Silent caller ID verification using callback request
Disclosed herein are embodiments of systems, methods, and products comprises an authentication server for caller ID verification. When a caller makes a phone call, the server receives the phone call and verifies whether the phone call is from a registered device associated with the phone number. The server queries the registered device to retrieve one or more current call states via an authentication function on the registered device. The server compares the states and/or state transitions to the observed states and/or state transitions of the phone call. If the registered device states and/or state transitions match the observed phone call states and/or state transitions, the server verifies that the phone call is from the registered device and not some imposter's device. If there is no such match, the server rejects the phone call before the call phone is connected or terminates the phone call after the phone call is connected.
1 . A computer-implemented method comprising:
receiving, by a computer, from a caller device associated with a call, device state information of the caller device, the device state information received from an authentication application of the caller device in response to a request for the device state information;
identifying, by the computer, based upon the device state information of the caller device, a device state transition from a first state to a second state during the call, and based upon call state information obtained from an interactive voice response (IVR) server, a call state transition from a first call state to a second call state during the call;
receiving, by the computer, authentication information including biometric data of a caller of the call; and
determining, by the computer, whether the biometric data of the caller is authenticated and whether a first timestamp of the device state transition matches a second timestamp of the call state transition of the call obtained from the IVR server;
if the computer determines the biometric data of the caller is authenticated and the first timestamp of the device state transition matches the second timestamp of the call state transition of the call obtained from the IVR server, forwarding, by the computer, the call to a called device associated with the call; and
if the computer determines the biometric data of the caller is not authenticated or the first timestamp of the device state transition does not match the second timestamp of the call state transition of the call obtained from the IVR server, not forwarding, by the computer, the call to the called device associated with the call.
2 . The method according to claim 1 , further comprising:
receiving, by the computer, a caller identifier for a caller associated with the call;
identifying, by the computer, in a database a device identifier of the caller device by querying the database using the caller identifier; and
transmitting, by the computer, the request for the device state information to the caller device using the device identifier.
3 . The method according to claim 2 , wherein the caller identifier is at least one of a phone number, an account number, and an e-mail address.
4 . The method according to claim 2 , wherein the computer transmits the request to an authentication function of the caller device for the device state information.
5 . The method according to claim 2 , wherein the request is transmitted via at least one of an internet protocol channel and a mobile message channel.
6 . The method according to claim 1 , wherein a first device state or second device state of the caller device is at least one of inactive, idle, off-hook, outgoing call started, outgoing call ringing, outgoing call connected, outgoing call put on hold, and outgoing call terminated.
7 . The method according to claim 1 , wherein the authentication information includes an indicator of a type of authentication and authentication data used to authenticate the caller at the caller device, and
wherein the computer further authenticates the caller device using the the type of authentication including the biometric data and at least one of a personal identification number (PIN) and a password.
8 . The method according to claim 1 , further comprising:
receiving, by the computer, from the caller device, second device state information;
identifying, by the computer, based upon the second device state information of the caller device, a second device state transition from a third state to a fourth state during the call; and
further authenticating, by the computer, the caller device in response to the computer determining that the second device state transition matches a second call state transition of the call.
9 . The method according to claim 1 , wherein the computer periodically transmits to the caller device a new request for new device state information, receives the new device state information indicating a new device state transition, and further authenticates the caller device based upon the new device state transition and a new call state transition.
10 . A system comprising:
a non-transitory storage medium storing computer-executable program instructions; and
a computer coupled to the non-transitory storage medium and configured to execute the plurality of computer program instructions to:
receive from a caller device associated with a call, device state information of the caller device, the device state information received from an authentication application of the caller device in response to a request for the device state information;
identify, based upon the device state information of the caller device, a device state transition from a first state to a second state during the call, and based upon call state information obtained from an interactive voice response (IVR) server, a call state transition from a first call state to a second call state during the call;
receive authentication information including biometric data of a caller of the call; and
determine whether the biometric data of the caller is authenticated and whether a first timestamp of the device state transition matches a second timestamp of the call state transition of the call obtained from the IVR server;
if the computer determines the biometric data of the caller is authenticated and the first timestamp of the device state transition matches a second timestamp of the call state transition of the call obtained from the IVR server, forward the call to a called device associated with the call; and
if the computer determines the biometric data of the caller is not authenticated or the first timestamp of the device state transition does not match the second timestamp of the call state transition of the call obtained from the IVR server, not forward the call to the called device associated with the call.
11 . The system according to claim 10 , wherein the computer is further configured to:
receive a caller identifier for a caller associated with the call;
identify in a database a device identifier of the caller device by querying the database using the caller identifier; and
transmit the request for the device state information to the caller device using the device identifier.
12 . The system according to claim 11 , wherein the caller identifier is at least one of a phone number, an account number, and an e-mail address.
13 . The system according to claim 11 , wherein the computer transmits the request to an authentication function of the caller device for the device state information.
14 . The system according to claim 11 , wherein the request is transmitted via at least one of an internet protocol channel and a mobile message channel.
15 . The system according to claim 10 , wherein a first device state or second device state of the caller device is at least one of inactive, idle, off-hook, outgoing call started, outgoing call ringing, outgoing call connected, outgoing call put on hold, and outgoing call terminated.
16 . The system according to claim 10 , wherein the authentication information includes an indicator of a type of authentication and authentication data used to authenticate the caller at the caller device, and
wherein the computer further authenticates the caller device using the type of authentication including the biometric data and at least one a personal identification number (PIN) and a password.
17 . The system according to claim 10 , wherein the computer is further configured to:
receive from the caller device, second device state information;
identify based upon the second device state information of the caller device, a second device state transition from a third state to a fourth state during the call; and
further authenticate the caller device in response to the computer determining that the second device state transition matches a second call state transition of the call.
18 . The system according to claim 10 , wherein the computer periodically transmits to the caller device a new request for new device state information, receives the new device state information indicating a new device state transition, and further authenticates the caller device based upon the new device state transition and a new call state transition.