System and method for the secure enrollment of devices with a clearinghouse server for internet telephony and multimedia communications
Enrolling devices with a clearinghouse server for Internet telephony and multimedia communications. Enrollment can be the process of taking a network device (such as a router, gateway, gatekeeper, etc.) and exchanging encrypted information with the clearinghouse server, so that later communications with that device can be secured. The enrollment is done with levels of security and verification that ensures the devices and clearinghouse server is legitimate.
1. A method for a clearinghouse or routing policy server to securely enroll a client device for an Internet telephony system, comprising the steps:
receiving a first message via HTTP from a client Internet telephony device that comprises an automated request to obtain an identity of one of an Internet telephony clearinghouse and Internet telephony routing policy server, the request further comprising an automated computer programming variable operation that is set equal to alphanumeric text comprising ‘getcacert’ and that initiates a search for a certificate authority certificate;
responding to the request by transmitting a second message comprising the certificate authority certificate of one of an Internet telephony clearinghouse and Internet telephony routing policy server in a Base64 format and encoded in ASCII with content type set to text/html;
receiving a third message comprising a certificate request from the client Internet telephony device;
responding to the client Internet telephony device request by signing the certificate; and
transmitting a fourth message comprising the certificate signed by a certificate authority of one of the Internet telephony clearinghouse and the Internet telephony routing policy server.
2. The method of claim 1 , wherein the second message comprises a programming variable status that is set equal to alphanumeric text comprising ‘0&certificate’.
3. The method of claim 1 , wherein the third message further comprises a computer programming variable operation that is set equal to at least one of a nonce value, a user's name, a user's password, an Internet telephony device identifier, a customer identifier, and a certificate request to be signed.
4. The method of claim 1 , wherein the fourth message further comprises a computer programming variable entitled status that is set equal to alphanumeric text comprising ‘0&certificate’.
5. A method for a Internet telephony clearinghouse or Internet telephony routing policy server to securely enroll a client Internet telephony device for an Internet telephony communication system, comprising the steps:
receiving a first message from a client Internet telephony device that comprises an automated request to obtain an identity of one of an Internet telephony clearinghouse and Internet telephony routing policy server;
responding to the automated request by transmitting a second message comprising a certificate authority certificate of one of an Internet telephony clearinghouse and Internet telephony routing policy server to the client Internet telephony device;
receiving a third message comprising a certificate request from the client Internet telephony device, the certificate request comprising a nonce value, a user's name, a user's password, a Internet telephony device identifier, a customer identifier, and a certificate request to be signed;
responding to the client Internet telephony device request by signing the certificate; and
transmitting a fourth message comprising the certificate signed by the certificate authority of one of the Internet telephony clearinghouse and Internet telephony routing policy server.
6. The method of claim 5 , wherein the first message further comprises a computer programming variable entitled operation that is set equal to alphanumeric text comprising ‘getcacert’ that initiates a search for a certificate authority certificate.
7. The method of claim 5 , wherein the first message further comprises a POST message received via HTTP.
8. The method of claim 5 , wherein the second message further comprises certificate authority certificate in a Base64 format and encoded in ASCII with content type set to text/html.
9. The method of claim 5 , wherein the second message further comprises a programming variable status that is set equal to alphanumeric text comprising ‘0&certificate’.
10. The method of claim 5 , wherein the fourth message further comprises a computer programming variable entitled status that is set equal to alphanumeric text comprising ‘0&certificate’.
11. A method for a Internet telephony clearinghouse or Internet telephony routing policy server to securely enroll a client Internet telephony device for an Internet telephony system, comprising the steps:
receiving a first message from a client Internet telephony device that comprises an automated request to obtain an identity one of an Internet telephony clearinghouse and Internet telephony routing policy server;
responding to the request by transmitting a second message comprising a certificate authority certificate of one of an Internet telephony clearinghouse and an Internet telephony routing policy server to the client Internet telephony device, wherein the second message comprises a programming variable status that is set equal to alphanumeric text comprising ‘0&certificate’ that indicates certificate authority information follows the alphanumeric text;
receiving a third message comprising a certificate request from the client Internet telephony device comprising a certificate request to be signed;
responding to the client Internet telephony device request by signing the certificate; and
transmitting a fourth message comprising the certificate signed by the certificate authority of one of the Internet telephony clearinghouse and Internet telephony routing policy server.
12. The method of claim 11 , wherein the first message further comprises an automated computer programming variable operation that is set equal to alphanumeric text comprising getcacert that initiates a search for a certificate authority certificate.
13. The method of claim 11 , wherein the first message further comprises a POST message received via HTTP.
14. The method of claim 11 , wherein the second message further comprises the certificate authority certificate in a Base64 format and encoded in ASCII with content type set to text/html.
15. The method of claim 11 , wherein the third message further comprises a computer programming variable operation that is set equal to at least one of a nonce value, a user's name, a user's password, an Internet telephony device identifier, a customer identifier, and a certificate request to be signed.
16. The method of claim 11 , wherein the fourth message further comprises a computer programming variable status that is set equal to alphanumeric text comprising ‘0&certificate’.