Caller ID Authentication via Directory Verification

Solution Overview

Problem

Existing IP technologies, such as VoIP and SS7, are vulnerable to falsification of directory information like caller ID, which is crucial for user identification and billing purposes, leading to security vulnerabilities and fraudulent activities.

Innovation Solution

A system and method for authenticating directory information by comparing verification information registered with the platform to the information provided in requests for voice communication sessions, using a platform with components like a controller, registration module, authentication module, and communication interface to ensure accurate caller ID and prevent unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If IP technologies (VoIP, SIP) are used for voice communication, then cost is reduced and flexibility is improved, but security vulnerability increases due to falsification of directory information

Engineering Contradiction:

ImprovecostVSAvoidsecurity

Core Design Contradiction:

Ease of manufactureVSReliability

Solution Approach 1:

The system performs preliminary authentication of directory information before allowing voice communication sessions to proceed. The authentication module verifies caller ID information in advance by comparing it against registered information in the database, preventing fraudulent communications before they occur rather than detecting them after the fact.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces an authentication module and database as intermediary components between the VoIP signaling system and the voice communication. This intermediary layer verifies directory information authenticity, acting as a security gatekeeper that maintains the low-cost flexibility of IP technologies while adding necessary security validation.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Productivity

If directory information is used for user identification and billing, then service delivery is improved, but fraud risk increases due to ANI exploit vulnerability

Engineering Contradiction:

Improveservice deliveryVSAvoidfraud risk

Core Design Contradiction:

ProductivityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary authentication of directory information before allowing voice communication sessions to proceed. The authentication module verifies caller ID information in advance by comparing it against registered information in the database, preventing fraudulent communications before they occur rather than detecting them after the fact.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system implements a feedback mechanism where the authentication module continuously verifies directory information against the database and provides authentication status back to the signaling system. This feedback loop ensures that only authenticated directory information is accepted for billing and identification purposes, creating a closed-loop security system.

Inventive Principle:

Principle #23Feedback

3Reliability

If authentication mechanisms are added to verify directory information, then security is improved, but system complexity increases

Engineering Contradiction:

ImprovesecurityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The authentication module serves multiple functions: it authenticates directory information, validates caller ID against the database, and integrates with existing VoIP signaling protocols. By designing a multi-functional authentication component that handles various authentication scenarios through a unified interface, the system reduces overall complexity despite adding security capabilities.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent introduces an authentication module and database as intermediary components between the VoIP signaling system and the voice communication. This intermediary layer verifies directory information authenticity, acting as a security gatekeeper that maintains the low-cost flexibility of IP technologies while adding necessary security validation.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS9247427B2Multi-factor caller identification

Publication Date: 2016.01.26 VERIZON PATENT & LICENSING INC

AI summary

A method and apparatus for authenticating directory information is described. The method includes: receiving a request to initiate a voice communication session over a signaling network that includes a data network, the request including directory information specifying origination of the voice communication session; determining verification information associated with the directory information; authenticating the directory information using the determined verification information; and selectively providing notification of the authentication for handling of the voice communication session.