[asterisk-users] How to detect fake CallerID? (8xx?)

[Sebastian Nielsen]

Use a callback.
So when clocking in/out, they will hear a random 4 digit PIN, like "Enter
four, three, six, eight at the callback".
After they hangup, the phone will ring, and then they will have confirm with
the 4 digit PIN.

If they arent in presence: the phone at the site will ring, and the person
at site (that isn't your employee) cannot carelessly just OK it because they
haven't heard the PIN.
If they are in presence: the phone at the site will ring, and the employee
will be able to enter the PIN they just heard. If they fake the callerID or
not at the initial call, does not matter, since you have verified with a
callback.

-----Ursprungligt meddelande-----
Från: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] För Steve Edwards
Skickat: den 10 maj 2017 19:13
Till: Asterisk Users Mailing List - Non-Commercial Discussion
<asterisk-users at lists.digium.com>
Ämne: Re: [asterisk-users] How to detect fake CallerID? (8xx?)

On Wed, 10 May 2017, J Montoya or A J Stiles wrote:

> Presumably your staff carry mobile phones.  What about an app that 
> gets the ID of the cell tower to which it is connected, and passes it 
> and the SIM number in a HTTP request to a server you control?

The problem is that they are supposed to use the 'site landline' to confirm
presence -- not their cell phone with the spoofed CID.

--
Thanks in advance,
-------------------------------------------------------------------------
Steve Edwards       sedwards at sedwards.com      Voice: +1-760-468-3867 PST
             https://www.linkedin.com/in/steve-edwards-4244281

--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at:
https://community.asterisk.org/

New to Asterisk? Start here:
      https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6298 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20170510/dddba1af/attachment.bin>