Caller identity verification based on unique multi-device signatures
Communication source identifier verification system mechanisms are provided. The mechanisms receive communication information for a communication initiated between a source communication system and a destination communication system. The communication information comprises a source identifier and a local device identifier signature specifying zero or more local device identifiers of devices local to the source communication system. The mechanisms retrieve valid device identifier information for an authorized communication source corresponding to the identifier of the source communication system. The mechanisms execute a verification operation that verifies whether the source identifier is validly associated with the source communication system based on the retrieved valid device identifier information and the local device identifier signature. The mechanisms send a verification notification along with the communication information, in response to results of executing the verification operation, to the destination communication system.
1. A method, in a data processing system comprising at least one processor and at least one memory, wherein the at least one memory comprises instructions that are executed by the at least one processor to cause the at least one processor to be specifically configured to implement a communication source identifier verification system, wherein the method comprises:
receiving, by the communication source identifier verification system, communication information for a communication initiated between a source communication system and a destination communication system, wherein the communication information comprises a source identifier and a local device identifier signature specifying zero or more local device identifiers of devices local to the source communication system;
retrieving, by the communication source identifier verification system, valid device identifier information for an authorized communication source corresponding to the identifier of the source communication system, wherein retrieving valid device identifier information for an authorized communication source corresponding to the identifier of the source communication system comprises accessing an authorized caller registry entry corresponding to the identifier of the source communication system, wherein the authorized caller registry entry comprises a listing of two or more device identifiers as being valid device identifiers associated with an authorized caller;
executing, by the communication source identifier verification system, a verification operation that verifies whether the source identifier is validly associated with the source communication system based on the retrieved valid device identifier information and the local device identifier signature, wherein executing the verification operation comprises:
comparing the zero or more local device identifiers to the two or more device identifiers in the authorized caller registry entry; and
determining a probability value indicating a probability that the source identifier is validly associated with the source communication system based on results of the comparison; and
sending, by the communication source identifier verification system, a verification notification along with the communication information, in response to results of executing the verification operation, to the destination communication system.
2. The method of claim 1 , wherein:
the source communication system, in response to initiating the communication, performs a short range interrogation of devices present in a near field area around the source communication system,
the source communication system receives responses, from one or more devices local to the source communication system, specifying corresponding unique local device identifiers of the devices, and
the local device identifier signature comprises the unique local device identifiers of the devices received in the responses from the one or more devices local to the source communication system.
3. The method of claim 1 , wherein the source identifier is caller-ID information obtained from a telecommunications service provider computing system, and wherein the verification operation verifies that the caller-ID information is validly associated with the source communication system and is not spoofed caller-ID information.
4. The method of claim 1 , wherein determining the probability value comprises performing a cognitive computing evaluation of the comparison using machine learned weightings of the local device identifiers associated with different types of local devices.
5. The method of claim 1 , further comprising:
comparing the probability value to at least one threshold probability value; and
determining that the source identifier is validly associated with the source communication system in response to the probability value having a predetermined relationship relative to the at least one threshold probability value.
6. The method of claim 1 , wherein the authorized caller registry entry is in an authorized caller registry data structure, wherein the authorized caller registry data structure is a customized data structure specific to the destination communication system, and wherein different destination communication systems have different associated authorized caller registry data structures.
7. The method of claim 1 , wherein adding the verification notification to the communication information comprising adding a notification indicating whether or not the source identifier is validly associated with the source communication system such that the destination communication system outputs the verification notification along with the source identifier.
8. The method of claim 1 , wherein the verification notification is an extended caller-ID display message that is output on a display associated with the destination communication system.
9. A computer program product comprising a computer readable storage medium having a computer readable program stored therein, wherein the computer readable program, when executed on a data processing system, causes the data processing system to implement a communication source identifier verification system that operates to:
receive communication information for a communication initiated between a source communication system and a destination communication system, wherein the communication information comprises a source identifier and a local device identifier signature specifying zero or more local device identifiers of devices local to the source communication system;
retrieve valid device identifier information for an authorized communication source corresponding to the identifier of the source communication system, wherein the computer readable program further causes the communication source identifier verification system to retrieve valid device identifier information for an authorized communication source corresponding to the identifier of the source communication system at least by accessing an authorized caller registry entry corresponding to the identifier of the source communication system, wherein the authorized caller registry entry comprises a listing of two or more device identifiers as being valid device identifiers associated with an authorized caller;
execute, by the communication source identifier verification system, a verification operation that verifies whether the source identifier is validly associated with the source communication system based on the retrieved valid device identifier information and the local device identifier signature, wherein the computer readable program further causes the communication source identifier verification system to execute the verification operation at least by:
comparing the zero or more local device identifiers to the two or more device identifiers in the authorized caller registry entry; and
determining a probability value indicating a probability that the source identifier is validly associated with the source communication system based on results of the comparison; and
send a verification notification along with the communication information, in response to results of executing the verification operation, to the destination communication system.
10. The computer program product of claim 9 , wherein:
the source communication system, in response to initiating the communication, performs a short range interrogation of devices present in a near field area around the source communication system,
the source communication system receives responses, from one or more devices local to the source communication system, specifying corresponding unique local device identifiers of the devices, and
the local device identifier signature comprises the unique local device identifiers of the devices received in the responses from the one or more devices local to the source communication system.
11. The computer program product of claim 9 , wherein the source identifier is caller-ID information obtained from a telecommunications service provider computing system, and wherein the verification operation verifies that the caller-ID information is validly associated with the source communication system and is not spoofed caller-ID information.
12. The computer program product of claim 9 , wherein the computer readable program further causes the communication source identifier verification system to determine the probability value at least by performing a cognitive computing evaluation of the comparison using machine learned weightings of the local device identifiers associated with different types of local devices.
13. The computer program product of claim 9 , wherein the computer readable program further causes the communication source identifier verification system to:
compare the probability value to at least one threshold probability value; and
determine that the source identifier is validly associated with the source communication system in response to the probability value having a predetermined relationship relative to the at least one threshold probability value.
14. The computer program product of claim 9 , wherein the authorized caller registry entry is in an authorized caller registry data structure, wherein the authorized caller registry data structure is a customized data structure specific to the destination communication system, and wherein different destination communication systems have different associated authorized caller registry data structures.
15. The computer program product of claim 9 , wherein the computer readable program further causes the communication source identifier verification system to add the verification notification to the communication information at least by adding a notification indicating whether or not the source identifier is validly associated with the source communication system such that the destination communication system outputs the verification notification along with the source identifier.
16. An apparatus comprising:
at least one processor; and
at least one memory coupled to the at least one processor, wherein the at least one memory comprises instructions which, when executed by the at least one processor, cause the at least one processor to implement a communication source identifier verification system that operates to:
receive communication information for a communication initiated between a source communication system and a destination communication system, wherein the communication information comprises a source identifier and a local device identifier signature specifying zero or more local device identifiers of devices local to the source communication system;
retrieve valid device identifier information for an authorized communication source corresponding to the identifier of the source communication system, wherein the instructions further cause the communication source identifier verification system to retrieve valid device identifier information for an authorized communication source corresponding to the identifier of the source communication system at least by accessing an authorized caller registry entry corresponding to the identifier of the source communication system, wherein the authorized caller registry entry comprises a listing of two or more device identifiers as being valid device identifiers associated with an authorized caller;
execute, by the communication source identifier verification system, a verification operation that verifies whether the source identifier is validly associated with the source communication system based on the retrieved valid device identifier information and the local device identifier signature, wherein the instructions further cause the communication source identifier verification system to execute the verification operation at least by:
comparing the zero or more local device identifiers to the two or more device identifiers in the authorized caller registry entry; and
determining a probability value indicating a probability that the source identifier is validly associated with the source communication system based on results of the comparison; and
send a verification notification along with the communication information, in response to results of executing the verification operation, to the destination communication system.
17. The apparatus of claim 16 , wherein:
the source communication system, in response to initiating the communication, performs a short range interrogation of devices present in a near field area around the source communication system,
the source communication system receives responses, from one or more devices local to the source communication system, specifying corresponding unique local device identifiers of the devices, and
the local device identifier signature comprises the unique local device identifiers of the devices received in the responses from the one or more devices local to the source communication system.
18. The apparatus of claim 16 , wherein the instructions further cause the communication source identifier verification system to determine the probability value at least by performing a cognitive computing evaluation of the comparison using machine learned weightings of the local device identifiers associated with different types of local devices.
19. The apparatus of claim 16 , wherein the instructions further cause the communication source identifier verification system to:
compare the probability value to at least one threshold probability value; and
determine that the source identifier is validly associated with the source communication system in response to the probability value having a predetermined relationship relative to the at least one threshold probability value.
20. The apparatus of claim 16 , wherein the authorized caller registry entry is in an authorized caller registry data structure, wherein the authorized caller registry data structure is a customized data structure specific to the destination communication system, and wherein different destination communication systems have different associated authorized caller registry data structures.