VoIP Caller Reputation System

• US 20110280160A1
• Filed: 05/16/2011
• Published: 11/17/2011
• Est. Priority Date: 05/14/2010
• Status: Abandoned Application

• Current Assignee: McAfee, Inc. (McAfee, LLC)
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Yang, Weilai
• Application Number:
  US13/108,465
• Publication Number:
  US 20110280160A1
• Time in Patent Office: Days
• US Class Current: 370/259
• CPC Class Codes: H04L 65/1079 of unsolicited session attempts, e.g. SPIT

Abstract

Methods and systems for collecting data from a plurality of voice over Internet protocol (VoIP) calls and determining at least one attribute for each of the plurality of calls. Relationships between the VoIP calls based on the determined attributes are identified, and a reputation score is assigned to a first entity based on the identified relationships. A call policy is associated with a caller reputation profile based on the reputation score.

Claims

1. A method for filtering a VoIP calls based upon caller reputation, comprising:

collecting data from a plurality of VoIP calls;

analyzing the data for each of the plurality of calls to detect at least one attribute of each call;

generating a reputation score for a first entity based on the at least one attribute detected;

updating a caller reputation profile for the first entity with the reputation score for the first entity; and

associating a call policy with the caller reputation profile based on the reputation score.

2. The method of claim 1, further comprising:

receiving a VoIP call from an unknown entity;

determining attributes associated with the unknown entity;

identifying a relationship between the unknown entity and the first entity entity, the existing entity being an entity having a reputation profile stored in the reputation store;

assigning a corresponding caller reputation profile to the unknown entity based on the relationship to the existing entity; and

enforcing a corresponding call policy on the VoIP call from the unknown entity based on the caller reputation profile assigned to the unknown entity, the call policy associated with the caller reputation profile assigned to the unknown entity.

3. The method of claim 1, wherein the VoIP call originates from a PSTN network.

4. The method of claim 1, wherein the attribute is an address based attribute.

5. The method of claim 4, wherein the address based attribute comprises an IP address.

6. The method of claim 5, wherein the address based attribute further comprises a telephone number.

7. The method of claim 1, wherein the attribute is a content based attribute.

8. The method of claim 7, wherein the content based attribute comprises a call content attribute.

9. The method of claim 8, wherein the call content attribute comprises a voice signal.

10. The method of claim 2, wherein enforcing a corresponding call policy on the VoIP call from the unknown entity based on the caller reputation profile assigned to the unknown entity comprises throttling the VOIP call to control a flow rate of packets being transmitted over the VOIP call.

11. A method for filtering a VoIP call based upon caller reputation, comprising:

collecting data from a plurality of VoIP calls;

determining at least one attribute for each of the plurality of calls from the data collected for each call;

identifying relationships between the VoIP calls based on the determined attributes;

assigning a reputation score to a first entity based on the identified relationships; and

associating a call policy with a caller reputation profile based on the reputation score.

12. The method of claim 11, further comprising:

receiving a VoIP call from an unknown entity;

determining attributes associated with the unknown entity;

identifying a relationship between the unknown entity and the first entity based on the determined attributes;

assigning a corresponding reputation score to the unknown entity based on the relationship to the first entity, the corresponding reputation score based in part on the reputation score assigned to the first entity; and

enforcing a corresponding call policy on the VoIP call based on the corresponding reputation score assigned to the unknown entity.

13. The method of claim 12, wherein enforcing a corresponding call policy on the VoIP call based on the corresponding reputation score assigned to the unknown entity comprises throttling the VOIP call to control a flow rate of packets being transmitted over the VOIP call.

14. The method of claim 12, wherein the VoIP call originates from a PSTN network.

15. The method of claim 12, wherein the attribute is an address based attribute.

16. The method of claim 15, wherein the address based attribute comprises an IP address.

17. The method of claim 12, wherein the attribute is a content based attribute comprising a voice signal.

18. A system for filtering VoIP calls based upon caller reputation, comprising:

a data collection module operable to collect data associated with a plurality of calls;

an attribute identification module in communication with the data collection module and operable to identify attributes from the plurality of calls;

a reputation assignment module in communication with the attribute identification module and operable to identify relationships between the calls based on the attributes and assign a reputation score to an entity based on the relationships; and

a policy enforcement module in communication with the reputation assignment module and operable to enforce policies based on the reputation score.