How to differentiate b/w mobile SMS and sms gateway SMS ?

Hi All,

I have a problem related to SMS security.

Currently i am developing an application based on SMS messages. And i have to authenticate only those SMS messages which are originated from a client's mobile phone. But if someone uses any web based sms gateway (like clickatell,smscountry,nowsms) and sends an SMS message to my application then i have to block it. Because when one uses sms gateway, he can change sms sender number to one of our clients and get illegal access to our system.
SO is there any way to differentiate a mobile originated message from a sms gateway originated message ?

If you give me some hint or idea i will be gratefull.

Muhammad Bilal Awan
Sr. Software Engineer

hi bilalawan,

my suggestion is you check the sms's message center address. this will be a teedy task but you can secure your sms' received this way. for example you can set your system to allowed smc addresses to be received and for others to be blocked/deleted or something. i have tried a few sms spoofing services out there and so far you can only spoof the sender's number but not the smc address. hope this helps

You could verify individual users via reply.