System and method for interrupting an incoming unwanted call on a mobile device

A system for detecting an anomaly in the behavior of a trusted process comprising:

• a memory and a hardware processor configured to:
• add a plurality of phone numbers associated with a calling party to a list of prohibited phone numbers;
• intercept an incoming telephone call received by a mobile device;
• determine one or more parameters of the intercepted telephone call;
• determine if the intercepted telephone call matches one or more telephone calls associated with the list of prohibited phone numbers by comparing the determined parameters of the intercepted call with parameters of the one or more telephone calls associated with the list of prohibited phone numbers;
• and
• block reception of the intercepted telephone call by the mobile device in response to determining a match between the intercepted telephone call and the one or more telephone calls associated with the list of prohibited phone numbers;
• send an authentication request to a remote authentication service that contains information about intended telephone calls provided by the calling party before the call for authentication of the intercepted telephone call;
• and
• interrupt the intercepted telephone call in response to unsuccessful authentication when the intercepted telephone call is not an intended telephone call;
• or
• unblock the intercepted telephone call in response to successful authentication when the intercepted telephone call is an intended telephone call.

A non-transitory computer readable medium storing thereon computer executable instructions for detecting an anomaly in the behavior of a trusted process, including instructions for:

• adding a plurality of phone numbers associated with a calling party to a list of prohibited phone numbers;
• intercepting an incoming telephone call received by a mobile device;
• determining one or more parameters of the intercepted telephone call;
• determining if the intercepted telephone call matches one or more telephone calls associated with the list of prohibited phone numbers by comparing the determined parameters of the intercepted call with parameters of the one or more telephone calls associated with the list of prohibited phone numbers;
• blocking reception of the intercepted telephone call by the mobile device in response to determining a match between the intercepted telephone call and the one or more telephone calls associated with the list of prohibited phone numbers;
• sending an authentication request to a remote authentication service that contains information about intended telephone calls provided by the calling party before the call for authentication of the intercepted telephone call;
• and
• interrupting the intercepted telephone call in response to unsuccessful authentication when the intercepted telephone call is not an intended telephone call;
• or
• unblocking the intercepted telephone call in response to successful authentication when the intercepted telephone call is an intended telephone call.