Call screening service for communication devices

1 . A method comprising:

comparing one or more call parameters to an active call scam model applied by a call processing server to identify the one or more call parameters which are contributing a number of points to a scam score, wherein a call message attribute parameter identifying one or more protocol specific attributes associated with the one or more call parameters; and

determining whether the scam score exceeds a scam score threshold.

2 . The method of claim 1 , further comprising:

determining whether to notify a callee that a call is a scam based on the scam score.

3 . The method of claim 2 , further comprising:

responsive to determining the scam score exceeds the scam score threshold, tagging the call with an identifier; and

performing at least one of notifying the callee that the call is a scam call, blocking the call, and directing the call to voice mail, based on the tagged identifier.

4 . The method of claim 1 , wherein determining the scam score for a call comprises determining a plurality of scam scores based on a plurality of active call scam models assigned to the call processing server;

determining a composite score based on the plurality of scam scores; and

applying the composite score as the scam score.

5 . The method of claim 1 , wherein the determining the scam score based on the active call scam model applied by the call processing server is performed while a call is being processed and within a threshold call processing time frame; and

tagging the call to be one or more of blocked, forwarded to voicemail, and accepted by a call recipient prior to connecting the call to a call recipient device of a callee.

6 . The method of claim 1 , wherein the scam score is further computed by comparing a caller number to a list of known scam caller telephone numbers and based on call durations associated with the caller number.

7 . The method of claim 1 , further comprising:

receiving a call message associated with a call from a caller to a callee, wherein the call message comprises a SIP INVITE message and the one or more call parameters comprise SIP call parameters.

8 . An apparatus comprising:

a processor configured to

compare one or more call parameters to an active call scam model applied by a call processing server to identify the one or more call parameters which contribute to a number of points to a scam score, wherein a call message attribute parameter identifies one or more protocol specific attributes associated with the one or more call parameters; and

determine whether the scam score exceeds a scam score threshold.

9 . The apparatus of claim 8 , wherein the processor is further configured to determine whether to notify a callee that a call is a scam based on the scam score.

10 . The apparatus of claim 9 , wherein the processor is further configured to responsive to a determination that the scam score exceeds the scam score threshold, tag the call with an identifier; and

perform at least one of notify the callee that the call is a scam call, block the call, and direct the call to voice mail, based on the tagged identifier.

11 . The apparatus of claim 8 , wherein the scam score is determined for a call comprises determine a plurality of scam scores based on a plurality of active call scam models assigned to the call processing server;

determine a composite score based on the plurality of scam scores; and

apply the composite score as the scam score.

12 . The apparatus of claim 8 , wherein the scam score is determined based on the active call scam model applied by the call processing server is performed while a call is processed and within a threshold call processing time frame; and

tag the call to be one or more of blocked, forwarded to voicemail, and accepted by a call recipient prior to a connection of the call to a call recipient device of a callee.

13 . The apparatus of claim 8 , wherein the scam score is further computed by a comparison of a caller number to a list of known scam caller telephone numbers and based on call durations associated with the caller number.

14 . The apparatus of claim 8 , further comprising a receiver configured to receive a call message associated with a call from a caller to a callee, wherein the call message comprises a SIP INVITE message and the one or more call parameters comprise SIP call parameters.

15 . A non-transitory computer readable storage medium configured to store instructions that when executed cause a processor to perform:

comparing one or more call parameters to an active call scam model applied by a call processing server to identify the one or more call parameters which are contributing a number of points to a Scam score, wherein a call message attribute parameter identifying one or more protocol specific attributes associated with the one or more call parameters; and

determining whether the scam score exceeds a scam score threshold.

16 . The non-transitory computer readable storage medium of claim 15 , wherein the processor is further configured to perform:

determining whether to notify a callee that a call is a scam based on the scam score.

17 . The non-transitory computer readable storage medium of claim 16 , wherein the processor is further configured to perform:

responsive to determining the scam score exceeds the scam score threshold, tagging the call with an identifier; and

performing at least one of notifying the callee that the call is a scam call, blocking the call, and directing the call to voice mail, based on the tagged identifier.

18 . The non-transitory computer readable storage medium of claim 15 , wherein determining the scam score for a call comprises determining a plurality of scam scores based on a plurality of active call scam models assigned to the call processing server;

determining a composite score based on the plurality of scam scores; and

applying the composite score as the scam score.

19 . The non-transitory computer readable storage medium of claim 15 , wherein the determining the scam score based on the active call scam model applied by the call processing server is performed while a call is being processed and within a threshold call processing time frame; and

tagging the call to be one or more of blocked, forwarded to voicemail, and accepted by a call recipient prior to connecting the call to a call recipient device of a callee.

20 . The non-transitory computer readable storage medium of claim 15 , wherein the scam score is further computed by comparing a caller number to a list of known scam caller telephone numbers and based on call durations associated with the caller number.