Federal Register #WC Docket No. 17-97; CG Docket No. 17-59; FCC 26-32; FR ID 355060

FCC Proposed Rule: Enhanced Robocall Mitigation and Caller ID Authentication Requirements

The Federal Communications Commission (FCC) is proposing new rules to strengthen robocall mitigation and caller ID authentication for all voice service providers. - Government Buyer: - Federal Communications Commission (FCC) - OEMs and Vendors: - No specific OEMs or commercial vendors are named; requirements apply to all voice service providers and the STIR/SHAKEN Governance Authority - Products/Services Requested: - Enhanced Know-Your-Upstream-Provider (KYUP) compliance and monitoring services - Providers must collect, verify, and monitor information about upstream providers - Must take responsive actions, including refusing or discontinuing service to noncompliant or bad-actor upstream providers - Implementation and enforcement of the STIR/SHAKEN caller ID authentication framework - Providers must obtain SPC tokens, authenticate calls with proper attestation, and ensure intermediate providers authenticate unauthenticated calls - Expanded oversight and enforcement by the STIR/SHAKEN Governance Authority - Authority to issue/revoke SPC tokens, select/remove Certification Authorities, and report enforcement activities - Call blocking and routing requirements - Prohibition on intentionally routing calls over non-IP networks when IP is available - Requirement to block unauthenticated SIP calls (with emergency call exceptions) - Obligation to reauthenticate calls if authentication information is stripped for technical reasons - Unique or Notable Requirements: - Applies to all voice service providers, including both facilities-based and non-facilities-based - New definitions for provider roles and attestation standards - Special provisions for foreign-originated calls and closing implementation loopholes - No specific products, part numbers, or quantities are listed; the focus is on regulatory and operational compliance

Description

The Federal Communications Commission proposes to strengthen its robocall mitigation framework by enhancing Know-Your-Upstream-Provider (KYUP) requirements, improving oversight of voice service providers by the STIR/SHAKEN Governance Authority, raising caller ID attestation standards, and closing implementation gaps in STIR/SHAKEN implementation. The proposal includes establishing baseline KYUP information-collection, compliance review, verification, monitoring, and responsive-action requirements to identify and cut off bad-actor upstream providers. It also seeks to expand the Governance Authority's vetting, enforcement, and reporting responsibilities to prevent misuse of STIR/SHAKEN certificates and remove noncompliant providers. Additional steps to close caller ID authentication gaps and address special circumstances such as foreign-originated calls are also proposed.

View original listing