A framework used to verify the authenticity of caller ID information in VoIP and telephone networks to prevent spoofed robocalls and fraud.
Here’s a more detailed explanation:
What it is:
STIR/SHAKEN is a call authentication technology suite that combats caller ID spoofing by verifying that a call is genuinely coming from the number displayed. STIR stands for Secure Telephony Identity Revisited (a protocol for digitally signing calls), and SHAKEN stands for Signature-based Handling of Asserted information using toKENs (a framework for implementing STIR in VoIP networks).
How it works:
When a VoIP call is placed, the originating service provider uses STIR to attach a digital certificate (or token) to the call’s SIP header, verifying the caller ID. As the call travels through the network, the receiving provider uses SHAKEN to check that signature. If the token is valid, the call is marked as verified. Calls without proper authentication may be flagged as potential spam or blocked.
Benefits:
- Reduces spoofing: Blocks or labels calls with falsified caller IDs.
- Increases trust: Gives recipients confidence that the displayed number is legitimate.
- Improves call answer rates: Verified calls are more likely to be picked up.
- Supports spam filtering: Helps phone systems prioritize or screen calls effectively.
- Regulatory compliance: Meets telecom industry mandates in regions like the U.S. and Canada.
Key components:
- SIP Identity Header: Contains the cryptographic signature and call metadata.
- Authentication Service: Adds a digital certificate at the start of a call.
- Verification Service: Checks the certificate at the receiving end to confirm identity.
- Certificate Authority: Issues digital credentials to trusted carriers.
- Attestation levels (Full, Partial, Gateway): Indicate how well the origin of the call is verified.
Why it’s beneficial:
STIR/SHAKEN significantly reduces fraudulent and unwanted calls by restoring trust in caller ID. It empowers businesses and consumers to identify legitimate calls, helps carriers enforce anti-spam measures, and supports a more secure and transparent telephony ecosystem.