Telephone Caller Authentication Using STIR/SHAKEN Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for authenticating telephone caller identity are inefficient and unreliable, particularly in the face of illegal robocalls and fraudulently spoofed calls, introducing significant friction in customer experiences and failing to provide automated and reliable verification.
Innovation Solution
Implementing a STIR/SHAKEN-based call verification system that utilizes verification information from carriers to determine attestation levels and combines this with profile information to automate the authentication process, allowing for efficient and reliable caller identification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional authentication methods (individually identifiable information) are used, then authentication can be performed, but customer experience friction increases significantly
Solution Approach 1:
The system enables self-service authentication by having the carrier automatically verify the caller's identity and provide verification information to the service provider. The caller themselves initiates the verification process through the carrier's network, eliminating the need for manual authentication interactions with the service provider.
Solution Approach 2:
The carrier acts as an intermediary between the caller and the service provider. The carrier verifies the caller's identity through the STIR/SHAKEN framework and transmits verification information (attestation levels) to the service provider, eliminating the need for direct authentication interactions between the caller and service provider.
2Reliability
If multi-factor authentication is implemented, then fraud protection improves, but authentication complexity and friction increase
Solution Approach 1:
The carrier automatically performs multi-factor verification by checking the caller's identity, device, and location through the STIR/SHAKEN framework. This self-service approach provides robust fraud protection without requiring the service provider to implement complex multi-factor authentication procedures.
Solution Approach 2:
The carrier performs verification actions in advance by generating and transmitting verification information (attestation levels) before the caller reaches the service provider. This preliminary authentication eliminates the need for complex multi-factor authentication steps at the service provider端.
3Reliability
If manual authentication procedures are used, then verification can be performed, but processing time and efficiency decrease
Solution Approach 1:
The carrier serves as an automated intermediary that performs verification and transmits verification information electronically to the service provider. This automated process maintains verification accuracy while dramatically improving call processing efficiency compared to manual authentication procedures.
Solution Approach 2:
The system replaces manual authentication mechanics with automated electronic verification through the STIR/SHAKEN framework. Verification information is transmitted electronically via SIP headers, eliminating manual verification steps and significantly improving processing speed and efficiency.
4Extent of automation
If carrier verification information is integrated, then automated authentication is achieved, but system complexity increases
Solution Approach 1:
The service provider's existing caller ID and verification systems are enhanced to also process STIR/SHAKEN verification information. By making the verification system multi-functional (handling both traditional and STIR/SHAKEN verification), the system achieves automated authentication without requiring completely separate infrastructure.
Solution Approach 2:
The verification process is segmented into distinct components: the carrier generates verification information through STIR/SHAKEN, transmits it via SIP headers, and the service provider's verification module processes it. This segmentation allows automated authentication while managing system complexity through modular design.
Data Source
AI summary
A method and a system for authenticating an identity of a telephone caller are provided. The method includes: receiving an incoming telephone call from a calling party; extracting a telephone number that is associated with the incoming telephone call; receiving, from a carrier associated with the incoming telephone call, verification information that indicates whether the incoming telephone call has been verified by the carrier with respect to a STIR/SHAKEN standard; retrieving profile information that is associated with the extracted telephone number; and determining, based on the verification information and the profile information, whether to authenticate an identity of the calling party.