Method for automated authentication of VoIP phone
A method for automated authentication of a user VoIP phone supported by a Private Branch eXchange (PBX) configuration server is provided. A VoIP phone or a VoIP supported device is configured for an automated authentication by a vendor. The authentication method does not require manual entry of authentication data by a user. The unique VoIP phone authentication data can be provided by the vendor in a form of a MAC address. Additionally, the vendor can assign a digital certificate (containing public and private encryption keys) signed by the vendor to the VoIP phone. In this case, the VoIP phone vendor serves as a trusted authority. Thus, the VoIP phone automatically connects with the configuration server and the authentication transformation server (ATS) and the address where the VoIP phone sends the authentication data upon connection to the network is determined by the ATS.
1. A computer-implemented method for automated authentication of a Voice over Internet Protocol (VoIP) phone,
the method comprising:
launching a provider's Private Branch eXchange (PBX) including a configuration server,
registering the VoIP phone in a database of the provider's PBX by reading authentication data of the VoIP phone;
embedding, into the VoIP phone, an address for sending the authentication data of the VoIP phone;
launching an authentication transformation server (ATS) hosting an authentication database;
connecting the ATS to the configuration server hosting a configuration database;
connecting the VoIP phone to the Internet;
receiving authentication data from the VoIP phone, including the embedded address;
checking a status of the VoIP phone in the database of the PBX;
establishing a Transport Layer Security protocol connection to the VoIP phone, if the VoIP phone is “registered” with the PBX;
identifying a model of the VoIP phone;
determining authentication methods supported by the VoIP phone based on the model;
searching the authentication database for an authentication method supported by both the VoIP phone and the configuration server,
activating the supported authentication method;
generating VoIP phone authentication parameters;
sending the VoIP phone authentication parameters to the configuration server for authentication of the VoIP phone; and
providing the authentication parameters and the address of the configuration server to the VoIP phone for receiving configuration parameters from the configuration database,
wherein the configuration parameters include an address of the configuration server and instructions for using a specified authentication method.
2. The method of claim 1 , further comprising, receiving the authentication data from the VoIP phone by the ATS and generating the VoIP phone authentication parameters by the ATS.
3. The method of claim 1 , further comprising:
receiving, by the ATS, a public key of the VoIP phone and a certificate by a vendor of the VoIP phone; and
checking validity of the certificate and checking if the certificate matches the public key prior to the checking of the status of the VoIP phone on the provider's PBX, if the certificate is valid.
4. The method of claim 1 , wherein the authentication parameters include a login-password pair.
5. The method of claim 1 , wherein the ATS is a cloud server.
6. The method of claim 1 , wherein the address for sending the authentication data of the VoIP phone are embedded into the VoIP phone by the provider.
7. The method of claim 1 , wherein the address for sending the authentication data of the VoIP phone is embedded into the VoIP phone by a manufacturer of the VoIP phone.
8. The method of claim 1 , wherein the address for sending the authentication data of the VoIP phone is embedded into the VoIP phone by a vendor of the VoIP phone.
9. The method of claim 1 , wherein the VoIP phone address is a MAC address.
10. A method for automated authentication of a Voice over Internet Protocol enabled (VoIP-enabled) device, the method comprising:
registering the VoIP-enabled device in a database of a native Private Branch eXchange (PBX);
embedding, into the VoIP-enabled device, an address for sending authentication data of the VoIP-enabled device;
connecting a third party server to a native Private Branch eXchange (PBX) configuration server;
receiving the authentication data from the VoIP-enabled device into the third party server, establishing a connection to the VoIP-enabled device, if the VoIP-enabled device is registered with a provider;
determining authentication methods supported by the VoIP-enabled device based on its model, and searching an authentication database for an authentication method commonly supported by both the VoIP-enabled device and the native PBX configuration server;
generating VoIP-enabled device authentication parameters and providing the authentication parameters to the native PBX configuration server;
providing the authentication parameters and the address of the native PBX configuration server to the VoIP-enabled device for configuration of the VoIP-enabled device.