METHOD AND SYSTEM FOR AUTHENTICATING TELEPHONE CALLERS AND AVOIDING UNWANTED CALLS

• US 20110026699A1
• Filed: 07/30/2009
• Published: 02/03/2011
• Est. Priority Date: 07/30/2009
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Amir, Arnon, Megiddo, Nimrod
• Granted Patent: US 8,467,512 B2
• Time in Patent Office: Days
• US Class Current: 379/142.05
• CPC Class Codes: H04M 15/06 Recording class or number of calling , i.e. A-party or called party , i.e. B-party

Abstract

A service that handles incoming telephone calls without bothering the telephone subscriber is disclosed. The service permits a call to go through to a subscriber if the service determines that the call is not unwanted and the caller has been unauthenticated. The authentication is based on challenging the caller to prove its identity rather than relying on caller ID displays. Prospective callers pre-register with the service providing caller account information. When a caller is issued a challenge, the caller may prove its authenticity by supplying the challenge back to the service along with its registered information.

Claims

1. A method of authenticating a source of a call from a caller to a recipient in a screening service, comprising:

generating a caller account with the service including registration of a caller identity and registration of a digital signature associated with the caller;

recording the registered caller identity and the digital signature with an authenticator;

intercepting the call by a screener;

receiving a proposed caller identity by the screener from the caller during the call including a phone number associated with the source of the caller;

issuing a challenge by the screener to the caller;

encrypting the issued challenge and the proposed caller identity by the caller using the digital signature;

sending the encrypted challenge and the proposed caller identity from the caller to the authenticator;

decrypting the encrypted challenge and the proposed caller identity at the authenticator and authenticating the source of the encrypted challenge by comparing the digital signature sent with the encrypted challenge against the digital signature registered in the caller account;

forwarding the decrypted challenge and the proposed caller identity to the screener;

verifying the decrypted challenge and the caller'"'"'s registered caller identity match the issued challenge and the proposed caller identity received during the call; and

passing the call to the recipient.

2. The method of authenticating a source of a call of claim 1, wherein the step of generating an account includes providing proof of the caller identity.

3. The method of authenticating a source of a call of claim 1, wherein the step of sending the encrypted challenge includes sending said challenge through a computer network to the authenticator.

4. The method of authenticating a source of a call of claim 1, wherein the step of issuing the challenge is done by sending a short message system message from the screener to the phone number associated with the source of the caller in the proposed caller identity.

5. The method of authenticating a source of a call of claim 1, wherein the screener also performs the steps of the authenticator.

6. The method of authenticating a source of a call of claim 1, wherein the subscriber performs the steps of the screener

7. The method of authenticating a source of a call of claim 1, wherein the screener issues a verbal challenge of one or more words over a voice channel and the step of verifying the decrypted challenge comprises the screener calling the authenticator, listening to the voiced message and verifying the proposed caller identity with the challenge

8. The method of authenticating a source of a call of claim 1, wherein the step of decrypting the challenge further includes verifying the proposed caller identity and the phone number associated with the source of the caller match the caller account.

9. The method of authenticating a source of a call of claim 1, wherein:

the step of generating a caller account includes registering an e-mail address; and

the step of issuing the challenge is sent via e-mail to the registered caller e-mail address.

10. The method of authenticating a source of a call of claim 1, wherein the challenge is issued from the screener to the caller using a speech synthesis.

11. The method of authenticating a source of a call of claim 1, wherein the step of receiving the caller identity utilizes a speech recognition software to identify the caller account.

12. The method of authenticating a source of a call of claim 1, wherein the step of forwarding the decrypted challenge and caller ID from the authenticator to the screener is performed using text messaging.

13. A method of authenticating a source of a call from a caller to a recipient in a screening service, including:

intercepting the call by a screener;

receiving a caller identity by the screener from the caller;

verifying that the caller is registered to a phone number shown in the caller identity;

issuing a challenge by the screener to the caller and hanging up the call;

sending a return phone call from the screener to the caller using the phone number shown in the caller identity;

verifying the caller is in possession of the challenge; and

passing the caller to the recipient.

14. The method of authenticating a source of a call of claim 13, wherein the step of receiving the caller identity includes asking the caller to identify itself and recognizing the caller identity using speech recognition software.

15. The method of authenticating a source of a call of claim 13, wherein;

the step of receiving the caller identity includes requesting the caller to use a touch tone input for inputting a call back number; and

the step of verifying the caller is registered to the phone number shown in the caller identity includes verifying the inputted call back number matches the phone number shown in the caller identity.

16. The method of authenticating a source of a call of claim 15, wherein the step of verifying the caller is registered to the phone number shown in the caller identity results in the inputted call back number not matching the phone number shown in the caller identity and dropping the call.

17. The method of authenticating a source of a call of claim 13, wherein:

the step of verifying the caller is in possession of the challenge includes a verbal input of the challenge by the caller during the return phone call;

the screener using a speech recognition software to recognize the verbal input of the challenge; and

a software agent for comparing the verbal input of the challenge with the challenge issued by the screener.

18. The method of authenticating a source of a call of claim 13, further comprising dropping the call if the call lacks a caller identity.

19. A computer readable medium for authenticating a source of a communication from a sender to a recipient using a screening service, including:

software instructions for generating a sender account sender registration service information with the service including registration of a sender identification, a sender communication address a sender public key and a sender private key;

software instructions for storing the sender registration information with an authenticator;

software instructions for intercepting the communication by using a screener;

software instructions for receiving from the sender the sender identification and the sender communication address;

software instructions for issuing an electronic challenge from the screener to the sender;

software instructions for encrypting the electronic challenge using the sender private key, encrypted by the sender;

software instructions for receiving the encrypted electronic challenge by the authenticator from the sender;

software instructions for applying the registered sender public key to the sender private key of the encrypted electronic challenge to decrypt the encrypted electronic challenge;

software instructions for blocking the communication if the step of applying the registered sender public key to the private key of the encrypted electronic challenge fails to decrypt the challenge;

software instructions for forwarding the decrypted electronic challenge to the screener;

software instructions for verifying with the screener the decrypted electronic challenge matches the challenge issued by the screener; and

software instructions for routing the call to the recipient.

20. A system for authenticating a source of a telecommunication from a sender sent to a subscriber, comprising:

a data bank for storing subscriber information and sender registration data;

a screener in electronic intermediate communication between the sender and the subscriber for intercepting the telecommunication, issuing a challenge to the sender and forwarding authenticated telecommunications to the subscriber;

an authenticator in electronic communication with the data bank and screener for authenticating the source of the telecommunication by comparing the sender registration data stored in the data bank to an encrypted message transmitted from the sender including the challenge issued by the screener and for forwarding an authentication status to the screener; and

telecommunication lines for forming a telecommunication network between the sender, the screener, the authenticator, the data bank, and the subscriber.

21. The system for authenticating a source of a telecommunication of claim 20, wherein the screener includes a computer incorporating a software agent for automating the interception of the telecommunication, the issuance of the challenge, and the forwarding of authenticated telecommunications to the subscriber.

22. The system for authenticating a source of a telecommunication of claim 21, wherein the software agent includes a short message system service for issuing the challenge over the telecommunication lines using a short message system protocol.

23. The system for authenticating a source of a telecommunication of claim 21, wherein the software agent includes an e-mail service for issuing the challenge over the telecommunication lines using an e-mail message.