Detecting and preventing phishing phone calls through verified attribute analysis
A method for detecting and preventing phishing phone calls through verified attribute analysis is described. The method may comprise receiving, by a receiving device, a phone call from a sending device and receiving identification data in parallel with the phone call, the identification data describing context of the phone call. The method may then identify an attribute assertion from the identification data. The attribute assertion may comprise a signed attribute of the phone call and may be signed by a trusted authority. The method may comprise determining content of the phone call, analyzing the content of the phone call against the signed attribute, and performing a defined operation based on a result of the analysis of the content against the signed attribute.
1. A computer-implemented method comprising:
receiving, by a receiving device, a phone call from a sending device;
receiving identification data in parallel with the phone call, the identification data describing context of the phone call;
identifying an attribute assertion from the identification data, the attribute assertion comprising a signed attribute of the phone call, the signed attribute being signed by a trusted authority server;
determining verbally expressed content of the phone call;
analyzing the verbally expressed content of the phone call against the signed attribute including comparing the verbally expressed content with the signed attribute; and
performing a defined operation based on a result of the analysis of the content against the signed attribute.
2. The computer-implemented method of claim 1 , wherein determining the content of the phone call comprises generating a transcription of the phone call during the phone call.
3. The computer-implemented method of claim 2 , wherein determining the content of the phone call is based on the transcription.
4. The computer-implemented method of claim 1 , wherein determining the content of the phone call comprises determining a verbal identification of a caller of the sending device based on verbal information provided by the caller.
5. The computer-implemented method of claim 4 , wherein the signed attribute comprises a verified identity of the caller, and analyzing the content of the phone call against the signed attribute comprises determining whether the verbal identification of the caller matches the verified identity of the caller.
6. The computer-implemented method of claim 1 , wherein:
the signed attribute specifies a projected topic of the phone call; and
analyzing the content of the phone call against the signed attribute comprises identifying a topic of the phone call and comparing the topic of the phone call to the projected topic specified by the signed attribute.
7. The computer-implemented method of claim 1 , comprising:
wherein the signed attribute comprises a verified identity of a caller associated with the sending device of the phone call;
determining a level of similarity between the verified identity and one or more caller identities in a database;
in response to determining that the level of similarity satisfies a threshold, flagging the phone call as potentially fraudulent; and
providing an alert to the receiving device, the alert signaling to a user of the receiving device that the phone call is potentially fraudulent.
8. The computer-implemented method of claim 1 , wherein the defined operation comprises terminating the phone call.
9. The computer-implemented method of claim 1 , wherein:
the identification data comprises a token identifying a caller of the sending device; and
identifying the attribute assertion from the identification data comprises transmitting the token to the trusted authority server;
receiving the attribute assertion comprising the signed attribute of the phone call from the trusted authority server, the signed attribute being signed using a private key of the trusted authority server; and
validating the signed attribute using a public key of the trusted authority server.
10. The computer-implemented method of claim 1 , wherein the signed attribute of the phone call is valid uniquely for the phone call.
11. The computer-implemented method of claim 1 , wherein identifying the attribute assertion from the identification data comprises validating the signed attribute using a public key of the trusted authority server, the signed attribute being received from the sending device in the identification data.
12. A computer readable medium storing instructions that, when executed by a computing device having one or more processors, causes the one or more processors to perform operations comprising:
receiving, by a receiving device, a phone call from a sending device;
receiving identification data in parallel with the phone call, the identification data describing context of the phone call;
identifying an attribute assertion from the identification data, the attribute assertion comprising a signed attribute of the phone call, the signed attribute being signed by a trusted authority server;
determining verbally expressed content of the phone call;
analyzing the verbally expressed content of the phone call against the signed attribute including comparing the verbally expressed content with the signed attribute; and
performing a defined operation based on a result of the analysis of the content against the signed attribute.
13. The computer readable medium of claim 12 , wherein determining the content of the phone call comprises generating a transcription of the phone call during the phone call.
14. The computer readable medium of claim 13 , wherein determining the content of the phone call is based on the transcription.
15. The computer readable medium of claim 12 , wherein determining the content of the phone call comprises determining a verbal identification of a caller of the sending device based on verbal information provided by the caller.
16. The computer readable medium of claim 15 , wherein the signed attribute comprises a verified identity of the caller and analyzing the content of the phone call against the signed attribute comprises determining whether the verbal identification of the caller matches the verified identity of the caller.
17. The computer readable medium of claim 12 , wherein:
the signed attribute specifies a projected topic of the phone call; and
analyzing the content of the phone call against the signed attribute comprises identifying a topic of the phone call and comparing the topic of the phone call to the projected topic specified by the signed attribute.
18. The computer readable medium of claim 12 , wherein:
the identification data comprises a token identifying a caller of the sending device; and
identifying the attribute assertion from the identification data comprises:
transmitting the token to the trusted authority server;
receiving the attribute assertion comprising the signed attribute of the phone call from the trusted authority server, the signed attribute being signed using a private key of the trusted authority server; and
validating the signed attribute using a public key of the trusted authority server.
19. The computer readable medium of claim 12 , wherein identifying the attribute assertion from the identification data comprises validating the signed attribute using a public key of the trusted authority server, the signed attribute being received from the sending device in the identification data.
20. A computing device comprising:
system memory;
at least one processor;
an attribute validation module residing in the system memory programmed to receive a phone call from a sending device, receive identification data in parallel with the phone call, the identification data describing context of the phone call, and to identify an attribute assertion from the identification data, the attribute assertion comprising a signed attribute of the phone call, the signed attribute being signed by a trusted authority server;
a call transcription module residing in the system memory programmed to determine verbally expressed content of the phone call; and
a call analysis module residing in the system memory programmed to analyze the verbally expressed content of the phone call against the signed attribute including comparing the verbally expressed content with the signed attribute, and perform a defined operation based on a result of the analysis of the content against the signed attribute.