Validating automatic number identification data

• US 10,674,009 B1
• Filed: 11/05/2018
• Issued: 06/02/2020
• Est. Priority Date: 11/07/2013
• Status: Active Grant

• Current Assignee: RightQuestion LLC (Bjorn Markus Jakobsson)
• Original Assignee: RightQuestion LLC (Bjorn Markus Jakobsson)
• Inventors: Jakobsson, Bjorn Markus
• Primary Examiner(s): Teshale, Akelaw
• Application Number:
  US16/180,373
• Time in Patent Office: 575 Days
• CPC Class Codes: H04M 2201/18 Comparators
• CPC Class Codes: H04M 2203/6045 Identity confirmation
• CPC Class Codes: H04M 3/382 using authorisation codes or passwords
• CPC Class Codes: H04M 3/42042 Notifying the called party of information on the calling party details within substation equipment H04M1/57, signalling details H04Q3/72
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Abstract

Verifying caller identification information is described. A query to verify a first communications connection associated with an observed caller ID is received. Using a second communications channel, a message to a device associated with the observed caller ID is transmitted. A response to the message is received. The message is evaluated to perform a security determination. The security determination is provided as output.

Claims

1. A system, comprising:

a verification service provider, configured to, using one or more processors;

enroll a first device with the verification service provider, wherein enrolling the first device includes associating, by the verification service provider, the first device with a device fingerprint that is generated based at least in part on a set of configuration information associated with the first device;

store, at the verification service provider, the device fingerprint associated with the first device;

obtain, at the verification service provider, information transmitted by a second device associated with a communications connection;

perform, at the verification service provider, a security determination at least in part by determining whether the obtained information transmitted by the second device matches at least a portion of the stored device fingerprint that was generated based at least in part on the set of configuration information associated with the enrolled first device; and

based at least in part on the security determination, select an action comprising at least one of blocking the communication, requesting additional authentication, and permitting the communication.

2. The system of claim 1, wherein the information transmitted by the second device is obtained via a backchannel that is different from the communications connection.

3. The system of claim 1, wherein based at least in part on the security determination, the verification service provider is further configured to convey an assurance to a recipient associated with the communications connection.

4. The system of claim 1, wherein the communications connection is associated with at least one of email, SMS, instant message, and a phone call.

5. The system of claim 1, wherein the first device comprises at least one of a smartphone, a tablet, a PC, a phablet, and a wearable device.

6. The system of claim 1, wherein enrolling the first device is based at least in part on at least one of PIN verification, password verification, knowledge-based authentication, geolocation information, credit card information validation, and a check of at least one of a name, an address, and a phone number.

7. The system of claim 1, wherein the additional authentication comprises at least one of PIN verification, password verification, knowledge-based authentication, geolocation information, credit card information validation, and a check of at least one of a name, an address, and a phone number.

8. The system of claim 1, wherein the set of configuration information comprises at least one of a set of device settings, a set of installed applications, system version information, application software version information, and a contact list associated with the first device.

9. The system of claim 1, wherein the verification service provider is further configured to re-enroll the first device in response to a determination of a change in the device fingerprint.

10. A method, comprising:

enrolling a first device with a verification service provider, wherein enrolling the first device includes associating, by the verification service provider, the first device with a device fingerprint that is generated based at least in part on a set of configuration information associated with the first device;

storing, at the verification service provider, the device fingerprint associated with the first device;

obtaining, at the verification service provider, information transmitted by a second device associated with a communications connection;

performing, at the verification service provider, a security determination at least in part by determining whether the obtained information transmitted by the second device matches at least a portion of the stored device fingerprint that was generated based at least in part on the set of configuration information associated with the enrolled first device; and

based at least in part on the security determination, selecting, at the verification service provider, an action comprising at least one of blocking the communication, requesting additional authentication, and permitting the communication.

11. The method of claim 10, wherein the information transmitted by the second device is obtained via a backchannel that is different from the communications connection.

12. The method of claim 10, wherein based at least in part on the security determination, the verification service provider is further configured to convey an assurance to a recipient associated with the communications connection.

13. The method of claim 10, wherein the communications connection is associated with at least one of email, SMS, instant message, and a phone call.

14. The method of claim 10, wherein the first device comprises at least one of a smartphone, a tablet, a PC, a phablet, and a wearable device.

15. The method of claim 10, wherein enrolling the first device is based at least in part on at least one of PIN verification, password verification, knowledge-based authentication, geolocation information, credit card information validation, and a check of at least one of a name, an address, and a phone number.

16. The method of claim 10, wherein the additional authentication comprises at least one of PIN verification, password verification, knowledge-based authentication, geolocation information, credit card information validation, and a check of at least one of a name, an address, and a phone number.

17. A computer program product embodied in a tangible and non-transitory computer readable storage medium and comprising computer instructions for:

enrolling a first device with a verification service provider, wherein enrolling the first device includes associating, by the verification service provider, the first device with a device fingerprint that is generated based at least in part on a set of configuration information associated with the first device;

storing, at the verification service provider, the device fingerprint associated with the first device;

obtaining, at the verification service provider, information transmitted by a second device associated with a communications connection;

performing, at the verification service provider, a security determination at least in part by determining whether the obtained information transmitted by the second device matches at least a portion of the stored device fingerprint that was generated based at least in part on the set of configuration information associated with the enrolled first device; and

based at least in part on the security determination, selecting, at the verification service provider, an action comprising at least one of blocking the communication, requesting additional authentication, and permitting the communication.

18. The computer program product of claim 17, wherein the information transmitted by the second device is obtained via a backchannel that is different from the communications connection.

19. The computer program product of claim 17, wherein based at least in part on the security determination, the verification service provider is further configured to convey an assurance to a recipient associated with the communications connection.

20. The computer program product of claim 17, wherein the communications connection is associated with at least one of email, SMS, instant message, and a phone call.

21. The computer program product of claim 17, wherein the first device comprises at least one of a smartphone, a tablet, a PC, a phablet, and a wearable device.

22. The computer program product of claim 17, wherein enrolling the first device is based at least in part on at least one of PIN verification, password verification, knowledge-based authentication, geolocation information, credit card information validation, and a check of at least one of a name, an address, and a phone number.

23. The computer program product of claim 17, wherein the additional authentication comprises at least one of PIN verification, password verification, knowledge-based authentication, geolocation information, credit card information validation, and a check of at least one of a name, an address, and a phone number.