Call Authentication Service Systems And Methods

What is this patent about?

’987 is related to the field of call authentication, specifically addressing the problem of spoofed or malicious calls targeting enterprise call centers. Traditional authentication methods, such as Knowledge-Based Authentication (KBA), are time-consuming, frustrating for customers, and ineffective against fraud. Newer approaches focus on authenticating the calling number or device, but existing solutions often lack flexibility and cost-effectiveness, especially in the face of increasingly sophisticated spoofing techniques.

The underlying idea behind ’987 is to leverage a hybrid architecture combining a customer-premise component with a cloud-based Call Authentication Service (CAS) . The premise component monitors call traffic and provides access to raw call signaling data, while the CAS uses a decision engine to orchestrate various authentication plugins. This allows for a more flexible and cost-effective authentication process, adapting to different risk levels and business needs.

The claims of ’987 focus on a method and system for authenticating calls. The system includes a premise component with a SIP/RTP probe and a mediation server, and a cloud-based CAS. The CAS uses a REST API, Quality Authentication Service (QAS) parameters, and a decision engine with authentication plugins. The premise component transmits call information to the CAS, which then determines the necessary plugins based on the QAS parameters, generates an authentication result, and transmits it back to the premise component for use by an IVR system or agent.

In practice, the premise component acts as a local filter and orchestrator, deciding when and how to query the cloud-based CAS. It can access customer-specific data and implement call control actions based on the authentication result. The CAS, residing in the cloud, can quickly integrate new authentication plugins and adapt to evolving threats. The decision engine within the CAS dynamically selects and executes the most appropriate plugins based on factors like cost, speed, and desired level of authentication.

This approach differentiates itself from prior solutions by offering a flexible and scalable architecture that can adapt to different authentication needs and risk levels. Unlike purely premise-based systems, the cloud-based CAS can be easily updated with new authentication techniques, such as STIR/SHAKEN, without requiring changes to the customer's premise equipment. By orchestrating various authentication plugins and leveraging a decision engine, the system aims to provide a more cost-effective and accurate authentication solution compared to traditional methods or standalone approaches.