Can GVP support Tone Masking?

[sitto]

Hi,

I'm proposing GVP for Banking that they have requirement to do TPIN and need more security during customers press PIN code on IVR then we have to propose Tone Masking during DTMF.

I'm not sure. Can GVP support it? or How can we apply some feature on GVP?

Many thanks,
Sitto

[cavagnaro]

What is that??? A DTMF is a signal with certain frequency which is understood by the PBX or dialogic board and interprets it as a digit according to international conventions. Where would GVP mask it? GVP receives the interpretation of such digit on VCS/IPCS. I really doubt that GVP can do something there. Maybe an encryption equipment but it is an external box.

[sitto]

I don't know how but this feature can do on IVR product such as Intervoice.
And CCIVR also has a function called GetInput which allows us to play a message and get DTMF inputs from caller.

[cavagnaro]

Uh? I know CCIVR and the function you mention is the INPUT block in GVP...now you confused me, CCIVR never does a masking...

[sitto]

Really??? I have asked my friend and he referred to that feaure...

[cavagnaro]

Humfff....maybe if you explain again what does your customer needs or wants to avoid?

[rpenney]

tone masking, in the context I think sitto is refering to, is the ability to play something while the caller enters their PIN so that the DTMF tones are "masked". This should stop anyone in the call path recording the call and getting the caller's DTMF PIN.

Without going into a discussion on "is it is a valid approach?", the question is can GVP do it? The short answer is no. The long answer is you could possibly hack something together but I would want to test it first and I think it would be tricky and prone to failure one way would be to write your own INPUT block to play a interruptible prompt for a digit, concatenate the digit to a string and repeat.

Is it a valid approach? Not really, it doesn't provide really any security and in fact provides a false sense of security. Anyone with any sound engineering skill could take the recording, strip out the frequencies for DTMF and have a pretty good chance of recovering the PIN. And of course if VOIP is used then the DTMF is probably sent out-of-band and a packet sniffer gets you the digits.

[sitto]

Thanks rpenney !!!

Could you please give me an example how write INPUT block to play a interruptible prompt for a digit?
Because what my engineer tried to do when pressing DTMF, it had stop tone then he still heard DTMF tone.

[victor]

Hi, Sitto,

the idea is to avoid agent from hearing DTMF entered by client, correct?

I am actually in Bangkok until the end of this week, and I guess I can show several ways we are doing it.

You can call up Star Systems Thailand office and ask for me

Best regards,
Vic

[newbie_ggn]

Hi

I am using GVP7.6.
During conference call between agent, IVR and call i want to mask DTMF tone from agent.
Agent will only be able to listen to background music.

Is it possible?

With Regards

[genesysguru]

Have exactly the same problem - PCI compliance with GVP 7.6. If you have a SIP integration you need to be careful as a Wireshark trace will show DTMF digits in SIP INFO or RTP packets ....