# US 11,451,663 B2 · Intelligent attestation of traffic using a routing engine

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,451,663 B2
- Document ID: US11451663B2
- Status: Granted
- Kind: B2
- Application number: 17/239,154
- Filed: 2021-04-23
- Published: 2021-10-28
- Granted: 2022-09-20
- Earliest claimed: 2020-04-24
- Assignees: Level 3 Communications, LLC
- Applicants: Level 3 Communications, LLC
- Inventors: Richard D. Moore; Joseph Roy; Joseph Scivicque; Matthew C. Hess; George Wendell McFalls
- Web page: https://patentgrep.com/patent/US11451663B2

## CPC

- H04M 3/436: Arrangements for screening incoming calls {, i.e. evaluating the characteristics of a call before deciding whether to answer it (based on the calling party profile H04M3/42059; based on location H04M3/42348; based on presence H04M3/42365; diversion H04M3/54)}
- H04L 63/1466: {Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks}
- H04L 63/1483: {service impersonation, e.g. phishing, pharming or web spoofing (detection of rogue wireless access points H04W12/12)}
- H04M 3/42042: {Notifying the called party of information on the calling party (details within substation equipment H04M1/57, signalling details H04Q3/72)}
- H04W 12/069: using certificates or pre-shared keys
- H04W 12/122: Counter-measures against attacks; Protection against rogue devices
- H04W 12/66: {Trust-dependent, e.g. using trust scores or trust relationships}
- H04M: TELEPHONIC COMMUNICATION (circuits for controlling other apparatus via a telephone cable and not involving telephone switching apparatus G08)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

The present application describes providing an attestation level to a received communication. The attestation level may be used to communicate a level of security to a network or a called party that receives the communication. The attestation level associated with the communication may indicate to a destination network and/or recipient that the phone number associated with the communication is secure and/or the telephone number has not been spoofed.

## Claims

### Claim 1

A method, comprising:
receiving, by an enterprise routing engine, a telephone communication addressed to a destination network;
determining, by the enterprise routing engine, based at least in part on a property associated with the telephone communication, whether the telephone communication is associated with a particular originating domain;
based on determining that the telephone communication is associated with the particular originating domain, determining, by the enterprise routing engine, an attestation level for which the telephone communication is eligible, the attestation level including at least one of: full attestation, partial attestation, and gateway attestation;
associating, by the enterprise routing engine, a tag with the telephone communication, wherein the tag indicates the attestation level;
providing, by the enterprise routing engine, the telephone communication and the tag to a core routing engine;
determining, by the core routing engine and based at least in part on the tag, to route the telephone communication to a signing server;
providing, by the core routing engine, an attestation at the attestation level; and
routing, by the core routing engine, the telephone communication with the attestation to the destination network.

### Claim 2 (depends on 1)

The method of claim 1, wherein the attestation is provided by a signing server.

### Claim 3 (depends on 1)

The method of claim 1, further comprising determining, based at least in part on the tag, whether to provide the attestation at the determined attestation level.

### Claim 4 (depends on 2)

The method of claim 2, wherein the attestation and the communication are routed to an egress server by the signing server.

### Claim 5 (depends on 2)

The method of claim 2, wherein the attestation and the communication are routed by the signing server to the routing engine, and the routing engine routes the communication with the attestation to the destination network.

### Claim 6 (depends on 1)

The method of claim 1, wherein determining the attestation level comprises comparing the particular originating domain to a list of domains that have subscribed for an attestation service.

### Claim 7 (depends on 1)

The method of claim 1, wherein the routing engine routes the communication to a particular interface of a plurality of interfaces of the signing server based on the attestation level.