US 2020/0221302 A1 · SECURE TELEPHONE IDENTITY (STI) CERTIFICATE MANAGEMENT SYSTEM

Abstract

A Secure Telephony Identity (STI) proxy server is described for intercepting incoming Voice over Internet Protocol (VoIP) communication requests for the purpose of mitigating an effect of fraudulent and nuisance VoIP communications. The STI proxy server may facilitate an STI verification server in verifying an authenticity of an originating network associated with an incoming call request. In one example, the STI proxy server may verify that the visited network is permitted to interact with the home network, based on a list of permissible networks. In addition, the STI proxy server may determine whether public STI certificates associated with an originating network have expired or set to expire within a predetermined time interval. In response to an actual o impending expiration, the STI proxy server may facilitate retrieval of a superseding, new public STI certificate for use by an STI authentication server to digitally sign an outgoing SIP INVITE messages.

Claims20

Dependent claims

A Secure Telephone Identity (STI) proxy server associated with a first Public Land Mobile Network (first PLMN), comprising:

one or more processors;
memory coupled to the one or more processors, the memory including one or more modules that are executable by the one or more processor to:
receive a call request from an originating device within a second PLMN, the second PLMN being different from the first PLMN;
infer an identity of the second PLMN based at least in part on a network identifier associated with the call request;
determine whether the second PLMN is permitted to interact with the first PLMN;
in response to the second PLMN being permitted to interact with the first PLMN, retrieve a public STI certificate associated with the second PLMN;
and
transmit the public STI certificate to an STI Verification Server (STI-VS) associated with the first network, the STI-VS to use the public STI certificate to verify that an origin of the call request corresponds to the second PLMN.

5 more elements

A computer-implemented method, comprising:

under control of one or more processors:
receiving a call request from an originating device within a first PLMN, the call request intended to initiate a voice communication with a recipient device within a second PLMN, the first PLMN being different from the second PLMN;
inferring an identity of the first PLMN, based at least in part on a network identifier associated with the call request;
retrieving a public STI certificate associated with the first PLMN;
and
transmitting the public STI certificate to an STI-VS associated with the second PLMN, the STI-VS to use the public STI certificate to verify that an origin of the call request corresponds to the first PLMN.

3 more elements

One or more non-transitory computer-readable media storing computer-executable instructions that, when executed on one or more processors, cause the one or more processors to perform acts comprising:

determining that a public STI certificate associated with a PLMN is set to expire within a predetermined time interval;
retrieving, from an STI-KMS, an asymmetric key pair associated with the PLMN, the asymmetric key pair including a private key and a public key;
transmitting, to an STI-CA, a certificate request for a new public STI certificate associated with the first PLMN that includes the public key;
receiving, from the STI-CA, the new public STI certificate;
and
transmitting, to an STI-AS, a notification associated with the new public STI certificate and the private key, the STI-AS to use the private key to digitally sign an outgoing SIP INVITE messages associated with the PLMN.

3 more elements

Dependencies are inferred from the claim text.

Secure telephone identity (sti) certificate management system

Life of this patent

Secure telephone identity (sti) certificate management system

Life of this patent

Abstract

Claims20