Abstract
A security operations platform escalates a high-severity incident by placing an automated voice call to a customer contact, during which the contact may authorize a containment action that is approved not on the phone but on an authenticated out-of-band client (a messaging client the contact is already signed into on their own device). The authorization is bound to the call by a correlation token: a per-call code is generated, spoken by the automated agent and displayed on the approval surface, and the approving identity on the out-of-band client must match the contact resolved from the dialed number. The paused containment action resumes only on a validated approval. The disclosure also covers the supporting mechanisms: a disclosure-gated reached-versus-voicemail detection, and an approval-card state machine whose only machine-actionable payload is an opaque request identifier, with customer-truth validation at intake and first-decision-wins claiming.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Recommended Citation
AlpenShield GmbH, "Cross-Channel Authorization of Security Mitigations: Voice Escalation Bound to an Authenticated Out-of-Band Approval Surface", Technical Disclosure Commons, ()
https://www.tdcommons.org/dpubs_series/11430