US 12,143,531 B2
Method and apparatus for threat identification through analysis of communications signaling, events, and participants
Lance Douglas, Atlanta, GA (US)
Assigned to Pindrop Security, Inc., Atlanta, GA (US)
Filed by Pindrop Security, Inc., Atlanta, GA (US)
Filed on Sep. 13, 2022, as Appl. No. 17/943,893.
Application 17/943,893 is a continuation of application No. 16/927,464, filed on Jul. 13, 2020, granted, now 11,445,060.
Application 16/927,464 is a continuation of application No. 16/522,450, filed on Jul. 25, 2019, granted, now 10,715,656, issued on Jul. 14, 2020.
Application 16/522,450 is a continuation of application No. 16/200,379, filed on Nov. 26, 2018, granted, now 10,542,135, issued on Jan. 21, 2020.
Application 16/200,379 is a continuation of application No. 15/666,917, filed on Aug. 2, 2017, granted, now 10,142,463, issued on Nov. 27, 2018.
Claims priority of provisional application 62/370,105, filed on Aug. 2, 2016.
Prior Publication US 2023/0007120 A1, Jan. 5, 2023
Int. Cl. H04M 3/22 (2006.01); H04L 9/40 (2022.01); H04M 3/436 (2006.01); H04M 7/00 (2006.01)
CPC H04M 3/2281 (2013.01) [H04M 3/2254 (2013.01); H04M 3/436 (2013.01); H04L 63/00 (2013.01); H04L 63/1408 (2013.01); H04M 7/0078 (2013.01); H04M 7/0093 (2013.01); H04M 2203/6027 (2013.01); H04M 2207/12 (2013.01); H04Q 2213/13139 (2013.01); H04Q 2213/13345 (2013.01); H04Q 2213/13515 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method for analyzing call signaling data, the method comprising:
obtaining, by a computer from one or more databases, prior signaling data associated with one or more prior calling devices for a plurality of prior calls, the prior signaling data associated with the prior calling device including a device identifier of the prior calling device;
receiving, by the computer from an originating carrier, inbound signaling data associated with an inbound calling device that originated an inbound call traversing a telecommunications network and not in the plurality of prior calls, the inbound signaling data including the device identifier associated with the inbound calling device;
generating, by the computer, statistical information using the prior signaling data associated with the prior calling device having the device identifier matching the device identifier of the inbound calling device;
identifying, by the computer, one or more outliers in the inbound signaling data based upon the statistical information generated for the prior calling device having the device identifier of the inbound calling device;
generating, by the computer, a threat score for the inbound phone call based at least in part upon the one or more outliers indicating a difference between the inbound signaling data and the statistical information generated using the prior signaling data; and
transmitting, by the computer, instructions to one or more carriers to direct the inbound phone call based upon the threat score.