Systems and methods for phone number certification and verification
Methods, systems, apparatuses, and computer-readable storage mediums are described for issuing digital certificates to phone numbers and verifying phone numbers based on the digital certificates. For instance, a client may request from a certificate authority a digital certificate to be associated with the client's phone number. The certificate authority issues a phone number challenge to the client to verify that the request did in fact come from the client. The certificate authority signs and issues the digital certificate to the client responsive to a successful challenge. The digital certificates are utilized to exchange messages between a caller and call recipient to determine whether a phone number provided via CLI is accurate or inaccurate. Embodiments described herein determine whether the phone number is accurate using a process referred herein as positive CLI verification and determines whether the phone number is inaccurate using a process referred herein as negative CLI verification.
1. A method in a server for associating a digital certificate with a phone number associated with a first client, the method comprising:
receiving a request from the first client for a signed digital certificate, the request specifying the phone number associated with the first client and a uniform resource identifier (URI) of a relay server;
determining to utilize a first phone number verification process from a plurality of phone number verification processes based at least on the request;
providing, to the first client, a phone number verification request in accordance with the first phone number verification process, the phone number verification request specifying a first verification code;
responsive to receiving a second verification code, determining whether the second verification code matches the first verification code;
in response to determining that the second verification code matches the first verification code;
causing generation of a signed digital certificate comprising the URI of the relay server, and causing a lookup service to store the signed digital certificate in association with the first client; and
causing a second client to:
obtain the signed digital certificate from the lookup service, and
utilize the signed digital certificate to determine the URI of the relay server and send a message to the first client via at least the relay server, wherein the utilization of the signed digital certificate prevents the relay server from decrypting the message.
2. The method of claim 1 , further comprising:
in response to determining that the second verification code does not match the first verification code or in response to determining that no second verification code is received, denying the request for the signed digital certificate.
3. The method of claim 1 , wherein the lookup service enables the signed digital certificate to be searchable and retrievable by a plurality of requesting entities, the plurality of requesting entities comprising the second client.
4. The method of claim 3 , wherein the signed digital certificate further comprises the phone number associated with the first client.
5. The method of claim 1 , wherein the first phone number verification process comprises a short message service (SMS)-based verification process, and wherein said providing the phone number verification request comprises:
providing, to the first client, the phone number verification request as an SMS-based text message comprising the first verification code via a first communication channel; and
receiving the second verification code via a second communication channel that is different than the first communication channel.
6. The method of claim 1 , wherein the first phone number verification process comprises an audio code-based verification process, and wherein said providing the phone number verification request comprises:
initiating, via a first communication channel, a telephonic communication session with the first client;
responsive to the telephonic communication session being accepted, providing the first verification code as an auditory code via the telephonic communication session; and
receiving the second verification code via a second communication channel that is different than the first communication channel.
7. The method of claim 6 , wherein the request for the signed digital certificate further specifies the first phone number verification process.
8. The method of claim 1 , wherein the server is associated with one or more URIs comprising a first URI and a second URI, the request for the signed digital certificate received via the first URI, the method further comprising:
receiving, via the second URI, another request from the first client for the signed digital certificate, the another request specifying the phone number associated with the first client;
determining to utilize a second phone number verification process from the plurality of phone number verification processes based at least on a mapping of the second URI to the second phone number verification process, the second phone number verification process different from the first phone number verification process; and
providing, to the first client, another phone number verification request in accordance with the second phone number verification process.
9. A computing device for associating a digital certificate with a phone number associated with a first client, comprising:
at least one processor circuit; and
at least one memory that stores program code configured to perform a method when executed by the at least one processor circuit, the method comprising:
receiving a request from the first client for a signed digital certificate, the request specifying the phone number associated with the first client;
determining a phone number verification process from a plurality of phone number verification processes based on the request;
providing, to the first client, a phone number verification request in accordance with the determined phone number verification process, the phone number verification request specifying a first verification code;
responsive to receiving a second verification code, determining whether the second verification code matches the first verification code;
in response to determining that the second verification code matches the first verification code, providing the signed digital certificate to the first client, the signed digital certificate comprising a uniform resource identifier (URI) associated with a relay server configured to send messages between the first client and another device;
causing a lookup service to store the signed digital certificate in association with the first client; and
causing a second client to:
obtain the signed digital certificate from the lookup service, and
utilize the signed digital certificate to send an encrypted message to the first client via at least the relay server, wherein utilization of the signed digital certificate prevents the relay server from decrypting the encrypted message.
10. The computing device of claim 9 , the method further comprising:
in response to determining that the second verification code does not match the first verification code or in response to determining that no second verification code is received, denying the request for the signed digital certificate.
11. The computing device of claim 9 , wherein the lookup service that enables the signed digital certificate to be searchable and retrievable by a plurality of requesting entities, the plurality of requesting entities comprising the second client.
12. The computing device of claim 11 , wherein the signed digital certificate further comprises the phone number associated with the first client.
13. The computing device of claim 9 , wherein the phone number verification process comprises a short message service (SMS)-based verification process, and wherein said providing the phone number verification request comprises:
providing, to the first client, the phone number verification request as an SMS-based text message comprising the first verification code via a first communication channel; and
receiving the second verification code via a second communication channel that is different than the first communication channel.
14. The computing device of claim 9 , wherein the phone number verification process comprises an audio code-based verification process, and wherein said providing the phone number verification request comprises:
initiating, via a first communication channel, a telephonic communication session with the first client;
responsive to the telephonic communication session being accepted, providing the first verification code as an auditory code via the telephonic communication session; and
receiving the second verification code via a second communication channel that is different than the first communication channel.
15. The computing device of claim 14 , wherein the request for the signed digital certificate further specifies the phone number verification process.
16. A computer-readable storage medium having program instructions recorded thereon that, when executed by at least one processor, perform a method for associating a digital certificate with a phone number associated with a client, the method comprising:
receiving a request from the client for a signed digital certificate, the request specifying the phone number associated with the client;
determining a phone number verification process from a plurality of phone number verification processes based on the request;
providing, to the client, a phone number verification request in accordance with the determined phone number verification process, the phone number verification request specifying a first verification code;
responsive to receiving a second verification code, determining whether the second verification code matches the first verification code;
in response to determining that the second verification code matches the first verification code:
generating the digital certificate, the digital certificate comprising a uniform resource identifier (URI) associated with a relay server configured to send messages between the client and another device,
signing the digital certificate, and
causing a lookup service to store the signed digital certificate in association with the phone number associated with the client, the lookup service configured to enable the signed digital certificate to be searchable based at least on the phone number associated with the client and retrievable by a requesting entity, the lookup service executing on a server separate from a client device associated with the client and corresponding to the phone number; and
causing the requesting entity to:
obtain the signed digital certificate from the lookup service based at least on the phone number associated with the client, and
utilize the signed digital certificate to send a message to the client via the relay server, wherein the utilization of the signed digital certificate prevents the relay server from decrypting the message.
17. The computer-readable storage medium of claim 16 , the method further comprising:
in response to determining that the second verification code does not match the first verification code or in response to determining that no second verification code is received, denying the request for the signed digital certificate.
18. The computer-readable storage medium of claim 16 , wherein the phone number verification process comprises a short message service (SMS)-based verification process, and wherein said providing the phone number verification request comprises:
providing, to the client, the phone number verification request as an SMS-based text message comprising the first verification code via a first communication channel; and
receiving the second verification code via a second communication channel that is different than the first communication channel.
19. The computer-readable storage medium of claim 16 , wherein the phone number verification process comprises an audio code-based verification process, and wherein said providing the phone number verification request comprises:
initiating, via a first communication channel, a telephonic communication session with the client;
responsive to the telephonic communication session being accepted, providing the first verification code as an auditory code via the telephonic communication session; and
receiving the second verification code via a second communication channel that is different than the first communication channel.
20. The computer-readable storage medium of claim 19 , wherein the request for the signed digital certificate further specifies the phone number verification process.