# US 12,603,954 B2 · Method and system for authentication of telephone caller > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,603,954 B2 - Document ID: US12603954B2 - Status: Granted - Kind: B2 - Application number: 17/973,165 - Filed: 2022-10-25 - Published: 2024-04-25 - Granted: 2026-04-14 - Earliest claimed: 2022-10-25 - Assignees: JPMorganChase Bank, N.A. - Applicants: JPMorgan Chase Bank, N.A. - Inventors: Jerry Shi - Web page: https://patentgrep.com/patent/US12603954B2 ## CPC - H04M 3/42068: {where the identifier is used to access a profile} - H04M 3/42042: {Notifying the called party of information on the calling party (details within substation equipment H04M1/57, signalling details H04Q3/72)} - H04M 3/42059: {Making use of the calling party identifier} - H04M 3/436: Arrangements for screening incoming calls {, i.e. evaluating the characteristics of a call before deciding whether to answer it (based on the calling party profile H04M3/42059; based on location H04M3/42348; based on presence H04M3/42365; diversion H04M3/54)} - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04W 12/06: Authentication - H04M: TELEPHONIC COMMUNICATION (circuits for controlling other apparatus via a telephone cable and not involving telephone switching apparatus G08) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method and a system for authenticating an identity of a telephone caller are provided. The method includes: receiving an incoming telephone call from a calling party; extracting a telephone number that is associated with the incoming telephone call; receiving, from a carrier associated with the incoming telephone call, verification information that indicates whether the incoming telephone call has been verified by the carrier with respect to a STIR/SHAKEN standard; retrieving profile information that is associated with the extracted telephone number; and determining, based on the verification information and the profile information, whether to authenticate an identity of the calling party. ## Claims ### Claim 1 A method for authenticating an identity of a telephone caller, the method being implemented by at least one processor, the method comprising: receiving, by the at least one processor from the telephone caller, an incoming telephone call; extracting, by the at least one processor, a telephone number that is associated with the incoming telephone call; receiving, by the at least one processor from a carrier associated with the incoming telephone call, verification information that indicates whether the incoming telephone call has been verified by the carrier with respect to a predetermined standard; retrieving, by the at least one processor from a memory, profile information that is associated with the extracted telephone number; and determining, based on the verification information and the profile information, whether to authenticate an identity of the telephone caller, wherein the method further comprises: prompting the telephone caller to provide individually identifiable information, wherein the determining of whether to authenticate the identity of the telephone caller is based on the verification information, the profile information, and the individually identifiable information, and wherein the individually identifiable information includes at least one from among a social security number associated with the telephone caller and a card number associated with a card that has been assigned to the telephone caller. ### Claim 2 (depends on 1) The method of claim 1, wherein the predetermined standard comprises a Secure Telephone Identity Revisited (STIR)/Signature-based Handling of Asserted information using toKENs (SHAKEN)-based standard in compliance with a governmentally administered regulation. ### Claim 3 (depends on 2) The method of claim 2, wherein the verification information includes an attestation level associated with the incoming telephone call. ### Claim 4 (depends on 3) The method of claim 3, wherein the attestation level includes one from among a first attestation level that indicates that the carrier has authenticated the telephone caller and has confirmed that the telephone caller is authorized to use the extracted telephone number, a second attestation level that indicates that the carrier has authenticated a origination of the incoming telephone call but has not confirmed that the telephone caller is authorized to use the extracted telephone number, and a third attestation level that indicates that the carrier has authenticated a location from where the incoming telephone call is received but has not authenticated the telephone caller. ### Claim 5 (depends on 4) The method of claim 4, further comprising: when the attestation level associated with the incoming telephone call includes the first attestation level, facilitating a continuation of the incoming telephone call; and when the attestation level associated with the incoming telephone call includes one from among the second attestation level and the third attestation level, performing at least one from among at least temporarily blocking the incoming telephone call and redirecting the incoming telephone call. ### Claim 6 (depends on 3) The method of claim 3, further comprising: using a public key associated with the carrier to decrypt an identity token included in the verification information; and extracting the attestation level from the decrypted identity token. ### Claim 7 (depends on 3) The method of claim 3, wherein the profile information includes at least one from among a name of the telephone caller, a home address associated with the telephone caller, an email address associated with the telephone caller, and a telephone number associated with the telephone caller. ### Claim 8 A computing apparatus for authenticating an identity of a telephone caller, the computing apparatus comprising: a processor; a memory; and a communication interface coupled to each of the processor and the memory, wherein the processor is configured to: receive, via the communication interface from the telephone caller, an incoming telephone call; extract a telephone number that is associated with the incoming telephone call; receive, from a carrier associated with the incoming telephone call, verification information that indicates whether the incoming telephone call has been verified by the carrier with respect to a predetermined standard; retrieve, from the memory, profile information that is associated with the extracted telephone number; and determine, based on the verification information and the profile information, whether to authenticate an identity of the telephone caller, wherein the processor is further configured to: prompt the telephone caller to provide individually identifiable information, wherein the determination of whether to authenticate the identity of the telephone caller is based on the verification information, the profile information, and the individually identifiable information, and wherein the individually identifiable information includes at least one from among a social security number associated with the telephone caller and a card number associated with a card that has been assigned to the telephone caller. ### Claim 9 (depends on 8) The computing apparatus of claim 8, wherein the predetermined standard comprises a Secure Telephone Identity Revisited (STIR)/Signature-based Handling of Asserted information using toKENs (SHAKEN)-based standard in compliance with a governmentally administered regulation. ### Claim 10 (depends on 9) The computing apparatus of claim 9, wherein the verification information includes an attestation level associated with the incoming telephone call. ### Claim 11 (depends on 10) The computing apparatus of claim 10, wherein the attestation level includes one from among a first attestation level that indicates that the carrier has authenticated the telephone caller and has confirmed that the telephone caller is authorized to use the extracted telephone number, a second attestation level that indicates that the carrier has authenticated a origination of the incoming telephone call but has not confirmed that the telephone caller is authorized to use the extracted telephone number, and a third attestation level that indicates that the carrier has authenticated a location from where the incoming telephone call is received but has not authenticated the telephone caller. ### Claim 12 (depends on 11) The computing apparatus of claim 11, wherein the processor is further configured to: when the attestation level associated with the incoming telephone call includes the first attestation level, facilitate a continuation of the incoming telephone call; and when the attestation level associated with the incoming telephone call includes one from among the second attestation level and the third attestation level, perform at least one from among at least temporarily blocking the incoming telephone call and redirecting the incoming telephone call. ### Claim 13 (depends on 10) The computing apparatus of claim 10, wherein the processor is further configured to: use a public key associated with the carrier to decrypt an identity token included in the verification information; and extract the attestation level from the decrypted identity token. ### Claim 14 (depends on 10) The computing apparatus of claim 10, wherein the profile information includes at least one from among a name of the telephone caller, a home address associated with the telephone caller, an email address associated with the telephone caller, and a telephone number associated with the telephone caller. ### Claim 15 A non-transitory computer readable storage medium storing instructions for authenticating an identity of a telephone caller, the storage medium comprising executable code which, when executed by a processor, causes the processor to: receive, from the telephone caller, an incoming telephone call; extract a telephone number that is associated with the incoming telephone call; receive, from a carrier associated with the incoming telephone call, verification information that indicates whether the incoming telephone call has been verified by the carrier with respect to a predetermined standard; retrieve, from a memory, profile information that is associated with the extracted telephone number; and determine, based on the verification information and the profile information, whether to authenticate an identity of the telephone caller, wherein when executed, the executable code further causes the processor to prompt the telephone caller to provide individually identifiable information, wherein the determination of whether to authenticate the identity of the telephone caller is based on the verification information, the profile information, and the individually identifiable information, and wherein the individually identifiable information includes at least one from among a social security number associated with the telephone caller and a card number associated with a card that has been assigned to the telephone caller. ### Claim 16 (depends on 15) The storage medium of claim 15, wherein the predetermined standard comprises a Secure Telephone Identity Revisited (STIR)/Signature-based Handling of Asserted information using toKENs (SHAKEN)-based standard in compliance with a governmentally administered regulation.