signals have been received, the call-processing device then routes the communication signals to an agent phone. After several rounds of communication signal exchange, media communications between the agent’s

CA 02567232 2006-11-07 phone and customer’s phone can proceed via the media processing device and distribution devices. The distribution devices are network routers and switches.

In order to record the media communications using passive tapping, recorders are deployed at the media processing device or distribution devices using the network 5 traffic monitoring or duplicating features, such as CiscoTM Switch Port Analyzer (SPAN) feature, on these devices. These tapping features are often available to the recorders that are directly connected to the media processing device or distribution devices, namely to recorders deployed a customer center telephony system.

The traditional passive tap recording technique is typically deployed in a telephony environment that has little to no “intelligence” in managing and recording media communications. Customer Centers are perpetually looking for ways to improve the recording features of their telephony components. One way, among others, is to provide more “intelligence” within the customer telephony system and the recording system.

¹⁵

SUMMARY

Systems and methods for recording a communication session between a customer and an agent of a customer center communication system are provided. In this regard, a representative method comprises: communicating with the customer 20 center communication system via a proxy server; determining whether to record a media stream associated with the communication session based on communication between the customer center communication system and the proxy server; and responsive to determining that the media stream is to be recorded, recording the media stream from the communication session.

Another representative method comprises: configuring a communication component of the customer center communication system to enable recording of a media stream associated with the communication session; transmitting the media stream over a network based on the configuration of the communication component;

receiving the media stream over the network; and recording the received media stream.

CA 02567232 2008-12-01

Another representative method comprises: routing a media stream associated with the communication session based on information corresponding to routing criteria, wherein the routing criteria include call control protocols or policies; receiving the media stream associated with the communication session from the customer center communication system; and recording the received media stream.

In accordance with an aspect of the present invention, there is provided a method for recording a communication session of a customer center communication system between a customer and an agent, comprising the steps of:

communicating with a customer center communication system via a proxy server; determining at the proxy server whether to record a media stream associated with a communication session based on the communication between the customer center communication system and the proxy server;

responsive to determining that the media stream is to be recorded, receiving and recording the media stream associated with the communication session at a first recorder; and communicating with the first recording subsystem and a second recording subsystem of a recording system by the proxy server, the proxy server being operative to communicate with the first recording subsystem for recording the media stream if the second recording subsystem fails to communicate with the proxy server.

In accordance with another aspect of the present invention, there is provided a system for recording a communication session of a customer center communication system between a customer and an agent, comprising:

a customer center communication system having a communication device, the communication device being operative to transmit a media stream associated with a communication session between a customer and an agent;

a proxy server being operative to communicate with the customer center communication system to determine whether to record the media stream of the communication session; and a recording system being operative to communicate with the proxy server and the customer center communication system, the recording system being further operative to record the media stream responsive to determining that the media stream is to be recorded, wherein the recording system includes a first recording subsystem and a second

CA 02567232 2008-12-01 recording subsystem, both the first and second recording subsystems being operative to communicate with the proxy server, the proxy server being operative to communicate with the first recording system for recording the media stream if the second recording system fails to communicate with the proxy server.

In accordance with a further aspect of the present invention, there is provided a system for recording a communication session between a customer and an agent, comprising:

a proxy server being operative to communicate with a customer center communication system to determine whether to record a media stream associated with a communication session, the proxy server being further operative to transmit instructions to the customer center communication system to duplicate the media stream and transmit the duplicated media stream over a network; and a recording system being operative to communicate with the proxy server and the customer center communication system, the recording system being operative to receive the duplicated media stream over the network and record the duplicated media stream.

In accordance with another aspect of the present invention, there is provided a method for recording a communication session between a customer and an agent, comprising the steps of:

configuring a communication component of a customer center communication system to enable recording of a media stream associated with a communication session;

transmitting the media stream over a network based on the configuration of the communication component;

receiving the media stream over the network at a proxy server;

determining, at the proxy server, whether to record the media stream associated with the communication session based on the configuration of the communication component;

transmitting instructions to the customer center communication system to duplicate the media stream; and receiving the duplicated media stream by the recording system.

In accordance with a further aspect of the present invention, there is provided a system for recording a communication session between a customer and an agent, comprising:

3a

CA 02567232 2008-12-01 a customer center communication system having a communication component, the communication component being operative to be configured to enable recording of a media stream associated with a communication session, the communication component being further operative to transmit the media stream over a network based on the configuration of the communication component;

a recording system being operative to receive and record the media stream over the network; and a proxy server operative to receive the media stream over the network, wherein the proxy server is operative to determine whether to record the media stream based on the configuration of the communication component and to transmit instructions to the customer center communication system to duplicate the media stream and transmit the duplicated media stream to the recording system.

In accordance with another aspect of the present invention, there is provided a system for recording a communication session between a customer and an agent, comprising:

a customer center communication system having a communication component, the communication component being operative to be configured to enable recording of a media stream associated with a communication session, the communication component being further operative to transmit the media stream over a network based on the configuration of the communication component;

a proxy server operative to determine whether to record the media stream based on the configuration of the communication component, the proxy server being further operative to transmit instructions to the customer center communication system to duplicate the media stream and transmit the duplicated media stream over the network; and a recording system being operative to receive and record the duplicated media stream over the network.

In accordance with a further aspect of the present invention, there is provided a method for recording a communication session between a customer and an agent, comprising the steps of:

3b

CA 02567232 2008-12-01 routing by a customer center communication system a media stream associated with a communication session based on information corresponding to routing criteria, wherein the routing criteria include call control protocols or policies;

receiving the media stream associated with the communication session from the customer center communication system at a proxy server;

determining whether to record the media stream associated with the communication session based on the information corresponding to the routing criteria;

transmitting instructions from the proxy server to the customer center communication system to duplicate the media stream; and receiving the duplicated media stream by the recording system.

In accordance with another aspect of the present invention, there is provided a system for recording a communication session between a customer and an agent, comprising:

a customer center communication system having a communication component, the communication component being operative to route a media stream associated with a communication session based on information corresponding to routing criteria, wherein the routing criteria include call control protocols or policies;

a recording system being operative to receive the media stream over the network and record the received media stream; and a proxy server that facilitates the communication between the customer center communication system and the recording system, wherein the proxy server is operative to determine whether to record the media stream associated with the communication session based on the recording information from the customer center communication system, and to transmit instructions to the customer center communication system to duplicate the media stream and transmit the duplicated media stream to the recording system.

In accordance with a further aspect of the present invention, there is provided a system for recording a communication session between a customer and an agent, comprising:

a customer center communication system having a communication component, the communication component being operative to route a media stream associated with a communication session over a network based on information corresponding to routing criteria, wherein the routing criteria include call control protocols or policies;

3c

CA 02567232 2008-12-01 a proxy server being operative to receive the media stream based on the information corresponding to the routing criteria and determine whether to record the media stream, responsive to the determination, the proxy server being operative to transmit instructions to the customer center communication system to duplicate the media stream and transmit the duplicated media stream over the network; and a recording system being operative to receive and record the duplicated media stream over the network.

Other systems, methods, features, and advantages of the present disclosure will become apparent to one with skill in the art upon examination of the following drawings and detailed description. It is intended that all such additional systems, methods, features, and advantages be included within this description, be within the scope of the present disclosure, and be protected by the accompanying claims.

BRIEF DESCRIPTION OF THE DRAWINGS

Many aspects of the disclosure can be better understood with reference to the following drawings. The components in the drawings are not necessarily to scale, emphasis instead being placed upon clearly illustrating the principles of the present disclosure. Moreover, in the drawings, like reference numerals designate corresponding parts throughout the several views.

FIG. 1 is a schematic diagram of an embodiment of a system in which media communications can be recorded using a proxy server;

FIG. 2 illustrates an exemplary call flow in recording media streams associated with a call;

FIGs. 3 A-C illustrate exemplary call flows for recording two or more duplicated media streams associated with a call using a proxy server, such as that shown in FIG. 1;

FIG. 4 is an exemplary schematic diagram that illustrates a recorder failover solution;

FIG. 5 is an exemplary schematic diagram that illustrates a proxy failover solution;

FIG. 6 is a flow diagram that illustrates an exemplary operation for recording media streams associated with a call;

3d

CA 02567232 2007-06-19

FIG. 7 is a flow diagram that illustrates an exemplary operation for recording an interaction between a customer and an agent using a proxy server, such as that shown in FIG. 1 ; and

FIG. 8 is a flow diagram that illustrates an exemplary operation of an embodiment of a proxy server, such as that shown in Fig. 1, that facilitates recording encrypted media streams from the customer center telephony system.

DETAILED DESCRIPTION

Disclosed are systems and methods for using intelligent proxy servers for recording media streams associated with interactions. The proxy servers serve as interfaces between a recording system, which may contain multiple recorders and other servers, and a customer center’s telephony infrastructure. Depending on the customer center’s telephony infrastructure, the intelligent proxy servers can serve as standard session initiation protocol (SIP) proxies, H323 Gatekeepers, or proxy servers using other call control protocols.

Customer center includes, but is not limited to, outsourced contact centers, outsourced customer relationship management, customer relationship management, voice of the customer, customer interaction, contact center, multi-media contact center, remote office, distributed enterprise, work-at-home agents, remote agents, branch office, back office, performance optimization, workforce optimization, hosted contact centers, and speech analytics, for example.

Additionally, included in this disclosure are embodiments of integrated workforce optimization platforms, other integrated optimization platforms may be found in U.S. Application No. 11/359,359, filed on February 22, 2006, entitled “Systems and Methods for Workforce Optimization.” At least one embodiment of an integrated workforce optimization platform integrates: (1) Quality Monitoring/Call Recording - voice of the customer; the complete customer experience across multimedia touch points; (2) Workforce Management - strategic forecasting and scheduling that drives efficiency and adherence, aids in planning, and helps facilitate optimum staffing and service levels; (3) Performance Management - key performance indicators (KPIs) and scorecards that analyze and help identify

CA 02567232 2006-11-07 synergies, opportunities and improvement areas; (4) e-Learning - training, new information and protocol disseminated to staff, leveraging best practice customer interactions and delivering learning to support development; and/or (5) Analytics deliver insights from customer interactions to drive business performance. By way of example, the integrated workforce optimization process and system can include planning and establishing goals - from both an enterprise and center perspective - to ensure alignment and objectives that complement and support one another. Such planning may be complemented with forecasting and scheduling of the workforce to ensure optimum service levels. Recording and measuring performance may also be utilized, leveraging quality monitoring/call recording to assess service quality and the customer experience.

Exemplary systems are first discussed with reference to the figures. Although these systems are described in detail, they are provided for purposes of illustration only and various modifications are feasible. After the exemplary systems are described, examples of flow diagrams of the systems are provided to explain the maimer in which media streams associated with an interaction can be recorded.

Systematic Diagram Using a Proxy Server

Referring now in more detail to the figures, FIG. 1 is a schematic diagram of an embodiment of a system in which media communications can be recorded using a proxy server. A customer center telephony system 105 has one or more agent phones 110,115,120 that are coupled to one or more computer-telephone integration (CTI) servers 125 and one or more call control servers 130. The customer center telephony system 105 is coupled to the recording system 133, which includes one or more proxy servers 135, one or more recorders 140,145,150, and one or more recording control servers 155.

In general, the proxy server 135 is a computer that offers a computer network service to allow clients to make indirect network connections to other network services. A client connects to the proxy server 135, then requests a connection, file, or other resource available on a different server, e.g., the CTI server 125, call control server 130, and recording control server 155, among others.

CA 02567232 2006-11-07

The proxy server 135 functions as a single node for the customer center telephony system 105 or any third party system (not shown) to communicate with.

The proxy server can pass requests (modified) from the customer center telephony system 105 on to the recorders 140,145,150 to complete the requests.

Alternatively or additionally, the proxy server accumulates and saves files that are most often requested in a cache. The proxy server 135 provides the resource either by connecting to the specified server or by serving it from the cache. In some cases, the proxy server 135 can alter the client's request or the server's response for various purposes. The proxy server 135 can also serve as a firewall. In one embodiment, the proxy server 135 can be described as a buffer between a computer and the resources being accessed.

The cache of the proxy server 135 may already contain information needed by the time of the request, making it possible for the proxy server 135 to deliver the information immediately. Therefore, the proxy server 135 can potentially increase the speed of communication to the servers.

Alternatively or additionally, the proxy server 135 can operate in a hybrid recording environment and communicate with recorders that operate in a hybrid recording mode, in which both active recording and passive sniffing are performed.

It should be noted that the proxy server 135 is shown in Fig. 1 as a separate device from the other components of the recording system 133. However, the proxy server 135 can also be deployed on one of the recorders 140,145,150 or on other servers, such as the recording control servers 155. The proxy server 135 can communicate with the CTI server 125 and/or the call control server 130 to receive call events and other call related information such as agent identifications. The communication can also involve the recording of at least one media stream associated with an interaction within the customer center telephony system 105.

The customer center telephony system 105 can be configured to send call requests to or receive call requests from the proxy server 135. The customer center telephony system 105 can further be configured to send duplicated media streams associated with the interactions to be recorded to the destinations negotiated in the call request process. The proxy server 135 can also invoke and send requests to the

CA 02567232 2006-11-07 customer center telephony system 105 to request the duplicated media streams of interactions based on received CTI events and information or other call notification systems, such as SIP, for example.

The proxy server 135 can route the duplicated media streams associated with the interactions to the recorders 140,145,150 based on various conditions, criteria, or policies. The proxy server 135 can also re-direct the calls to a different proxy server based on load, bandwidth, or other configurations. The proxy server 135 can communicate with the recorders 140,145,150 using standard call control protocols, such as session initiation protocol (SEP), H323, media gateway control protocol (MGCP), or skinny client control protocol (SCCP), or using proprietary protocols, or using static configurations. The operation of the proxy server is further described in relation to FIGs. 6-8.

Session Initiation Protocol (SIP)

Briefly, SIP is an application layer control simple signaling protocol for Voice Over Internet Protocol (VoIP) implementations. SEP is a textual client-server based protocol that the end user systems and proxy servers can provide call forwarding, callee and caller number identification, basic Automatic Call Distribution (ACD) and personal mobility, among others.

SIP addresses are generally in the form of a Uniform Resource Location (URL). The SIP addresses can be embedded in Web pages and therefore can be integrated as part of implementations such as Click to talk, for example. SEP using simple protocol structure, provides fast operation, flexibility, scalability and multiservice support. SEP provides its own reliability mechanism. SIP creates, modifies and terminates sessions with one or more participants. These sessions include Internet multimedia conferences, Internet telephone calls and multimedia distribution. Members in a session can communicate using multicast or using a mesh of unicast relations, or a combination of these. SIP invitations used to create sessions carry session descriptions, which allow participants to agree on a set of compatible media types.

CA 02567232 2006-11-07

SIP supports user mobility by proxying and redirecting requests to the user's current location. Users can register their current location. SIP is not tied to any particular conference control protocol. It is designed to be independent of the lowerlayer transport protocol and can be extended with additional capabilities. SIP transparently supports name mapping and redirection services, allowing the implementation of Integrated Services Digital Network (ISDN) and Intelligent Network telephony subscriber services. These facilities also enable personal mobility which is based on the use of a unique personal identity. SIP supports five facets of establishing and terminating multimedia communications: 1) User location, 2) User capabilities, 3) User availability, 4) Call setup, and 5) Call handling.

SIP can also initiate multi-party calls using a multipoint control unit (MCU) or fully-meshed interconnection instead of multicast. Internet telephony gateways that connect Public Switched Telephone Network (PSTN) parties can also use SIP to set up calls between them. SIP is designed as part of a multimedia data and control architecture currently incorporating protocols, such as Resource Reservation Protocol (RSVP), Real-Time Transport Protocol (RTP), Real-Time Streaming Protocol (RTSP), and Service Advertising Protocol (SAP), among others. However, the functionality and operation of SIP does not depend on any of these protocols. SIP can also be used in conjunction with other call setup and signaling protocols. In that mode, an end system uses SIP exchanges to determine the appropriate end system address and protocol from a given address that is protocol-independent. For example, SIP could be used to determine that the party can be reached using H.323, to find the H.245 gateway and user address, and then use H.225.0 to establish the call.

H.323 Protocol

H.323 is a protocol that generally provides audio-visual communication sessions on any packet network. Currently, H.323 is implemented by various Internet real-time applications such as NetMeeting and Ekiga. H.323 is commonly used in voice over Internet Protocol (VoIP, Internet Telephony, or IP Telephony) and IPbased videoconferencing.

CA 02567232 2006-11-07

Media Gateway Control Protocol (MGCP)

MGCP is a standard protocol generally for handling the signaling and session management needed during a multimedia conference. The protocol defines a means of communication between a media gateway, which converts data from the format required for a circuit-switched network to that required for a packet-switched network and the media gateway controller. MGCP can be used to set up, maintain, and terminate calls between multiple endpoints. MGCP can be used for controlling telephony gateways from external call control elements, such as the media gateway controllers or call agents. MGCP assumes a call control architecture where the call control intelligence is outside the gateways and handled by external call control elements. The MGCP assumes that these call control elements, or Call Agents, can synchronize with each other to send coherent commands to the gateways under their control. MGCP is, in essence, a master/slave protocol, where the gateways are generally expected to execute commands sent by the Call Agents.

Skinny Client Control Protocol (SCCP)

SCCP defines a simple and easy to use architecture. An H.323 proxy server can be used to communicate with the Skinny Client using the SCCP. In such a case, the telephone is a skinny client over IP, in the context of H.323. A proxy server is used for the H.225 and H.245 signaling. The end stations (such as the agent phone 110,115, 120) can run what is called the Skinny Client, which consumes less processing overhead. The Skinny Client can communicate with the call control server 130 to establish a call with another phone 110,115,120. Once the call control server 130 has established the call, the two phones use connectionless (UDP/IP-based) communication for audio transmissions. Costs and overhead are thus reduced by confining the complexities of H.323 call setup to the call control server 130, and using the Skinny protocol for the actual audio communication into and out of the end stations.

CA 02567232 2006-11-07

Simply Call Flow Diagram

FIG. 2 illustrates an exemplary call flow in recording media streams associated with a call. Upon receiving a call request for an agent’s extension via line 210, a call control server 230 checks the recording configuration for that extension. If the extension is configured for recording, in addition to the normal call setup procedures, the call control server 230 sends call requests to a proxy server 235 and the agent phone 220 to establish dialogs for recording via lines 225 and 237. Upon receiving the call request from the call control server 230, the proxy server 235 routes the call from the call control server 230 to one of the recorders 240,245 via lines 237, 242. The recorders are registered with the proxy server 235 based on, for example, a recording load balancing algorithm, among others. Upon receiving a positive confirmation from the selected recorder 245, the proxy server 235 can include an IP address and port of the selected recorder 245 in its responses as part of the call control flow.

Upon having successfully established the dialogs, the call control server 230 instructs the agent’s phone 220 via line 225 to send duplicated media streams of the on-going call to the recorder 245. The agent phone 220 duplicates media streams and sends the duplicated media streams via line 247, in the format of the, for example, real-time transport protocol (RTP) packets, of the call directly to the recorder 245. The recorder 245 can associate two of the media streams of the same call and record them as, for example, a single media stream. When the call ends, the call control server 230 terminates the dialog with the proxy server 235 using the call control protocol via line 237. The proxy server 235 sends a call end message to the recorder 242 via line 242.

Call Flows for Recording Using a Proxy Server

FIGs. 3 A-C illustrate exemplary call flows for recording one or more duplicated media streams associated with a call using a proxy server, such as that shown in FIG. 1. The call control servers 330A-C send call requests to proxy servers

CA 02567232 2006-11-07

335A-C and the agent phones 320A-C to establish dialogs for recording media streams via lines 337A-C. The two or more duplicated media streams can be sent to a recording system in a single call dialog or as two separate call dialogs. In case of two separate call dialogs, a unique call identification of the original call may be included in the information of the two call dialogs to link the relationship between them.

Referring now to FIG. 3A, the proxy server 335A instructs the call control server 330A via line 337A to re-direct the calls to a recorder 345A. The call control server 330A instructs the agent phone 320A, gateways (not shown), conference bridges (not shown) and other telephony components to duplicate the media streams and transmit the duplicated media streams to the recorder 345A. The call control server 330A communicates with the recorder 345A to establish a dialog for recording the duplicated media streams via line 339. The agent phone 320A transmits the duplicated media streams to the recorder 345A via line 341.

Referring to FIG. 3B, the proxy server 335B proxies the call and directs an agent phone 320B to send the duplicated media streams directly to recorder 345B. The proxy server 335B communicates with the recorder 345B to establish a dialog for recording the duplicated media streams via line 342. The call control server 330B instructs with the agent phone 320B to duplicate the media streams and transmit the duplicated media streams directly to the recorder 345B. The agent phone 320B transmits the duplicated media streams directly to the recorder 345B via line 344.

Referring to FIG. 3C, the proxy server 335C proxies the call as well as the duplicated media streams. The proxy server 345C communicates with the recorder 335C to establish a dialog for recording the duplicated media streams via line 346. The call control server 330C instructs the agent phone 320C to duplicate the media streams and transmit the duplicated media streams to the proxy server 335C. The agent phone 320C transmits the duplicated media streams to the proxy server 335C via line 348. The proxy server 335C receives the duplicated media streams and transmits the duplicated media streams to the recorder 345C via line 352.

The proxy servers 335 in FIGs. 3A-C may use the standard call control calls such as SIP, H323, which may or may not be the same as the protocol it uses to

CA 02567232 2006-11-07 communicate with the telephony system, to communicate with the recorders. The proxy server may also use other protocols to communicate with the recorders 345.

Recorder Failover Solution

FIG. 4 is a schematic diagram that illustrates an embodiment that utilizes recorder failover. A proxy server 435 communicates with a customer center telephony system 405, which includes an agent phone 420 and a call control server 430, among others. The proxy server 435 communicates with multiple recorders 440, 445 of a recording system 433. If the recorder 440 malfunctions, the proxy server 435 can communicate with the recorder 445 to record media streams associated with the interactions within the customer center telephony system 405, and vice versa. If the recorders 440,445 malfunction, the proxy server 435 can communicate with another recorder (not shown) to record the media streams associated with the interactions within the customer center telephony system 405. Alternatively or additionally, the proxy server 435 detects that a recorder fails and sends a redirect message (or relNVITE message as in the case with SIP) to the Customer Center telephony system to transmit the existing call/recordings to a “good” recorder.

Proxy Failover Solution

FIG. 5 is an exemplary schematic diagram that illustrates a embodiment that utilizes proxy failover. The proxy failover solution can use a link protector 534, which communicates with a customer center telephony system 505. The system 505 includes an agent phone 520 and a call control server 530, among others. Multiple proxy servers connect to the link protector 534. In this example, proxy server 535 serves as a primary server and proxy server 537 and other servers (not shown) serve as back-ups. The proxy servers 535, 537 can have the same IP address on the network interface, connecting to the link protector. These proxy servers 535, 537 connect to the same pool of recorders 540, 545. During normal operation, the link protector 534 passes network traffic to the primary proxy server 535. Upon having detected that connection to the primary proxy server 535 is down, the link protector 534 passes traffic to the backup proxy server 357.

CA 02567232 2006-11-07

Alternatively or additionally, proxy failover can be achieved by configuring the multiple proxy servers 535,537 with different IP addresses but the same domain name system (DNS) name. In this implementation, the multiple proxy servers 535, 537, connecting to the same pool of recorders are utilized. These proxy servers 535, 537, with different IP addresses on the interface connecting to the customer center telephony system 505, are registered with the same DNS name. The customer center telephony system 505 is configured with the DNS names of the proxy servers 535, 537 for communicating with the proxy servers 535, 537. For example, the customer center telephony system 505 queries for the DNS of the proxy servers 535, 537 to obtain the proxy servers’ IP addresses. Responsive to the query, the customer center telephony system 505 receives the proxy servers’ IP addresses and maintains a list of the IP addresses in a DNS database. The customer center telephony system 505 generally exhausts the entire list to find an IP address to successfully connect to the proper proxy server.

Alternatively or additionally, proxy failover can be achieved by configuring a primary and multiple secondary proxy servers in the customer center telephony system 505. Alternatively or additionally, a failover solution can be achieved by instructing the recorders 540, 545 to switch to passive (sniffing) recording provided that the recorders 540, 545 are configured with a hybrid recording mode.

Flow Diagram Depicting Operation of Recording Media Streams

FIG. 6 is a flow diagram that illustrates operation of an embodiment in which media streams associated with an interaction are recorded. Beginning with block 605, a customer center telephony system communicates with a proxy server for recording the media streams of the interaction. For example, a customer center’s telephony infrastructure can configure each telephony component, such as an agent phone with an extension, gateway, call control server, and CTI server, among others, with recording options. The recording options can include, but are not limited to the following:

“Do not record”, which indicates calls on an extension should never been recorded.

CA 02567232 2006-11-07 “100% record”, which indicates that all calls on the extension should be recorded.

“Application driven record”, which means the telephony components receive instructions from applications of, for example, a recording system or a policy system, to initiate a recording session of a call on the extension.

Record communication sessions based on business rules of the communication system, the business rules including recording all communication sessions in a queue or at a predetermined time.

In block 610, the proxy server stores recording information received from the customer center telephony system or the recording subsystem, among others. The recording information can include the recording options as mentioned above for initiating a recording session.

In block 615, the proxy server communicates with the customer center telephony system or the recording subsystem and determines whether to record the media streams associated with the interaction based on the communication. In block 620, responsive to the determination to record the media streams, the proxy server provides recording instructions to the customer center telephony system and the recording system based on the recording information.

In the first two options mentioned above, the customer center telephony system receives the calls and determines whether to invoke the calls to the proxy server for recording. In the “application driven record” option, the customer center telephony system waits to receive instructions from the recording system and a policy system. For example, the recording system may get the events of the calls on the agent phones via a CTI link. The instructions for recording from the recording system can be delivered via the CTI link to the customer center telephony system. In turn, the customer center telephony system can invoke the call recording session.

Alternatively or additionally, the instructions for recording can be sent to the customer center telephony system in the form of the call control protocol to directly invoke the call recording session. Alternatively or additionally, the customer center’s telephony infrastructure may choose to set a recording option to all extensions as a default option. For example, the customer center telephony system can set

CA 02567232 2006-11-07 “application driven record” as the recording option without any configuration involved. In this case, the proxy server invokes the requests for recording the media streams.

In a recording system where a hybrid recording mode is provided, the proxy server can decide if it needs to instruct the telephony system for active recording based on whether the call is already being recorded using the sniffing method.

In block 625, the media streams associated with the interaction within the customer center telephony system are associated with each other so that, for example, the media streams can be stitched together as a single recording for archival and replay. In block 630, the proxy server or the customer center telephony system initiates a recording session with the recording system. In block 635, the recording system receives and records the media streams based on the recording instructions from the proxy server.

Flow Diagram Depicting Operation of a Proxy Server

FIG. 7 is a flow diagram that illustrates an exemplary operation for recording an interaction between a customer and an agent using a proxy server, such as that shown in FIG. 1. In block 705, the proxy server communicates with a customer center telephony system. The communication is related to the recordation of the interaction between the customer and the agent. In block 710, the proxy server stores data that includes recording criteria corresponding to the recordation of the media streams associated with the interaction. The data is generally saved in the cache of the proxy server.

In block 715, the proxy server determines whether to record the media streams associated with the interaction based on the communication between the customer center telephony system and the proxy server. For example, the customer center telephony system can invoke the proxy server to record the interaction. The proxy server receives information pertaining to the invocation from the customer center telephony system and facilitates the process for recording the interaction.

CA 02567232 2006-11-07

In block 720, responsive to the determination of recording the media streams, the proxy server receives information about the media streams to facilitate associating the media streams with each other. In block 725, the proxy server transmits instructions to the customer center telephony system for initiating a recording session.

The instructions include duplicating the media streams and transmitting the duplicated media streams to a recording subsystem of the recording system. Alternatively or additionally, the instructions can include transmitting the duplicated media streams to the proxy server, which relays the duplicated media streams to the recording subsystem. Alternatively or additionally, the proxy server can provide instructions to the recording system to initiate the recording session.

In block 727, the proxy server can intelligently route requests to the recorders based on various criteria, policies, or recorder conditions. Alternatively, the customer center telephony system can also intelligently route requests to the recorders based on various criteria, policies, or recorder conditions. In this regard, either the proxy server 15 or the customer center telephony system, or both, can:

Balance call load by routing calls to the recorders based on the information of the recorders, such as current recording load and CPU usage, among others;

Route calls to recorders based on information in the call control protocols (e.g., tie two streams associated with a single call to the same recorder) or other policies such as co-residency of media, co-residency of media includes, but is not limited to, voice and screen capture, among others;

Route calls to the recorders based on a network topology and costs;

Redirect calls to different proxy servers based on the network topology and the recording load; and

Reject the call if hybrid recording mode is configured on the recorders and one of the recorder is already recording the call via passive method; and

Rejecting the media stream based on runtime or configuration criteria, the criteria including the recorder being over-loaded.

In block 730, the recording subsystem receives and records the media streams based on the associated information. The information to associate the media streams can be passed to the recording system via the call control protocol, such as SIP or

CA 02567232 2006-11-07

H323, or via the CTI link. The recording system can use the information associated with the call to stitch the two media streams and record them as a single media stream. For example, a left media stream can be associated with a right media stream by using a unique identification stored in the left and right media streams. The unique identification corresponds to the interaction.

Alternatively or additionally, the left and right media streams are transmitted to first and second recording subsystems of the recording system, respectively. The first and second recording subsystems provide the left and right media streams, respectively, to be stitched together as a single stream at, for example, archival and replay systems. Alternatively or additionally, the left and right media streams can be transmitted from the customer center telephony system to the archival and/or replay systems, which both can stitched together the left and right media streams as a single stream.

With regard to stitching, some embodiments can, for example, stitch the segments together with no gap at replay, stitch the segments together with a gap at replay, stitch the segments together with alternative content at replay (such as silence or other identifiers to signify that secured information has not been recorded and/or deleted and/or is protected from replay). For example, such a system may also provide indication between the stitched sides, which can be, for example, two or more sides that would provide indication to a user that something was removed for security purposes.

Network Topology

A network topology is the pattern of links connecting pairs of nodes of a network. The network topology provides the “shape” of a local area network (LAN) or other communications system. A given node has one or more links to others, and the links can appear in a variety of different shapes. The simplest connection is a oneway link between two devices. A second return link can be added for two-way communication. Modem communications cables usually include more than one wire in order to facilitate this, although very simple bus-based networks have two-way communication on a single wire.

CA 02567232 2006-11-07

One way, among others, to add more computers into a network is by daisychaining, or connecting each computer in series to the next. If a message is intended for a computer partway down the line, each system bounces the message along in sequence until the message reaches the destination. A daisy-chained network can take two basic forms: linear and ring.

A linear topology puts a two-way link between one computer and the next. By connecting the computers at each end, a ring topology can be formed. An advantage of the ring is that the number of transmitters and receivers can be cut in half, since a message will eventually loop all of the way around. When a node sends a message, each computer in the ring processes the message. If a computer is not the destination node, the computer passes the message to the next node, until the message arrives at its destination. If the message is not accepted by any node on the network, the message travels around the entire ring and returns to the sender. This potentially results in a doubling of travel time for data, but since the message is traveling at a significant fraction of the speed of light, the loss is usually negligible.

Another network topology, among others, is a star topology, which reduces the chance of network failure by connecting all of the systems to a central node. When applied to a bus-based network, this central hub rebroadcasts the transmissions received from any peripheral node to the peripheral nodes on the network, sometimes including the originating node. The peripheral nodes may thus communicate with all others by transmitting to, and receiving from, the central node only. The failure of a transmission line linking the peripheral nodes to the central node can result in the isolation of that peripheral node from all others, but the rest of the system remains unaffected.

Another network topology, among others, is a tree topology, which can be viewed as a collection of star networks arranged in a hierarchy. The tree topology has individual peripheral nodes (e.g., leaves) which are used to transmit to and receive from one other node only and may not act as repeaters or regenerators. Unlike the star network, the function of the central node may be distributed.

CA 02567232 2006-11-07

As in the conventional star network, individual nodes may thus still be isolated from the network by a single-point failure of a transmission path to the node. If a link connecting a leaf fails, that leaf is isolated; if a connection to a non-leaf node fails, an entire section of the network becomes isolated from the rest.

In order to alleviate the amount of network traffic that comes from broadcasting everything everywhere, more advanced central nodes were developed that would keep track of the identities of different systems connected to the network. These network switches can learn the layout of the network by first broadcasting data packets everywhere, then observing where response packets come from.

In a mesh topology, there are at least two nodes with two or more paths between them. A special kind of mesh, limiting the number of hops between two nodes, is a hypercube. The number of arbitrary forks in mesh networks makes them more difficult to design and implement, but their decentralized nature makes them very useful. This is similar in some ways to a grid network, where a linear or ring topology is used to connect systems in multiple directions. A multi-dimensional ring has a toroidal topology, for instance.

A fully connected, complete topology or full mesh topology is a network topology in which there is a direct link between all pairs of nodes. In a fully connected network with n nodes, there are n(n-l)/2 direct links. Networks designed with this topology are usually very expensive to set up, but have a high amount of reliability due to multiple paths data can travel on.

Hybrid networks use a combination of any two or more topologies in such a way that the resulting network does not have one of the standard forms. For example, a tree network connected to a tree network is still a tree network, but two star networks connected together (known as extended star) exhibit hybrid network topologies. A hybrid topology is always produced when two different basic network topologies are connected. Two common examples for Hybrid network are: star ring network and star bus network.

The Star ring network consists of two or more star topologies connected using a multistation access unit (MAU) as a centralized hub. The Star Bus network consists

CA 02567232 2006-11-07 of two or more star topologies connected using a bus trunk (the bus trunk serves as the network's backbone).

While grid networks have found popularity in high-performance computing applications, some systems have used genetic algorithms to design custom networks that have the fewest possible hops in between different nodes. Some of the resulting layouts are nearly incomprehensible, although they do function quite well.

Flow Diagram Depicting Operation of a Proxy Server in a Secure Environment

FIG. 8 is a flow diagram that illustrates operation of an embodiment in which a proxy server facilitates recording of encrypted media streams from the customer center telephony system. In the case where encryption is used in the customer center telephony system, duplicated media streams delivered to the recording system can be encrypted. The encrypted media streams have electronic keys for decryption of the media streams. In block 805, the electronic keys can be delivered to the proxy server from a telephony component such as a phone, which sends the encrypted duplicated media streams, in a secure connection. The secure connection may be achieved via a secure version of the call control protocols such as secure session initiation protocol (SIP) using transport layer security (TLS) or via a secure CTI link.

Upon detecting encryption and receiving the electronic keys, the proxy server determines how to decrypt the encrypted media streams, shown in block 810. The proxy server may choose to directly forward the keys to the selected recorder via a secure connection, shown in block 815. Again the secure connection may be a secure version of standard call control protocols such as secure sockets layer (SSL) and transport layer security (TLS) or proprietary socket connection secured by SSL or TLS.

In the scenario where the proxy server chooses to proxy the media streams, the proxy server directs the customer center telephony system to send the encrypted duplicated media streams to itself, shown in block 820. The proxy server decrypts the encrypted media streams using the electronic keys passed from the customer center telephony system. The proxy server forwards the decrypted media streams to the

CA 02567232 2006-11-07 selected recorders via a secure connection between the recorder and itself. In block

825, the recording subsystem can receive and record the media streams.

Secure Sockets Layer (SSL) and Transport Laver Security (TLS)

Secure Sockets Layer (SSL) and Transport Layer Security (TLS), its successor, are cryptographic protocols which provide secure communications on the Internet for such things as e-mail, internet faxing, and other data transfers. There are slight differences between SSL and TLS, but the protocol remains substantially the same. The term SSL as used here applies to both protocols unless clarified by context.

SSL provides endpoint authentication and communications privacy over the Internet using cryptography. In typical use, only the server is authenticated (e.g., its identity is ensured) while the client remains unauthenticated; mutual authentication requires public key infrastructure (PKI) deployment to clients. The protocols allow client/server applications to communicate in a way designed to prevent eavesdropping, tampering, and message forgery.

SSL involves three basic phases: 1) Peer negotiation for algorithm support, 2) Public key encryption-based key exchange and certificate-based authentication, and 3) Symmetric cipher-based traffic encryption. The SSL protocol exchanges records; each record can be optionally compressed, encrypted and packed with a message authentication code (MAC). Each record has a content_type field that specifies which protocol is being used.

In general, the client sends and receives several handshake structures as follows. The client sends a ClientHello message specifying the list of cipher suites, compression methods and the highest protocol version it supports. Then the client receives a ServerHello, in which the server chooses the connection parameters from the choices offered by the client earlier.

When the connection parameters are known, client and server exchange certificates (depending on the selected public key cipher). The server can request a certificate from the client, so that the connection can be mutually authenticated. Client and server negotiate a common secret called master secret, or simply encrypting a

CA 02567232 2006-11-07 secret with a public key that is decrypted with the peer's private key. Other key data is derived from this master secret (and the client and server generated random values), which is passed through a carefully designed Pseudo Random Function.

TLS/SSL have a variety of security measures. Some security measures, among others, are numbering all the records and using the sequence number in the MACs and using a message digest enhanced with a key (so only with the key can you check the MAC).

TLS/SSL protect against several “attacks,” like those involving a downgrade of the protocol to previous (less secure) versions, or weaker cipher suites. TLS/SSL include a hash algorithm in which the message that ends the handshake (Finished) sends a hash of the exchanged data seen by both parties.

TLS/SSL further include a pseudo random function that splits the input data in two (2) halves and processes them with different hashing algorithms (e.g., MessageDigest algorithm 5 (MD5) and Secure Hash Algorithm (SHA)). Then the pseudo random function logically processes (e.g., XOR) the two (2) halves together. This way the data protects itself in the event that one of these algorithms is found vulnerable.

Any process descriptions or blocks in flow charts should be understood as representing modules, segments, or portions of code which include one or more executable instructions for implementing specific logical functions or steps in the process, and alternate implementations are included within the scope of the preferred embodiment of the present disclosure in which functions may be executed out of order from that shown or discussed, including substantially concurrently or in reverse order, depending on the functionality involved, as would be understood by those reasonably skilled in the art of the present disclosure.

It should be emphasized that the above-described embodiments of the present disclosure, particularly, any “preferred” embodiments, are merely possible examples of implementations, merely set forth for a clear understanding of the principles of the disclosure. Many variations and modifications may be made to the above-described embodiment(s) of the disclosure without departing substantially from the spirit and principles of the disclosure. All such modifications and variations are intended to be

CA 02567232 2006-11-07 included herein within the scope of this disclosure and the present disclosure and protected by the following clainis.