CallShield: Secure Caller Authentication over Real-Time Audio Channels

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Rabh, Mouna, Boshmaf, Yazan, Alsabah, Mashael, Chowdhury, Shammur, Hefeeda, Mohamed, Khalil, Issa
Format: Preprint
Publié: 2026
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866912823922130944
author Rabh, Mouna
Boshmaf, Yazan
Alsabah, Mashael
Chowdhury, Shammur
Hefeeda, Mohamed
Khalil, Issa
author_facet Rabh, Mouna
Boshmaf, Yazan
Alsabah, Mashael
Chowdhury, Shammur
Hefeeda, Mohamed
Khalil, Issa
contents We present CallShield, the first caller identity authentication system that operates entirely at the audio layer, without relying on speech transcription, internet connectivity, or trusted infrastructure. CallShield introduces a real-time neural watermarking technique that enables per-bit embedding and recovery within 40-millisecond frames of live 8 kHz speech. This capability allows CallShield to transform the real-time audio channel into a noisy serial communication medium. To ensure reliable data transmission, CallShield implements a low-bitrate data link protocol that provides basic frame synchronization along with error detection, correction, and recovery. For caller authentication, CallShield adopts a secure and lightweight symmetric-key protocol that relies on pairwise shared secrets among trusted contacts. The system completes the full authentication process in an average of 63 seconds, including up to three retransmission attempts, making it suitable for real-time deployment. Extensive experiments under realistic telephony conditions demonstrate that CallShield achieves an overall authentication success rates exceeding 99.2% on clean audio and over 95% under common distortions, aided by selective retransmission of failed messages. Additionally, CallShield maintains high audio quality, achieving PESQ scores above 4.2 and STOI scores above 0.94 on clean speech, and exhibits robustness across a wide range of channel distortions, validating its practical viability for secure, real-time caller authentication.
format Preprint
id arxiv_https___arxiv_org_abs_2601_09327
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle CallShield: Secure Caller Authentication over Real-Time Audio Channels
Rabh, Mouna
Boshmaf, Yazan
Alsabah, Mashael
Chowdhury, Shammur
Hefeeda, Mohamed
Khalil, Issa
Cryptography and Security
We present CallShield, the first caller identity authentication system that operates entirely at the audio layer, without relying on speech transcription, internet connectivity, or trusted infrastructure. CallShield introduces a real-time neural watermarking technique that enables per-bit embedding and recovery within 40-millisecond frames of live 8 kHz speech. This capability allows CallShield to transform the real-time audio channel into a noisy serial communication medium. To ensure reliable data transmission, CallShield implements a low-bitrate data link protocol that provides basic frame synchronization along with error detection, correction, and recovery. For caller authentication, CallShield adopts a secure and lightweight symmetric-key protocol that relies on pairwise shared secrets among trusted contacts. The system completes the full authentication process in an average of 63 seconds, including up to three retransmission attempts, making it suitable for real-time deployment. Extensive experiments under realistic telephony conditions demonstrate that CallShield achieves an overall authentication success rates exceeding 99.2% on clean audio and over 95% under common distortions, aided by selective retransmission of failed messages. Additionally, CallShield maintains high audio quality, achieving PESQ scores above 4.2 and STOI scores above 0.94 on clean speech, and exhibits robustness across a wide range of channel distortions, validating its practical viability for secure, real-time caller authentication.
title CallShield: Secure Caller Authentication over Real-Time Audio Channels
topic Cryptography and Security
url https://arxiv.org/abs/2601.09327