# US 10,771,624 B1 · Data store for communication authentication

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,771,624 B1
- Document ID: US10771624B1
- Status: Granted
- Kind: B1
- Application number: 16/375,599
- Filed: 2019-04-04
- Granted: 2020-09-08
- Earliest claimed: 2019-04-04
- Assignees: Microsoft Technology Licensing, LLC
- Applicants: Microsoft Technology Licensing, LLC
- Inventors: Russell Andrew Penar; Amer Aref Hassan
- Web page: https://patentgrep.com/patent/US10771624B1

## CPC

- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04M 3/436: Arrangements for screening incoming calls {, i.e. evaluating the characteristics of a call before deciding whether to answer it (based on the calling party profile H04M3/42059; based on location H04M3/42348; based on presence H04M3/42365; diversion H04M3/54)}
- G06F 21/42: using separate channels for security data
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/3247: {involving digital signatures}
- H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint}
- H04L 63/0884: {by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity}
- H04M 3/42042: {Notifying the called party of information on the calling party (details within substation equipment H04M1/57, signalling details H04Q3/72)}
- H04M 3/42102: {Making use of the called party identifier}
- H04W 12/06: Authentication
- H04M 2203/6045: Identity confirmation
- H04M 2203/6081: Service authorization mechanisms
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04M: TELEPHONIC COMMUNICATION (circuits for controlling other apparatus via a telephone cable and not involving telephone switching apparatus G08)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Techniques for authenticating pending communication sessions between user devices are disclosed herein. In an example, a data store performs operations to: store device authentication information for an initiating device specific to a pending communication session between the initiating device and a receiving device, wherein the first authentication information comprises at least a timestamp and identifier for the initiating device; store second authentication information from a service provider of the initiating device; provide the second authentication information to a service provider of the receiving device to authenticate the pending communication session prior to routing the pending communication to the receiving device; and provide the first authentication information to the receiving device to verify authenticity of the pending communication session.

## Claims

### Claim 1

A method comprising:
transmitting first authentication information to a data store from an initiating device of a pending communication session based on a trusted relationship with the data store, the first authentication information comprising at least a timestamp and identifier for the initiating device;
storing, by the data store, the first authentication information;
generating, by an initiating service provider, second authentication information indicating that the initiating device is a trusted device on a network of the initiating service provider in response to the initiating device initiating the pending communication session on the network of the initiating service provider;
transmitting the second authentication information to the data store;
storing, by the data store, the second authentication information;
providing, by the data store, the second authentication information to a receiving service provider in response to the pending communication session being routed to a network of the receiving service provider;
routing the pending communication session to a receiving device of the pending communication session in response to the receiving service provider confirming authenticity of the initiating device using the second authentication information; and
providing, by the data store, the first authentication information to the receiving device to verify authenticity of the pending communication session.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
removing access to the first authentication information upon provision of the first authentication information to the receiving device; and
removing access to the second authentication information upon provision of the second authentication information to the receiving service provider.

### Claim 3 (depends on 1)

The method of claim 1, wherein the data store is provided by a distributed ledger.

### Claim 4 (depends on 1)

The method of claim 1, wherein providing, by the data store, the first authentication information to the receiving device to verify authenticity of the pending communication session is responsive to receiving, by the data store, a request for the first authentication information from the receiving device.

### Claim 5 (depends on 1)

The method of claim 1, wherein the pending communication session is routed from the network of the initiating service provider to the network of the receiving service provider through a public switched telephone network.

### Claim 6 (depends on 1)

The method of claim 1, wherein the first authentication information further comprises a cryptographic signature.

### Claim 7 (depends on 1)

The method of claim 1, wherein providing, by the data store, the first authentication information to the receiving device to verify the authenticity of the pending communication session comprises indicating to a user of the receiving device whether a communication session is authentic using the first authentication information.

### Claim 8

A system comprising:
a data store for providing authentication for a pending communication session;
an initiating device configured to transmit first authentication information to the data store for the pending communication session based on a trusted relationship with the data store, the first authentication information comprising at least a timestamp and identifier for the initiating device, wherein the data store is configured to store the first authentication information;
an initiating service provider configured to generate second authentication information indicating that the initiating device is a trusted device on a network of the initiating service provider in response to the initiating device initiating the pending communication session on the network of the initiating service provider, wherein the initiating service provider is configured to transmit the second authentication information to the data store, and wherein the data store is configured to store the second authentication information;
a receiving device; and
a receiving service provider configured to receive the second authentication information in response to the pending communication session being routed to a network of the receiving service provider, wherein the receiving service provider is configured to route the pending communication session to the receiving device in response to confirming authenticity of the initiating device using the second authentication information;
wherein the receiving device is configured to receive the first authentication information to verify authenticity of the pending communication session.

### Claim 9 (depends on 8)

The system of claim 8, wherein the data store is further configured to:
remove access to the first authentication information upon provision of the first authentication information to the receiving device; and
remove access to the second authentication information upon provision of the second authentication information to the receiving service provider.

### Claim 10 (depends on 8)

The system of claim 8, wherein the data store is provided by a distributed ledger.

### Claim 11 (depends on 8)

The system of claim 8, wherein the data store is configured to provide the first authentication information to the receiving device to verify authenticity of the pending communication session responsive to receiving a request for the first authentication information from the receiving device.

### Claim 12 (depends on 8)

The system of claim 8, wherein the pending communication session is routed from the network of the initiating service provider to the network of the receiving service provider through a public switched telephone network.

### Claim 13 (depends on 8)

The system of claim 8, wherein the first authentication information further comprises a cryptographic signature.

### Claim 14 (depends on 8)

The system of claim 8, wherein the receiving device is further configured to indicate to a user of the receiving device whether a communication session is authentic using the first authentication information.

### Claim 15

A system comprising:
means for generating first authentication information based on a trusted relationship of an initiating device of a pending communication session, the first authentication information comprising at least a timestamp and identifier for the initiating device;
means for storing the first authentication information;
means for generating second authentication information indicating that the initiating device is a trusted device on a network of an initiating service provider in response to the initiating device initiating the pending communication session on the network of the initiating service provider;
means for storing the second authentication information;
means for providing the second authentication information to a receiving service provider in response to the pending communication session being routed to a network of the receiving service provider;
means for routing the pending communication session to a receiving device of the pending communication session in response to the receiving service provider confirming authenticity of the initiating device using the second authentication information; and
means for the first authentication information to the receiving device to verify authenticity of the pending communication session.

### Claim 16 (depends on 15)

The system of claim 15, further comprising:
means for removing access to the first authentication information upon provision of the first authentication information to the receiving device; and
means for removing access to the second authentication information upon provision of the second authentication information to the receiving service provider.

### Claim 17 (depends on 15)

The system of claim 15, wherein the means for the first authentication information to the receiving device to verify authenticity of the pending communication session are responsive to means for receiving a request for the first authentication information from the receiving device.

### Claim 18 (depends on 15)

The system of claim 15, wherein the pending communication session is routed from the network of the initiating service provider to the network of the receiving service provider through a public switched telephone network.

### Claim 19 (depends on 15)

The system of claim 15, wherein the first authentication information further comprises a cryptographic signature.

### Claim 20 (depends on 15)

The system of claim 15, further comprising means for indicating to a user of the receiving device whether a communication session is authentic using the first authentication information.