VoIP Call Type Detection Using SIP, RTP, and Howling Response
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic devices lack the ability to efficiently determine whether a call is a normal call or a call initiated by voice phishing, particularly in VoIP services where calls can be forged through gateways like SIMBOX.
Innovation Solution
An electronic device employs a communication module to transmit request and response messages using protocols like SIP and RTP, measures response times, and generates a howling sound source to identify a howling response time, comparing these times to determine if a call is normal or abnormal.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If VoIP service is provided with signaling protocols (SIP, H.323) and RTP packets for multimedia calls, then call functionality and service versatility are improved, but vulnerability to voice phishing attacks through gateway forgery increases
Solution Approach 1:
The electronic device performs preliminary actions by sending request messages (SIP OPTIONS, RTP packets) before the actual call to measure response times. This preliminary measurement of communication characteristics establishes a baseline for later comparison to detect voice phishing attacks
Solution Approach 2:
The system implements feedback by continuously measuring response times of request messages and comparing them against predetermined thresholds. The feedback mechanism uses timing information from normal communication to dynamically identify abnormal calls, creating a closed-loop detection system
2Measurement precision
If the electronic device transmits multiple types of request messages (SIP OPTIONS, RTP packets) to measure response times, then detection accuracy is improved, but device complexity and processing overhead increase
Solution Approach 1:
The detection process is segmented into distinct phases: sending SIP OPTIONS request messages to measure signaling response time, and sending RTP packets to measure media response time. This segmentation allows the system to use different protocols for different measurement purposes, improving detection accuracy while maintaining manageable complexity
Solution Approach 2:
The system changes parameters by using multiple types of request messages with different protocols (SIP vs. RTP) and different purposes (signaling vs. media). This parameter diversity enables comprehensive detection of voice phishing attacks that may affect different layers of the VoIP stack
3Reliability
If the electronic device uses howling generation sound source to identify howling response time, then ability to detect abnormal calls is improved, but ease of operation and user experience deteriorate
Solution Approach 1:
The system extracts only the essential timing information from the howling response and compares it against the predetermined threshold without requiring user interpretation or action. The complex acoustic analysis is performed automatically in the background, isolating the user from technical complexity while maintaining high detection reliability
Data Source
AI summary
According to an embodiment of the disclosure, an electronic device is provided. The electronic device includes a communication module and at least one processor connected to the communication module. The at least one processor is configured to configure a call setup with an external electronic device through the communication module. The at least one processor is configured to control the communication module to transmit at least one request message based on a first protocol through the communication module, and receive at least one response message corresponding to the request message. The at least one processor is configured to control the communication module to transmit a howling generation sound source through the communication module, and receive a howling response corresponding to the howling generation sound source. The at least one processor is configured to determine whether a call between the electronic device and the external electronic device is a normal call.