# US 11,122,032 B2 · Call authorization and verification via a service provider code > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,122,032 B2 - Document ID: US11122032B2 - Status: Granted - Kind: B2 - Application number: 16/732,272 - Filed: 2019-12-31 - Published: 2021-07-01 - Granted: 2021-09-14 - Earliest claimed: 2019-12-31 - Assignees: First Orion Corp. - Applicants: First Orion Corp. - Inventors: Julie Sara Fowler; Daniel Francis Kliebhan - Web page: https://patentgrep.com/patent/US11122032B2 ## CPC - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 65/1079: {of unsolicited session attempts, e.g. SPIT} - H04L 65/1069: Session establishment or de-establishment - H04L 65/1104: Session initiation protocol [SIP] - H04M 3/42059: {Making use of the calling party identifier} - H04M 3/436: Arrangements for screening incoming calls {, i.e. evaluating the characteristics of a call before deciding whether to answer it (based on the calling party profile H04M3/42059; based on location H04M3/42348; based on presence H04M3/42365; diversion H04M3/54)} - H04M 2203/6027: Fraud preventions - H04M 2203/6045: Identity confirmation - H04M 2203/6081: Service authorization mechanisms - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04M: TELEPHONIC COMMUNICATION (circuits for controlling other apparatus via a telephone cable and not involving telephone switching apparatus G08) ## Abstract One example method of operation may include receiving a call message associated with a call, determining a service provider network identifier based on a telephone number of a call origination device, identifying, from the call message, an identity header with a link to a public certificate repository storing a public certificate assigned to a service provider network hosting the call origination device, retrieving a service provider code assigned to the service provider network from the public certificate, and determining whether the service provider code matches the service provider network identifier as identified from a verification table. ## Claims ### Claim 1 A method comprising: receiving a call message associated with a call at a call termination service provider; retrieving a first table comprising calling party assigned telephone numbers and corresponding service provider network identifiers; retrieving a second table comprising the service provider network identifiers and corresponding service provider codes; identifying, via the first table, a service provider network identifier assigned to the calling number of the call origination device; identifying, via the second table, the service provider network identifier has an entry that matches a service provider code; determining the service provider network identifier identifies a service provider network supporting the call origination device, based on the calling number of the call origination device; identifying, from the call message, an identity header comprising a link to a public certificate repository storing a public certificate assigned to the service provider network; retrieving, via the call termination service provider, the service provider code from the public certificate assigned to the service provider network; determining, via the call termination service provider, whether the service provider code matches the service provider network identifier as identified from the second table accessed by a verification service of the call termination service provider; and blocking or verifying the call based on the match determination. ### Claim 2 (depends on 1) The method of claim 1, comprising: when the service provider code matches the service provider network identifier as an entry in the second table, verifying the call to be completed. ### Claim 3 (depends on 1) The method of claim 1, comprising: when the service provider code does not match the service provider network identifier as an entry in the second table, blocking the call. ### Claim 4 (depends on 1) The method of claim 1, wherein the call message is a session initiation protocol (SIP) INVITE message and the telephone number of the call origination device is identified from the SIP INVITE message. ### Claim 5 (depends on 1) The method of claim 1, wherein the second table is stored in the public certificate. ### Claim 6 An apparatus comprising: a receiver of a call termination service provider configured to receive a call message associated with a call; a processor configured to retrieve a first table comprising calling party assigned telephone numbers and corresponding service provider network identifiers; retrieve a second table comprising the service provider network identifiers and corresponding service provider codes; identify, via the first table, a service provider network identifier assigned to the calling number of the call origination device; identify, via the second table, the service provider network identifier has an entry that matches a service provider code; determine the service provider network identifier identifies a service provider network that supports the call origination device, based on the calling number of a call origination device; identify, from the call message, an identity header comprising a link to a public certificate repository storing a public certificate assigned to the service provider network; retrieve, via the call termination service provider, the service provider code from the public certificate assigned to the service provider network; determine, via the call termination service provider, whether the service provider code matches the service provider network identifier as identified from the second table accessed by a verification service of the call termination service provider; and block or verify the call based on the match determination. ### Claim 7 (depends on 6) The apparatus of claim 6, wherein when the service provider code matches the service provider network identifier as an entry in the second table, verify the call to be completed. ### Claim 8 (depends on 6) The apparatus of claim 6, wherein when the service provider code does not match the service provider network identifier as an entry in the second table, block the call. ### Claim 9 (depends on 6) The apparatus of claim 6, wherein the call message is a session initiation protocol (SIP) INVITE message and the telephone number of the call origination device is identified from the SIP INVITE message. ### Claim 10 (depends on 6) The apparatus of claim 6, wherein the second table is stored in the public certificate. ### Claim 11 A non-transitory computer readable storage medium configured to store instructions that when executed cause a processor to perform: receiving a call message associated with a call at a call termination service provider; retrieving a first table comprising calling party assigned telephone numbers and corresponding service provider network identifiers; retrieving a second table comprising the service provider network identifiers and corresponding service provider codes; identifying, via the first table, a service provider network identifier assigned to the calling number of the call origination device; identifying, via the second table, the service provider network identifier has an entry that matches a service provider code; determining the service provider network identifier identifies a service provider network supporting the call origination device, based on the calling number of the call origination device; identifying, from the call message, an identity header comprising a link to a public certificate repository storing a public certificate assigned to the service provider network; retrieving, via the call termination service provider, the service provider code from the public certificate assigned to the service provider network; determining, via the call termination service provider, whether the service provider code matches the service provider network identifier as identified from the second table accessed by a verification service of the call termination service provider; and blocking or verifying the call based on the match determination. ### Claim 12 (depends on 11) The non-transitory computer readable storage medium of claim 11, wherein the processor is further configured to perform: when the service provider code matches the service provider network identifier as an entry in the second table, verifying the call to be completed. ### Claim 13 (depends on 11) The non-transitory computer readable storage medium of claim 11, wherein the processor is further configured to perform: when the service provider code does not match the service provider network identifier as an entry in the second table, blocking the call. ### Claim 14 (depends on 11) The non-transitory computer readable storage medium of claim 11, wherein the call message is a session initiation protocol (SIP) INVITE message and the telephone number of the call origination device is identified from the SIP INVITE message. ### Claim 15 (depends on 11) The non-transitory computer readable storage medium of claim 11, wherein the second table is stored in the public certificate.