Patent ID: 8705720
Filing Date: 2014-04-22
Classification: H04L,H04M

Abstract:
1. A method for authenticating an Internet Protocol (IP) phone and a user of the IP phone comprising the steps of: determining by a security server whether the IP phone is an authorized device; after determining by the security server whether the IP phone is an authorized device, whenever the IP phone is an authorized device and a trigger condition occurs, authenticating the user of the IP phone by initiating a first call to the IP phone by the security server and sending a request for a passcode to the IP phone as part of the first call; in response to the security server receiving an invalid passcode, sending a message to disable the IP phone, and terminating the first call; in response to the security server receiving a valid passcode, enabling access by the IP phone to resources protected by the security server, and terminating the first call; and wherein the IP phone is not running a two factor authentication client application while the security server is determining whether the IP phone is an authorized device and while the first call is active, and wherein an in-band channel established by the first call initiated by the security server is used to authenticate the user of the IP phone.