STIR (Secure Telephony Identity Revisited) and SHAKEN (Signature-based Handling of Asserted information using Tokens) is a protocol and a set of methods and procedures that is used to reduce spam calls. This means that when when you're receiving a call, you can tell if it's a legitimate (signed) calling party number based on call display information. STIR/SHAKEN - referred to as S/S, has been mandated for use by Telecommunication Service Providers (TSP’s) by the FCC in the US and CRTC in Canada to reduce fraudulent robocalls and illegal phone number spoofing.
STIR/SHAKEN FAQs
What is STIR/SHAKEN?
STIR (Secure Telephony Identity Revisited) and SHAKEN (Signature-based Handling of Asserted information using Tokens) is a protocol and a set of methods and procedures that is used to sign Calling Party Calls.
Currently there are many Caller ID spoofing mechanisms, and illegitimate spoofing can evolve to evade mitigation techniques. SHAKEN is a framework that utilizes the STIR protocol to digitally sign phone calls carried on SIP Trunks with one of three “Attestations” or “Trust values”.
S/S looks at the Information provided by the Calling Party Telecommunications Carrier and its origin and determines whether it is trusted, partially trusted or not trusted at all. Assigning these designations is the responsibility of the originator of the call or the TSP, either directly or at the point the call enters its network.
Does the US Launch of STIR SHAKEN impact me?
The launch of S/S has an impact on calls originating in Canada and terminating in the U.S.. The FCC has mandated that all TSP’s in the U.S. implement S/S in their networks. They have also introduced regulations around blocking calls that are not signed by the S/S protocol.
What will happen when S/S launches in Canada?
The existing rules that the CRTC introduced around SPAM calling will be applied to calls subjected to S/S. This may increase the efficacy of the CRTC’s SPAM call blocking rules. As S/S is rolled out across all TSP’s, determinations on what will be done with unsigned calls is ongoing.
Do business customers need to do anything when STIR SHAKEN launches in Canada?
Business customers that have an IP (or SIP) connection to Shaw for their end phone equipment, should contact their Shaw sales representative to review their service contract. This will ensure that calls from your business to customers served by other phone companies in North America are unaffected by the introduction of Stir/Shaken.
What happens if business customers don’t do anything?
Business customers that have their own phone equipment and are connected to Shaw with an IP (or SIP) connection may see a reduction in the number of calls that are answered by the called customers.
How do I promote my attestation rating to ensure my calls are green checked?
Enterprise customers that are utilizing SIP as the delivery mechanism should contact their TSP to talk about updating their KYC.
What happens if someone uses my number to spoof, what do I do to fix/prevent it?
Contact your TSP.