Session Watermark Verification for Vishing Detection in Calls

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Vishing attacks, which involve fraudulent voice/video calls or messages purporting to be from legitimate sources, pose a significant threat by inducing individuals to reveal critical information or make improper transactions, often resulting in financial loss or compromise of infrastructure.

Innovation Solution

Implementing a system that uses session watermarks to uniquely identify and verify communication streams, such as voicemails, videomails, and conference calls, by embedding unique watermarks in each communication session to detect and prevent splicing or manipulation of these streams.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If session watermarks are embedded in communication streams to verify authenticity, then the ability to detect and prevent vishing attacks is improved, but the complexity of the communication system increases

Engineering Contradiction:
Improveauthentication of communication streamsVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Session watermarks are generated and embedded in communication streams before transmission occurs. This preliminary authentication mechanism allows receiving systems to verify the legitimacy of incoming calls without adding complex real-time analysis during communication, thus improving reliability while managing system complexity.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The session watermark acts as an intermediary authentication element that carries verification information through the communication channel. Instead of complex direct verification between parties, the watermark serves as a mediator that proves the legitimacy of the communication stream, simplifying the authentication process while enhancing security.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If deep fake voice/video technology is used to create realistic fake communication streams, then the sophistication of attack methods is improved, but the difficulty of detecting fraudulent streams increases

Engineering Contradiction:
Improveeffectiveness of vishing attacksVSAvoiddetection of spliced or manipulated streams
Core Design Contradiction:
Object-affected harmful factorsVSDifficulty of detecting and measuring

Solution Approach 1:

The session watermark introduces a unique identifying characteristic (analogous to a color signature) into legitimate communication streams. Even though deep fake technology can replicate voice and video content, it cannot replicate the embedded watermark signature, making fraudulent streams detectable through watermark verification despite their sophistication.

Inventive Principle:
Principle #32Color changes

Solution Approach 2:

By embedding the session watermark before transmission, the system establishes an authentication baseline that deep fake attacks cannot replicate. This preliminary marking allows receiving systems to easily distinguish between legitimate and fraudulent streams, countering the sophistication of modern deep fake technology.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS20250379887A1Prevention of Vishing Attacks
Publication Date: 2025.12.11 MICRO FOCUS LLC
  • US20250379887A1 patent drawing
  • US20250379887A1 patent drawing
  • US20250379887A1 patent drawing

AI summary

A communication stream is received. For example, the communication stream may be a part of a communication session, such as, a voicemail, a videomail, a voice conference call, a video conference call, and/or the like. A determination is made if the communication stream is completely generated using a session watermark. The session watermark is associated with the communication session. In response to determining that the communication stream is completely generated using the session watermark, the communication stream is identified as a legitimate communication stream. In response to determining that the communication stream has not been completely generated using the session watermark, the communication stream is identified as potentially a vishing communication steam.