Authorization Before the Ring: Recipient-Controlled, Pre-Delivery Capability Enforcement Relevant to Nokia and Orange Networks for Anti-Spam Voice/SMS/Email, Agentic Network APIs, AI-RAN, 6G and Satellite Direct-to-Device

Phone numbers, SIP URIs and email addresses are open doors: anyone who obtains one can attempt contact. STIR/SHAKEN authenticates the caller but does not decide whether that caller may reach a given person, so correctly signed spam and scam calls still ring. The disclosed architecture adds this missing authorization layer. The recipient’s own secure hardware (SIM/eSIM, eSE, TEE or network HSM) issues a non-routable, non-bearer capability handle. The handle is cryptographically bound to one sender key, a purpose, a time window, a consumable quota, a jurisdiction and a revocation state. A gateway enforcement point (SBC, IMS P-CSCF, SMS firewall, inbound MTA, AMF paging logic, RAN controller or satellite gateway) resolves the handle only through a protected enforcement domain. It validates every constraint before any ringing, paging, alerting, mailbox acceptance or session state occurs. The decision is fail-closed, and a signed validation receipt is committed before every allow or deny. The same pre-effect gate extends to several other areas: AI-agent calls to network APIs (CAMARA, MCP, A2A) AI-native RAN, slice and core actions Latency-bounded URLLC fast paths, with slow-plane signing and microsecond hardware-adjacent checks Silicon execution-envelope verification on GPUs and NPUs Sovereignty-bound cross-border routing LEO/NTN and direct-to-device beam jurisdiction continuity Optical inter-satellite links ISAC sensing release Ambient IoT, reconfigurable intelligent surfaces, radio wake-up/paging and network energy budgets Offline CBDC payments over satellite The disclosure includes pseudocode, indicative latency budgets, threat models (STRIDE), implementation variations and mappings to 3GPP Release 20/21 and IMT-2030. Industry relevance: Orange: Cybersecure anti-scam protection, LiveNet CAMARA APIs, direct-to-device satellite trials, RAN digital twin. Huawei: AI-Centric Network, Agentic Core, Agentic Communication Network, satellite-ground integration. Qualcomm: AI-native 6G with wide-area sensing, Snapdragon modems and secure elements as on-device issuers, agentic devices. NVIDIA: Aerial AI-RAN and accelerated computing for per-output silicon finality. Deutsche Telekom: AI-RAN and 6G platform commitments, network APIs, satellite coverage. Nokia: Network as Code and Network Exposure Platform with agentic AI, AI-native RAN on accelerated computing, 6G AI-native air interface research. Disclaimer: This document is an AI-generated summarization of the original patent disclosures. The industry and product-line relevance described here is an AI-generated alignment based only on public announcements. It is not an endorsement, partnership, licence, sponsorship or affiliation with Orange, Huawei, Qualcomm, NVIDIA, Deutsche Telekom, Nokia or any other company. It does not state or imply that any company uses, needs, has evaluated or infringes this invention. All company and product names are trademarks of their respective owners and are used only to describe technical relevance. Readers must read the original filings, PCT/IB2026/054453 and PCT/IB2026/055615, before drawing any conclusion. The inventor is open to strategic collaboration or acquihire discussions. Keywords STIR/SHAKEN, robocall prevention, anti-spam, scam call blocking, recipient authorization, capability-based security, non-bearer token, proof of possession, SBC, IMS, SMS firewall, SMTP, CAMARA, GSMA Open Gateway, network exposure, MCP, A2A, agentic AI, AI-RAN, O-RAN, URLLC, 6G, IMT-2030, 3GPP Release 21, NTN, direct-to-device, LEO satellite, optical inter-satellite link, ISAC, ambient IoT, RIS, paging, network energy saving, TEE, HSM, SIM, eSIM, fail-closed, CBDC, Orange, Huawei, Qualcomm, NVIDIA, Deutsche Telekom, Nokia