STIR/SHAKEN is a revolutionary technology created to combat caller ID spoofing, a common trick used by scammers. Simply put, STIR (Secure Telephone Identity Revisited) and SHAKEN (Signature-based Handling of Asserted information using toKENs) work together to ensure that the identity shown in a phone call is authentic. This innovation restores trust in phone calls, making it harder for fraudsters to scam people.
How does Stir and Shaken work?
Stir and Shaken is an authentication and verification framework. The process follows the following phases:
- Authentication: The origin of the call is validated with a digital certificate, ensuring that the number shown is legitimate.
- Transmission: The certificate accompanies the call across networks, allowing operators to verify its authenticity.
- Verification: Upon receiving the call, the recipient's provider confirms the validity of the certificate, ensuring that the caller's identification is true.
What is the Token?
The Token is transmitted via a SIP header. It follows the format of a JSON Web Token and can easily be decoded on an online service like jwt.io. It is signed using the origin provider's private key and can be verified with the public key certificate obtained from the public repository via the http protocol.
Attestation levels
Attestation levels in the context of STIR/SHAKEN are fundamental to understanding how calls are authenticated and verified, offering different degrees of confidence in caller identification. They allow telecommunications carriers to indicate the level of confidence in the caller ID information they pass on. There are three main levels of attestation:
2023 presentation
Benefits of Stir and Shaken
Fraud Reduction: Significantly reduces the chances of telephone scams.
Restored Trust: Consumers can trust caller ID information more.
Efficient Call Management: Makes it easy to identify and manage legitimate calls.
Conclusion
STIR/SHAKEN is a big step towards the security and reliability of telephone communications, protecting consumers and companies against fraud. Its global expansion is essential for a future where phone calls can be received without suspicion.
EN 
PT_BR