# Patent

## Title
MRCP resource access control mechanism for mobile devices

## Abstract

A system and method for Media Resource Control Protocol (MRCP) access control for a mobile device. An entity requesting to utilize MRCP resources establishes a relationship with a MRCP resource provider. The MRCP resource provider maintains account information for the entity, and the entity receives a unique account number for identification purposes. The entity requests from the MRCP resource provider generation of at least one MRCP access PIN associated with the account information, and provides a data string associated with the MRCP access PIN to the MRCP resource provider.

## Background
BACKGROUND OF THE INVENTION
The present invention relates to a Media Resource Control Protocol (MRCP) mechanism for mobile devices. More particularly, the present invention is directed to a system and method for using application session data and secure Personal Identification Number (PIN) generation to authorize and bill for media resource transactions originating from the mobile devices.
In telephony, Interactive Voice Response (IVR) is a technology that allows a computer to detect voice and touch tones in a telephone call.
Many companies employ systems based on IVR technology to process and route telephone calls originating from their respective customers. Examples include telephone banking, televoting, and credit card transactions. IVR systems are typically used to service high call volumes, reduce cost and improve the customer experience.
If a customer dials a telephone number that is answered by an IVR system, the system executes an application that responds to the customer/caller with pre-recorded or dynamically generated audio files. These audio files explain the options available to the caller and direct the caller on how to proceed. The caller selects an option by using spoken words or Dual-Tone Multi-Frequency (DMTF) tones, e.g., telephone keypad touch tones.
Modern IVR applications are structured similar to World Wide Web pages, using languages such as VoiceXML. Other languages may include, for example, SALT or T-XML.
Since many companies do not have their own IVR platforms, they typically turn to outsourcing companies or vendors to either host their VoiceXML application or manage the application as a whole. An example of such a hosted environment is shown in FIG. 1.
The hosted environment shown in FIG. 1 may include end user devices, such as a mobile device 105 or a land-line phone 110; hosted vendor systems 115; and client systems 120. The mobile device 105, such as a cellular phone, PDA, or iPhone, and/or the land-line phone 110 may communicate with the hosted vendor systems 115 via a telephony interface 125. The telephony interface 125, in turn, interacts with a VoiceXML browser 130, a MRCP TTS Server 135, and a MRCP Speech Recognition Server 140, all of which are part of the hosted vendor systems 115.
The VoiceXML browser 130 may be an extension of a web browser that presents an interactive voice user interface to the user and that operates on pages that specify voice dialogs. These pages may be written in VoiceXML language, which is the W3C's standard voice dialog markup language, but other proprietary voice dialog languages may be used. The VoiceXML browser 130 may present information aurally, using pre-recorded audio file playback or using Text-To-Speech (TTS) software to render textual information as audio. Further, the VoiceXML browser 130 may obtain information from the end user of the mobile device 105 and/or the land-line phone 110 by speech recognition and keypad entry, e.g., DTMF detection.
The VoiceXML browser 130 interacts with the MRCP TTS Server 135 and the MRCP Speech Recognition Server 140. MRCP stands for Media Resource Control Protocol, which is a communication protocol that allows speech servers to provide various speech services, such as speech recognition, speech synthesis, and TTS to its clients. The MRCP TTS Server 135 provides TTS services to its clients, and the MRCP Speech Recognition Server 140 provides speech recognition services to its clients.
Computer Telephone Integration (CTI) data are sent from the hosted vendor systems 115 to a CTI Management Server 145. CTI is a technology that allows interactions on a telephone and a computer to be integrated or coordinated. As contact channels have expanded from voice to email, web, and fax, CTI has expanded to include the integration of all customer contact channels (voice, email, web, fax, etc.) with computer systems. Common functions that may be implemented using CTI are, for example, call routing, call information display with or without using calling line data, phone control (answer, hang up, hold, conference, etc.), automatic dialing and computer-controlled dialing, etc.
Furthermore, application requests are sent from the VoiceXML Browser 130 to a VoiceXML Application Server 150, and the requested VoiceXML application is delivered from the VoiceXML Application Server 150 to the VoiceXML Server 130. The CTI Management Server 145 and the VoiceXML Application Server 150 are both part of the client systems 120.
More and more people use intelligent mobile devices, such as cellular phones, PDAs, or iPhones, as a means of communication. These intelligent mobile devices become more and more sophisticated due to, for example, increased computing power or memory capacity, and due to, for example, the availabilty of mobile Software Development Kits (SDKs), such as Java Platform, Micro Edition (Java ME) or Apple's iPhone SDK. This may lead to decreased reliance on teleservices companies that are built on standard telephony technology. More particularly, this may lead to decreased reliance on hosted environments for IVR applications, for example.
BRIEF SUMMARY OF THE INVENTION
The present invention, in exemplary embodiments, overcomes the above disadvantages and other disadvantages not described above. Also, the present invention is not required to overcome the disadvantages described above, and an exemplary embodiment of the present invention may not overcome any of the problems described above.
Thus, in one aspect, the present invention is directed to a method for Media Resource Control Protocol (MRCP) access control for a mobile device. A relationship between an entity requesting to utilize MRCP resources and a MRCP resource provider is established. Account information for the entity is maintained, and at least one MRCP access Personal Identification Number (PIN) associated with the account information is generated. A data string associated with the one of the at least one MRCP access PIN is provided from the entity to the MRCP resource provider.
In another aspect, the present invention is directed to a computer-readable medium comprising instructions for MRCP access control for a mobile device. The instructions are for establishing a relationship between an entity requesting to utilize MRCP resources and a MRCP resource provider. The instructions are further for maintaining account information for the entity; for generating at least one MRCP access PIN associated with the account information; and for providing a data string associated with the at least one MRCP access PIN from the entity to the MRCP resource provider.
In yet another aspect, the present invention is directed to a system for MRCP access control for a mobile device comprising a MRCP resource provider and an entity. The MRCP resource provider provides MRCP resources, and the entity requests the MRCP resources from the MRCP resource provider. The MRCP resource provider maintains account information for the entity, and the entity requests generation of a MRCP access PIN associated with the account information from the MRCP resource provider. In addition, the entity provides a data string associated with the at least one MRCP access PIN to the MRCP resource provider.
The present invention may allow companies requiring only a basic, DTMF-only IVR application to host their VoiceXML application on their existing web infrastructure and provide users of mobile devices access to the same IVR functionality that would normally need to be provided by an outsourced vendor. Companies requiring more advanced features as part of their IVR application may still benefit from the present invention by moving the call handling and VoiceXML processing off of a hosted platform and only using an outsourced vendor to perform advanced features such as speech recognition, natural language, or text-to-speech. Alternatively, the present invention may allow companies to move both basic, DTMF-only IVR applications and IVR applications with advanced features off of the hosted platform to their existing web infrastructure.



BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWING
In the following section, the invention will be described with reference to exemplary embodiments illustrated in the attached Figures, in which:
FIG. 1 illustrates a hosted environment for IVR applications as it may be known in the related art;
FIG. 2 illustrates a Mobile Voice Self Service (MVSS) system in accordance with an exemplary embodiment of the present invention;
FIG. 3 illustrates an MVSS VoiceXML Navigation situation in accordance with an exemplary embodiment of the present invention;
FIG. 4 illustrates incorporation of multimedia data into MVSS in accordance with an exemplary embodiment of the present invention;
FIG. 5 illustrates a method in accordance with an exemplary embodiment of the present invention; and
FIG. 6 illustrates a method in accordance with another exemplary embodiment of the present invention.



DETAILED DESCRIPTION OF THE INVENTION
Reference will now be made in detail to exemplary embodiments of the present invention, examples of which are illustrated in the accompanying drawings.
Given the rapidly increasing processing power of mobile devices and the availability of mobile SDKs, a hosted application browser of the related art, such as a hosted VoiceXML browser, may be moved directly to an end user's mobile device. In other words, an application browser, such as a VoiceXML browser, and other, associated components may be deployed as a mobile application and implemented on the mobile device to allow a VoiceXML application to be processed directly on the mobile device. This concept may also be known as Mobile Voice Self Service (MVSS).
MVSS may provide the benefit of reduced cost or, in the case of simple applications, no hosting cost to companies, for example. In addition, the end-user features that MVSS provides may allow applications to become more user-friendly.
FIG. 2 illustrates an MVSS system in accordance with an exemplary embodiment of the present invention.
As shown in FIG. 2, a mobile device 205 communicates with client systems 210 and media resource systems 215 of a vendor. The mobile device 205 may include an Application Browser 220 that interacts with a Call Data Manager 225 and a Media Resource Gateway 230. The Call Data Manager 225 and the Media Resource Gateway 230 may also be included in the mobile device 205. These components may utilize the mobile device's 205 mobile broadband or wireless connection to communicate with the client systems 210 or the service vendor's media resource systems 215. The mobile device 205 may be, for example, a cellular phone, a PDA, or an iPhone, and may operate, for example, in a CDMA or GSM network. The mobile device 205 may also include a GPS component 235 to provide, for example, location-based services to the user of the mobile device 205.
As is the case in the related art, the client systems 210 may include a VoiceXML Application Server 240 and a CTI Management Server 245. The vendor's media resources systems 215 may include an MRCP Speech Recognition Server 250, a Media Resource Gateway 255, and a MRCP TTS Server 260.
The Application Browser 220 of the mobile device 205 may be a VoiceXML 2.1 compliant browser with a minimal memory footprint and minimal processing overhead. Unlike the VoiceXML browsers used in a hosted environment in the related art, the Application Browser or VoiceXML browser 220 may only need to be able to handle one call. Therefore, the required processing power is significantly reduced. In addition, the VoiceXML browser 220 may be able to handle a majority of the call flow required to provide an IVR application to the user of the mobile device 205. The VoiceXML browser 220 may send application requests to the VoiceXML Application Server 240, and the requested VoiceXML application may be delivered from the VoiceXML Application Server 240 to the VoiceXML browser 220.
The Call Data Manager 225 may communicate important telephony events to the client systems 210, in particular to the CTI Management Server 245. Such telephony events may include, for example, set up, deliver (ringing), establish (answer), clear (hang up), end, hold, retrieve from hold, conference, transfer, forward, etc. When a legitimate call is being processed on the mobile device 205, the call data provided by the Call Data Manager 225 may be used, in conjunction with data of the VoiceXML Application Server 240, to authorize access to advanced MRCP features. The advanced MRCP features may include automatic speech recognition (ASR) that may be provided by the MRCP Speech Recognition Server 250 or Text-To-Speech (TTS) that may be provided by the MRCP TTS Server 260, for example. Proper authentication may be important because MRCP features may be charged per transaction by the vendor. Also, the Call Data Manager 225 may be important with respect to transfers. Transfers that usually depend on a carrier's advanced features may need to be implemented by other means, so it may be necessary for User-to-User Information (UUI) and other call data to be transferred out-of-band.
The Media Resource Gateway 255 may provide advanced services, such as ASR or TTS to the application, by bridging communication between the VoiceXML browser 220 and the MRCP services. As part of authorizing communication to media resources, MRCP requests from the VoiceXML browser 220 may be directed through the Media Resource Gateway 255. The gateway layer may handle authentication and then host the MRCP communication through the established channel. If the mobile device 205 is capable of processing speech or generating TTS on its own, resources not requiring vendor-specific handling may be passed off to the mobile device 205 by the Media Resource Gateway 230 thereby saving the application provider additional advanced service fees.
To facilitate the configuration of MVSS components prior to running a VoiceXML document, a Mobile Voice Self Service configuration file may be used. This file may be an xml-based configuration file that contains the configuration settings of the Media Resource Gateway 230 and the Call Data Manager 225 as well as the URL of the intended VoiceXML target.
Having a unique file type for voice applications targeted to mobile devices may also be useful in allowing seamless integration of MVSS into a web environment. A mobile device may automatically launch the MVSS application when the user follows a link that provides MVSS content. The format of such a file may be defined, published and validated via standard xml validation methods.
Simple blind transfers may be accomplished by allowing the MVSS application to access the phone's system APIs (Application Programming Interfaces) to simply dial the transfer number. More complicated transfers may require functions that may be unavailable within the realm of the mobile device's capabilities on the mobile carrier's network. To implement these transfers may require dialing a toll-free number that has carrier-advanced features and then utilizing CTI data to execute the transfer.
The following may be exemplary applications of MVSS that may be advantageous to, for example, the end users, vendors, service providers, companies and clients involved.
With respect to access to IVR applications, in the case of MVSS, the user may be allowed to access applications via web URLs rather than phone numbers. A client's site may list individual URLs for each subsection of their application, giving the user direct access to billing or technical support features, without the need for the client to have individual phone numbers for each service. Having direct access to the VoiceXML interpretation allows the user to easily “pause” the IVR, and it may be relatively simple to provide a complete range of controls a user would normally be accustomed to with other media, such as fast forward, rewind, etc.
Instead of having to rely on the application's menu repeat options, the user may interact with the browser instructing it to scan through a prompt in reverse, go back to the beginning of the current prompt or menu, or even go to a previous menu and either accept the user's original response again or provide new input. To support such features, when it comes to application reporting, it may be beneficial to create new VoiceXML events that the browser can handle, so reporting can accurately reflect the user's navigation. FIG. 3 shows an exemplary illustration of MVSS VoiceXML Navigation.
Having direct access to the call flow data may allow implementing user-defined hotkeys or “bookmarks” in a VoiceXML application. If the user would like to return to a portion of an application at a later time, he or she may press a hotkey capture button, which may then suspend the running VoiceXML application. The MVSS browser may store the current state and the input required to reach that state. After speaking or entering a bookmark identifier, the application may resume normally. At a later time, the user may request access to the bookmark, and this may instruct MVSS to load the application and automatically proceed to the bookmarked state if modifications to the applications do not prevent it. In the case where the application has been modified, MVSS may provide a message to the user indicating the bookmark needs to be updated; present the user with the prompt where the application changed; and wait for the user to indicate that he or she has once again reached the point in the application the user wishes to bookmark.
Location-based services is another area in which having the MVSS browser running directly on the mobile device may be of advantage. Providing location-based information to customers may mean to add more value in the mobile realm. Rather than relying on complicated data exchanges to determine the location of the caller, the browser may directly access the device's GPS or tower based coordinates and pass them on to the application server. This may all be done as part of the initial request to the application server. Self-service applications may then be catered for the caller's current location prior to even the first prompt.
Multimedia resources, as illustrated, for example, in FIG. 4, may be referenced within the VoiceXML application, allowing the mobile device to display supplemental data during the progress of the call. This may be utilized by providing an image of the caller's current billing statement when the caller requests payment information; by providing a video clip of the steps required to reset a satellite receiver when the caller is requesting technical support; or even by launching a web page with a registration form when the caller wants to enroll in some special program. There may also be the branding aspect that may be important to many companies, so a company logo, customer notifications, or advertising may be displayed on the mobile device while working with their IVR.
In the VoIP world, it may be common for a conference call to be presented along with video conferencing or a shared desktop for a presentation. MVSS may add functionality in the voice self-service world because the multimedia may also interact back with the IVR. For example, if the caller has a question about their bill, MVSS may display the caller's recent billing statement on the screen and allow the user to select the billing line-item the caller has a question about and say “What is this charge”? Again, due to the fact that the VoiceXML interpretation is happening locally on the caller's phone, the act of selecting an item on the screen may be passed to the browser as input without complex data exchanges. This sort of interaction may be simplified because MVSS is just a single system that accepts multiple forms of input.
MVSS technology may be an industry standard that may be implemented by mobile device builders as part of their devices' core features.
There may be several versions of MVSS to support various mobile device architectures. Open development environments like Java ME may aid in that sort of development, but each device may require its own special development for its unique features or hardware.
FIG. 5 illustrates a method in accordance with an exemplary embodiment of the present invention. In step 510, an application browser that is implemented on an MVSS mobile device may request an application from an application server. The application browser may be a VoiceXML browser; the application may be a VoiceXML application; and the application server may be a VoiceXML application server.
In step 520, a call data manager may provide call data. The call data manager may also be implemented on the MVSS mobile device. The call data, in conjunction with data from the application server, may authorize access to advanced MRCP services such as ASR or TTS.
In step 530, the advanced MRCP services may be provided to the application that was requested by the application browser. The advanced MRCP services may be provided by a media resource gateway.
In another exemplary embodiment of the present invention, a system and method are provided for using application session data and secure Personal Identification Number (PIN) generation to authorize and potentially bill for media resource transactions originating from mobile devices.
Therein, as shown in FIG. 6, an entity that whishes to utilize MRCP resources may establish 610 a relationship with the resource provider. That resource provider may maintain 620 account information for the requesting entity. The entity may receive a unique account number identifying them. A single entity may obtain multiple accounts for different campaigns or sub-accounts they would like to maintain separately.
A requesting agent may request 630 the generation of MRCP access PINs from a MRCP resource provider. As part of the request, the agent may be allowed to provide 640 a data string that may be tied to each PIN. Either a single PIN or batch of PINs may be released to the agent, associating those PINs to the requester's account and the provided data strings. These PINs may be sufficiently large and random to avoid the guessing of valid PINs.
Upon establishing a session with the entity, a mobile device may receive a session ID. This session ID may be generated by any means the entity deems fit. The only restriction may be that the session ID must remain unique during the life of the session.
A single PIN may be tied to a user session and may remain valid only for the duration of that session. The association of a PIN to a session may wait until MRCP resources are required in the session.
Upon needing MRCP resources, the mobile application may send the following data to the MRCP resource provider as part of its credentials: account, PIN, cross-check data, session ID, and session expiration. If the PIN is valid, unused PIN for the provided account number and cross-check data may be compared to the data that was provided at the time the PIN was requested. If that information matches, the session ID and other transaction information may be logged in the provider's system to provide later billing/reporting information. Transactions failing these checks may be rejected. Subsequent requests on the same session may be allowed until the session expiration is reached, at which point the transactions may be rejected.
Meta-characters may be allowed in the cross-check data, allowing PINs to be tied to particular media resources, preventing the cross-check data from being overridden (e.g., a PIN could be requested with this data string MediaID: 12345-Grammar: %accountinfo.grml %, a request would contain the cross-check data MediaID: 12345-Grammar:%G. The text between the % signs in the data string may only be provided by a meta-character expansion. %G evaluates to the grammar being used for the recognition transaction, so the transaction will only be allowed if the requested grammar is accountinfo.grml). Reporting the billing information may be provided using the PINs or Session IDs for the PINs.
As will be recognized by those skilled in the art, the innovative concepts described in the present application can be modified and varied over a wide range of applications. Accordingly, the scope of patented subject matter should not be limited to any of the specific exemplary teachings discussed above, but is instead defined by the following claims.

## Claims

1. A method for Media Resource Control Protocol (MRCP) access control for a mobile device, comprising:
establishing a relationship between an entity requesting to utilize MRCP resources and a MRCP resource provider;
maintaining account information for the entity;
receiving a request from the entity to generate at least one MRCP access Personal Identification Number (PIN), wherein the at least one MRCP access PIN is generated by the MRCP resource provider;
receiving, with the request, a data string to be associated with the at least one generated MRCP access PIN from the entity, wherein the data string includes cross-check data which is used to determine if a Media Resource transaction will be allowed; and
associating the at least one generated MRCP access PIN to an account of the entity and the data string.

2. The method of claim 1, further comprising receiving, by the entity, a unique account number identifying the entity.

3. The method of claim 1, further comprising receiving, by the entity, a plurality of account numbers, each of the plurality of account numbers is associated with a different campaign.

4. The method of claim 1, wherein further comprising receiving, by the entity, sub-accounts that are separately maintained.

5. The method of claim 1, further comprising receiving, by the mobile device, a session ID upon establishing a session with the entity.

6. The method of claim 5, wherein the session ID is unique during the session.

7. The method of claim 5, wherein the at least one MRCP access PIN is unique to the session.

8. The method of claim 7, wherein the at least one MRCP PIN is associated with the session at the point in time when the MRCP resources are required in the session.

9. The method of claim 1, wherein credentials selected from the group consisting of the account information, the MRCP access PIN, cross-check data, session ID, and session expiration are sent to the MRCP resource provider.

10. The method of claim 5, further comprising providing billing information utilizing the at least one MRCP access PIN and the session ID.

11. A non-transitory computer-readable medium comprising instructions for Media Resource Control Protocol (MRCP) access control for a mobile device, the instructions for:
establishing a relationship between an entity requesting to utilize MRCP resources and a MRCP resource provider;
maintaining account information for the entity;
receiving a request to generate at least one MRCP access Personal Identification Number (PIN), wherein the at least one MRCP access PIN is generated by the MRCP resource provider;
receiving, with the request, a data string to be associated with the at least one generated MRCP access PIN from the entity, wherein the data string includes cross-check data which is used to determine if a Media Resource transaction will be allowed; and
associating the at least one generated MRCP access PIN to an account of the entity and data string.

12. The non-transitory computer-readable medium of claim 11, further comprising instructions for receiving a unique account number identifying the entity.

13. The non-transitory computer-readable medium of claim 11, further comprising instructions for receiving a plurality of account numbers, wherein each of the account numbers is associated with a different campaign.

14. The non-transitory computer-readable medium of claim 11, further comprising instructions for receiving sub-accounts that are separately maintained.

15. The non-transitory computer-readable medium of claim 11, further comprising instructions for receiving a session ID upon establishing a session with the entity.

16. The non-transitory computer-readable medium of claim 15, wherein the session ID is unique during the session.

17. The non-transitory computer-readable medium of claim 15, wherein the at least one MRCP access PIN is unique to the session.

18. The non-transitory computer-readable medium of claim 17, wherein the at least one MRCP access PIN is associated with the session at the point in time when the MRCP resources are required in the session.

19. The non-transitory computer-readable medium of claim 11, further comprising instructions for sending credentials selected from the group consisting of the account information, the MRCP access PIN, cross-check data, session ID, and session expiration to the MRCP resource provider.

20. A system for Media Resource Control (MRCP) access control for a mobile device, the system comprising: a MRCP resource provider configured to provide MRCP resources; and
an entity configured to request the MRCP resources from the MRCP resource provider, wherein the MRCP resource provider is further configured to maintain account information for the entity,
the entity is further configured to request generation of a MRCP access Personal Identification Number (PIN) from the MRCP resource provider, the at least one MRCP access PIN generated by the MRCP resource provider,
the entity is further configured to provide a data string to be associated with the at least one generated MRCP access PIN to the MRCP resource provider,
wherein the data string includes cross-check data which is used to determine if a Media Resource transaction will be allowed; and
the MRCP resource provider further configured to associate the at least one generated MRCP access PIN to an account of the entity and the data string.