Validating and securing caller identification to prevent identity spoofing
A device receives call information associated with a call from a first user device to a second user device, where the first user device is associated with a first network, and the second user device is associated with a second network separate from the first network. The call information includes a caller identification and is received via an originating network device of the first network. The device determines whether the caller identification is verified, and adds authentication information to the call information when the caller identification is verified. The device receives the call information and the authentication information from a terminating network device of the first network, and removes the authentication information from the call information. The device adds a cryptographic signature to the call information, and causes the call information and the cryptographic signature to be provided to the second network for routing to the second user device.
1. A method, comprising:
receiving, by a device, call information associated with a call from a first user device associated with a first network,
wherein the call information includes a cryptographic signature associated with a caller identification;
utilizing, by the device, a public key to determine whether the cryptographic signature and the caller identification are verified;
removing, by the device, the cryptographic signature from the call information when the cryptographic signature and the caller identification are determined to be verified;
adding, by the device, authentication information to the call information when the cryptographic signature and the caller identification are determined to be verified;
causing, by the device, the call information and the authentication information to be provided to a second network for routing to a second user device;
receiving other call information associated with another call from a third user device to the second user device, wherein the other call information does not include the cryptographic signature; and
causing the other call information to be provided to the second network, for routing to the second user device, without altering the other call information.
2. The method of claim 1 , wherein the authentication information includes a verification status indicating that the caller identification is verified.
3. The method of claim 1 , further comprising:
identifying, in the call information, a repository of public keys, including the public key, that are validated to owners of the public keys; and
requesting the public key from the repository of public keys.
4. The method of claim 1 , wherein the device communicates with the first network and the second network via a hypertext transfer protocol (HTTP) interface that includes an application programming interface (API).
5. The method of claim 1 , wherein the call information includes a profile identifier, and
the method further comprises:
retrieving, from a profile data structure, one or more parameters associated with the profile identifier; and
determining whether the cryptographic signature and the caller identification are verified based on the one or more parameters.
6. The method of claim 1 , further comprising:
retrieving, from an override parameters data structure, one or more verification override parameters; and
utilizing the one or more verification override parameters to override a result of determining whether the cryptographic signature and the caller identification are verified.
7. The method of claim 1 , wherein the other call information excludes the cryptographic signature.
8. A device, comprising:
one or more processors configured to:
receive call information associated with a call from a first user device associated with a first network,
wherein the call information includes a cryptographic signature associated with a caller identification;
utilize a public key to determine whether the cryptographic signature and the caller identification are verified;
remove the cryptographic signature from the call information when the cryptographic signature and the caller identification are determined to be verified;
add authentication information to the call information when the cryptographic signature and the caller identification are determined to be verified;
cause the call information and the authentication information to be provided to a second network for routing to a second user device;
receive other call information associated with another call from a third user device to the second user device, wherein the other call information does not include the cryptographic signature; and
cause the other call information to be provided to the second network, for routing to the second user device, without altering the other call information.
9. The device of claim 8 , wherein the authentication information includes a verification status indicating that the caller identification is verified.
10. The device of claim 8 , wherein the one or more processors are further configured to:
identify, in the call information, a repository of public keys, including the public key, that are validated to owners of the public keys; and
request the public key from the repository of public keys.
11. The device of claim 8 , wherein the device communicates with the first network and the second network via a hypertext transfer protocol (HTTP) interface that includes an application programming interface (API).
12. The device of claim 8 , wherein the call information includes a profile identifier, and
wherein the one or more processors are further configured to:
retrieve, from a profile data structure, one or more parameters associated with the profile identifier; and
determine whether the cryptographic signature and the caller identification are verified based on the one or more parameters.
13. The device of claim 8 , wherein the one or more processors are further configured to:
retrieve, from an override parameters data structure, one or more verification override parameters; and
utilize the one or more verification override parameters to override a result of determining whether the cryptographic signature and the caller identification are verified.
14. The device of claim 8 , wherein the other call information excludes the cryptographic signature.
15. A non-transitory computer-readable medium storing instructions, the instructions comprising:
one or more instructions that, when executed by one or more processors of a device, cause the one or more processors to:
receive call information associated with a call from a first user device associated with a first network,
wherein the call information includes a cryptographic signature associated with a caller identification;
utilize a public key to determine whether the cryptographic signature and the caller identification are verified;
remove the cryptographic signature from the call information when the cryptographic signature and the caller identification are determined to be verified;
add authentication information to the call information when the cryptographic signature and the caller identification are determined to be verified;
cause the call information and the authentication information to be provided to a second network for routing to a second user device;
receive other call information associated with another call from a third user device to the second user device, wherein the other call information does not include the cryptographic signature; and
cause the other call information to be provided to the second network, for routing to the second user device, without altering the other call information.
16. The non-transitory computer-readable medium of claim 15 , wherein the authentication information includes a verification status indicating that the caller identification is verified.
17. The non-transitory computer-readable medium of claim 15 , wherein the instructions further comprise:
one or more instructions that, when executed by the one or more processors, cause the one or more processors to:
identify, in the call information, a repository of public keys, including the public key, that are validated to owners of the public keys; and
request the public key from the repository of public keys.
18. The non-transitory computer-readable medium of claim 15 , wherein, when the call information includes a profile identifier, the instructions further comprise:
one or more instructions that, when executed by the one or more processors, cause the one or more processors to:
retrieve, from a profile data structure, one or more parameters associated with the profile identifier; and
determine whether the cryptographic signature and the caller identification are verified based on the one or more parameters.
19. The non-transitory computer-readable medium of claim 15 , wherein the instructions further comprise:
one or more instructions that, when executed by the one or more processors, cause the one or more processors to:
retrieve, from an override parameters data structure, one or more verification override parameters; and
utilize the one or more verification override parameters to override a result of determining whether the cryptographic signature and the caller identification are verified.
20. The non-transitory computer-readable medium of claim 15 , wherein the other call information excludes the cryptographic signature.