Using calling party number for caller authentication
Embodiments include a system, method, and computer program product that authenticates a caller using calling party information. In an embodiment, an authentication device receives the call request and associated calling party information that includes a calling party number. The authentication device retrieves parameters associated with the calling party number, where a retrieved parameter is a number of accounts linked to the calling party number. The authentication device determines whether the number of accounts is between one and a threshold value, inclusive, and verifies that the call request originates from a location or a device associated with the calling party number. Based on the verifying and determining, the authentication device generates an authentication result that indicates whether the calling party number is authenticated. Then, the authentication device sends the authentication result to a call processing device that processes the call request from the caller according to the authentication result.
1. A method, comprising:
receiving a call request and associated calling party information that includes a calling party number, wherein the call request is initiated by a caller;
verifying that the calling party number is a valid calling party number based at least in part on one or more calling party number attributes or an operating status of the calling party number;
in response to the verifying, authenticating the call request, the authenticating comprising:
retrieving fraud information for one or more accounts linked to the calling party number;
determining a risk score for the calling party number based at least in part on the calling party information, wherein the risk score is determined based at least in part on the fraud information for the one or more accounts;
generating an authentication result for the call request based at least in part on the determined risk score, wherein the authentication device generates the authentication result before the call request is answered by an agent associated with a called party device;
providing the authentication result to a call processing device that processes the call request from the caller based at least in part on the authentication result; and
adjusting one or more authentication parameter thresholds based at least in part on the authentication result to reduce incorrectly authenticated call requests.
2. The method of claim 1 , wherein the verifying comprises requesting a verification system to perform the verifying, wherein the verification system is external to a device that authenticates the call request.
3. The method of claim 1 , wherein the verifying comprises determining that the calling party number originates from a known physical location assigned to or associated with the calling party number.
4. The method of claim 1 , wherein the verifying comprises placing an outbound call to the calling party number and analyzing the operating status of the calling party number during the outbound call.
5. The method of claim 1 , wherein the verifying comprises determining a credibility score indicating a likelihood that the calling party number is valid.
6. The method of claim 1 , wherein the authenticating further comprises comparing the determined risk score to a maximum risk score selected for the call request.
7. The method of claim 1 , further comprising:
associating the authentication result with the calling party number; and
wherein the adjusting comprises adjusting the one or more authentication parameter thresholds based at least in part on an accuracy of the authentication result.
8. The method of claim 1 , wherein the providing comprises providing the authentication result to the call processing device as a visual or audio indication.
9. The method of claim 1 , wherein the call processing device processes the call request without further authentication.
10. A system, comprising:
a memory;
a processor coupled to the memory;
a communications interface that when executing in the processor receives a call request and associated calling party information that includes a calling party number, wherein the call request is initiated by a caller;
a calling number verificator that when executing in the processor, verifies that the calling party number is a valid calling party number based at least in part on one or more calling party number attributes or an operating status of the calling party number;
a calling number authenticator that when executing in the processor:
responsive to the verifying, authenticates the call request by:
retrieving fraud information for one or more accounts linked to the calling party number;
determining a risk score for the calling party number based at least in part on the calling party information, wherein the risk score is determined based at least in part on the fraud information for the one or more accounts;
generating an authentication result for the call request based at least in part on the determined risk score, wherein the authentication device generates the authentication result before the call request is answered by an agent associated with a called party device;
provides the authentication result to a call processing device that processes the call request from the caller based at least in part on the authentication result; and
adjusting one or more authentication parameter thresholds based at least in part on the authentication result to reduce incorrectly authenticated call requests.
11. The system of claim 10 , wherein the calling number verificator further determines that the calling party number originates from a known physical location assigned to or associated with the calling party number.
12. The system of claim 10 , wherein the calling number verificator further determines a credibility score indicating how likely that the calling party number is valid.
13. The system of claim 10 , wherein the calling number authenticator further compares the determined risk score to a maximum risk score selected for the call request.
14. The system of claim 10 , wherein the calling number authenticator provides the authentication result to the call processing device as a visual or audio indication.
15. The system of claim 10 , wherein the call processing device processes the call request without further authentication.
16. A non-transitory computer-readable device having instructions stored thereon that, when executed by at least one computing device, causes the at least one computing device to perform operations comprising:
receiving a call request and associated calling party information that includes a calling party number, wherein the call request is initiated by a caller;
verifying that the calling party number is a valid calling party number based at least in part on one or more calling party number attributes or an operating status of the calling party number;
in response to the verifying, authenticating the call request, the authenticating comprising:
retrieving fraud information for one or more accounts linked to the calling party number;
determining a risk score for the calling party number based at least in part on the calling party information, wherein the risk score is determined based at least in part on the fraud information for the one or more accounts;
generating an authentication result for the call request based at least in part on the determined risk score, wherein the authentication device generates the authentication result before the call request is answered by an agent associated with a called party device;
providing the authentication result to a call processing device that processes the call request from the caller based at least in part on the authentication result; and
adjusting one or more authentication parameter thresholds based at least in part on the authentication result to reduce incorrectly authenticated call requests.
17. The non-transitory computer-readable device of claim 16 , wherein the verifying comprises determining that the calling party number originates from a known physical location assigned to or associated with the calling party number.
18. The non-transitory computer-readable device of claim 16 , wherein the verifying comprises determining a credibility score indicating a likelihood that the calling party number is valid.
19. The non-transitory computer-readable device of claim 16 , wherein the authenticating further comprises comparing the determined risk score to a maximum risk score selected for the call request.
20. The non-transitory computer-readable device of claim 16 , wherein the call processing device processes the call request without further authentication.