STIR/SHAKEN: Configuration Guide

STIR/SHAKEN is a call authentication framework that combats fraud and robocalls, ensuring that the caller's identity is verified and trustworthy.

What is STIR/SHAKEN?

• STIR: Secure Telephone Identity Revisited
• SHAKEN: Signature-based Handling of Asserted information using toKENs

Together, these protocols create a chain of trust that allows operators to verify the authenticity of each call.

Why implement it?

Anatel has been advancing call authentication regulations to combat fraud in Brazil. The main benefits include:

1. Fraud reduction - Prevents caller ID spoofing
2. Customer trust - Authenticated calls increase answer rates
3. Regulatory compliance - Preparation for future Anatel requirements
4. Network reputation - Improves perceived service quality

Configuration in SipPulse SoftSwitch

Prerequisites

• Operator digital certificate issued by a recognized certificate authority
• SoftSwitch version 5.0 or higher
• SBC configured with TLS 1.2+
• Access to the administration panel

Step by step

1. Obtain certificate - Request the certificate from the authorized certificate authority
2. Configure the certificate in the SoftSwitch - Access the administration panel and import the certificate in the security section
3. Enable STIR/SHAKEN signing - Activate the authentication module in the signaling settings
4. Test with inter-operator calls - Make test calls and verify the authentication headers

Attestation Levels

Monitoring

After configuration, it is essential to monitor:

• Rate of successfully signed calls
• Rejections due to invalid certificate
• Verification logs in the SBC

Conclusion

Implementing STIR/SHAKEN is fundamental for network security and subscriber trust. With SipPulse SoftSwitch, configuration is simplified and natively integrated into the call flow.