Today's PSTN has no reliable way to verify who's really calling. Caller ID can be trivially spoofed. Anyone can claim to be anyone. This enables fraud on a massive scale.
PSTN2 Authentication
PSTN2 provides real-time authentication through direct queries. When CP1 receives a call claiming to be from a number at CP2, CP1 can ask CP2 directly: did you originate this call? CP2 responds definitively within 100 milliseconds.
The Query Flow
Here's how it works: CP1 sends a query message to CP2 with call details. CP2 checks its recent call records. If the call originated from CP2, they respond with verification. If not, they respond negative. CP1 now knows with certainty.
Porting Chain Resolution
Number porting is handled automatically. If a number has been ported from CP2 to CP3, the query follows the chain. CP2 responds ported to CP3. CP1 queries CP3. CP3 confirms or denies origination. The chain is followed transparently.
Response Time
Authentication happens in real-time, typically under 100 milliseconds. This is fast enough to happen during call setup without any noticeable delay. The user experience is seamless.
Fraud Prevention
With direct query authentication, spoofing becomes impossible. If a fraudster tries to fake caller ID, the originating CP will respond negative verification. The call can be rejected or marked as suspicious before the victim even hears it ring.
STIR SHAKEN Comparison
Unlike STIR SHAKEN which only provides attestation levels, PSTN2 provides definitive answers. STIR SHAKEN says how confident the carrier is. PSTN2 says yes or no. STIR SHAKEN requires certificates and complex infrastructure. PSTN2 uses direct messaging.
Security Considerations
All authentication queries use TLS encryption. Messages are signed to prevent tampering. Rate limiting prevents abuse. Failed authentication attempts are logged. The system is designed to be resilient against attacks.
Implementation
CPs implement a simple API endpoint for authentication queries. The endpoint checks recent originations and responds. No central database needed. No complex certificate management. Just direct queries between CPs who already know each other.
Impact
With PSTN2 authentication deployed across major carriers, fraud rates could drop by 80% or more. Victims would be protected. Fraudsters would be stopped. Trust in phone calls would be restored. All with technology available today.