<div dir="ltr">Rather than that, if you're looking for a phone solution - as part of the customer contract, install an IP phone that registers with your system (use a VPN tunnel to your phone system). Think of it like a "red-phone" hotline. You own the phone, and you physically install it and it only talks to your system via a SIP registration. That way you can confirm the physical source of the call origination, and you can control what the phone will be able to call (make a to speed dial a base-64 address - something that can't be dialed with a conventional phone line, block all other outgoing numbers). A nice side effect of this is that you give your employees/contractors a fixed and predictable way of getting in touch with management if there is a problem (just another speed-dial number).<div><br></div><div>Keep in mind that without a "Something you are" factor of authentication, people have the escape route of telling their coworker "hey log me in...". Fingerprint, hand scan, or retina reading are the most common ways to verify the presence of a live person at a fixed point.</div><div><br></div><div>It's unfortunate that you have this problem, I've seen it before though. To paraphrase Jeff Goldbloom's Dr. Malcom in Jurasic Park: "Life finds a way...". I have been shocked and amazed at the ingenuity of people to be lazy and cheat or game a system. What you are running into is the same problem we have with websites - if you don't 100% control the end to end communication and the devices, you can't trust any data coming into your system!!!</div><div><br></div><div>A common way for security patrol auditing is to install iButtons with a unique 64-bit number and a secure transaction function. A patrol or janitor would have to physically touch the read to the iButton at specified way-points for a read to occur and be logged, and the patrol or janitor turns in the reader after every shift for download and auditing.</div><div><br></div><div>-Tim</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, May 10, 2017 at 8:11 AM, Steve Edwards <span dir="ltr"><<a href="mailto:asterisk.org@sedwards.com" target="_blank">asterisk.org@sedwards.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I have a 'time and attendance' application. Think janitorial or security kind of thing where an employee goes from location to location.<br>
<br>
They're supposed to 'clock in' when they get to a site using a phone at that site to prove they're there.<br>
<br>
Some employees have discovered 'fake caller ID' services can be used to say they're on site when they are not.<br>
<br>
How can I detect a fake CallerID? The INVITE looks the same to me.<br>
<br>
If I have the employees call an 8xx number, can I ask my SIP provider to include more headers to show the real ANI? What would that service be called?<span class="HOEnZb"><font color="#888888"><br>
<br>
-- <br>
Thanks in advance,<br>
------------------------------<wbr>------------------------------<wbr>-------------<br>
Steve Edwards <a href="mailto:sedwards@sedwards.com" target="_blank">sedwards@sedwards.com</a> Voice: <a href="tel:%2B1-760-468-3867" value="+17604683867" target="_blank">+1-760-468-3867</a> PST<br>
<a href="https://www.linkedin.com/in/steve-edwards-4244281" rel="noreferrer" target="_blank">https://www.linkedin.com/in/st<wbr>eve-edwards-4244281</a><br>
<br>
-- <br>
______________________________<wbr>______________________________<wbr>_________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" rel="noreferrer" target="_blank">http://www.api-digital.com</a> --<br>
<br>
Check out the new Asterisk community forum at: <a href="https://community.asterisk.org/" rel="noreferrer" target="_blank">https://community.asterisk.org<wbr>/</a><br>
<br>
New to Asterisk? Start here:<br>
<a href="https://wiki.asterisk.org/wiki/display/AST/Getting+Started" rel="noreferrer" target="_blank">https://wiki.asterisk.org/wik<wbr>i/display/AST/Getting+Started</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" rel="noreferrer" target="_blank">http://lists.digium.com/mailma<wbr>n/listinfo/asterisk-users</a><br>
</font></span></blockquote></div><br></div>