Telephony security system

Abstract

A system and method of telephony security for controlling and logging access between an enterprise's end-user stations and their respective circuits into the public switched telephone network (PSTN). A security policy, i.e., a set of security rules, are defined for each of the extensions, the rules specifying actions to be taken based upon at least one attribute of the call on the extension. Calls are detected and sensed on the extensions to determine attributes associated with each call. Actions are then performed on selected calls based upon their attributes in accordance with the security rules defined for those extensions.

1 . A system for the application of security rules for specifying actions to be taken for the management and enforcement of policies related to the use of telecommunication services in an enterprise, said system comprising: 
 a line sensor within the enterprise for: 
 determining whether an incoming or an outgoing call is a voice, fax or data modem call;  
 determining at least one attribute of either an incoming call or an outgoing call wherein said at least one attribute is selected from a list of attributes, including: call date, call time, call content, call duration, line identification, inbound number, outbound number dialed, dialing sequence, and DTMF;  
   means for taking actions described in the security rules on either an incoming or an outgoing call conditioned on said determined type of call and said determined at least one attribute of an incoming or outgoing call.    
     
     
         2 . The system as defined in  claim 1  wherein the use of an unauthorized modem for an incoming call or for an outgoing call is detected and the call is terminated.  
     
     
         3 . The system as defined in  claim 1  wherein unauthorized attempts to violate the security rules are recorded and reported.  
     
     
         4 . The system as defined in  claim 1  wherein said means for taking actions described in the security rules further includes means to limit unauthorized use of long distance calling capabilities.  
     
     
         5 . The system as defined in  claim 1  wherein said means for taking actions described in the security rules further includes means to limit unauthorized use of telecommunications services outside of predetermined operating hours for the enterprise.  
     
     
         6 . The system as defined in  claim 1  further including means for generating a call record for each telecommunication line of an enterprise and its use for either a voice call, a fax call or a modem call.  
     
     
         7 . The system as defined in  claim 1  wherein said means for taking actions described in the security rules can prevent data modem calls on lines designated for fax calls or voice calls.  
     
     
         8 . The system as defined in  claim 1  wherein said means for taking actions described in the security rules can prevent voice calls on lines designated for fax calls or data modem calls.  
     
     
         9 . The system as defined in  claim 1  wherein said means for taking actions described in the security rules will report unauthorized calls while the unauthorized call is in progress.  
     
     
         10 . The system as defined in  claim 1  wherein said means for taking actions described in the security rules can block any one of voice calls, fax calls or data modem calls on a line which is restricted for use with another type of call.  
     
     
         11 . A combination of a call type and call attribute sensor for use with telecommunications security rules enforcement system located in an enterprise, said combination comprising: 
 a call type and call attribute sensor within the enterprise for: 
 determining whether a call coming into the enterprise or directed out of the enterprise is a voice call, a fax call, or a call involving the transmission of data using a modem;  
 determining at least one attribute of the either coming into the enterprise or directed out of the enterprise, said at least one attribute being selected from a list including: call date, call time, call content, call duration, line identification, inbound number, outbound number dialed, dialing sequence, and DTMF;  
   means for taking telecommunications security actions based on the telecommunications security rules wherein said telecommunications security actions are conditioned on said determination if the call coming into the enterprise or directed out of the enterprise is a voice call, a fax call, or a call involving the transmission of data using a modem, and said determination of at least one attribute of the call either coming into the enterprise or directed out of the enterprise.    
     
     
         12 . The combination as defined in  claim 11  wherein the use of an unauthorized modem for a call coming into the enterprise or a call directed out of the enterprise is detected and the call is terminated.  
     
     
         13 . The combination as defined in  claim 11  wherein unauthorized attempts to violate the telecommunications security rules are recorded and reported.  
     
     
         14 . The combination as defined in  claim 11  wherein said means for taking telecommunications security actions described in the telecommunications security rules further includes means to limit unauthorized use of long distance service.  
     
     
         15 . The combination as defined in  claim 11  wherein said means for taking telecommunications security actions described in the telecommunications security rules include means to limit unauthorized use of telecommunications services during periods outside of the operating hours of the enterprise.  
     
     
         16 . The combination as defined in  claim 11  further including means for generating a record of each call on each line coming into the enterprise and each call on each line directed out of the enterprise and the use of said line for either a voice call, a fax call or a modem call.  
     
     
         17 . The system as defined in  claim 11  wherein said means for taking actions described in the telecommunications security rules will prevent data modem calls on lines designated for fax calls or voice calls.  
     
     
         18 . The system as defined in  claim 11  wherein said means for taking action described in the telecommunications security rules will prevent voice calls on lines designated for fax calls or data modem calls.  
     
     
         19 . The system as defined in  claim 11  wherein said means for taking action described in the telecommunications security rules will report unauthorized calls before the unauthorized call is terminated.  
     
     
         20 . The system as defined in  claim 11  wherein said means for taking actions described in the telecommunications security rules can block any one of voice calls, fax calls or data modem calls on a line which is restricted for use with another type of call.