Certified calls

0001The present invention relates to a method for authentication of a first Subscriber by a communication link with this in standing second party, said one of the participants with specification the identification of the other party by means of a terminal in a Communications network dials and where on the network to connect to Terminal of the other party is established. The invention relates to also a system for implementing the method.

0002Generally, both partners identify within a telephone conversation the very fact that one's voice is the other known. However, each of the two more or less easily through an imitation of Voice of the other are deceived. Mostly, however, the caller can it assume that the called party by dialing the assigned him Network identifier is sufficiently identified. If the person being called, however, the Voice of the caller is not known personally, so to must the caller legitimize. Here, the called party has the ability to query data the caller are more or less assign good and really only this should know. For example, a customer can with a call by the identify target its customer number.

0003Usually the information that a caller by giving such easy accessible data gets comparatively "ünkritisch" and contain hardly personal information. Nevertheless, it often happens that For example, the tax office employees give out personal information, after-read the caller by specifying on every business letter "Identified" control number has. A secure, yet easy to handle Authentication is obviously not by the methods known to date given.

0004For an electronic signature of documents or to authenticate Online customers are also cumbersome key method known in which to be signed and-Checking must verify from a trust center. Nevertheless, there is still the problem of the authentication of the unique Sender or of the customers. Object of the present invention is therefore to provide a method for secure to provide authentication of the two participants, the cost is with can be realized by simple means and the opportunities to complete Automation offers. Yet another object of the invention, a system for to provide implementation of the method.

0005These objects are achieved with a method according to claim 1 and a system dissolved according to claim 12th

0006The essential idea of ​​the invention is an independent means, in the line is switched and the one subscriber over the can authenticate other participants safe since it it in some ways personally "knows". This accessible through the network authentication means, in the suitable for secure identification and "tamper-proof" personal Dates to be authenticated subscriber are stored, can already at the Dial the sender in the network or as needed when connected be selected. So the selection of the composition can be targeted by one of the two carried partners when personal in the following discussion of the exchange Data is intended. According to the invention for authentication data added the subscriber to be authenticated by the means and with the stored data synchronized. After successful adjustment, can the authentication means the identity of the person served compared to the other participants certify.

0007The advantages of the method are obvious: For each on the type of data used for authentication with the method, a ensures comparatively secure authentication of the subscriber will. Above all, the process is relatively easy with the existing implement funds. The method can be used where for accessing security-related services to authenticate the customer necessarily is required. With the invention, a legally binding certificate is created, legal transactions to do with the authorities with a voice call.

0008In an advantageous embodiment of the method of turning on is Authentication means automatically in the line between the two participants made. So the selection of the composition, for example, build the happen connection, since at this time the one hand the network identifier of the Sender and the addressee are known. In this case, the means of a the web located central computer (server) can be implemented, for the Plurality of subscribers some kind of personal data stocked Netzbox (Hereinafter also referred to ID box) manages. This box is the network identifier of the assigned each participant. It is possible, the authentication does not cleared directly over the box, but the need for authentication take actions on a trust center, in which the relevant data stored and perform trimming. The box is then used only as Nodes in the constructed by the sender and can connect in this role even more functions, for example, a telephone exchange, take.

0009Since the inventive method advantageously for authentication of Sender to the addressee will be used, could the Certification appropriate box will be automatically dialed once the caller by selecting a network identifier connects. Certainly is a preferred use of the invention in the telephonic communication are, as for example in the communication via e-mail, other methods for (de-) Coding respectively for authentication are possible.

0010When communicating over a network, in particular a telephone network or the Internet will be an advantageous medium for the personal authentication Voice of the operator in which it is necessarily in the context of must use telephonic communications, used. Here, the biological uniqueness of the voice as unique as a fingerprint Participant. In particular, each part has its own recognizable Sound. Just this sound is to be used according to the invention to the to allow verification respectively authentication. Advantageously, is to enable the verification in a training phase, a voiceprint created the subscriber that represents the specific properties. To discusses the participants Netzbox, the language the by on Server installed recognition program is analyzed. The results of the Analysis based on characteristic parameters in the ID box as Authentication means for subsequent comparison stored. As a means for Authentication is the use of other biometric data possible.

0011Under an initialization must be ensured that an ID box can be assigned to one person. Since the conventional relationship between the network operator and the customer, such a unique assignment can not ensure this happens Ident process advantageously direct personal contact and on presentation of an identification means, for example, the identity card. Will the participants now a certified call active, a certified e-mail, SMS, VMS, MMS or a certified fax Send or complete a transaction online, he chooses in his ID box and authenticated by his voice.

0012Advantageously, it selects the destination number via voice or via key input and the connection to the subscriber is out of the box built up. The called party receives from the box a certification release, the For example, the name, address, or social security number may include. The certification announcement may in any other way be delivered: It is possible that the ID box with a synthetic Voice signals to the called party prior to or during the establishment of the connection. Also a fax or other means (eg. As in a secure browser window) transmitted in parallel with the existing connection message is possible. Of the Recipient of an e-mail, a certificate to the appendix of the email.

0013In another embodiment, e-mails are stored in the ID box, respectively retained by the box. The dispatch takes place only after if the subscriber dialed the box and be identified with respect to the box Has. According to the participants signed a sense the email or the Transaction through his voiceprint.

0014Listed below are two embodiments of the invention with reference to FIGS 1 and 2 in greater detail. Show it:<dl tsize="7"><dt><b>figure 1</b></dt><dd>a scheme for the certification of calls and</dd><dt><b>figure 2</b></dt><dd>the certification of transactions, faxes or e-mails.</dd></dl>

0015Figure 1 illustrates schematically an application of the invention in which a first Participants 1 connects to a second party. 2 For example, this may be the call of the customer 1 at his bank 2 act, where the customer wishes to query by the call's account balances. In the line the Netzbox 3 is switched automatically by the customer Choosing the network identifier of the bank selects (Step A). The Netzbox 3 turns Now the next step B to the trust center 4 and amplify the voice of the OPERATOR 1 therethrough. are in the Trust Center 4 and the balance thus relevant for the authentication data, especially the voice sample, stored. The Trust Center 4 makes the adjustment and forwards in the case of successful authentication result as a certificate on a path 5 to the Participants 2 (step C). In a step D may the outcome of the successful authentication more information such as name, address and / or Account number are added. The bank gets below the entire Information, in particular that it is the caller really to give customers XY is. Thus, the transaction complete (step E) and the line 6, on to be held an exchange of confidential data, can by connected will.

0016The diagram of Figure 2 illustrates the scheme of authentication at an online order. First, the participants are 1 (customer) his order on a PC 7 (step A) and sends it via the data line 8 (step B). The program will be automatically intercepted by the Netzbox 3 and delayed until the customer 1 like in Netzbox 3 (Step C) and means his voice authenticated. As in the example of Figure 1 is here the authentication by means of a trust center 4 (step D). the Result, in this case for 3 Netzbox sent back (step E) and as attached Annex to the electronic order that on the way to the 9 Receiver goes. Thus, the transaction complete (Step F).