User authentication based on SS7 call forwarding detection

Inventors: Stacy Lyn Stubblefield (Los Angeles, CA); Vladimir Vujovic (Belgrade, RS); Milovan Kovacevic (Belgrade, RS)

Assignee: TeleSign Corporation

H04W12/06 H04L63/0838 H04L63/0876 H04L63/1433 H04M3/58 H04Q3/0025 H04W4/021 H04W4/14 H04W4/16 H04W4/20 H04W8/205 H04W12/00514 H04L2463/082 H04M7/127 H04M2203/6027 H04M2203/6081 H04W8/26 H04W80/12

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 10,492,070
App. No.: 15/787,588
Granted: Nov 26, 2019
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

A user authentication system that analyzes call forwarding information obtained from telecommunication networks, such as through the use of Signaling System No. 7 (“SS7”) protocols, to detect the possibility of fraud. In response to a request to access a network-accessible service, the system performs an initial authentication of provided user account credentials. The system then obtains a telecommunication subscriber identifier that is associated with the user account. Prior to performing additional device-based user authentication, the system obtains call forwarding information for the user. The obtained call forwarding information is then evaluated for potentially fraudulent call forwarding configurations. For example, call forwarding to certain call forwarding numbers, or the use of different call forwarding types, may be indicative of fraud intended to undermine further user authentication.

Claims (47)

1. A computer-implemented method of authorizing a user to access a network-accessible service, the method comprising:

receiving a request from a user to access a network-accessible service, wherein the request includes a user identifier and a password;

authenticating the request when the user identifier and password match a stored user identifier and password;

obtaining a subscriber identifier for a mobile telecommunication subscription associated with the user;

transmitting, to a telecommunication network, a query of call forwarding services associated with the subscriber identifier;

receiving, from the telecommunication network, a query response that comprises forwarding information associated with the subscriber identifier;

analyzing the received forwarding information to detect conditions indicative of fraud; and

when a condition indicative of fraud is not detected, authorizing the user request by:

transmitting a verification code to a mobile communication device associated with the user;

receiving a response code from the user; and

authorizing the user to access the network-accessible service when the verification code and the response code match.

2. The method of claim 1 , wherein the subscriber identifier is an international mobile subscriber identity (IMSI).

3. The method of claim 2 , wherein the IMSI is obtained by querying the telecommunication network.

4. The method of claim 2 , wherein the IMSI is obtained from the mobile communication device via an application installed on the mobile communication device.

5. The method of claim 1 , wherein the forwarding information describes that incoming communications to a mobile communication number associated with the subscriber are being forwarded to a forwarding number.

6. The method of claim 5 , wherein at least one of the incoming communications is a voice call.

7. The method of claim 5 , wherein at least one of the incoming communications is a short message service (SMS) message.

8. The method of claim 1 , wherein the transmitted query of call forwarding services is an InterrogateSS request.

9. The method of claim 1 , wherein a fraud condition is detected when at least one incoming communication to a mobile communication number associated with the subscriber identifier is being forwarded to a forwarding number.

10. The method of claim 1 , further comprising:

maintaining a table of call forwarding configurations, wherein each call forwarding configuration comprise a call forwarding type and a call forwarding number; and

wherein detecting a fraud condition is further based on comparing the forwarding information to the maintained call forwarding configurations.

11. The method of claim 10 , wherein at least one of the maintained call forwarding configurations further comprises the subscriber identifier associated with the user.

12. The method of claim 10 , wherein at least one of the maintained call forwarding configurations further comprises a mobile communication number, associated with the user, for which call forwarding is configured.

13. The method of claim 10 , wherein at least one of the maintained call forwarding configurations further comprises a fraud status indicating whether the corresponding call forwarding configuration is a known fraudulent or known trusted configuration.

14. The method of claim 10 , wherein the table further comprises at least one entry indicating a known fraudulent telecommunication provider.

15. The method of claim 1 , further comprising, when a fraud condition is detected, evaluating the user request by:

transmitting a verification code to the mobile communication device;

receiving a response code from the user; and

transmitting an indication to the network-accessible service of whether the verification code and the response code match, and that a fraud condition was detected.

16. A non-transitory computer readable medium containing instructions configured to cause one or more processors to perform a method of authorizing a user to access an online service, the method comprising: