Methods, computer programs, user equipment, servers and systems for phone calls with user verification

Abstract

The present disclosure relates to methods, user equipment, servers, systems and computer program for phone calls with user verification. After establishing user identity via a third-party mechanism, user identity information is transmitted securely via a dedicated route to, passing via a user verification server, UVS, to and from a pair of users, thereby enabling user verification of incoming and outgoing calls.

Description

[0001] METHODS, COMPUTER PROGRAMS, USER EQUIPMENT, SERVERS AND SYSTEMS FOR PHONE CALLS WITH USER VERIFICATION

[0002] TECHNICAL FIELD

[0003] The present disclosure relates to phone calls with user verification when communicating via user equipment, such as mobile phones.

[0004] BACKGROUND ART

[0005] Fraudulent behaviour using mobile phone and pretending to be someone else is a growing problem in society. Technology has made it possible to call someone using a false phone number, thereby making it appear as if the call is coming from a specific user, when it is not. Artificial intelligence has made voice cloning possible, thereby enabling an impostor to mimic the voice of a person. A common occurrence is a criminal calling an older person pretending to be their child or grandchild and try to get access to money, while mimicking the voice and phone number of the (grand)child. Other methods of fraud involve pretending to work for a bank or a government agency in order to gain access to bank accounts or other valuable information. There is a need in the art to prevent such criminal behaviour.

[0006] SUMMARY OF THE INVENTION

[0007] The present disclosure relates to phone calls with user verification when communicating via user equipment, such as mobile phones.

[0008] In particular, the present disclosure relates to a method for user verification of an outgoing call from a first user equipment, UE1. The method comprises initiating a user verification in a computer program for phone calls with user verification, CP. The initiated user verification triggers a third-party verification mechanism. The computer program CP is configured to store state information SI. The state information SI is configured to comprise a phone number of a current user equipment, a unique user ID, a real name of the user, and a security level. The method further comprises verifying, using the third-party verification mechanism, the user of the UE1. The method also comprises, based on the user of the UE1 being successfully verified, triggering a verification information sequence. The verification information sequence comprises storing user information of the UE1. The user information of the UE1 being based on successful verification of the user of the UE1 via the third- party verification mechanism. The user information comprises a unique user ID of the user of the UE1 and a real name of the user of the UE1. The verification information sequence further comprises setting a security level to a first security level. The security level is selected from one of: a first security level configured to indicate that the current user is verified in the computer program CP via the third-party verification mechanism, a second security level configured to indicate that the current user has previously been verified in the computer program CP via the third-party verification mechanism, and a third security level configured to indicate that the current user has never previously been verified in the computer program CP via the third-party verification mechanism; the third security level being a default security level of the computer program CP. The verification information sequence also comprises transmitting verified user information to a user verification server UVS. The verified user information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user of the UE1 was verified in the computer program CP. The transmission of the verified user information and / or the verified user information is encrypted.

[0009] The method additionally comprises, based on an inactivity criterion being met, the inactivity criterion comprising the user initiating a shutdown of the computer program CP and / or the conversation activity status indicating no conversation request and no ongoing conversation for a predetermined time period, triggering an inactivity sequence. The inactivity sequence comprises setting the security level to the second security level, and transmitting verification timed-out information to the user verification server UVS. The verification timed-out information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user verification of the user of the UE1 was timed-out in the computer program CP. The transmission of the verification timed-out information and / or the verification timed-out information is encrypted.

[0010] The method further comprises transmitting, via the computer program CP, an outgoing call request OCR, to a second user equipment UE2.

[0011] The method also comprises transmitting outgoing call request information, OCRI, to the user verification server UVS. The outgoing call request information OCRI comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 , the security level of the UE1 and a time stamp relating to when the outgoing call request OCR to the UE2 was transmitted. The transmission of the outgoing call request information OCRI and / or outgoing call request information OCRI is encrypted. The method further comprises receiving, from the user verification server, UVS, outgoing call request acceptance information OCAI. The outgoing call request acceptance information OCAI comprises the phone number of the UE2, the security level of the UE2, and, based on the security level of the UE2 being a first or a second security level, information relating to the real name of the user of the UE2. The reception of the outgoing call request acceptance information OCAI and / or the outgoing call request acceptance information OCAI is encrypted.

[0012] The method also comprises indicating outgoing call request acceptance information OCAI. The outgoing call request acceptance information OCAI comprises the phone number of UE2, the security level of the UE2, and, based on the second user equipment security level information being a first or a second security level, information relating to the real name of the user of the UE2.

[0013] The method thereby enables a user of the user equipment UE2, assuming that the UE2 is capable to receive and process the information transmitted from the user equipment UE1 to the UE2 via the user verification server UVS, to verify the identity of the caller, i.e. the user of the UE1.

[0014] A further technical effect and advantage is that, assuming the outgoing call request OCR is accepted, the user of the UE1 can verify the identity of the user of the UE2.

[0015] The method offers a flexible way to use different third-party verification mechanisms within a single, unifying framework.

[0016] By utilizing the computer program CP as an interface to both place and receive calls, as well as display information relating to the security level of the user equipment of the other user, the method provides a very simple mechanism for phone calls with user verification that is very easy to use for people who are intimidated by technology; from a user’s perspective, the method works in the same way as placing a regular phone call, potentially with the addition of verifying his / her identity via the third-party mechanism.

[0017] An additional technical effect and advantage is the use of two separate information pathways, one transmitting information across the mobile network connecting the first and second user equipment directly, and the other transmitting information via the server using the internet. By transmitting information in these two ways, calls can be monitored at the server and thereby detect call hijacking attempts.

[0018] According to some aspects, the state information SI is further configured to comprise conversation activity status. The conversation activity status is configured to indicate one of: an outgoing conversation request, an outgoing conversation is ongoing, an incoming conversation request, an incoming conversation is ongoing, and no conversation request and no ongoing conversation. Transmitting the outgoing call request information OCRI further comprises setting the conversation activity status to indicate an outgoing conversation request. The outgoing call request information OCRI further comprises the conversation activity status.

[0019] According to some aspects, receiving an outgoing call request acceptance information OCAI further comprises setting the conversation activity status to indicate an outgoing conversation is ongoing.

[0020] The use of conversation activity status provides a mechanism for the server to monitor the call status and thereby detect potential call hijacking attempts. For instance, if the UE1 transmits an outgoing call request OCR to the UE2 and an attacker intervenes by placing a call just before to the UE2, and providing a false phone number indicating to the UE2 that the UE1 is calling, the server will detect, via the conversation activity status of the UE1 , that the UE1 is not in a call with the UE2, whereas the UE2 is in conversation with someone. The server can then infer that the call has been hijacked and can indicate to the UE2 that the caller to the UE2 is not to be trusted.

[0021] The present disclosure further relates to a method, performed at a first user equipment, UE1 , for user verification of an incoming call from a second user equipment, UE2. The method comprises initiating a user verification in a computer program for phone calls with user verification CP. The user verification triggers a third-party verification mechanism. The computer program CP is configured to store state information SI. The state information SI is configured to comprise a phone number of a current user equipment, a unique user ID, a real name of the user, and a security level.

[0022] The method further comprises verifying, using the third-party verification mechanism, the user of the UE1.

[0023] The method also comprises, based on the user of the UE1 being successfully verified, triggering a verification information sequence. The verification information sequence comprises storing user information of the UE1 , the user information of the UE1 being based on successful verification of the user of the UE1 via the third-party verification mechanism. The user information comprises a unique user ID of the user of the UE1 and a real name of the user of the UE1 . The verification information sequence further comprises setting a security level to a first security level. The security level is selected from one of: a first security level configured to indicate that the current user is verified in the computer program CP via the third-party verification mechanism, a second security level configured to indicate that the current user has previously been verified in the computer program via the third-party verification mechanism, and a third security level configured to indicate that the current user has never previously been verified in the computer program CP via the third-party verification mechanism; the third security level being a default security level of the computer program CP. The verification information sequence also comprises transmitting verified user information to a user verification server UVS. The verified user information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user of the UE1 was verified in the computer program CP. The transmission of the verified user information and / or the verified user information is encrypted.

[0024] The method additionally comprises, based on an inactivity criterion being met, the inactivity criterion comprising the user initiating a shutdown of the computer program CP and / or the conversation activity status indicating no conversation request and no ongoing conversation for a predetermined time period, triggering an inactivity sequence. The inactivity sequence comprises setting the security level to the second security level, and transmitting verification timed-out information to the user verification server UVS. The verification timed-out information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user verification of the user of the UE1 was timed-out in the computer program CP. The transmission of the verification timed-out information and / or the verification timed-out information is encrypted.

[0025] The method further comprises receiving a incoming call request ICR from a second user equipment UE2.

[0026] The method also comprises receiving incoming call request information ICRI from the user verification server UVS. The incoming call request information ICRI comprises the phone number of the UE2, information relating to the real name of the user of the UE2 and the security level of the UE2, wherein the reception of the incoming call request information ICRI and / or incoming call request information ICRI is encrypted.

[0027] The method additionally comprises indicating incoming call request information ICRI. The incoming call acceptance information comprises the security level of the UE2, and, based on the second user equipment security level information being a first or a second security level, information relating to the real name of the user of the UE2.

[0028] The method further comprises, based on accepting the incoming call request ICR from the UE2 via the computer program CP, transmitting incoming call request acceptance information ICAI to the user verification server UVS. The incoming call request acceptance information ICAI comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 , the security level of the UE1 and a time stamp relating to when the incoming call request ICR from the UE2 was accepted. The transmission of the incoming call request acceptance information ICAI and / or incoming call request acceptance information ICAI is encrypted. The method thereby enables a user of the UE1 to verify the identity of the caller, i.e. the user of the UE2.

[0029] A further technical effect and advantage is that, assuming the incoming call request ICR is accepted, the user of the UE2 can verify the identity of the user of the UE1 based on information transmitted to the UE2 via the user verification server UVS in response to accepting the incoming call request ICR.

[0030] The method offers a flexible way to use different third-party verification mechanisms within a single, unifying framework.

[0031] By utilizing the computer program CP as an interface to both place and receive calls, as well as display information relating to the security level of the user equipment of the other user, the method provides a very simple mechanism for phone calls with user verification that is very easy to use for people who are intimidated by technology; from a user’s perspective, the method works in the same way as placing a regular phone call, potentially with the addition of verifying his / her identity via the third-party mechanism.

[0032] An additional technical effect and advantage is the use of two separate information pathways, one transmitting information across the mobile network connecting the first and second user equipment directly, and the other transmitting information via the server using the internet. By transmitting information in these two ways, calls can be monitored at the server and thereby detect call hijacking attempts.

[0033] According to some aspects, the state information SI is further configured to comprise conversation activity status. The conversation activity status is configured to indicate one of: an outgoing conversation request, an outgoing conversation is ongoing, an incoming conversation request, an incoming conversation is ongoing, and no conversation request and no ongoing conversation. Receiving incoming call request information ICRI further comprises setting the conversation activity status to indicate an incoming conversation request.

[0034] According to some aspects, transmitting incoming call request acceptance information ICAI comprises setting the conversation activity status to indicate an incoming conversation is ongoing, and wherein the incoming call request acceptance information ICAI further comprises the conversation activity status.

[0035] The use of conversation activity status provides a mechanism for the server to monitor the call status and thereby detect potential call hijacking attempts.

[0036] The present disclosure also relates to a computer program CP for phone calls with verified users. The computer program CP comprises computer program code which, when executed by processing circuitry of a first user equipment UE1 , causes the user equipment UE1 to carry out the method for user verification of an outgoing call from the first user equipment UE1 , as described above and below, and / or carry out the method for user verification of an incoming call from a second user equipment UE2, as described above and below.

[0037] The computer program CP for phone calls with user verification has the same technical effects and advantages as the corresponding disclosed methods for user verification of an outgoing call from a first user equipment UE1 , as described above and below, and / or the method for user verification of an incoming call from a second user equipment UE2, as described above and below.

[0038] The present disclosure further relates to a first user equipment UE1 for phone calls with user verification. The user equipment UE1 comprises processing circuitry configured to carry out the method for user verification of an outgoing call from a first user equipment UE1 , as described above and below, and / or carry out the method for user verification of an incoming call from a second user equipment UE2, as described above and below.

[0039] The user equipment for phone calls with user verification has the same technical effects and advantages as the corresponding disclosed methods for user verification of an outgoing call from a first user equipment UE1 , as described above and below, and / or the method for user verification of an incoming call from a second user equipment UE2, as described above and below.

[0040] According to some aspects, the processing circuitry further comprising a processor and a memory, the memory being configured to store a computer program for phone calls with user verification CP as described above and below.

[0041] The method additionally relates to a method, performed at a user verification server UVS, for user verification of an outgoing call from a first user equipment UE1 , to a second user equipment UE2.

[0042] The method comprises receiving verified user information from the UE1. The verified user information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user of the UE1 was verified in a computer program for phone calls with user verification CP. The reception of the verified user information and / or the verified user information is encrypted. The method further comprises, based on the user verification of the user of the UE1 being timed-out in the computer program CP, receiving verification timed-out information from the UE1. The verification timed- out information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user verification of the user of the UE1 was timed-out in the computer program CP. The reception of the verification timed-out information and / or the verification timed-out information is encrypted.

[0043] The method also comprises receiving outgoing call request information OCRI from the UE1. The outgoing call request information OCRI comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the outgoing call request OCR from the UE1 occurred. The reception of the outgoing call request information OCRI and / or the outgoing call request information OCRI is encrypted.

[0044] The method additionally comprises transmitting incoming call request information ICRI to the UE2. The incoming call request information ICRI comprises the phone number of the UE1 , information relating to the real name of the user of the UE1 and the security level of the UE1. The reception of the incoming call request information ICRI and / or incoming call request information ICRI is encrypted.

[0045] The present disclosure further relates to a method, performed at a user verification server UVS, for user verification of an incoming call from a second user equipment UE2, to a first user equipment UE1.

[0046] The method comprises receiving verified user information from the UE1. The verified user information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user of the UE1 was verified in a computer program for phone calls with user verification CP. The reception of the verified user information and / or the verified user information is encrypted.

[0047] The method further comprises, based on the user verification of the user of the UE1 being timed- out in the computer program CP, receiving verification timed-out information from the UE1. The verification timed-out information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user verification of the user of the UE1 was timed-out in the computer program CP. The reception of the verification timed-out information and / or the verification timed-out information is encrypted.

[0048] The method also comprises receiving incoming call request acceptance information ICAI from the UE1. The incoming call request acceptance information ICAI comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the call from UE2 was accepted.

[0049] The method additionally comprises transmitting outgoing call request acceptance information OCAI to the UE2. The outgoing call request acceptance information OCAI comprises the phone number of the UE1 , the security level of the UE1 and information relating to the real name of the user of the UE1.

[0050] The method for user verification of an outgoing call from a first user equipment UE1 to a second user equipment UE2, and the method for user verification of an incoming call from a second user equipment UE2 to a first user equipment UE1 , both performed at the user verification server UVS, makes the server act as the intermediary that enables the corresponding user equipment methods for user verification of an outgoing call from a first user equipment and for user verification of an incoming call from a second user equipment. The server can further monitor the conversation status and detect possible attempts at hijacking a conversation. The method for user verification of an outgoing call from a first user equipment UE1 to a second user equipment UE2, and the method for user verification of an incoming call from a second user equipment UE2 to a first user equipment UE1 , therefore have all the technical effects and advantages of the corresponding user equipment methods for user verification of an outgoing call from a first user equipment UE1 and for user verification of an incoming call from a second user equipment UE2, as described above and below.

[0051] The present disclosure also relates to a computer program CPS for a user verification server UVS. The computer program CPS comprising computer program code which, when executed by processing circuitry of a user verification server UVS causes the server to carry out the method for user verification of an outgoing call from a first user equipment UE1 to a second user equipment UE2 as described above and below, and / or the method for user verification of an incoming call from a second user equipment UE2 to a first user equipment UE1 , as described above and below.

[0052] The computer program CPS for a user verification server UVS has all the technical effects and advantages of the methods, performed at the user verification server UVS, for user verification of an outgoing call from a first user equipment UE1 to a second user equipment UE2, as described above and below, and / or the method for user verification of an incoming call from a second user equipment UE2 to a first user equipment UE1 , as described above and below.

[0053] The present disclosure additionally relates to a user verification server UVS. The server UVS comprises processing circuitry, wherein the processing circuitry comprises a processor and a memory. The memory is configured to store a computer program CPS for server user verification of phone calls, as described above and below.

[0054] The user verification server UVS has all the technical effects and advantages of the methods, performed at the user verification server UVS, for user verification of an outgoing call from a first user equipment UE1 to a second user equipment UE2 as described above and below, and / or the method for user verification of an incoming call from a second user equipment UE2 to a first user equipment UE1 , as described above and below.

[0055] The present disclosure further relates to a system for phone calls with user verification. The system comprises a user verification server UVS as described above and below, a first user equipment UE1 , as described above and below, and a second user equipment UE2, as described above and below.

[0056] The system for phone calls with user verification has all the technical effect and advantages of the user verification server UVS, the first user equipment UE1 and the second user equipment UE2, as described above and below.

[0057] According to some aspects, the first user equipment UE1 and the second user equipment UE2 are both configured to carry out the method for user verification of an outgoing call from the first user equipment UE1 , as described above and below, and carry out the method for user verification of an incoming call from the second user equipment UE2, as described above and below.

[0058] The present disclosure also relates to a method for phone calls with user verification, performed in a system for phone calls with user verification, as described above and below.

[0059] The method comprises, based on the first user equipment UE1 , transmitting via the computer program CP, an outgoing call request OCR to the second user equipment UE2, performing the method for user verification of an outgoing call, as described above and below.

[0060] The method further comprises, based on the UE1 transmitting via the CP, an outgoing call request OCR to the UE2, performing the method, performed at the user verification server UVS, for user verification of an outgoing call, as described above and below.

[0061] The method also comprises, based on the UE1 receiving an incoming call request ICR from the UE2, performing the method for user verification of an incoming call, as described above and below.

[0062] The method additionally comprises, based on the UE1 receiving an incoming call request ICR from the UE2, performing the method, performed at the user verification server UVS, for user verification of an incoming call, as described above and below.

[0063] The method, performed in a system for phone calls with user verification, as described above and below, for phone calls with user verification has all the corresponding technical effects and advantages of said system.

[0064] BRIEF DESCRIPTION OF THE DRAWINGS Figures 1 and 2 illustrate method steps of the disclosed methods for phone calls with user verification performed at a user equipment;

[0065] Figures 3a and 3b illustrate method steps of the disclosed method for phone calls with user verification performed at a user verification server UVS;

[0066] Figure 4 illustrates method steps of the disclosed method for phone calls with user verification performed in a system for phone calls with user verification;

[0067] Figure 5 illustrates a user equipment for phone calls with user verification;

[0068] Figure 6 illustrates a user verification server UVS; and

[0069] Figure 7 illustrates a system for phone calls with user verification.

[0070] DETAILED DESCRIPTION

[0071] Figures 1 and 2 illustrate method steps of the disclosed methods for phone calls with user verification performed at a user equipment, such as a mobile phone.

[0072] The methods will be described as two separate methods, one for outgoing calls and the other for incoming calls, but they could be merged into a single method, with identical method steps, such as relating to initiating a user verification in a computer program (twice) and verifying the user identity via a third-party mechanism (twice), be merged into corresponding single steps.

[0073] Figure 1 illustrates aspects of the method 100 for user verification of an outgoing call from a first user equipment UE1.

[0074] Thus, the present disclosure relates to a method 100 for user verification of an outgoing call from a first user equipment UE1. The method comprises initiating a user verification in S100 in a computer program for phone calls with user verification CP.

[0075] If the computer program CP, which implements the method, is not already installed on the first user equipment UE1 , it must be obtained and installed, e.g. by the user.

[0076] Thus, according to some aspects, the method comprises obtaining the computer program CP, and installing the CP on the UE1 . The CP may be provided to the user on physical media storage or downloaded via the internet from a provider.

[0077] During installation, the user may be prompted to select a third-party verification mechanism. According to some aspects, the third-party verification mechanism is selected from a set of predetermined third-party verification mechanisms. Depending on the third-party verification mechanism, the user may have to install additional computer programs relating to the third-party verification mechanism, if not already present.

[0078] The computer program CP is configured to store state information SI. The state information SI is configured to comprise a phone number of a current user equipment, a unique user ID, a real name of the user, and a security level. According to some aspects, the unique user ID comprises a social security number of the user.

[0079] According to some aspects, the state information SI is further configured to comprise conversation activity status. The conversation activity status is configured to indicate one of: an outgoing conversation request, an outgoing conversation is ongoing, an incoming conversation request, an incoming conversation is ongoing, and no conversation request and no ongoing conversation. Tracking the conversation activity status enables the server to monitor attempts at establishing connections as well as keep track of when an ongoing call is terminated, and at which end. The server can thereby detect hostile third parties trying to inject themselves into a call.

[0080] The security level is selected from one of: a first security level configured to indicate that the current user is verified in the computer program CP via the third-party verification mechanism, a second security level configured to indicate that the current user has previously been verified in the computer program CP via the third-party verification mechanism, and a third security level configured to indicate that the current user has never previously been verified in the computer program CP via the third-party verification mechanism.

[0081] The third security level being a default security level of the computer program CP. In other words, the security level is pre-set to the third security level or automatically set to the third security level during installation of the computer program CP.

[0082] The initiation of a user verification triggers a third-party verification mechanism. According to some aspects, triggering the third-party verification mechanism comprises generating an event via the application programming interface API of the third-party verification mechanism that is configured to start a computer program via which the user performs the third-party verification, such as a computer program for the Swedish BankID. The method further comprises verifying S110, using the third-party verification mechanism, the user of the UE1. This is often performed via a dedicated computer program provided by the providers of the third-party verification mechanism, e.g. by typing in a code or a password, and / or by scanning biometric data.

[0083] The method also comprises, based on the user of the UE1 being successfully verified, triggering S120 a verification information sequence. The verification information sequence comprises storing S122 user information of the UE1 , the user information of the UE1 being based on successful verification of the user of the UE1 via the third-party verification mechanism. The user information comprises a unique user ID of the user of the UE1 , such as a social security number, and a real name of the user of the UE1. The verification information sequence further comprises setting S124 the security level to the first security level.

[0084] The verification information sequence also comprises transmitting S126 verified user information to a user verification server UVS. The verified user information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user of the UE1 was verified in the computer program CP.

[0085] A preferred aspect of the disclosed invention is to have all communication to and from the UVS transmitted via the internet. In addition to providing second route of information with respect to the mobile network any call to and from the UE1 takes, the transmission of data using the internet enables the use of standard secure protocols for internet data transfer. As an alternative or additional safety measure, the transmitted and received information may itself be encrypted. The second route further enables detection of call hijack attempts, as described above and below.

[0086] Thus, the transmission of the verified user information and / or the verified user information is encrypted.

[0087] If the user of the UE1 does not initiate an outgoing call request OCR or accept an incoming call request ICR via the computer program CP within a predetermined time frame, the user, if currently verified in CP, the user verification is preferably timed-out in the computer program CP. Likewise, if the user shuts down the computer program CP, thereby transferring the computer program to a background process, the user verification is timed-out in the computer program CP.

[0088] Thus, the method comprises, based on an inactivity criterion being met, the inactivity criterion comprising the user initiating a shutdown of the computer program CP and / or the conversation activity status indicating no conversation request and no ongoing conversation for a predetermined time period, triggering S130 an inactivity sequence. The inactivity sequence comprises setting S134 the security level to the second security level, and transmitting S136 verification timed-out information to the user verification server UVS. The verification timed-out information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user verification of the user of the UE1 was timed-out in the computer program CP. The transmission of the verification timed-out information and / or the verification timed-out information is encrypted.

[0089] A particular advantage of the disclosed method is that it enables handling all the communication via the computer program CP, while simultaneously automatically taking care of the verification process in the background; the user of a mobile phone does not need to learn any new skills or handle multiple programs to communicate with, and verify the identity of, another person. The only time a user might need to use a second computer program is when the user verifies his / her identity via the third-party verification mechanism. The computer program CP is preferably configured to provide a graphical user interface GUI through which a user of the user equipment can initiate and receive a phone call, just as any standard phone interface found on mobile phones. The computer program can communicate with the application programming interface API of the UE1 and thereby enable the user to use the phone functionality of the UE1 like any other phone interface, but with the added benefit of having the disclosed methods for user verification being executed automatically.

[0090] Thus, the method further comprises transmitting S140, via the CP, an outgoing call request OCR to a second user equipment UE2. In the context of mobile phones, an outgoing call request OCR is then transmitted from the UE1 to the UE2 via the mobile network of the mobile phone operator of the UE1 and the mobile network of the mobile phone operator of the UE2.

[0091] The method also comprises transmitting S150 outgoing call request information OCRI to the user verification server UVS. According to some preferred aspects, the transmission S150 is performed via the internet. The outgoing call request information OCRI comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 , the security level of the UE1 and a time stamp relating to when the outgoing call request OCR to the UE2 was transmitted. The transmission of the outgoing call request information OCRI and / or the outgoing call request information OCRI is encrypted. As described above and below, all communication with the UVS is preferable sent via the internet using secure communication.

[0092] According to some aspects, based on the state information SI being further configured to comprise conversation activity status, transmitting S150 the outgoing call request information OCRI further comprises setting S152 the conversation activity status to indicate an outgoing conversation request, and wherein the outgoing call request information OCRI further comprises the conversation activity status.

[0093] The method additionally comprises, based on the user verification server UVS having transmitted outgoing call request acceptance information OCAI to the UE1 , receiving S160, from the user verification server UVS, outgoing call request acceptance information OCAI. The outgoing call request acceptance information OCAI comprising the phone number of the UE2, the security level of the UE2, and, based on the security level of the UE2 being a first or a second security level, information relating to the real name of the user of the UE2. The reception of the outgoing call request acceptance information OCAI and / or the outgoing call request acceptance information OCAI is encrypted.

[0094] In case the UE2 is not configured to perform the corresponding method for user verification of an incoming call, the security level of the UE2 is to be interpreted as the third security level.

[0095] According to some aspects, the method comprises, based on UE1 not receiving outgoing call request acceptance information OCAI from the server UVS within a predetermined time period starting from the outgoing call request OCR from the UE1 to the UE2 being accepted, the security level of the UE2 is to be interpreted as the third security level.

[0096] According to some aspects, the method comprises, based on UE1 not receiving outgoing call request acceptance information OCAI from the server UVS within a predetermined time period starting from the outgoing call request OCR from the UE1 to the UE2 being accepted, transmitting a query from UE1 to the server UVS, the query being configured to cause the server UVS to transmit S160 the outgoing call request acceptance information OCAI to the UE1. In case the UE2 has not transmitted any information to the server when accepting the outgoing call request OCR from the UE1 , e.g. because the UE2 does not have an appropriate version the computer program for phone calls with user verification CP according to the present disclosure installed, the server UVS can transmit a default outgoing call request acceptance information OCAI having the security level set to the third security level. The phone number of the UE2 as shown at the UE1 can be integrated into the outgoing call request acceptance information OCAI at the UE1.

[0097] According to some aspects, the method comprises, based on not receiving outgoing call request acceptance information OCAI from the server within a predetermined time period starting from the outgoing call request OCR from the UE1 to the UE2 being accepted, receiving a predetermined outgoing call request acceptance information OCAI having the security level set to the third security level from the server UVS, the predetermined outgoing call request acceptance information OCAI being stored within the computer program CP at the UE1. According to some aspects, the computer program CP is configured to integrate the phone number of the UE2 into the outgoing call request acceptance information OCAI.

[0098] According to some aspects, based on the state information SI being further configured to comprise conversation activity status, receiving S160 outgoing call request acceptance information OCAI further comprises setting S162 the conversation activity status to indicate an outgoing conversation is ongoing. According to some aspects, the method comprises, based on the outgoing call request OCR from the UE1 to the UE2 being accepted, transmitting conversation activity status to the server UVS, the conversation activity status being set to indicate an outgoing conversation is ongoing, and, optionally the phone number of the UE2. If the UE2 has not transmitted any information to the server, the server can detect that the conversation is ongoing, and transmit the outgoing call request acceptance information OCAI to the UE1.

[0099] The method further comprises indicating S170 outgoing call request acceptance information OCAI. The outgoing call acceptance information comprises the security level of the UE2, and, based on the second user equipment UE2 security level being a first or a second security level, information relating to the real name of the user of the UE2 and / or the phone number of the UE2. According to some aspects, the indication comprises a color code based on the security level of the UE2, e.g. green for the first security level, yellow for the second security level and red for the third security level. According to some aspects, the indication comprises an audio signal, such as a tone and / or a spoken message.

[0100] Figure 2 illustrates a method for user verification of an incoming call.

[0101] Thus, the present disclosure also relates to a method 200, performed at a first user equipment UE1 for user verification of an incoming call from a second user equipment UE2.

[0102] The method 200 comprises the same steps of phone calls with user verification in a computer program CP, verifying, using a third-party verification mechanism, the user of the UE1 , and based on the user of the UE1 being successfully verified, triggering a verification information sequence, as the method 100 for user verification of an outgoing call.

[0103] Thus, the method 200 comprises initiating a user verification in S200 in a computer program for phone calls with user verification CP, the user verification triggering a third-party verification mechanism. The computer program CP is configured to store state information SI. The state information SI is configured to comprise a phone number of a current user equipment, a unique user ID, a real name of the user, and a security level.

[0104] According to some aspects, the state information SI is further configured to comprise conversation activity status. The conversation activity status is configured to indicate one of: an outgoing conversation request, an outgoing conversation is ongoing, an incoming conversation request, an incoming conversation is ongoing, and no conversation request and no ongoing conversation.

[0105] The method further comprises verifying S210, using the third-party verification mechanism, the user of the UE1. The method also comprises, based on the user of the UE1 being successfully verified, triggering S220 a verification information sequence.

[0106] The verification information sequence comprises storing S222 user information of the UE1. The user information of the UE1 is based on successful verification of the user of the UE1 via the third-party verification mechanism. The user information comprises a unique user ID of the user of the UE1 and a real name of the user of the UE1.

[0107] The verification information sequence further comprises setting S224 a security level to a first security level. The security level is selected from one of: a first security level configured to indicate that the current user is verified in the computer program CP via the third-party verification mechanism, a second security level configured to indicate that the current user has previously been verified in the computer program CP via the third-party verification mechanism, and a third security level configured to indicate that the current user has never previously been verified in the computer program CP via the third-party verification mechanism; the third security level being a default security level of the computer program CP.

[0108] The verification information sequence also comprises transmitting S226 verified user information to a user verification server UVS. The verified user information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user of the UE1 was verified in the computer program CP.

[0109] The transmission of the verified user information and / or the verified user information is encrypted.

[0110] The method 200 also comprises, based on an inactivity criterion being met, the inactivity criterion comprising the user initiating a shutdown of the computer program CP and / or the conversation activity status indicating no conversation request and no ongoing conversation for a predetermined time period, triggering S230 an inactivity sequence.

[0111] The inactivity sequence comprises setting S234 the security level to the second security level. The inactivity sequence also comprises transmitting S236 verification timed-out information to the user verification server UVS. The verification timed-out information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the verification of the user of the UE1 was timed-out in the computer program CP.

[0112] The transmission of the verification timed-out information and / or the verification timed-out information is encrypted. The method 200 further comprises receiving S280 an incoming call request ICR from a second user equipment UE2. In the context of mobile phones, the incoming call request ICR is transmitted from the UE2 to the UE1 via the mobile network of the mobile phone operator of the UE2 and the mobile network of the mobile phone operator of the UE1. The incoming call request will trigger an event at the UE1 . According to some preferred aspects, the computer program CP is set to be activated by the event, e.g. by an event handler of the UE1. This enables the computer program to function as the single user interface through which calls are both placed and received.

[0113] The method 200 also comprises, based on the user verification server UVS having transmitted incoming call request information ICRI to the UE1 , receiving S290 incoming call request information ICRI from the user verification server UVS. The incoming call request information ICRI comprises the phone number of the UE2, the security level of the UE2, and, based in the security level being a first or second security level, information relating to the real name of the user of the UE2. As described above in relation to Figure 1 , all communication to and from the server are preferably transmitted via the internet. Thus, according to some preferred aspects, the transmission S150 is performed via the internet.

[0114] If the UE2 is not configured to participate in the verification process, e.g. because it does not have an appropriate computer program CP for phone calls with user verification according to the present disclosure installed, the security level of the UE2 should preferably be indicated to be the third security level. Thus, according to some preferred aspects, the method comprises, based on the user verification server UVS not having transmitted incoming call request information ICRI within a predetermined time period of the incoming call request ICR, setting the security level of the UE2 to the third security level in incoming call request information ICRI.

[0115] The reception of the incoming call request information ICRI and / or the incoming call request information ICRI is encrypted.

[0116] The method further comprises, indicating S292 incoming call request information ICRI. The incoming call request information ICRI comprises the security level of the UE2, and, based on the second user equipment UE2 security level being a first or a second security level, information relating to the real name of the user of the UE2. If no incoming call request information ICRI has been transmitted from the user verification server UVS, this could indicate that the UE2 is not configured to participate in the user verification process, e.g. it does not have the appropriate computer program installed, and is therefore assumed by default to have a security level set to the third security level. Thus, according to some preferred aspects, based on the user verification server UVS not having transmitted incoming call request information ICRI, the security level of the UE2 is indicated to be the third security level. According to some aspects, based on the state information SI being configured to comprise conversation activity status, receiving S290 incoming call request information ICRI further comprises setting S291 the conversation activity status to indicate an incoming conversation request.

[0117] The method also comprises, based on accepting the incoming call request ICR from the UE2 via the computer program CP, transmitting S294 incoming call request acceptance information ICAI to the user verification server UVS. The incoming call request acceptance information ICAI comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 , the security level of the UE1 and a time stamp relating to when the incoming call request ICR from the UE2 was accepted.

[0118] According to some aspects, based on the state information SI being configured to comprise conversation activity status, transmitting S294 incoming call request acceptance information ICAI comprises setting S295 the conversation activity status to indicate an incoming conversation is ongoing, and wherein the incoming call request acceptance information ICAI further comprises the conversation activity status.

[0119] The transmission of the incoming call request acceptance information ICAI and / or incoming call request acceptance information ICAI is encrypted.

[0120] As stated above, the method 100 for user verification of an outgoing call and the method 200 for user verification of an incoming call can be merged into a single method. In summary, the present disclosure further relates to a method for user verification of incoming and outgoing calls, the method comprises initiating a user verification in S100 / S200 in a computer program for phone calls with user verification CP, the initiated user verification triggering a third-party verification mechanism. The computer program CP is configured to store state information SI. The state information SI is configured to comprise a phone number of a current user equipment, a unique user ID, a real name of the user, and a security level.

[0121] According to some aspects, the state information SI is further configured to comprise conversation activity status. The conversation activity status is configured to indicate one of: an outgoing conversation request, an outgoing conversation is ongoing, an incoming conversation request, an incoming conversation is ongoing, and no conversation request and no ongoing conversation. According to some aspects, the method comprises transmitting information comprising the current conversation activity status to the server UVS whenever the conversation status is changed. The information comprising the current conversation activity status can be transmitted as individual messages and / or be comprised in other transmissions to the server UVS, as described above and below. The method further comprises verifying S110 / S210, using the third-party verification mechanism, the user of the UE1.

[0122] The method also comprises, based on the user of the UE1 being successfully verified, triggering S120 / S220 a verification information sequence.

[0123] The verification information sequence comprises storing S122 / S222 user information of the UE1 . The user information of the UE1 being is on successful verification of the user of the UE1 via the third-party verification mechanism. The user information comprises a unique user ID of the user of the UE1 and a real name of the user of the UE1.

[0124] The verification information sequence further comprises setting S124 / S224 a security level to a first security level. The security level is selected from one of: a first security level configured to indicate that the current user is logged into the computer program CP via the third-party verification mechanism, a second security level configured to indicate that the current user has previously been logged into the computer program CP via the third-party verification mechanism, and a third security level configured to indicate that the current user has never previously been logged into the computer program CP via the third-party verification mechanism; the third security level being a default security level of the computer program CP.

[0125] The verification information sequence also comprises transmitting S126 / S226 verified user information to a user verification server UVS. The verified user information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user of the UE1 was verified in the computer program CP.

[0126] The transmission of the verified user information and / or the verified user information is encrypted.

[0127] The method further comprises, based on an inactivity criterion being met, the inactivity criterion comprising the user initiating a shutdown of the computer program CP and / or the conversation activity status indicating no conversation request and no ongoing conversation for a predetermined time period, triggering S130 / S230 an inactivity sequence.

[0128] The inactivity sequence comprises setting S134 / S234 the security level to the second security level, and transmitting S136 / S236 verification timed-out information to the user verification server UVS. The verification timed-out information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user verification of the user of the UE1 was timed- out in the computer program CP. The transmission of the verification timed-out information and / or verification timed-out information is encrypted.

[0129] The method further comprises transmitting S140, via the CP, an outgoing call request OCR to a second user equipment UE2.

[0130] The method also comprises transmitting S150 outgoing call request information OCRI to the user verification server UVS. The outgoing call request information OCRI comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 , the security level of the UE1 and a time stamp relating to when the outgoing call request OCR to the UE2 was transmitted. The transmission of the outgoing call request information OCRI and / or the outgoing call request information OCRI is encrypted.

[0131] According to some aspects, based on the state information SI being configured to comprise conversation activity status, transmitting S150 the outgoing call request information OCRI further comprises setting S152 the conversation activity status to indicate an outgoing conversation request, and wherein the outgoing call request information OCRI further comprises the conversation activity status.

[0132] The method additionally comprises receiving S160, from the user verification server UVS, outgoing call request acceptance information OCAI. The outgoing call request acceptance information OCAI comprises the phone number of the UE2, the security level of the UE2, and, based on the security level of the UE2 being a first or a second security level, information relating to the real name of the user of the UE2. The reception of the outgoing call request acceptance information OCAI and / or the outgoing call request acceptance information OCAI is encrypted.

[0133] According to some aspects, based on the state information SI being configured to comprise conversation activity status, receiving S160 outgoing call request acceptance information OCAI further comprises setting S162 the conversation activity status to indicate an outgoing conversation is ongoing.

[0134] The method further comprises indicating S170 outgoing call acceptance information OCAI. The outgoing call acceptance information OCAI comprises the security level of the UE2, and, based on the second user equipment security level information being a first or a second security level, information relating to the real name of the user of the UE2 and / or the phone number of the UE2.

[0135] The method also comprises receiving S280 an incoming call request ICR from a second user equipment UE2.

[0136] The method additionally comprises receiving S290 incoming call request information ICRI from the user verification server UVS. The incoming call request information ICRI comprises the phone number of the UE2, the security level of the UE2, and, based on the security level being a first or second security level, information relating to the real name of the user of the UE2. The reception of the incoming call request information ICRI and / or incoming call request information ICRI is encrypted.

[0137] According to some aspects, based on the state information SI being configured to comprise conversation activity status, receiving S290 incoming call request information ICRI further comprises setting S291 the conversation activity status to indicate an incoming conversation request.

[0138] The method further comprises indicating S292 incoming call request information ICRI. The incoming call request information ICRI comprises the security level of the UE2, and, based on the second user equipment security level information being a first or a second security level, information relating to the real name of the user of the UE2.

[0139] The method also comprises, based on accepting the incoming call request ICR from the UE2 via the computer program CP, transmitting S294 incoming call request acceptance information ICAI to the user verification server UVS. The incoming call request acceptance information ICAI comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 , the security level of the UE1 and a time stamp relating to when the incoming call request ICR from the UE2 was accepted.

[0140] According to some aspects, based on the state information SI being configured to comprise conversation activity status, transmitting S294 incoming call request acceptance information ICAI comprises setting S295 the conversation activity status to indicate an incoming conversation is ongoing, and wherein the incoming call request acceptance information ICAI further comprises the conversation activity status.

[0141] The transmission of the incoming call request acceptance information ICAI and / or incoming call request acceptance information ICAI is encrypted.

[0142] Figures 1 and 2 illustrate the methods for user verification of outgoing and incoming calls from the first user equipment UE1 point of view. Figures 3a and 3b illustrate the corresponding methods from the user verification server UVS point of view.

[0143] Specifically, Figure 3a illustrates a method 300a, performed at a user verification server UVS, for user verification of an outgoing call from a first user equipment UE1 , to a second user equipment UE2. The method 300a comprises receiving S300 verified user information from the UE1. The verified user information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user of the UE1 was verified in a computer program for phone calls with user verification CP. The reception of the verified user information and / or the verified user information is encrypted.

[0144] The method further comprises, based on the user verification of the user of the UE1 being timed- out in the computer program CP, receiving S310 verification timed-out information from the UE1 . The verification timed-out information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user verification of the user of the UE1 was timed-out in the computer program CP. The reception of the verification timed-out information and / or the verification timed-out information is encrypted.

[0145] The method also comprises receiving S320 outgoing call request information OCRI from the UE1 to the server UVS. The outgoing call request information OCRI comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the outgoing call request OCR from the UE1 occurred. The reception of the outgoing call request information OCRI and / or the outgoing call request information OCRI is encrypted.

[0146] The method additionally comprises transmitting S330 incoming call request information ICRI from the server UVS to the UE2. The incoming call request information ICRI comprises the phone number of the UE1 , information relating to the real name of the user of the UE1 and the security level of the UE1. The reception of the incoming call request information ICRI and / or incoming call request information ICRI is encrypted.

[0147] According to some aspects, each transmission and reception of information comprises conversation activity status of the user equipment to which the transmitted and received information relates. The conversation activity status is configured to indicate one of: an outgoing conversation request, an outgoing conversation is ongoing, an incoming conversation request, an incoming conversation is ongoing, and no conversation request and no ongoing conversation. By tracking changes in conversation activity status, the server UVS can detect conversation hijacking attempts, as described above, and transmit warnings, e.g. in the for of security level changes, to the respective user equipment.

[0148] Figure 3b illustrates a method 300b, performed at a user verification server UVS, for user verification of an incoming call from a second user equipment UE2 to a first user equipment UE1.

[0149] The method comprises receiving S300 verified user information from the UE1. The verified user information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user of the UE1 was verified in a computer program for phone calls with user verification CP. The reception of the verified user information and / or the verified user information is encrypted,

[0150] The method further comprises, based on the user verification of the user of the UE1 being timed- out in the computer program CP, receiving S310 verification timed-out information from the UE1 . The verification timed-out information comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user verification of the user of the UE1 was timed-out in the computer program CP. The reception of the verification timed-out information and / or the verification timed-out information is encrypted.

[0151] The method also comprises receiving S340 incoming call request acceptance information ICAI from the UE1. The incoming call request acceptance information ICAI comprises the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the call from UE2 was accepted. The reception of the incoming call request acceptance information ICAI and / or incoming call request acceptance information ICAI is encrypted.

[0152] The method additionally comprises transmitting S350 outgoing call request acceptance information OCAI to the UE2. The outgoing call request acceptance information OCAI comprises the phone number of the UE1 , the security level of the UE1 and information relating to the real name of the user of the UE1. The transmission of the outgoing call request acceptance information OCAI and / or the outgoing call request acceptance information OCAI is encrypted.

[0153] Figure 4 illustrates method steps of the disclosed method for phone calls with user verification performed in a system for phone calls with user verification.

[0154] The system for phone calls with user verification comprises a user verification server UVS as described above and below, a first user equipment, UE1 , and a second user equipment, UE2. The UE1 and UE2 are user equipment as described above and below.

[0155] The method 400 is performed in a system for phone calls with user verification, as described above and below. The method comprises, based on the first user equipment UE1 , transmitting S400, via the computer program CP, an outgoing call request OCR to the second user equipment UE2, performing the method for user verification of an outgoing call.

[0156] The method further comprises, based on the UE1 , transmitting, via the CP, an outgoing call request OCR to the UE2, performing S410 the method, performed at the user verification server UVS, for user verification of an outgoing call. The method also comprises, based on the UE1 receiving an incoming call request ICR from the UE2, performing (S420) the method for user verification of an incoming call.

[0157] The method additionally comprises, based on the UE1 receiving an incoming call request ICR from the UE2, performing (S430) the method, performed at the user verification server UVS, for user verification of an incoming call.

[0158] The method thereby enables automated user verification of both incoming and outgoing calls with the same ease as placing or receiving a regular call.

[0159] Figure 5 illustrates a user equipment 500 for phone calls with user verification. The user equipment comprises a radio antenna 540 configured to transmit and receive radio signals, and processing circuitry 510 configured to carry out the method for user verification of an outgoing call from a first user equipment UE1 , as described above and below, and / or carry out the method for user verification of an incoming call from a second user equipment UE2, as described above and below. According to some aspects, the processing circuitry 510 further comprising a processor 520 and a memory 530. The memory 530 is configured to store a computer program for phone calls with user verification CP as described above and below.

[0160] Figure 6 illustrates a user verification server UVS 6000. The user verification server UVS 6000 comprises processing circuitry 6100. The processing circuitry 6100 comprises a processor 6200 and a memory 6300. The memory 6300 is configured to store a computer program CPS for a user verification server UVS as described above and below.

[0161] Figure 7 illustrates a system 700 for phone calls with user verification. The system comprises a user verification server UVS as described above and below. The system further comprises a first user equipment, UE1 , and a second user equipment, UE2. Both the UE1 and the UE2 are user equipment for phone calls with user verification as described above and below.

[0162] According to some aspects, the first user equipment UE1 and the second user equipment UE2 are both configured to carry out the method for user verification of an outgoing call from a first user equipment UE1 , and carry out the method for user verification of an incoming call from a second user equipment UE2.

[0163] The present disclosure also relates to a computer program for phone calls with user verification CP. The computer program CP comprises computer program code which, when executed by processing circuitry of a user equipment UE, causes the user equipment UE to carry out the method for user verification of an outgoing call from a first user equipment UE1 , and / or carry out the method for user verification of an incoming call from a second user equipment UE2. The present disclosure further relates to a computer program CPS for a user verification server UVS. The computer program CPS comprises computer program code which, when executed by processing circuitry of the user verification server UVS, causes the server to carry out the method for user verification of an outgoing call from a first user equipment UE1 to a second user equipment UE2, and / or the method for user verification of an incoming call from a second user equipment UE2 to a first user equipment UE1.

[0164] The present disclosure additionally relates to a computer program for a system for phone calls with user verification. The computer program comprises computer program code which, when executed by processing circuitry of the system, causes the system to carry out the method, performed in a system for phone calls with user verification, for phone calls with user verification.

Claims

CLAIMS1. Method (100), performed at a first user equipment UE1 , for user verification of an outgoing call from the UE1 , the method comprising initiating (S100) a user verification in a computer program, CP, for phone calls with user verification, the initiated user verification triggering a third-party verification mechanism, wherein the CP is configured to store state information, SI, the SI being configured to comprise• a phone number of a current user equipment,• a unique user ID,• a real name of the user, and• a security level, verifying (S110), using the third-party verification mechanism, a user of the UE1 , based on the user of the UE1 being successfully verified, triggering (S120) a verification information sequence, the verification information sequence comprising• storing (S122) user information of the UE1 , the user information of the UE1 being based on successful verification of the user of the UE1 via the third-party verification mechanism, the user information comprising a unique user ID of the user of the UE1 and a real name of the user of the UE1 ,• setting (S124) a security level to a first security level, the security level being selected from one of:I. a first security level configured to indicate that the current user is verified in the CP via the third-party verification mechanism,II. a second security level configured to indicate that the current user has previously been verified in the CP via the third-party verification mechanism, andIII. a third security level configured to indicate that the current user has never previously been verified in the CP via the third-party verification mechanism, the third security level being a default security level of the computer program,• transmitting (S126) verified user information to a user verification server, UVS, the verified user information comprising the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user of the UE1 was verified in the CP, wherein the transmission of the verified user information and / or the verified user information is encrypted,based on an inactivity criterion being met, the inactivity criterion comprising the user initiating a shutdown of the computer program and / or a conversation activity status indicating no conversation request and no ongoing conversation for a predetermined time period, triggering (S130) an inactivity sequence, the inactivity sequence comprising• setting (S134) the security level to the second security level,• transmitting (S136) verification timed-out information to the UVS, the verification timed-out information comprising the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user verification of the user of the UE1 was timed-out in the CP, wherein the transmission of the verification timed-out information and / or the verification timed-out information is encrypted, transmitting (S140), via the CP, an outgoing call request OCR, to a second user equipment, UE2, transmitting (S150) outgoing call request information, OCRI, to the UVS, the OCRI comprising the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 , the security level of the UE1 and a time stamp relating to when the OCR to the UE2 was transmitted, wherein the transmission of the OCRI and / or OCRI is encrypted, based on the UVS having transmitted outgoing call request acceptance information, OCAI, to the UE1 , receiving (S160) OCAI from the UVS, the OCAI comprising the phone number of the UE2, the security level of the UE2, and, based on the security level of the UE2 being a first or a second security level, information relating to the real name of the user of the UE2, wherein the reception of the OCAI and / or OCAI is encrypted, and indicating (S170) outgoing OCAI, the outgoing OCAI comprising the phone number of UE2, the security level of the UE2, and, based on the security level of the second user equipment UE2 being a first or a second security level, information relating to the real name of the user of the UE2.

2. The method according to claim 1 , wherein the SI is further configured to comprise conversation activity status, wherein the conversation activity status is configured to indicate one of: a. an outgoing conversation request, b. an outgoing conversation is ongoing, c. an incoming conversation request,d. an incoming conversation is ongoing, and e. no conversation request and no ongoing conversation, and wherein transmitting (S150) the OCRI further comprises setting (S152) the conversation activity status to indicate an outgoing conversation request, and wherein the OCRI further comprises the conversation activity status.

3. The method according to claim 2, wherein receiving (S160) OCAI further comprises setting (S162) the conversation activity status to indicate an outgoing conversation is ongoing.

4. A method (200), performed at a first user equipment, UE1 , for user verification of an incoming call from a second user equipment, UE2, the method comprising initiating a user verification in (S200) a computer program, CP, for phone calls with user verification, the initiated user verification triggering a third-party verification mechanism, wherein the CP is configured to store state information SI, the SI being configured to comprise• a phone number of a current user equipment,• a unique user ID,• a real name of the user, and• a security level, verifying (S210), using the third-party verification mechanism, a user of the UE1 , based on the user of the UE1 being successfully verified, triggering (S220) a verification information sequence, the verification information sequence comprising• storing (S222) user information of the UE1 , the user information of the UE1 being based on successful verification of the user of the UE1 via the third-party verification mechanism, the user information comprising a unique user ID of the user of the UE1 and a real name of the user of the UE1 ,• setting (S224) a security level to a first security level, the security level being selected from one of:I. a first security level configured to indicate that the current user is verified in the CP via the third-party verification mechanism,II. a second security level configured to indicate that the current user has previously been verified in the CP via the third-party verification mechanism, andIII. a third security level configured to indicate that the current user has never previously been verified in the CP via the third-party verification mechanism, the third security level being a default security level of the CP,• transmitting (S226) verified user information to a user verification server, UVS, the verified user information comprising the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user of the UE1 was verified in the CP, wherein the transmission of the verified user information and / or the verified user information is encrypted, based on an inactivity criterion being met, the inactivity criterion comprising the user initiating a shutdown of the CP and / or a conversation activity status indicating no conversation request and no ongoing conversation for a predetermined time period, triggering (S230) an inactivity sequence, the inactivity sequence comprising• setting (S234) the security level to the second security level,• transmitting (S236) verification timed-out information to the UVS, the verification timed-out information comprising the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user verification of the user of the UE1 was timed-out in the CP, wherein the transmission of the verification time-out information and / or the verification timed-out information is encrypted, receiving (S280) an incoming call request ICR from a second user equipment, UE2, based on the UVS having transmitted incoming call request information ICRI to the UE1 , receiving (S290) incoming ICRI from the UVS, the ICRI comprising the phone number of the UE2, the security level of the UE2, and, based on the security level of UE2 being a first or second security level, information relating to the real name of the user of the UE2, wherein the reception of the ICRI and / or ICRI is encrypted, indicating (S292) ICRI, the ICRI comprising the phone number of the UE2, the security level of the UE2, and, based on the second user equipment UE2 security level being a first or a second security level, information relating to the real name of the user of the UE2, based on accepting the ICR from the UE2 via the CP, transmitting (S294) incoming call request acceptance information ICAI, to the UVS, the ICAI comprising the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of theuser of the UE1 , the security level of the UE1 and a time stamp relating to when the ICR from the UE2 was accepted, wherein the transmission of the ICAI and / or ICAI information is encrypted.

5. The method according to claim 4, wherein the SI is further configured to comprise conversation activity status, wherein the conversation activity status is configured to indicate one of: a. an outgoing conversation request, b. an outgoing conversation is ongoing, c. an incoming conversation request, d. an incoming conversation is ongoing, and e. no conversation request and no ongoing conversation, and wherein receiving (S290) ICRI further comprises setting (S291) the conversation activity status to indicate an incoming conversation request.

6. The method according to claim 5, wherein transmitting (S294) ICAI comprises setting (S295) the conversation activity status to indicate an incoming conversation is ongoing, and wherein the ICAI further comprises the conversation activity status.

7. A computer program, CP, for phone calls with user verification, the CP comprising computer program code which, when executed by processing circuitry of a user equipment, UE, causes the UE to carry out the method for user verification of an outgoing call from a first user equipment, UE1 , according to any of claims 1-3, and / or carry out the method for user verification of an incoming call from a second user equipment, UE2, according to any of claims 4-6.

8. A user equipment (500, 700a, 700b), UE, for phone calls with user verification, the UE comprising a radio antenna (540) configured to transmit and receive radio signals, and processing circuitry (510) configured to carry out the method for user verification of an outgoing call from a first user equipment, UE1 , according to any of claims 1-3, and / or carry out the method for user verification of an incoming call from a second user equipment, UE2, according to any of claims 4-6.

9. The UE (500, 700a, 700b) according to claim 8, the processing circuitry (510) further comprising a processor (520) and a memory (530), the memory (530) being configured to store a computer program for phone calls with user verification according to claim 7.

10. A method (300a), performed at a user verification server, UVS, for user verification of an outgoing call from a first user equipment, UE1 , to a second user equipment, UE2, the method comprising receiving (S300) verified user information from the UE1 , the verified user information comprising the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user of the UE1 was verified in a computer program, CP, for phone calls with user verification, wherein the reception of the verified user information and / or the verified user information is encrypted, based on the user verification of the user of the UE1 being timed-out from the CP, receiving (S310) verification timed-out information from the UE1 , the verification timed-out information comprising the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user verification of the user of the UE1 was timed-out in the CP, wherein the reception of the verification timed-out information and / or the verification timed- out information is encrypted, receiving (S320) outgoing call request information, OCRI, from the UE1 , the OCRI comprising the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the outgoing call request, OCR, from the UE1 occurred, wherein the reception of the OCRI and / or OCRI is encrypted, transmitting (S330) incoming call request information, ICRI, to the UE2, the ICRI comprising the phone number of the UE1 , information relating to the real name of the user of the UE1 and the security level of the UE1 , wherein the reception of the ICRI and / ICRI is encrypted.11 . A method (300b), performed at a user verification server, UVS, for user verification of an incoming call from a second user equipment, UE2, to a first user equipment, UE1 , the method comprising receiving (S300) verified user information from the UE1 , the verified user information comprising the phone number of the UE1 , the unique user ID of the user of the UE1 ,the real name of the user of the UE1 and a time stamp relating to when the user of the UE1 was verified in a computer program, CP, for phone calls with user verification, wherein the reception of the verified user information and / or verified user information is encrypted, based on the user verification of the user of the UE1 being timed-out in the CP, receiving (S310) verification timed-out information from the UE1 , the verification timed-out information comprising the phone number of the UE1 , the unique user ID of the user of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the user verification of the user of the UE1 was timed-out in the CP, wherein the reception of the verification timed-out information and / or verification timed-out information is encrypted, receiving (S340) incoming call request acceptance information, ICAI, from the UE1 , the ICAI comprising the phone number of the UE1 , the unique user ID of the user of the UE1 , the security level of the UE1 , the real name of the user of the UE1 and a time stamp relating to when the call from UE2 was accepted, and transmitting (S350) outgoing call request acceptance information, OCAI, to the UE2, the OCAI comprising the phone number of the UE1 , the security level of the UE1 and information relating to the real name of the user of the UE1.

12. A computer program, CPS, for a user verification server, UVS, the CPS comprising computer program code which, when executed by processing circuitry of a UVS causes the server to carry out the method for user verification of an outgoing call from a first user equipment, UE1 , to a second user equipment, UE2, according to claim 10 and / or the method for user verification of an incoming call from a UE2 to a UE1 according to claim 11.

13. A user verification server (6000, 7000), UVS, the UVS comprising processing circuitry (6100), wherein the processing circuitry (6100) comprises a processor (6200) and a memory (6300), wherein the memory (6300) is configured to store a computer program, CPS, for a user verification server according to claim 12.

14. A system (700) for phone calls with user verification, the system comprising a user verification server (6000, 7000), UVS, according to claim 13, a first user equipment (500, 700a), UE1 , according to claim 8 or 9, and a second user equipment (500, 700b), UE2, according to claim 8 or 9.

15. The system (700) according to claim 14, wherein the UE1 and the UE2 are both configured to carry out the method for user verification of an outgoing call from the UE1 according to any of claims 1-3, and carry out the method for user verification of an incoming call from the UE2 according to any of claims 4-6.

16. A method (400), performed in a system (700) for phone calls with user verification according any of claims 14-15, for phone calls with user verification, the method comprising based on the first user equipment, UE1 , transmitting (S400), via the computer program, CP, an outgoing call request, OCR, to the second user equipment, UE2, performing the method (100) for user verification of an outgoing call according to any of claims 1-3, based on the UE1 , transmitting, via the CP, an OCR to the UE2, performing (S410) the method (300a), performed at the user verification server, UVS, for user verification of an outgoing call according to claim 10, based on the UE1 receiving an incoming call request, ICR, from the UE2, performing (S420) the method (200) for user verification of an incoming call according to any of claims 4-6, based on the UE1 receiving an ICR from the UE2, performing (S430) the method (300b), performed at the UVS, for user verification of an incoming call according to claim 11.

17. A computer program for a system (700) for phone calls with user verification, the computer program comprising computer program code which, when executed by processing circuitry (710a, 710b, 7100) of the system (700), causes the system to carry out the method (400) for phone calls with verified users according to claim 16.

Images