Call screening service for communication devices

1. A method comprising:

receiving a call message associated with a call from a caller to a callee;

identifying, via a call processing server, one or more call parameters from the call message;

comparing the one or more call parameters to an active call scam model applied by the call processing server to identify a plurality of the call parameters each of which are contributing a number of points to a total scam score associated with each call having a caller telephone number and placed by a caller device over a period of time, wherein the plurality of call parameters comprise an IP address contributing a first amount of points to the total scam score and a call message attribute parameter identifying one or more protocol specific attributes associated with the call parameter and contributing a second amount of points to the total scam score;

determining a scam score for the call based on the comparing to the active call scam model; and

determining whether to notify the callee that the call is a scam based on the scam score.

2. The method of claim 1 , further comprising:

determining whether the scam score exceeds a scam score threshold.

3. The method of claim 2 , further comprising:

responsive to determining the scam score exceeds a scam score threshold, tagging the call with an identifier; and

performing at least one of notifying the callee that the call is a scam call, blocking the call, and directing the call to voice mail, based on the tagged identifier.

4. The method of claim 1 , wherein determining the scam score for the call comprises determining a plurality of scam scores based on a plurality of active call scam models assigned to the call processing server;

determining a composite score based on the plurality of spam scores; and

applying the composite score as the scam score.

5. The method of claim 1 , wherein the determining the scam score based on the active model applied by the call processing server is performed while the call is being processed and within a threshold call processing time frame; and

tagging the call to be one or more of blocked, forwarded to voicemail, and accepted by the call recipient prior to connecting the call to a call recipient device of the callee.

6. The method of claim 1 , wherein the scam score is further computed by comparing the caller number to a list of known scam caller telephone numbers and based on call durations associated with the caller telephone number.

7. The method of claim 1 , wherein the call message comprises a SIP INVITE message and the one or more call parameters comprise SIP call parameters.

8. An apparatus comprising:

a receiver configured to receive a call message associated with a call from a caller to a callee;

a processor configured to

identify one or more call parameters from the call message;

compare the one or more call parameters to an active call scam model applied by the call processing server to identify a plurality of the call parameters each of which are contributing a number of points to a total scam score associated with each call having a caller telephone number and placed by a caller device over a period of time, wherein the plurality of call parameters comprise an IP address which contributes a first amount of points to the total scam score and a call message attribute parameter which identifies one or more protocol specific attributes associated with the call parameter and contributes a second amount of points to the total scam score;

determine a scam score for the call based on the comparison to the active call scam model; and

determine whether to notify the callee that the call is a scam based on the scam score.

9. The apparatus of claim 8 , wherein the processor is further configured to determine whether the scam score exceeds a scam score threshold.

10. The apparatus of claim 9 , wherein the processor is further configured to responsive to the scam score being determined to have exceeded a scam score threshold, tag the call with an identifier; and

perform at least one of notify the callee that the call is a scam call, blocking the call, and direct the call to voice mail, based on the tagged identifier.

11. The apparatus of claim 8 , wherein the scam score is determined for the call by a determination of a plurality of scam scores based on a plurality of active call scam models assigned to the call processing server, and wherein the processor is further configured to determine a composite score based on the plurality of spam scores; and

apply the composite score as the scam score.

12. The apparatus of claim 8 , wherein the scam score is determined based on the active model applied by the call processing server, which is performed while the call is being processed and within a threshold call processing time frame; and wherein the processor is further configured to tag the call to be one or more of blocked, forwarded to voicemail, and accepted by the call recipient prior to the call being connected to a call recipient device of the callee.

13. The apparatus of claim 8 , wherein the scam score is further computed by the caller number being compared to a list of known scam caller telephone numbers, and based on call durations associated with the caller telephone number.

14. The apparatus of claim 8 , wherein the call message comprises a SIP INVITE message and the one or more call parameters comprise SIP call parameters.

15. A non-transitory computer readable storage medium configured to store instructions that when executed cause a processor to perform:

receiving a call message associated with a call from a caller to a callee;

identifying, via a call processing server, one or more call parameters from the call message;

comparing the one or more call parameters to an active call scam model applied by the call processing server to identify a plurality of the call parameters each of which are contributing a number of points to a total scam score associated with each call having a caller telephone number and placed by a caller device over a period of time, wherein the plurality of call parameters comprise an IP address contributing a first amount of points to the total scam score and a call message attribute parameter identifying one or more protocol specific attributes associated with the call parameter and contributing a second amount of points to the total scam score;

determining a scam score for the call based on the comparing to the active call scam model; and

determining whether to notify the callee that the call is a scam based on the scam score.

16. The non-transitory computer readable storage medium of claim 15 , wherein the processor is further configured to perform:

determining whether the scam score exceeds a scam score threshold.

17. The non-transitory computer readable storage medium of claim 16 , wherein the processor is further configured to perform:

responsive to determining the scam score exceeds a scam score threshold, tagging the call with an identifier; and

performing at least one of notifying the callee that the call is a scam call, blocking the call, and directing the call to voice mail, based on the tagged identifier.

18. The non-transitory computer readable storage medium of claim 15 , wherein determining the scam score for the call comprises determining a plurality of scam scores based on a plurality of active call scam models assigned to the call processing server; and wherein the processor is further configured to perform

determining a composite score based on the plurality of spam scores; and

applying the composite score as the scam score.

19. The non-transitory computer readable storage medium of claim 15 , wherein the determining the scam score based on the active model applied by the call processing server is performed while the call is being processed and within a threshold call processing time frame, and wherein the processor is further configured to perform tagging the call to be one or more of blocked, forwarded to voicemail, and accepted by the call recipient prior to connecting the call to a call recipient device of the callee.

20. The non-transitory computer readable storage medium of claim 15 , wherein the scam score is further computed by comparing the caller number to a list of known scam caller telephone numbers and based on call durations associated with the caller telephone number.