Patent Application
20120323856
The present invention relates to a method and a system for the legally valid archiving of telephone communication contents. In particular, a legally compliant long-term archiving option for telephone conversations and faxes is to be created here. In commercial transactions, it is often necessary to record telephone conversations, for example as evidence of contractual agreements. Two main problem areas arise from this. On the one hand, the provisions of the data protection act must be observed in making the recordings and on the other hand—likewise in compliance with the provisions of the data protection act—an auditable long-term archiving of the recorded conversations is necessary.
Magnetically or digitally recording hardware solutions that can be connected to a conventional telephone are generally known in the field of telephone recordings. Information of the conversation partner/s of the recorded telephone conversations is hereby dependent on the announcement by the recording party. Furthermore, purely audio recordings are available which cannot provide any verified proof of the time they were made or of their unmodified originality. Similar solutions are known in particular in the field of Internet telephony by means of voice over IP (VoIP). Here software records the conversations on the subscriber's computer as an audio file. The same disadvantages apply here too as with the hardware solutions for standard telephones.
The object of the present invention was therefore to develop a solution with the aid of which a telephone connection can be controlled such that, depending on the consent of the conversation partner to a recording, a recording of telephone conversations can be carried out and this recording can be stored in a legally valid manner in compliance with data protection and maintaining the special conclusive force of recorded natural speech in an archive data storage system for long-term archiving. Likewise, archiving fax transmissions with conclusive force should be rendered possible.
This object is attained by means of a method for the legally valid archiving of telephone communication contents at least containing the steps
a. With internal calls
b. With external calls
c. With conference calls
or accepting the call from a conference participant who would like to have the conference conversation recorded
connecting the system as a conference participant terminating the connection of the calling conference participant with the conference call
playing a recording notification
determining consent of the conference participants
if consent is granted by the conference participants, the caller is called back for inclusion in the conference and announcement of the recording status, otherwise terminating the conference connection or other configured behavior with refusal
if consent is granted by conference participants, recording conference conversation in an audio file
if consent is granted by the conference participants, providing the audio file with a time stamp and enhanced signature if consent is granted by the conference participants, storing the time-stamped and signed audio file in an archive storage system for long-term archiving.
d. With fax contents, wherein the distinction between fax contents and voice contents takes place automatically
recording the fax in a recording file, wherein the recording is transparent only for the fax machines and/or fax servers involved
providing the recording file with a timestamp and enhanced signature
storing the time-stamped and signed recording file in an archive storage system for long-term archiving
furthermore, the object is attained with the system according to the invention for the legally valid archiving of telephone communication contents, comprising
a. A control module (a) for telephone connections
b. A communication module (I) for ISDN connections and/or a communication module (V) for VoIP connections and/or a communication module (X) for IAX connections,
c. An administration module (S), to which an internal data storage system (T1) and/or one or more external data storage systems (T2, T3) are connected,
d. A configuration module (K) for the configuration of control module (A) and administration module (S), wherein
Control module (A) is connected to communication module (I), communication module (V) and/or communication module (X) as well as to administration module (S),
Communication module (I) is connected to one or more telephony terminals and/or to a telephone system
Communication module (V) is connected to a VoIP server,
Communication module (X) is connected to an IAX server,
Configuration module (K) and administration module (S) is have a network connection option for clients.
The system according to the invention is composed of several modules, which can be embodied as hardware components as well as software components. The diagrammatic structure of the system is shown in
Communication module (I) preferably controls an ISDN card with connections via S0 buses and multiplex and is connected thereby to one or more telephony terminals and/or a telephone system. The communication module (V) ensures the communication to a VoIP server and preferably has SIP/SIPS and/or H.323 protocols and is accordingly connected to SIP/SIPS and/or H.323 servers. Communication module (V), communication module (X) to an IAX server.
The configuration of the modules (I), (V) and (X) is flexible and is carried out via configuration module (K). The configuration module (K) is very preferably embodied as a Web service.
Preferably, one or more fax machines are connected to the communication module (I), communication module (V) and/or communication module (X) in order to render possible an original fax output in addition to the archiving.
Administration module (S) is used for the administration of control module (A) and the legally valid archiving of the data of control module (A). The administration module (S) is also configured via the configuration module (K).
The administration module (S) furthermore has a connection to the data storage system (T1) mounted in the system and/or to one or more external data storage systems (T2) and (T3) configured via the configuration module (K).
Four different scenarios are provided for archiving, which represent and control different scenarios of a possible telephone conversation with the recording thereof. These individual scenarios can be configured in a detailed manner independently of one another.
Each scenario can be assigned to certain call numbers (one or several). Likewise, it can also be established via which connections (ISDN port, IAX port or VoIP access) a defined scenario can be achieved by the communications modules (I), (V) and (X). A finite number of scenarios, also for different fields or companies, can be defined in different languages. Hosting is also possible.
During a dialing operation or the announcement to one of the two conversation partners, it can be determined whether the other participant will hear on-hold music or a predefined announcement.
The announcements and confirmations of the recording are helpful for a legally valid recording and archiving of the conversations, in particular in order to comply with data protection provisions.
The method according to the invention defines four scenarios: Gateway, Forward, Conference and Conference with Callback, as well as Fax.
After the key has been pressed or the verbal agreement has been given, the fixed target call numbers are called according to a fixed plan by the system and the called party—if configured—is informed of the status of the selection of the caller.
Furthermore it is possible not to request an entry of a key or verbal consent; in this case a refusal must be carried out by hanging up or a subsequent stoppage of the recording. Subsequently, both subscribers are connected in the system and the conversation partners are in contact with one another. A recording has been running since the start of the announcement that the is conversation is being recorded, wherein the recording is deleted again if consent is refused.
It can be defined which call numbers may reach this scenario and whether this is to be reachable only by internal call numbers or by external call numbers.
The third scenario, Conference and Conference with Callback, is shown in
The system can be connected to an existing telephone conversation by one to n subscribers any time for the purpose of recording. This then forms a conference connection in the extended sense. Depending on the telephone system, only the caller of the system or all of the subscribers hear the confirmation that it will be recorded starting immediately. Depending on the telephone system, the conversation must be guided back into the telephone call previously made. A recording, if configured, can be stopped or controlled in another manner at any time. Each participant in the call hereby has the ability to do this.
It is guaranteed by means of the call back that the other participant/s in the conference, who did not start the recording, are aware in any case of the notification and optional consent, while the above-referenced conference scenario cannot guarantee this, depending on the telephone system.
The fourth scenario, Fax, does not include a request for consent to the recording, since consent is not necessary or possible here. The distinction of whether they are voice contents or fax messages, is hereby carried out automatically. A distinction is thereby to be made between incoming and outgoing faxes.
In the case of outgoing faxes, the system is called by the internal fax machine/fax server, determines the target call number and connects to the fax machine or fax server. The determination of the target call number can thereby be made, for example, from a suffix of the dialed fax number, the prefix of which is the internal call number of the system. In the case of incoming faxes, the system connects to the internal fax machine/fax server.
Subsequently, the fax is recorded, wherein the communication between the fax machine to which it is forwarded, and the fax machine that sends the fax is passed on 1:1 so that the fax machines do not notice that the faxes have been archived on the system, i.e., the recording is transparent for them.
Preferably, the recording file for fax transmissions is a audio file, in particular a compressed format, preferably MP3 or WMA, a digital ISDN file, a graphic file, in particular TIF or JPG, and/or a document file, in particular PDF or, after prior OCR conversion, a text file.
One possible variant for the fax operation is to forward by e-mail, to print and to archive the fax data transmitted to the administration module (S) or after transmittal to delete them, filter them or only to archive the, for example controlled by a set of rules, and to send a notification.
As a last process step, with all of the scenarios the provision of the recording file with a time stamp and enhanced signature and the deposit of the time-stamped and signed recording file in the archive storage system for long-term archiving take place.
The control of the conversation recording is illustrated in
A person authorized for control for this purpose can send a control action via a configurable key to the control module (A). The control module (A) carries out the desired action, as appropriate. A conversation recording can be stopped, started, deleted or started anew. Likewise, as appropriate, the previous recording can be deleted. For each of these actions an announcement can be configured, which both conversation partners hear, and the keys that lead to this action. Furthermore, the current recording status can be retrieved.
Very particularly preferably the recorded conversation or fax files are cryptographically encoded before storage in the archive data storage system in order to protect them from unauthorized access.
In an advantageous embodiment variant of the method, a selection from different announcement texts, in particular in different languages, takes place based on the call number and/or the country code of the external caller. It can thus be ensured that every caller can also understand the announcement text. With each of the scenarios according to the invention, it must be ensured that conversations cannot be linked to other conversations. Also with the end of a call, a recording possibly running must be ended immediately and the line of the other conversation partner must be closed. An invalid input of a call participant must be recognized as well as a missing input and handled accordingly. This can be carried out by a new request, which can be limited in number, or also lead to the end of the conversation. The acceptance of calls with suppressed call number can be prevented.
Before accepting the call, it is ensured by administration module (S) that a reliable storage of the recording can be carried out, for example in that the reachability of the external storage system (T2) is verified, if the system is configured such that data have to be available immediately on at least two storage systems.
The announcements for the caller and the called party can be different.
In general it can be configured how many attempts a call participant has in the selection of whether the conversation is to be recorded.
Preferably, a keyword indexing or also setting metadata after a call recording has been completed is possible by each client via the administration module (S). The automatic setting of these metadata by the system is possible based on criteria such as the call numbers or the scenario or the time. This is carried out by the administration module (S) via a set of rules to be configured or a conversion of the conversation data into text. Advantageously, a keyword indexing of the telephone call is carried out by means of speaker-independent speech recognition from the recorded conversation and storage of the keywords together with the recorded audio file.
Furthermore, an input mask for information on the telephone call is displayed preferably on a client computer with speech telephone communication contents, and at the end of the telephone call this information is saved together with the recorded audio file. To this end during a conversation it can be signaled to one of the configured clients that a recording is running. He has the option during the recording via a mask on the client or the system to provide the conversation with metadata and further information. On the client, these metadata can be set via a program during the conversation, to which the start, the course and the end of a conversation and the recording thereof is signaled by the administration module (S).
Recorded conversations can be searched and found based on the metadata, but even without these data it is possible to find these conversations. Identification is possible based on the call numbers or the time.
An advantageous embodiment variant of the method according to the invention provides that, in addition to the recorded audio file, the call number of the internal or external subscriber is stored in the archive data storage system as a search criterion and/or authorization criterion for an archive retrieval.
Via the system a recording can be listened to, downloaded and the signature can be verified insofar as the necessary rights, protected and verified by the administration module (S), are given.
| Number | Date | Country | Kind |
|---|---|---|---|
| 10 2010 009 765.9 | Mar 2010 | DE | national |
| Filing Document | Filing Date | Country | Kind | 371c Date |
|---|---|---|---|---|
| PCT/EP2011/052702 | 2/23/2011 | WO | 00 | 8/9/2012 |
