FPL mechanism to authenticate a caller ID, if any?

Have a question or problem with your Fongo application? This forum is the place to get help from both staff and fellow community members.
Fongo recommends Fongo Home Phone for a fully supported Home Phone system for only $4.95/mo
tango
Quiet One
Posts: 41
Joined: 01/25/2015
SIP Device Name: HT-801
ISP Name: Bell Fibe
Computer OS: Windows 10
Router: Bell Giga Hub

FPL mechanism to authenticate a caller ID, if any?

Post by tango »

I am wondering that as a SP, does FPL attempt to authenticate a caller ID associated to a registered phone #?

I am curious as I learned more about VoIP, it is "alleged" that it's easier for VoIP phone (vs traditional landline) to be CID spoofed in this study:
http://www.cse.sc.edu/~mustafah/downloa ... 13-001.pdf

"It is difficult to spoof caller IDs by directly exploiting the Public Switched Telephone Network (PSTN, landlines) or cellular network protocols because caller IDs are automatically generated by landlines or cellular carriers, and control channels are not easily accessible to customers.

However, it is easy to spoof caller IDs in VoIP, since VoIP transmits both voice and control data in IP packets, and a caller can often set up any caller ID for an outgoing call. In addition, the protocols that interconnect carriers, which include Signaling System No. 7 (SS7) [9] and VoIP, do not contain any caller ID verification mechanisms, and a carrier will simply accept and forward the claimed caller IDs. Thus, spoofing attacks require little effort in several ways."

It's not a problem for me (yet, touch wood :) ), and I hope there is no stupid question.
Mango
Tried and True
Posts: 411
Joined: 08/14/2014
SIP Device Name: OBi110
Firmware Version: 1.3.0 (Build: 2824)
ISP Name: Telus
Computer OS: Windows 7
Router: Toastman Tomato

Re: FPL mechanism to authenticate a caller ID, if any?

Post by Mango »

Strictly speaking, landlines, cell phones, and VoIP all use the PSTN, although that is not really relevant to your question.

FPL does not permit you to spoof your caller ID, but like all service providers, they have no way of verifying that an incoming call has valid caller ID. You should always treat caller ID as a convenience, not as a method of authenticating who is calling you. Does that answer the question?
tango
Quiet One
Posts: 41
Joined: 01/25/2015
SIP Device Name: HT-801
ISP Name: Bell Fibe
Computer OS: Windows 10
Router: Bell Giga Hub

Re: FPL mechanism to authenticate a caller ID, if any?

Post by tango »

Mango wrote:Strictly speaking, landlines, cell phones, and VoIP all use the PSTN, although that is not really relevant to your question.
I wanted to know if it is true that CID spoofing is mostly happened in VoIP phones, not landlines, as claimed in the paper provided in my previous post.

However, when I re-checked with someone in my office, who got CID spoofing (which triggered me to find out more), his phone is actually a landline from Bell. Worse yet, he told me he paid to have his number unlisted! Someone called him at his unlisted number, apparently claimimg they are from West Jet, asking if he called West Jet for any business. It is even more bizzare that the CID showed his very name and phone #, as if he called himself. His wife wanted him to call Bell to complain, but he asked me about this first, assuming I have some idea about this CID spoofing scam :D :( !
...
FPL does not permit you to spoof your caller ID, but like all service providers, they have no way of verifying that an incoming call has valid caller ID. You should always treat caller ID as a convenience, not as a method of authenticating who is calling you. Does that answer the question?
It is an academic exercise to see if FPL can try to prevent CID spoofing, as there seems to be a way doing it, as suggested by that paper. However, if it is not that significant, and financially "unfriendly", then, not just FPL but also other SPs may not be willing to do it. There may be a way but no will :D !
Mango
Tried and True
Posts: 411
Joined: 08/14/2014
SIP Device Name: OBi110
Firmware Version: 1.3.0 (Build: 2824)
ISP Name: Telus
Computer OS: Windows 7
Router: Toastman Tomato

Re: FPL mechanism to authenticate a caller ID, if any?

Post by Mango »

Unfortunately, what you describe is a pretty common scam. Since the telemarketers are overseas, there is very little our government can do to enforce this. They have attempted to fine one serious offender, but the offender simply chose not pay the fine as there is no consequences for this.

There's no way to stop caller ID spoofing, whether you have a VoIP, cell, or landline phone. But some service providers offer a robocaller blocking feature. This requires incoming callers to press a digit in order to be connected.