Efficient Identification and Content Authentication for Phone Calls

Technology #16591

Questions about this technology? Ask a Technology Manager

Download Printable PDF

Categories
Researchers
Patrick G. Traynor
Bradley G. Reaves
Logan E. Blue
Luis Vargas
Hadi Abdullah
Thomas Shrimpton
Managed By
Richard Croley
Assistant Director 352-392-8929
Patent Protection
US Patent Pending

Cryptographically Authenticates Phone Calls for Secure Personal and Professional Communications

This application cryptographically verifies the identity of callers to ensure that phone calls are authentic, assuring users that their information is safe. Financial, medical, or other personal information is commonly communicated through phone calls or other telephony technology. In 2014, 17.6 million Americans lost an estimated total of $8.6 billion in fraudulent phone scams, most of which were a result of caller ID spoofing. Telephony advancement is failing to meet the need for more secure and trustworthy communication channels. Caller identity is currently verified through look-up services or biometrics, such as voice recognition, but neither protect against forgery.

Researchers at the University of Florida have developed the AuthentiCall system, which cryptographically authenticates both parties on a call. AuthentiCall can be implemented on both personal and professional communications servers or as a cellular application.

Application

Authentication system that verifies financial, medical, and personal information is communicated securely, decreasing privacy issues and phone fraud

Advantages

  • Detects 99 percent of tampered audio calls, increasing the integrity and security of conversations
  • Initiates call monitoring within the first second, preventing redirection of calls to an adversary
  • Installs easily on servers or cellular devices, providing protection for corporations, businesses, and individuals

Technology

The AuthentiCall system uses cryptography to provide stronger authentication through the coding and decoding of secure messages in data and audio channels. Cryptographic authentication is more secure than the other available methods, because it provides end-to-end authentication between the callers. The use of formally verified protocols, which bind data and audio channels, provides a stronger guarantee of the integrity of conversations that occur over traditional phone networks. This authentication occurs within the first second after a call is answered, and continuously refreshes during the duration of the call. AuthentiCall detects tampered audio, spoofing calls, or unverifiable identities.