SYSTEM, METHOD AND APPARATUS FOR AUTHENTICATING CALLS

• US 20150124945A1
• Filed: 01/12/2015
• Published: 05/07/2015
• Est. Priority Date: 02/05/2008
• Status: Active Grant

• Current Assignee: Arlington Technologies, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Avaya Incorporated
• Inventors: Kurapati, Srikrishna, Sadhasivam, Karthikeyan, Tyagi, Satyam, Mohan, Rajesh
• Granted Patent: US 9,961,197 B2
• Time in Patent Office: Days
• US Class Current: 379/88.02
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04M 2203/6054 Biometric subscriber identification
• CPC Class Codes: H04M 3/436 Arrangements for screening incoming calls , i.e. evaluating the characteristics of a call before deciding whether to answer it based on the calling party profile H04M3/42059; based on location H04M3/42348; based on presence H04M3/42365; diversion H04M3/54

Abstract

The present invention provides a system, method and apparatus for authenticating calls that is a robust Anti-vishing solution. The present invention can identify Caller ID spoofing, verify dialed number to detect man-in-the middle and verify called party against dialed digits to detect impersonation. This solution can handle calls coming from any phone any where with little impact on user experience. Two separate solutions are tailored for smart phones (communication devices capable of running application software) and traditional phones to reduce the impact to user experience while providing robust verification.

Claims

1-8. -8. (canceled)

9. A method for authenticating a user of a calling device comprising the steps of:

receiving a call from the calling device;

terminating the call;

placing a new call to the calling device;

prompting the user to speak one or more words and depress one or more keys on the calling device;

receiving the spoken words and one or more signals associated with the depressed keys;

comparing one or more biometric parameters of the received spoken words with a stored voice biometric template for the user, the received spoken words with the prompted words and the received signals with the signals associated with the prompted keys; and

transferring the new call to a called device whenever the user is authenticated as a result of the comparison.

10. The method as recited in claim 9, further comprising the step of providing a notification to the calling device prior to terminating the call.

11. The method as recited in claim 9, further comprising the step of playing a stored message to the user to authenticate the called device, wherein the stored message was previously recorded by the user during a registration process.

12. The method as recited in claim 11, wherein the registration process comprises the steps of:

prompting the user to speak a message;

recording and storing the message; and

creating and storing the voice biometric template based on the user'"'"'s voice.

13. The method as recited in claim 11, wherein the registration process comprises the step of periodically changing the stored message by prompting the user to speak a new message, recording the new message, and replacing the stored message with the new message.

14. The method as recited in claim 11, wherein the stored message is not played to the user until the user is authenticated.

15. The method as recited in claim 9, further comprising the steps of:

terminating the new call whenever the user is not authenticated;

or

providing one or more notifications to the called device whenever the user is not authenticated.

16. The method as recited in claim 9, wherein the authentication method prevents caller ID spoofing, man-in-the-middle attacks, record and replay attacks, called device impersonation, or a combination thereof.

17. The method as recited in claim 9, wherein:

the one or more words and the one or more keys are randomly generated;

the one or more keys are selected from one or more digits of a telephone number of the called device;

or

the one or more keys are selected from the 0-9, * and # keys.

18. The method as recited in claim 9, wherein:

the authentication method is an automated process executed by a controller operated by the called device, a network provider, a service provider, a facility provider or a call center;

the controller comprises a computer, a server, a switch, a PBX, or a gateway; and

the calling device comprises a phone, a computer, a PDA or other communications device.

19. An apparatus for authenticating a user of a calling device comprising:

a communications interface; and

a processor communicably coupled to the communications interface, wherein the processor (a) receives a call from the calling device via the communications interface, (b) terminates the call, (c) places a new call to the calling device via the communications interface, (d) prompts the user to speak one or more words and depress one or more keys on the calling device, (e) receives the spoken words and one or more signals associated with the depressed keys via the communication interface, (f) authenticates the user by comparing one or more biometric parameters of the received spoken words with a stored voice biometric template for the user, the received spoken words with the prompted words and the received signals with the signals associated with the prompted keys, and (g) transfers the new call to a called device whenever the user is authenticated.

21. The apparatus as recited in claim 19, further comprising the operation of the processor providing a notification to the calling device prior to terminating the call.

22. The apparatus as recited in claim 19, further comprising the operation of the processor playing a stored message to the user to authenticate the called device, wherein the stored message was previously recorded by the user during a registration process, and wherein the registration process comprises the operations of:

the processor prompting the user to speak a message;

the processor recording and storing the message; and

the processor creating and storing the voice biometric template based on the user'"'"'s voice.

23. The apparatus as recited in claim 19, further comprising the operation of the processor playing a stored message to the user to authenticate the called device, wherein the stored message was previously recorded by the user during a registration process, and wherein the registration process comprises the step of periodically changing the stored message by prompting the user to speak a new message, recording the new message, and replacing the stored message with the new message.

24. The apparatus as recited in claim 19, further comprising the operation of the processor playing a stored message to the user to authenticate the called device, wherein the stored message was previously recorded by the user during a registration process, and wherein the stored message is not played to the user until the user is authenticated.

25. The apparatus as recited in claim 19, further comprising the steps of:

terminating the new call whenever the user is not authenticated;

or

providing one or more notifications to the called device whenever the user is not authenticated.

26. The apparatus as recited in claim 19, wherein the authentication method prevents caller ID spoofing, man-in-the-middle attacks, record and replay attacks, called device impersonation, or a combination thereof.

27. The apparatus as recited in claim 19, wherein:

the one or more words and the one or more keys are randomly generated;

the one or more keys are selected from one or more digits of a telephone number of the called device;

or

the one or more keys are selected from the 0-9, * and # keys.

28. The apparatus as recited in claim 19, wherein:

the authentication method is an automated process executed by a controller operated by the called device, a network provider, a service provider, a facility provider or a call center;

the controller comprises a computer, a server, a switch, a PBX, or a gateway; and

the calling device comprises a phone, a computer, a PDA or other communications device.

20. A system for authenticating a user of a calling device comprising:

a communications network communicably coupled to the calling device;

a controller communicably coupled to the communications network wherein the controller comprises a communications interface communicably coupled to the communications network and a processor communicably coupled to the communications interface; and

wherein the processor (a) receives a call from the calling device via the communications interface, (b) terminates the call, (c) places a new call to the calling device via the communications interface, (d) prompts the user to speak one or more words and depress one or more keys on the calling device, (e) receives the spoken words and one or more signals associated with the depressed keys via the communication interface, (f) authenticates the user by comparing one or more biometric parameters of the received spoken words with a stored voice biometric template for the user, the received spoken words with the prompted words and the received signals with the signals associated with the prompted keys, and (g) transfers the new call to a called device whenever the user is authenticated.