Call security system
View Patent ↗A method and apparatus for reducing the vulnerability of the telecommunications system to unauthorized use that is easy to implement and that can reduce the instances of unauthorized access even during periods when telecommunications personnel are not able to give attention to the traffic on the system. The telecommunications system collects statistics of each user's pattern of telecommunications usage. Typically, these statistics will be in the form of, say, the average number of calls per day or the average number of calls per day on given days of the week. It may also include the mean busy hour for the given days of the week. Moreover, daily averages may be taken not only for all calls but also for all calls of a particular type, e.g., of all international calls. These statistics are taken for a reference period, such as the preceding thirty days, and the corresponding quantity for the current day is also computed. If the current statistics are not excessive as compared with the reference statistics, then access to a communications resource—e.g., an outgoing trunk line—is granted to the call without any supplemental access restrictions. But if a predetermined deviation is detected between the current statistics and the reference statistics, then a supplemental restriction is placed upon the call.
1. A method, comprising:
determining a class of service for a device;
establishing a baseline call pattern for the device;
monitoring an actual call pattern for the device;
identifying a deviation between the baseline call pattern and the actual call pattern; and
establishing a call connection for the device according to the class of service associated with the device in response to the deviation;
wherein the class of service identifies a level of system access accorded to the device.
2. The method of claim 1 , further comprising:
determining a difference between a requested call and the baseline call pattern;
wherein establishing the call connection occurs according to the difference.
3. The method of claim 1 , wherein the class of service comprises at least one of call access levels associated with call destinations, device service classes, or device global classes.
4. The method of claim 1 ,
wherein the device comprises a first class of service; and
wherein establishing the call connection further comprises establishing a first type of call connection in response to the first class of service and the deviation exceeding a first threshold.
5. The method of claim 4 ,
wherein the device comprises a second class of service; and
wherein establishing the call connection further comprises establishing a second type of call connection in response to the second class of service and the deviation exceeding a second threshold.
6. The method of claim 5 ,
wherein the device comprises a third class of service; and
wherein establishing the call connection further comprises:
restricting access to outbound trunks in response to the third class of service and the deviation exceeding a third threshold; and
alerting an administrator of having restricted the access to the outbound trunks.
7. The method of claim 1 , further comprising:
establishing the baseline call pattern for the device over a baseline time period; and
monitoring the actual call pattern for the device over a monitoring time period.
8. An apparatus, comprising:
means for determining a class of service for a device;
means for establishing a baseline call pattern for the device;
means for monitoring an actual call pattern for the device;
means for identifying a deviation between the baseline call pattern and the actual call pattern; and
means for establishing a call connection for the device according to the determined class of service for the device in response to the deviation;
wherein the class of service identifies a level of system access accorded to the device.
9. The apparatus of claim 8 , further comprising:
means for determining a difference between a requested call and the baseline call pattern;
wherein the means for establishing the call connection operates in response to the difference.
10. The apparatus of claim 8 , wherein the class of service for the device comprises at least one of call access levels associated with call destinations, device service classes, or device global classes.
11. The apparatus of claim 8 , further comprising means for establishing a first type of call connection in response to the deviation exceeding a first threshold and the device comprising a first class of service.
12. The apparatus of claim 11 , further comprising means for establishing a second type of call connection in response to the deviation exceeding a second threshold and the device comprising a second class of service.
13. The apparatus of claim 12 , further comprising:
means for restricting access to outbound trunks in response to the deviation exceeding a third threshold and the device comprising a third class of service; and
means for alerting an administrator of having restricted the access to the outbound trunks.
14. The apparatus of claim 8 , further comprising:
means for establishing the baseline call pattern for the device over a baseline time period; and
means for monitoring the actual call pattern for the device over a monitoring time period.
15. An apparatus, comprising:
a processing device configured to:
determine a class of service for a device;
establish a baseline call pattern for the device;
monitor an actual call pattern for the device;
identify a deviation between the baseline call pattern and the actual call pattern; and
establish a call connection for the device according to the determined class of service for the device in response to the deviation;
wherein the class of service indicates a level of system access.
16. The apparatus of claim 15 , wherein the processing device is further configured to:
determine a difference between a requested call and the baseline call pattern; and
establish the call connection according to the difference.
17. The apparatus of claim 15 , wherein the class of service for the device comprises at least one of call access levels associated with call destinations, device service classes, or device global classes.
18. The apparatus of claim 15 , wherein the processing device is further configured to establish a first type of call connection in response to the deviation exceeding a first threshold and the device comprising a first class of service.
19. The apparatus of claim 18 , wherein the processing device is further configured to establish a second type of call connection in response to the deviation exceeding a second threshold and the device comprising a second class of service.
20. The apparatus of claim 19 , wherein the processing device is further configured to:
restrict access to outbound trunks in response to the deviation exceeding a third threshold and the device comprising a third class of service; and
alert an administrator of having restricted the access to the outbound trunks.
21. The apparatus of claim 15 , wherein the processing device is further configured to:
establish the baseline call pattern for the device over a baseline time period; and
monitor the actual call pattern for the device over a monitoring time period.