ClearIP can be used to create rules for specific Service Provider Codes (SPC) associated with a verified PASSporT. In the United States, SPCs are Operating Company Numbers (OCNs) or Service Provider IDs (SPIDs).
In this context, Service Provider Code refers to the SPC that is embedded in the SHAKEN certificate that signed the verified SHAKEN PASSporT. In other words, it corresponds to the service provider that signed the call.
Take Action on Calls Based on STI Verified Service Provider Code
ClearIP can be used to take action on calls based on the Service Provider Code of the certificate that signed the PASSporT. Actions include blocking, diverting, indicating SPAM, or reporting only. This can be used to take action on calls signed by certain providers.
| Service Provider Code | Action | Comment | SBC | Service Provider | Group | User | Called Country | Called Number |
|---|---|---|---|---|---|---|---|---|
| 1234 | Block | Terrible Wireless | ||||||
| 5678 | Divert | Not Trustworthy Telecom | ||||||
| 9012 | Indicate | Spammer | ||||||
| 9012 | Report Only | This number will accept SPAM | 12345678901 |
In the above example, rules were created to block all calls signed by Terrible Wireless and to divert calls signed by Not Trustworthy Telecom. Calls signed by Spammer would be indicated as SPAM, except for calls to 12345678901 which would be allowed to go through normally.
Verification SPC Policies are applied after STI Verification Policies are applied, but before Reputation Policies and CNAM Policies. The use of Verification SPC Policies does not incur any additional cost, but STI Verification Policies must be applied for any of these policies to take effect.
Note that if the verification of a call fails due to a malformed PASSporT for example, ClearIP may not be able to obtain the SPC of the signing service provider. When this happens, ClearIP is unable to apply the Verification SPC Policies.
Setup
The application of a Verification SPC Policy can be limited to an SBC, service provider, group, user, called country, or called number.
As ClearIP processes calls, it will look for a Verification SPC Policy. If only one policy matches, it will use that one. If there are multiple policies that match, it will use the one having the best match based on the priority presented below.
On the Verification SPC Policies page, there are several columns to the right of the Comment column. The columns to the right define the policy’s limiters. When a policy is chosen by ClearIP for a particular call, only one of those limiters will apply. The priority of the limiters is as follows, from highest priority to lowest:
- Called Number (must be an exact match, not a prefix match)
- Called Country
- User
- Group
- Service Provider
- SBC
Called Number as an Exact Match
Verification SPC Policies can be configured to use a called number, not as a prefix, but as an exact match. These policies use the Translated Called Number for the Called Number.
Service Provider Code
As STI Verification occurs, ClearIP will extract the Service Provider Code from the signing certificate and use that value to find the matching policy.
Action
- Report Only - The Report Only action does not activate any additional reporting; however, it prevents any other action from being taken on matching calls that are matched by less specific policies. Reporting is available under the Analytics dropdown menu, and automated reports delivered by email can be configured on the Scheduled SIP Reports page under the Configuration dropdown menu.
- Block - ClearIP will return a SIP 603 response.
- Divert - ClearIP will return a diversion destination in the Contact header to the SBC. If a diversion destination is not configured on the SBC, then calls that trigger the divert action will be blocked instead.
- Indicate - The CNAM value will be overwritten with “<SPAM>”.
Viewing SPCs in SIP Messages
The SPC of the service provider that signed a call can be viewed on the SIP Messages page under the Analytics dropdown menu. Click the Columns button on the right, search for the STI Verification Service Provider Code column, and check it to display that column. The STI Verification Service Provider Code column will show the SPC of the certificate that signed the call. This Service Provider Code is what should be used in the Verification SPC Policies.
Reason
If a call is blocked or diverted based on matching a Verification SPC Policy, “STI Verification SPC Policy” will be listed as the Reason.
Viewing the Effect of Verification SPC Policies in SIP Messages
Calls blocked by Verification SPC Policies can be viewed in Analytics SIP Messages. To view which calls are blocked, filter the Reason column for Equals “STI Verification SPC Policy”. If the Reason column is not visible use the Columns button at the top right to add it. By default, ClearIP will display all calls blocked by a Verification SPC Policy in the past hour. You can view different time periods by changing the From and To at the top left.