ClearIP can be used to create rules for specific Service Provider Codes (SPC) associated with a verified PASSporT. In the United States, SPCs are Operating Company Numbers (OCNs) or Service Provider IDs (SPIDs).
In this context, Service Provider Code refers to the SPC that is embedded in the SHAKEN certificate that signed the verified SHAKEN PASSporT. In other words, it corresponds to the service provider that signed the call.
Take Action on Calls Based on STI Verified Service Provider Code
ClearIP can be used to take action on calls based on the Service Provider Code of the certificate that signed the PASSporT. Actions include blocking, diverting, indicating SPAM, or reporting only. This can be used to take action on calls signed by certain providers.
| Service Provider Code | Action | Comment | SBC | Service Provider | Group | User | Called Country | Called Number |
|---|---|---|---|---|---|---|---|---|
| 1234 | Block | Terrible Wireless | ||||||
| 5678 | Divert | Not Trustworthy Telecom | ||||||
| 9012 | Indicate | Spammer | ||||||
| 9012 | Report Only | This number will accept SPAM | 12345678901 |
In the above example, rules were created to block all calls signed by Terrible Wireless and to divert calls signed by Not Trustworthy Telecom. Calls signed by Spammer would be indicated as SPAM, except for calls to 12345678901 which would be allowed to go through normally.
This policy is enforced after SHAKEN verification is complete, but before Reputation and CNAM lookup. Use of Verification SPC Policy does not incur any additional cost, but SHAKEN verification must be accomplished for any of these policies to take effect.
Setup
Verification SPC policies can be applied to an SBC, service provider, group, user, called country, and/or called number.
As ClearIP processes calls, it will look for a Verification SPC Policy. If only one policy matches, it will use that one. If there are multiple policies that match, it will use the one with the longest prefix match.
On the Verification SPC Policies page, there are several columns to the right of the Comment column. The columns to the right define the policy’s limiters. When a policy is chosen by ClearIP for a particular call, only one of those limiters will apply. The priority of the limiters is as follows, from highest priority to lowest:
- Called Number
- Called Country
- User
- Group
- Service Provider
- SBC
Service Provider Code
As STI Verification occurs, ClearIP will extract the Service Provider Code from the signing certificate and use that value to find the matching policy.
Action
- Report Only - The SIP INVITE is viewable on the SIP Messages page or via email reports, which the user must set up to receive. The Report Only action does not activate any additional reporting, but it prevents any other action from being taken on matching calls.
- Block - ClearIP will return a SIP 603 response.
- Divert - ClearIP will return a diversion destination in the Contact header to the SBC.
- Indicate - ClearIP will return a SPAM indicator in the SIP 302 response.
Viewing SPC Policies in SIP Messages
The SPC of the service provider that signed a call can be viewed on the SIP Messages page under the Analytics dropdown menu. Click the Columns button on the right, search for the STI Verification Service Provider Code column, and check it to display that column. The STI Verification Service Provider Code column will show the SPC of the certificate that signed the call. This Service Provider Code is what should be entered into the Verification SPC Policy rules.
Reason
If a call is blocked or diverted based on matching a policy on this page, “STI Verification SPC Policy” will be listed as the Reason.