Method and apparatus for verifying the authenticity of mobile device information

• US 9,210,574 B2
• Filed: 02/13/2015
• Issued: 12/08/2015
• Est. Priority Date: 08/08/2013
• Status: Active Grant

• Current Assignee: Vonage America LLC (Telefonaktiebolaget LM Ericsson)
• Original Assignee: Vonage Network LLC (Telefonaktiebolaget LM Ericsson)
• Inventors: Efrati, Tzahi, Meghani, Jaya
• Primary Examiner(s): Appiah, Charles
• Assistant Examiner(s): YI, ALEXANDER J.
• Application Number:
  US14/621,535
• Publication Number:
  US 20150163673A1
• Time in Patent Office: 298 Days
• Field of Search: 455/411, 455/434, 455/410, 455/426.1, 455/426.2, 455/552.1, 455/561, 455/433, 370/229, 370/312, 370/315, 370/328, 370/338, 370/352, 370/356, 370/462, 370/466, 370/393, 370/392, 370/395.1, 370/395.2, 370/395.21, 370/395.3, 370/395.31, 370/395.32, 370/524, 709/225, 709/227, 709/220, 709/226, 709/228, 709/229, 709/206, 709/223, 709/224, 709/232, 709/201, 709/218, 709/238, 709/245, 709/246, 709/249, 380/247, 380/248, 380/249, 713/168, 713/169, 713/170, 713/171, 713/172, 713/173, 713/174, 713/175, 713/176, 713/177, 713/178, 713/179, 713/180, 714/4.1, 714/49, 714/22, 714/13, 715/744, 726/28
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier

Abstract

Methods and apparatus for verifying authenticity of device information of an end-user device are provided herein. In some embodiments, a method for verifying authenticity of device information of an end-user device may include sending a request to verify device information of an end-user device receiving, responsive to the request, verification information regarding the device information sent, and performing a verification analysis on the verification information received.

Claims

1. A method performed by a service provider system for verifying authenticity of device information of an end-user device comprising:

obtaining, from an end-user device, device information stored on the end-user device, wherein the device information comprises a first network identifier and a first device identifier, wherein the first network identifier is one of a telephone number or an Internet Protocol (IP) address of the end-user device, and wherein the first device identifier is one of an International Mobile Subscriber Identity (IMSI), an International Mobile Station Equipment Identity (IMEI), a push notification token, or a Temporary Mobile Subscriber Identity (TMSI);

sending, to a device information authentication entity, a request to verify the device information obtained, including (A) the first network identifier or (B) the first device identifier;

receiving, from the device information authentication entity and responsive to the request, verification information regarding the device information sent including (A) a second device identifier associated with the first network identifier or (B) a second network identifier associated with the first device identifier; and

storing, based on the verification information received, one of (A) the first network identifier as a verified caller identification information (CID) value if the authenticity of the first network identifier has been verified based on a comparison of the first device identifier and the second device identifier or (B) an indicator indicating that the first network identifier has not been verified.

2. The method of claim 1, wherein responsive to receiving the verification information, a verification analysis on the verification information received is performed to authenticate an association between the first network identifier and the first device identifier.

3. The method of claim 2, wherein the request includes the first network identifier, and wherein the verification information received includes a second device identifier associated with the first network identifier.

4. The method of claim 3, wherein the verification analysis performed includes comparing the first device identifier with the second device identifier and determining that the authenticity of the first network identifier is verified when the first device identifier and the second device identifier correspond to each other.

5. The method of claim 2, wherein the request includes the first device identifier, and wherein the verification information received includes a second network identifier associated with the first device identifier.

6. The method of claim 5, wherein the verification analysis performed includes comparing the first network identifier with the second network identifier and determining that the authenticity of the first network identifier is verified when the first network identifier and the second network identifier correspond to each other.

7. The method of claim 2, wherein the request includes both the first network identifier and the first device identifier, wherein the verification information received includes an indication that the first network ID has either been verified, and wherein the first network identifier is stored as a verified CID value.

8. The method of claim 1, wherein the device information is obtained via at least one Application Programming Interface (API) call to an operating system running on the end-user device.

9. The method of claim 1, wherein the request including the at least one of the first network identifier or the first device identifier is sent to the device information authentication entity over an encrypted channel.

10. The method of claim 1, wherein the CID value is maintained in a secure format on the end-user device.

11. A system performed by a service provider system for verifying authenticity of device information of an end-user device comprising:

a device information module configured to obtain, from an end-user device, device information stored on the end-user device, wherein the device information comprises a first network identifier and a first device identifier, wherein the first network identifier is one of a telephone number or an Internet Protocol (IP) address of the end-user device, and wherein the first device identifier is one of an International Mobile Subscriber Identity (IMSI), an International Mobile Station Equipment Identity (IMEI), a push notification token, or a Temporary Mobile Subscriber Identity (TMSI);

a transmission module configured to;

send, to a device information authentication entity, a request for verification information, including (A) the first network identifier or (B) the first device identifier, and receive, from the device information authentication entity, the requested verification information regarding the device information sent, wherein the requested verification information received includes (A) a second device identifier associated with the first network identifier or (B) a second network identifier associated with the first device identifier;

a verification module configured to verify authenticity of the device information obtained; and

a storage module configured to store one of (A) the second network identifier as a verified caller identification information (CID) value if the authenticity of the first network identifier has been verified based on a comparison of the first device ID with the second device ID or (B) an indicator indicating that the first network identifier has not been verified.

12. The system of claim 11, wherein the verification module is further configured to perform a verification analysis on the verification information received to authenticate an association between the first network identifier and the first device identifier.

13. The system of claim 12, wherein the request includes the first network identifier, wherein the verification information received includes a second device identifier associated with the first network identifier, and wherein the verification analysis includes a comparison the first device identifier with the second device identifier and a determination that the authenticity of the first network identifier is verified when the first device identifier and the second device identifier correspond to each other.

14. The system of claim 12, wherein the request includes the first device identifier, wherein the verification information received includes a second network identifier associated with the first device identifier, and wherein the verification analysis includes a comparison the first network identifier with the second network identifier and a determination that the authenticity of the first network identifier is verified when the first network identifier and the second network identifier correspond to each other.

15. A method, performed by a service provider system, for verifying authenticity of device information of an end-user device comprising:

receiving, from an end-user device, device information stored on the end-user device, wherein the device information comprises a first network identifier and a first device identifier, wherein the first network identifier is one of a telephone number or an Internet Protocol (IP) address of the end-user device, and wherein the first device identifier is one of an International Mobile Subscriber Identity (IMSI), an International Mobile Station Equipment Identity (IMEI), a push notification token, or a Temporary Mobile Subscriber Identity (TMSI);

sending, to a device information authentication entity, a request including (A) the first device identifier or (B) the first network identifier;

receiving, from the device information authentication entity and responsive to the request, verification information regarding the device information sent, wherein the requested verification information received includes (A) a second network identifier associated with the first device identifier or (B) a second device identifier associated with the first network identifier;

performing a verification analysis on the verification information received to authenticate the first network ID; and

sending (A) an indication to the end-user device that the second network identifier can be stored as a caller identification information (CID) value or (B) an indication to the end user device that the first network identifier has been verified and can be used as the CID.

16. The method of claim 15, wherein the request includes the first network identifier, and wherein the verification information received includes a second device identifier associated with the first network identifier.

17. The method of claim 16, wherein the verification analysis performed includes comparing the first device identifier with the second device identifier and determining that the authenticity of the first network identifier is verified when the first device identifier and the second device identifier correspond to each other.

18. The method of claim 15, wherein the request includes the first device identifier, and wherein the verification information received includes a second network identifier associated with the first device identifier.

19. The method of claim 18, wherein the verification analysis performed includes comparing the first network identifier with the second network identifier and determining that the authenticity of the first network identifier is verified when the first network identifier and the second network identifier correspond to each other.

20. The method of claim 15, wherein the request includes both the first network identifier and the first device identifier, wherein the verification information received includes an indication that the first network ID has either been verified, and wherein the first network identifier is stored as a verified CID value.