Protection of services in mobile network against CLI spoofing

A data processing system with Service Control Point functionality and configured for controlling access of a mobile communication device, capable of issuing a unique identifier for identifying the device, to a calling line identification (CLI)-based service on a communication network via a connection from outside the communication network, the system configured to:

• if the identifier is received from outside the communication network and over a secure signaling channel, store in a memory a first time stamp, representative of a first time of receipt of the identifier;
• set up the connection and generate a second time stamp representative of a second time at which the connection is established to the CLI-based service on the communication network;
• issue a first instruction to establish unconditional access of the device to the CLI-based service if a time difference between the second time and first time falls within a predetermined time window threshold;
• and
• issue a second instruction to grant conditional access of the device to the CLI-based service if the time difference falls outside the predetermined time window threshold.

A non-transitory computer-readable storage medium for storing instructions thereon that, if executed by a Service Control Point in a communication network, cause the Service Control Point to control access of a mobile communication device, capable of issuing a unique identifier for identifying the device, to a calling line identification (CLI)-based service on a communication network via a connection from outside the communication network, the storage medium comprising:

• first computer-readable instructions for storing in a memory a first time stamp, representative of a first time of receipt of the identifier is received from outside the communication network and over a secure signaling channel;
• second computer-readable instructions for setting up the connection and generating a second time stamp representative of a second time at which the connection is established to the CLI-based service on the communication network;
• third computer-readable instructions for issuing a first instruction to establish unconditional access of the device to the CLI-based service if a time difference between the second time and first time falls within a predetermined time window threshold;
• and
• fourth computer-readable instructions for issuing a second instruction to grant conditional access of the device to the CLI-based service if the time difference falls outside the predetermined time window threshold.