Telephone caller authentication

Patent metadata

Field	Value
Publication number	US-9288062-B2
Application number	US-201414184775-A
Country	US
Kind code	B2
Filing date	Feb 20, 2014
Priority date	Feb 20, 2014
Publication date	Mar 15, 2016
Grant date	Mar 15, 2016

Abstract

Techniques for authenticating the identity of a caller in a telephone call are disclosed. The device generating the call implements encrypting caller identification information and initiating the telephone call, said initiating comprising providing a voice carrier signal including the caller identification information; and simultaneously providing a data carrier signal including the encrypted caller identification information. The receiving device implements receiving the telephone call; decrypting the encrypted caller identification information at the recipient device; and verifying the identity of at least an unknown caller at the recipient device by at least one of verifying the authenticity of a certificate used to encrypt the caller identification information; and comparing the decrypted caller identification information with the caller identification information from the voice carrier signal. A telephony device implementing such an authentication technique is also disclosed.

First claim

We claim:

1. A computer program product, comprising a non-transitory computer-readable storage medium having program code embodied therewith, the program code executable by a plurality of processors to:
receive, by the plurality of processors, a telephone call, initiated by a caller device and received at a recipient device, wherein the telephone call is provided by:
encrypting caller identification information; and
initiating the telephone call, said initiating comprising:
providing a voice carrier signal including the caller identification information; and
simultaneously providing a data carrier signal including the encrypted caller identification information;

decrypt, by the plurality of processors, the encrypted caller identification information at the recipient device; and verifying the identity of at least an unknown caller at the recipient device by at least one of a list of verifying techniques, the list consisting of:
verifying, by the plurality of processors, the authenticity of a certificate used to encrypt the caller identification information; and
comparing, by the plurality of processors, the decrypted caller identification information with the caller identification information from the voice carrier signal.

2. The computer program product of claim 1 , the program code further executable to generate, by the plurality of processors, a warning message on the recipient device if the authenticity of the caller cannot be verified.

3. The computer program product of claim 1 , the program code further executable to automatically terminate the call by the recipient device if the authenticity of the caller cannot be verified.

4. The computer program product of claim 1 , the program code further executable to decrypt the encrypted caller identification information using a public key.

5. The computer program product of claim 4 , the program code further executable to verify the authenticity of a certificate used to encrypt the caller identification information in the recipient device prior to comparing the decrypted caller identification information with the caller identification information from the voice carrier signal at the recipient device.

6. The computer program product of claim 1 , wherein the comparing the decrypted caller identification information with the caller identification information from the voice carrier signal is performed prior to the call being answered by a user of the recipient device.

7. The computer program product of claim 1 , wherein the comparing the decrypted caller identification information with the caller identification information from the voice carrier signal is performed after the call has been answered by a user of the recipient device.

8. A telephony device, comprising:
a plurality of processors;
a computer-readable storage medium coupled to the plurality of processors; and
logic, stored on the computer-readable storage medium and executed on the plurality of processors, for:
receiving a telephone call, initiated by a caller device and received at a recipient device, wherein the telephone call is provided by:
encrypting caller identification information; and
initiating the telephone call, said initiating comprising:
providing a voice carrier signal including the caller identification information; and
simultaneously providing a data carrier signal including the encrypted caller identification information;

decrypting the encrypted caller identification information at the recipient device; and verifying the identity of at least an unknown caller at the recipient device by at least one of a list of verifying techniques, the list consisting of:
verifying the authenticity of a certificate used to encrypt the caller identification information; and
comparing the decrypted caller identification information with the caller identification information from the voice carrier signal.

9. The telephony device of claim 8 , the logic further comprising logic for generating a warning message on the recipient device if the authenticity of the caller cannot be verified.

10. The telephony device of claim 8 , the logic further comprising logic for automatically terminating the call by the recipient device if the authenticity of the caller cannot be verified.

11. The telephony device of claim 8 , the logic further comprising logic for decrypting the encrypted caller identification information using a public key.

12. The telephony device of claim 8 , wherein the comparing the decrypted caller identification information with the caller identification information from the voice carrier signal is performed prior to the call being answered by a user of the recipient device.

13. The telephony device of claim 8 , wherein the comparing the decrypted caller identification information with the caller identification information from the voice carrier signal is performed after the call has been answered by a user of the recipient device.

Assignees

• IBM

Inventors

• Feltham Andrew S
• Maple Elizabeth J
• Maple Simon J

Classifications

• H04L9/3263 Primary

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• H04Q3/72

  Finding out and indicating number of calling subscriber · CPC title

• H04W4/16

  Communication-related supplementary services, e.g. call-transfer or call-hold · CPC title