Skip to main content
Beginner's Guide to STIR-SHAKEN Compliance
September 7, 2023 at 4:00 PM
stir-shaken compliance.jpg

In recent years, robocalls have become a major nuisance, plaguing phone users with spam, scams, and unsolicited communication. According to recent studies, the average American receives around four unwanted calls every day. Can you imagine how irksome that can be?

With the advancement of technology, fraudsters have found ways to manipulate the information you see on your caller ID – and that's where STIR-SHAKEN compliance comes into play. This guide will provide a user-friendly breakdown of STIR-SHAKEN, its significance, and how Prescott-Martini can help ensure your business remains compliant.

Understanding STIR-Shaken Compliance

STIR-Shaken compliance isn't just a fancy term. It stands for Secure Telephone Identity Revisited (STIR) and Signature-based Handling of Asserted information using toKENs (SHAKEN).

Quite a mouthful, right? But in essence, it's a framework designed to combat fraudulent caller ID spoofing and enhance the trustworthiness of caller information in telephone networks.

Remember those days when you'd get a call, thinking it was from your local bank, only to find out it was a scammer? That's precisely what STIR-Shaken aims to rectify. The primary goal is to ensure that calls can be authenticated and validated before reaching the recipient.

Core Components of STIR-Shaken Compliance

So, how does STIR-Shaken Compliance work? Let's break it down.

Authentication through Digital Signatures

STIR-SHAKEN compliance operates on the principle of digital signatures. When a call is made, the originating service provider signs the call with a unique digital signature. This signature is then verified by the recipient's service provider, ensuring that the call hasn't been tampered with and that the caller ID is legitimate.

Attestation Levels

To add an additional layer of transparency, STIR-SHAKEN compliance introduces attestation levels. These levels classify the degree of certainty associated with the caller's identity. There are three levels:

  • Level A — The service provider is highly confident in the accuracy of the caller's information.
  • Level B — The service provider has some degree of confidence in the accuracy of the caller's information.
  • Level C — The service provider has limited confidence in the accuracy of the caller's information.

Implementing STIR-SHAKEN Compliance

Ensuring STIR-SHAKEN compliance involves several steps:

Service Provider Adoption

Both the originating and receiving service providers need to adopt the STIR-SHAKEN framework. This collaborative effort ensures end-to-end authentication of calls.

Digital Signature Generation

The originating service provider generates a digital signature for each outgoing call, encapsulating essential call information.

Signature Verification

The receiving service provider verifies the digital signature to ascertain the authenticity of the call's origin.

Attestation

The receiving service provider assigns an attestation level to the call, reflecting their confidence in the caller's identity.

Display to Recipients

The call's attestation level is then displayed on the recipient's device, allowing them to make informed decisions about answering the call.

Who is Impacted by STIR-SHAKEN Compliance?

At its core, telecom giants are the primary entities responsible for STIR-SHAKEN compliance. But in reality, anyone with a phone feels its impact. While telecom firms bear the brunt of the responsibility for ensuring compliance, the essence of STIR-SHAKEN touches everyone.

So, it's in everyone's best interest that telecom companies diligently adhere to STIR-SHAKEN standards, even if the intricate details of compliance are squarely on the telecom industry and their security experts.

Our Comprehensive AI Fraud Monitoring Services

At Prescott-Martini, we offer advanced STIR-SHAKEN technology services tailored for telecom giants. With the introduction of the TRACED Act by the FCC, major players like AT&T and Verizon are now mandated to integrate STIR-SHAKEN call authentication tokens, a step to curb SPAM and robocalls.

As a key operator in the STIR-SHAKEN token database, Prescott-Martini equips telecom companies with the essential tools they need to align with evolving government standards.

Contact Our Team Today

For leading telecom companies, ensuring STIR-SHAKEN compliance is crucial. At Prescott-Martini, we're equipped to assist with all your compliance needs. Whether you're set to initiate or still navigating the transition, we're here to future-proof your system. Schedule an appointment today through our contact form.

Subscribe to our newsletter
Let's keep in touch!

Stay updated on our news and events! Sign up to receive our newsletter.