Signature based communication authentication
One embodiment provides a method, including: detecting, using an application of an information handling device, an incoming call from another device, the incoming call being associated with an identifying message signed with a user-specific signature; determining, using a processor, whether the user-specific signature is associated with a valid signature; and accepting, responsive to determining that the user-specific signature is associated with a valid signature, the call. Other aspects are described and claimed.
1. A method, comprising:
detecting, using an application of an information handling device and over a first communication channel, an incoming call from another device;
identifying, as being associated with the incoming call and over a second communication channel, an identifying message signed with a user-specific signature, wherein the user-specific signature is encrypted with a private key associated with the another device;
determining, using a processor, whether the user-specific signature is associated with a valid signature, wherein the determining comprises:
determining whether a public key exists that is associated with the another device; and
identifying, responsive to determining that the public key exists, whether the public key is a pair to the private key; and
rejecting, responsive to determining that the user-specific signature is not associated with the valid signature, the incoming call.
2. The method of claim 1 , wherein each of the user-specific signatures is associated with an individual phone number.
3. The method of claim 1 , wherein the determining comprises:
comparing the user-specific signature to a list comprising a plurality of associations between user-specific signatures and phone numbers; and
identifying whether the user-specific signature and phone number associated with the incoming call match one of the plurality of associations in the list.
4. The method of claim 1 , wherein the identifying message comprises one or more of: a caller's number, a recipient's number, a current time, and a nonce.
5. The method of claim 1 , wherein the identifying message comprises an SMS message transmitted substantially in time with the incoming call.
6. The method of claim 1 , wherein the rejecting comprises rejecting the incoming call prior to providing an indication of the incoming call to a user of the information handling device.
7. The method of claim 1 , further comprising requesting a caller to provide a valid signature via an automated response.
8. An information handling device, comprising:
a processor;
a memory device that stores instructions executable by the processor to:
detect, using an application of the information handling device and over a first communication channel, an incoming call from another device;
identify, as being associated with the incoming call and over a second communication channel, an identifying message signed with a user-specific signature, wherein the user-specific signature is encrypted with a private key associated with the another device;
determine whether the user-specific signature is associated with a valid signature wherein the instructions executable by the processor to determine comprise instructions executable by the processor to:
determine whether a public key exists that is associated with the another device; and
identify, responsive to determining that the public key exists, whether the public key is a pair to the private key; and
reject responsive to determining that the user-specific signature is not associated with the valid signature, the incoming call.
9. The information handling device of claim 8 , wherein each of the user-specific signatures is associated with an individual phone number.
10. The information handling device of claim 8 , wherein the instructions executable by the processor to determine comprise instructions executable by the processor to:
compare the user-specific signature to a list comprising a plurality of associations between user-specific signatures and phone numbers; and
identify whether the user-specific signature and phone number associated with the incoming call match one of the plurality of associations in the list.
11. The information handling device of claim 8 , wherein the identifying message comprises one or more of: a caller's number, a recipient's number, a current time, and a nonce.
12. The information handling device of claim 8 , wherein the identifying message comprises an SMS message transmitted substantially in time with the incoming call.
13. The information handling device of claim 9 , wherein the instructions executable by the processor to reject comprise instructions executable by the processor to reject the incoming call prior to providing an indication of the incoming call to a user of the information handling device.
14. The information handling device of claim 9 , wherein the instructions are further executable by the processor to request a caller to provide a valid signature via an automated response.