Authentication method and system for screening network caller ID spoofs and malicious phone calls

• US 9,264,539 B2
• Filed: 12/29/2014
• Issued: 02/16/2016
• Est. Priority Date: 01/02/2014
• Status: Active Grant

• Current Assignee: Lin, Chung-Yu
• Original Assignee: Lin, Chung-Yu
• Inventors: Lin, Chung-Yu
• Primary Examiner(s): TIEU, BINH KIEN
• Application Number:
  US14/584,405
• Publication Number:
  US 20150189080A1
• Time in Patent Office: 414 Days
• Field of Search: 379/142.01, 379/142.04, 379/142.05, 379/142.06, 379/142.07, 340/5.8, 340/5.81, 340/5.85, 713/155, 713/156, 713/168, 713/170, 726/3, 726/4, 726/8
• US Class Current: 1/1
• CPC Class Codes: H04M 2203/6027 Fraud preventions
• CPC Class Codes: H04M 2203/6045 Identity confirmation
• CPC Class Codes: H04M 3/42059 Making use of the calling party identifier
• CPC Class Codes: H04M 3/436 Arrangements for screening incoming calls , i.e. evaluating the characteristics of a call before deciding whether to answer it based on the calling party profile H04M3/42059; based on location H04M3/42348; based on presence H04M3/42365; diversion H04M3/54
• CPC Class Codes: H04M 3/4365 based on information specified by the calling party, e.g. priority or subject

Abstract

An authentication method and system for screening network caller ID spoofs and malicious phone calls includes a screening authentication system with a server that includes a login register interface, a data accessing interface, a data searching and comparing program, a data searching database, a labeling indication program, a registry coding module and a data searching coding module. Authentication data is generated by the registry coding module from a caller telephone number and caller login identification data input during registration. Corresponding authentication data contained in a network calling signal from a caller sending device is generated by a data searching coding module. A data searching and comparing program compares the authentication data and, if any discrepancy is found, a labeling indication program sends a “failed authentication” signal to the target network receiving callee so that a fraudulent call is detected.

Claims

1. An authentication system for screening network caller ID spoofs and malicious phone calls, comprising:

a login register interface for inputting a caller telephone number and caller login identification data;

a registry coding module for generating first authentication data, according to preset coding rules, from the input caller telephone number and configured input caller login identification data input, and for storing the first authentication data in a data searching and comparing database; and

a server including;

a data accessing interface for receiving a network calling signal from a caller sending device, the network calling signal including a configured corresponding caller telephone number and a corresponding caller login identification data;

a data searching coding module for generating second authentication data, according to said preset coding rules, from the received network calling signal including the configured corresponding caller telephone number and the configured corresponding caller login identification data;

a data searching and comparing program implemented by a processor in the server for comparing the first authentication data stored in the data searching database and the second authentication data in the received network calling signal; and

a labeling indication program implemented by a processor in the server for sending a failed authentication indication to a callee receiving device if the first identification data does not match the second identification data.

2. The authentication system for screening network caller ID spoofs and malicious phone calls as claimed in claim 1, wherein the login registration interface and the registry coding module are included in said server.

3. The authentication system for screening network caller ID spoofs and malicious phone calls as claimed in claim 1, wherein the login registration interface and the registry coding module are disposed in an external computer connected to said server via the Internet.

4. The authentication system for screening network caller ID spoofs and malicious phone calls as claimed in claim 1, further comprising a caller ID database for storing information concerning telephone numbers that have failed authentication.

5. The authentication system for screening network caller ID spoofs and malicious phone calls as claimed in claim 1, further comprising the step of displaying a failed authentication indicator in a caller telephone number field of receiving device of the callee.

6. The authentication system for screening network caller ID spoofs and malicious phone calls as claimed in claim 1, wherein the labeling indication program is obtained by download via the Internet or directly built-in by a manufacturer, and is embedded in a callee receiving device of network receiving callee, and the indication corresponding to failed authentication is displayed in the caller telephone number field of the callee receiving device or in other ways to notice the callee.

7. The authentication system for screening network caller ID spoofs and malicious phone calls as claimed in claim 1, wherein said authentication system is a Session Initiation Protocol (SIP) system and said configured caller login identification data is SIP caller login identification data.

20. The authentication method for screening network caller ID spoofs and malicious phone calls as claimed in claim 7, wherein said authentication system is a Session Initiation Protocol (SIP) system and said configured caller login identification data is SIP caller login identification data.

21. The authentication method and system for screening network caller ID spoofs and malicious phone calls as claimed in claim 20, wherein each SIP caller login identification data in steps a, b, c and d includes a SIP terminal address, a registered SIP ID, a SIP server address, a SIP communication port, or information that enables a SIP device to successfully send and receive network calling signals via the Internet.

22. The authentication method and system for screening network caller ID spoofs and malicious phone calls as claimed in claim 20, wherein the SIP caller login identification data extracted from the network calling signal is obtained from fields of “

Via” and

“

Contact”

in the calling signal of the SIP used in network communication sessions.

23. The authentication method and system for screening network caller ID spoofs and malicious phone calls as claimed in claim 20, wherein a caller telephone number extracted from the network calling signal is obtained from a field of “

From”

in the calling signal of the SIP used in network communication sessions.

24. The authentication method and system for screening network caller ID spoofs and malicious phone calls as claimed in claim 20, wherein a labeling indication corresponding to the caller telephone number is extracted from an SIP field of “

From”

in the network calling signal used in network communication sessions.

8. An authentication method for screening network caller ID spoofs and malicious phone calls, comprising the steps of:

a. instructing each network calling user to input his/her caller telephone number and configured caller login identification data;

b. processing the input caller telephone number and configured caller login identification data to verify proper use of the input telephone number, and generating first authentication data via preset coding rules from the input caller telephone number and the configured input caller identification data, and then storing the first authentication data in a data searching database;

c. through the Internet or a telecommunication network, receiving a network calling signal from a caller sending device and extracting a corresponding caller telephone number contained in the network calling signal and corresponding configured caller login identification data also contained in the network calling signal;

sending to the extracted corresponding caller telephone number and extracted configured caller login identification data to a data searching coding module to generate second authentication data according to the same preset coding rules used to generate the first authentication data; and

then comparing the first authentication data stored in the data searching database and the second authentication data generated from the received network calling signal; and

d. if any discrepancy between the first authentication data and the second authentication data is found, sending a failed authentication indication signal to a target network receiving callee.

9. The authentication method for screening network caller ID spoofs and malicious phone calls as claimed in claim 8, wherein step d further comprises a sub-step d′

of, if any discrepancy between the first and second authentication data is found, storing the data related to the second authentication data in a failed-authentication caller ID database.

10. The authentication method for screening network caller ID spoofs and malicious phone calls as claimed in claim 8, wherein step d further comprises a sub-step d″

of, if no discrepancy between the first and second authentication data is found, sending a successful authentication indication signal to a target network receiving callee.

11. The authentication method for screening network caller ID spoofs and malicious phone calls as claimed in claim 8, further comprising the step of, if a discrepancy between the first and second authentication data is found, completing the telephone call so that the caller is still charged for the telephone call.

12. The authentication method for screening network caller ID spoofs and malicious phone calls as claimed in claim 8, wherein each telephone number in steps a, b, c and d is a telephone number of a local fixed-line system, a telephone number of a cellular system, a registered ID of an network communication, or a combination of characters, numerals or symbols.

13. The authentication method for screening network caller ID spoofs and malicious phone calls as claimed in claim 8, wherein each configured caller login identification data in steps a, b, c and d includes a device address of a network call, a registered ID of a network call, a server address of a network call, a communication port of a network call, or information that enables a network calling device to successfully send and receive a network calling signal via the Internet.

14. The authentication method for screening network caller ID spoofs and malicious phone calls as claimed in claim 8, wherein the caller telephone number and configured caller login identification data are input by the network calling user through a login registration interface via an Internet or network connection.

15. The authentication method for screening network caller ID spoofs and malicious phone calls as claimed in claim 8, wherein the caller telephone number and configured caller login identification data are input by the network calling user via a written application form with blank spaces for the input caller telephone number and the input configured caller login identification data and then transmitted by a telecommunications company to a login registration interface for further processing.

16. The authentication method for screening network caller ID spoofs and malicious phone calls as claimed in claim 8, wherein the authentication procedure to verify proper use of the input telephone number in step b is performed by a telecommunication sending/receiving mechanism of a telecommunication device corresponding to the input telephone number.

17. The authentication method for screening network caller ID spoofs and malicious phone calls as claimed in claim 8, wherein the network calling signal is a signal for transmitting voice, video, characters and/or symbols.

18. The authentication method for screening network caller ID spoofs and malicious phone calls as claimed in claim 8, wherein the telecommunication network in steps a and c includes at least one of a PSTN (Public Switched Telephone Network) used in a fixed-line telephone system, a GSM system (Global System for Mobile Communications) used in a cellular telephone system, a TDMA system (Time Division Multiple Access), a CDMA system (Code Division Multiple Access), a PDC system (Personal Digital Cellular), and various telecommunication networks related to IP (Internet Protocol) telecommunication.

19. The authentication method for screening network caller ID spoofs and malicious phone calls as claimed in claim 18, wherein the various telecommunication networks related to IP include at least one of an ADSL (Asymmetric Digital Subscriber Line) system, Fiber-Optic network system, WiMAX (Worldwide Interoperability for Microwave Access) system, and LTE (Long Term Evolution) system.