CN102075639A - Method and device for intercepting malicious call in international service communication network - Google Patents

Method and device for intercepting malicious call in international service communication network Download PDF

Info

Publication number
CN102075639A
CN102075639A CN2009101996555A CN200910199655A CN102075639A CN 102075639 A CN102075639 A CN 102075639A CN 2009101996555 A CN2009101996555 A CN 2009101996555A CN 200910199655 A CN200910199655 A CN 200910199655A CN 102075639 A CN102075639 A CN 102075639A
Authority
CN
China
Prior art keywords
communicating number
malicious call
signaling
call type
setting
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN2009101996555A
Other languages
Chinese (zh)
Inventor
顾杰
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Mobile Group Shanghai Co Ltd
Original Assignee
China Mobile Group Shanghai Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Mobile Group Shanghai Co Ltd filed Critical China Mobile Group Shanghai Co Ltd
Priority to CN2009101996555A priority Critical patent/CN102075639A/en
Publication of CN102075639A publication Critical patent/CN102075639A/en
Pending legal-status Critical Current

Links

Images

Landscapes

  • Monitoring And Testing Of Exchanges (AREA)

Abstract

The invention discloses a method and a device for intercepting a malicious call in an international service communication network. The main technical scheme comprises the following steps of: extracting a signaling corresponding to a set field from a signaling platform of an international service signaling convergence system according to the set field; analyzing the extracted signaling, determining a communication number which meets setting malicious call characteristic parameters; according to the signaling corresponding to the determined communication number, determining a malicious call type corresponding to a call generated by the communication number; and according to an interception measure corresponding to the malicious call type, performing interception on the call generated by the communication number. By using the technical scheme, the efficiency and the real-time of malicious call number analysis are improved; and operation complexity is reduced.

Description

The hold-up interception method and the device of malicious call in a kind of international business communication network
Technical field
The present invention relates to field of information security technology, relate in particular to the hold-up interception method and the device of malicious call in a kind of international business communication network.
Background technology
Along with development of Communication Technique, more and more universal based on the mode that portable terminal and fixed terminal communicate, when bringing convenience to people's lives, the phenomenon of carrying out malicious call by communication network also significantly increases.At present, the technology to the malicious call call block that carries out in the communication network mainly contains following several:
1, by being set, tackles by special equipment, for example: between gateway exchange, tandem exchange, toll switch, set up special equipment, gather, analyze signalling system No.7 information, to be used for interception, to filter calling lack of standardization at particular number;
2, black and white lists is set and carries out Call Intercept on gateway exchange, toll switch;
3, carry out intelligent trigger at gateway exchange and carry out Call Intercept.
Development along with international business, the international business communication network shows more and more higher processing demands to malicious call, though the treatment technology to malicious call is comparatively ripe in the communication network at present, there is following intrinsic shortcoming in the malicious call call block technology in the communication network:
Can only indivedual particular numbers be set by the user, can not intelligence be judged and interception by universal number;
The promptness of interception is poor, can not set up the malicious call characteristic model, can't in time screen and tackle malicious call;
Adopt special equipment to be connected on the telecommunication line, can't satisfy big call volume phone judgement of carrier class and interception and have network security risk;
Need newly-increased interception equipment, increase investment burden;
A kind of prior art proposes the malicious call call block technology of carrying out in the above-mentioned communication network is applied to international business malicious call interception.But obviously exhale, prohibit and exhale setting, will influence the normal international call business of certain customers, therefore, improve operation such as international call transfer service threshold the effect of restriction malicious call behavior is still waiting to observe by limit.
Another kind of prior art proposes on international telephone traffic transfer point international malicious call to be handled, concrete know-why comprises: screen according to the charging center ticket, discovery has high clearing direction malicious owing fee situation, carries out this direction limit and exhale or prohibit and exhale on international office; Carry out the complicate statistics analysis in later stage by the Signaling System Number 7 centralized monitoring system, can show the called number of a large amount of numbers of calls or the high duration of call intuitively, can pass through the concrete call signalling flow of correlation inquiry, judge the original called party number ownership or determine according to concrete number whether this number is the malicious call number really.This malicious call interception technology that adopts in the international business communication network only can realize simple malicious call interception, but shortcoming is: charging bill screening or the technology of analyzing by the complicate statistics that the Signaling System Number 7 centralized monitoring system is carried out the later stage, lag behind the time of origin of malicious call behavior in time, real-time is poor; And for international calling, when finding that calling number does not meet standard, same caller incoming international call number of times surpasses thresholding, and continues for some time that call volume do not fall as follows, manually gets in touch the international calling switching of higher level merchant and tackles; Corresponding international outgoing, if called be high clearing countries, make this direction at international office and limit and exhale, prohibit and exhale data, therefore, operating procedure is tediously long, can not be in time, effectively malicious call is tackled.
In sum, the interception inefficiency of the malicious call interception technology of international business communication network employing at present, real-time is poor.
Summary of the invention
In view of this, the embodiment of the invention provides the hold-up interception method and the device of malicious call in a kind of international business communication network, is used to solve the interception inefficiency of the malicious call interception technology that has the employing of international business communication network now, the problem of real-time difference.
The embodiment of the invention is achieved through the following technical solutions:
According to an aspect of the embodiment of the invention, provide the hold-up interception method of malicious call in a kind of international business communication network.
The hold-up interception method of malicious call in the international business communication network that provides according to the embodiment of the invention comprises:
Extract and the signaling of setting fields match from the signaling platform of international business signaling collective system;
The described signaling of extracting is resolved, determine to satisfy the communicating number of setting the malicious call characteristic parameter;
According to malicious call type corresponding and the interception measure corresponding, intercept process is carried out in the calling that described communicating number produces with described malicious call type with the described communicating number of determining.
According to another aspect of the embodiment of the invention, also provide the blocking apparatus of malicious call in a kind of international business communication network.
The blocking apparatus of malicious call in the international business communication network that provides according to the embodiment of the invention comprises:
The signaling extraction unit is used for extracting and the signaling of setting fields match from the signaling platform of international business signaling collective system;
The communicating number determining unit is used for the described signaling of extracting is resolved, and determines to satisfy the communicating number of the malicious call characteristic parameter of setting;
Malicious call type determining unit, the malicious call type of the communicating number correspondence that is used for determining that described communicating number determining unit is determined;
The interception control unit is used for according to the malicious call type of the definite described communicating number correspondence of described malicious call type determining unit and the interception measure corresponding with described malicious call type intercept process being carried out in the calling that described communicating number produces.
Above-mentioned at least one technical scheme that provides by the embodiment of the invention, extract and the signaling of setting fields match from the signaling platform of international business signaling collective system, the signaling of extracting is resolved, determine to satisfy the communicating number of the malicious call characteristic parameter of setting; According to the malicious call type corresponding with the communicating number of determining and with the corresponding interception measure of determining of malicious call type, intercept process is carried out in the calling that this communicating number produces, according to this technical scheme, extract by signaling the signaling platform collection of signaling collective system, and carry out the call business analytic statistics according to the malicious call characteristic parameter, draw suspicious communicating number, it is tediously long to have solved complicate statistics analysis operation step, can not the timely and effective problem that malicious call is tackled, improved the efficient and the real-time of malicious call number analysis.
Other features and advantages of the present invention will be set forth in the following description, and, partly from specification, become apparent, perhaps understand by implementing the present invention.Purpose of the present invention and other advantages can realize and obtain by specifically noted structure in the specification of being write, claims and accompanying drawing.
Description of drawings
Accompanying drawing is used to provide further understanding of the present invention, and constitutes the part of specification, is used from explanation the present invention with the embodiment of the invention one, is not construed as limiting the invention.In the accompanying drawings:
The first pass figure that Fig. 1 provides for the embodiment of the invention to the malicious call interception;
Second flow chart that Fig. 2 provides for the embodiment of the invention to the malicious call interception;
The 3rd flow chart that Fig. 3 provides for the embodiment of the invention to the malicious call interception;
International telephone traffic transfer point and the flow chart of intelligent network SCP that Fig. 4 provides for the embodiment of the invention to the malicious call interception;
The blocking apparatus schematic diagram of malicious call in the international business communication network that Fig. 5 provides for the embodiment of the invention.
Embodiment
In order to provide the implementation that improves malicious call interception efficient and real-time and minimizing complicated operation degree, the embodiment of the invention provides the hold-up interception method and the device of malicious call in a kind of international business communication network, below in conjunction with Figure of description the preferred embodiments of the present invention are described, be to be understood that, preferred embodiment described herein only is used for description and interpretation the present invention, and is not used in qualification the present invention.And under the situation of not conflicting, embodiment and the feature among the embodiment among the application can make up mutually.
According to the embodiment of the invention, the hold-up interception method of malicious call in a kind of international business communication network at first is provided, as shown in Figure 1, comprising:
Step 101, extract and the corresponding signaling of this setting field according to setting the signaling platform of field from international business signaling collective system;
In this step, promptly the signaling platform from international business signaling collective system extracts and the signaling of setting fields match.
Step 102, the signaling of extracting is resolved, determine to satisfy the communicating number of the malicious call characteristic parameter of setting;
Step 103, according to and the corresponding signaling of communicating number determined, determine the malicious call type of the calling correspondence that this communicating number produces;
Step 104, according to the malicious call type of communicating number correspondence and with the corresponding interception measure of determining of malicious call type, intercept process is carried out in the calling that this communicating number produces.
Below technique scheme that the embodiment of the invention is provided make a more detailed description:
The embodiment of the invention is based on existing signaling collective system and intelligent net system, set up the characteristic model (being characteristic parameter) of international business malicious call, and, introduce the interception that intelligent trigger mechanism realizes malicious call at international telephone traffic transfer point in conjunction with the high clearing world or regional information.
According to the embodiment of the invention, at first the malicious call type of present existence to be classified, primary categories is as follows:
Malicious call type one
The malicious call of telephone expenses clearing class:
This type of malicious call main forms is that caller is the first network type user, this network type user is generally normal network users, for example common domestic network user, called is the second network type user, this network type user is generally the user of international high clearing country; Perhaps,
Caller is the first network type user, this network type user is generally normal network users, for example, domestic this network users, international incoming call or his network users of moving, called is the first network type user of calling transfer to the second network type, wherein, second network type is generally the network type of high clearing country.
The notable feature of this type of malicious call promptly by the malicious call mode to extract the international settlement expense, the calling subscriber mostly is prepaid user or the general family of the IP of enterprise.
Malicious call type two
The international malicious call similar with domestic malicious call type:
1, international calling malicious call, for example, from the virtual main call number of first network type overseas (02310086,02110086,020110 etc.), call out the user of domestic second network type, the second network type user is caused harassing and wrecking, reduce user's perceptibility, influence corporate image;
2, international outgoing malicious call for example, is not purpose with the connection, induces the swindle class malicious call of called subscriber's callback etc.
In the embodiment of the invention, carried out aforesaid simple classification for the malicious call type, in the practical application, related malicious call type is more versatile and flexible, does not enumerate one by one herein.According to the technical scheme that the embodiment of the invention provides, can determine that the characteristic of correspondence parameter is to tackle by analyzing the feature of all kinds of malicious calls.
According to the embodiment of the invention,, determine the characteristic of correspondence parameter according to the feature of different malicious call types.Particularly, at different malicious call types, corresponding calling parameter comprises the number of calls and two parameters of the duration of call at least, makes a concrete analysis of as follows:
1, the number of calls in the setting-up time section:
For the second class malicious call type, for example, inveigle the malicious call of called subscriber's clawback, malicious call is most for not taking on the telephone, therefore can't adopt the ticket screening, can calculate in one day the normal users maximum according to the average connecting time of network (for example, being generally 12 seconds at present) and dial number of times and be about: 24x3600/12=7200 time, consider the otherness of international business and domestic service and value rule of thumb, generally the malicious call inspection is promptly carried out in the calling more than N1 time/day.
This characteristic parameter is the number of calls in the setting-up time section, generally the Subscriber Number that satisfies N1 time/day above calling is tackled.
2, the duration of call of per call:
According to the empirical value that all kinds of malicious calls statistics is obtained, generally to N2 second/time more than conversation check that or check day is gathered the duration of call.
Classify the communicating number that satisfies above characteristic parameter as suspicious number, according to setting the interception of strategy execution, for example, prohibit and exhale or limit and exhale then this suspicious number.In the practical application, above characteristic parameter also can only satisfy one promptly can be listed in suspicious number.
Above characteristic parameter setting can be adjusted according to network practical operation situation and malicious call type, can also more detailed characteristic parameter be set with reference to different malicious call types, to strengthen the restriction to malicious call.
As shown in Figure 2, based on above-mentioned malicious call type and characteristic parameter, in the one embodiment of the invention, the process that malicious call is tackled comprises the steps:
Step 201, set up complete international business signaling collective system, and the international business signaling is converged to signaling platform.
Step 202, extract signaling according to the critical field of setting.
In this step, the keyword of setting comprises: signaling type, signaling time corresponding segment information, and the source of signaling or whereabouts, for example, extract the international side (signaling source) or state inboard (signaling whereabouts) of international office, ISUP (ISDN User Part, the ISDN(Integrated Service Digital Network) ISDNYong Hubufen) signaling (signaling type) that make a return journey and talk about in all worlds of (signaling time corresponding segment information) in the setting-up time section.
Step 203, the signaling that extraction is obtained are resolved, and determine the communicating number that satisfies the malicious call characteristic parameter (being characteristic model) that is provided with, and are listed as suspicious number.
In this step, the signaling that extraction obtains is resolved, promptly according to the caller communicating number, called communicating number and the duration information that comprise in the signaling of extracting, determine that each communicating number possesses in the setting-up time section with the malicious call characteristic parameter corresponding parameters of determining, according to the parameter value of determining, determine to satisfy the communicating number of malicious call characteristic parameter; More specifically, if the malicious call characteristic parameter comprises the number of calls in the setting-up time section and the duration of call of per call, the signaling that extraction obtains is resolved, promptly the record of the call signaling in the setting-up time section is carried out tabulate statistics, determine each caller or the called number number of calls and the information such as the duration of call in this time period according to the calling number in the signaling message or called party number parameter.
Step 204, according to and the corresponding signaling of communicating number determined, determine to be listed in the malicious call type of suspicious number.
In this step, in advance at dissimilar malicious calls, extract the characteristic of correspondence model, and by analyzing and the corresponding signaling of determining of communicating number, determine the feature of the calling that this communicating number produces, and mate with the characteristic model that extracts at dissimilar malicious call, determine the malicious call type of the calling correspondence that this communicating number produces according to matching result.For example:
At telephone expenses clearing class malicious call (malicious call type one), being characterized as of extraction: the international outgoing of high clearing country; At being characterized as that the international malicious call similar with domestic malicious call type (malicious call type two) extracted: call out signaling informations such as the frequency, call conversation duration and satisfy preset threshold.
The malicious call type that step 205, basis are determined is carried out and definite corresponding interception measure of malicious call type this suspicious number.
According to further embodiment of this invention, can be further screen the suspicious number of determining, the reliability of the malicious call number of determining with increase reduces the erroneous judgement of normal users number disconnected.Particularly, determine after the suspicious number, before execution in step 204, further carry out the flow process that suspicious number is confirmed again, specifically as shown in Figure 3, comprise the steps: by above-mentioned steps 203
Step 301, obtain the signaling of definite suspicious number correspondence;
The signaling that step 302, basis are obtained is determined the Content of Communication of this suspicious number;
Step 303, judge that whether Content of Communication is empty, if not, then execution in step 304, if then execution in step 307;
Step 304, according to that set and the keyword malicious call type matching, the Content of Communication of determining is carried out matching operation;
Step 305, judge whether that the match is successful, if not, execution in step 306, if, execution in step 307;
But step 306, determine this communicating number for signal code, and from suspicious list of numbers, delete;
Step 307, determine that this communicating number is the malicious call number, and enter the interception flow process.
In the above-mentioned flow process, after determining suspicious number (or malicious call number),, determine corresponding interception measure, particularly, take the measure of tackling accordingly as follows according to different malicious call types according to the malicious call type:
The interception measure of taking at malicious call type one:
Be primarily aimed at the malicious call type and possess called communicating number or call forwarding communicating number feature for the communicating number of international high clearing country, this type of malicious call is generally the international outgoing call of telephone expenses clearing class, by being monitored by the section of calling out the numbers intelligent network at international office, and when monitoring the intelligent network trigger condition that satisfies setting, triggering SCP (Service Control Point, service control point) prohibits to exhale or limit and exhales operation.
Wherein: the intelligent network trigger condition of setting can comprise:
1, call data are from first network type (for example domestic network) circuit bank of setting;
2, called number is national, the regional numbers of height clearing, and for example, called prefix is national, the regional international prefixs of high clearing.
3, the calling number in international office IDP (Initial Detection Point, the start detection point) message is identified as suspicious number (or malicious call number).
Monitor according to above-mentioned intelligent network trigger condition, after determining to satisfy above-mentioned condition, tackle malicious call in time, promptly discharge this time calling by SCP.
The interception measure of taking at malicious call type two:
(1) international outgoing
Being primarily aimed at that the malicious call type possesses is not the malicious call of purpose with the connection, and promptly call duration is less than the feature of setting duration, and:
The calling subscriber is the first network type user, then monitor by SCP, and in time when satisfying the interception condition of setting (intelligent network trigger condition), by the charge system of this calling subscriber place network this calling is prohibited to exhale or limit and exhale operation, for example, for domestic network, can forbid user's international call right by the BOSS system;
Caller is the second network type user, also can tackle the suspicious calling of determining in the local intelligence network system by the interception condition of setting (intelligent network trigger condition).
(2) international calling
Be primarily aimed at the feature that the malicious call type possesses virtual main call number, malice incoming international call, can monitor, and when monitoring the intelligent network trigger condition of satisfy setting, trigger SCP and prohibit and exhale operation at the international office master section of calling out the numbers intelligent network.
Wherein, the intelligent network trigger condition of setting comprises:
1, call data are from second network type (for example international network) circuit bank of setting;
2, the false number (for example 02110086,8621110 grade be evident as the calling number of domestic public service number) of calling number for setting.
Monitor according to above-mentioned intelligent network trigger condition, after determining to satisfy above-mentioned condition, tackle malicious call in time, promptly discharge this time calling by SCP.
Below in conjunction with concrete application, the interaction flow when malicious call (malicious call type one) promptly takes place between international telephone traffic transfer point and the intelligent network SCP describes, and as shown in Figure 4, comprises the steps:
Step 401, toll tandem office are forwarded to international telephone traffic transfer point (as ISC/SSP) with the international long-distance outgoing call by IAM message.
Step 402, if called number belongs to the international prefix section of high clearing country, international telephone traffic transfer point triggers professional according to called prefix, (comprise calling﹠amp to SCP transmission IDP message; Callednumber, i.e. numbers of calling and called parties information).
Step 403, dial this height clearing direction (promptly being listed in suspicious number) if this calling number has been under an embargo, SCP issues release (RELEASE) message by international telephone traffic transfer point to toll tandem office, discharges this time calling, finishes interception.
In the above-mentioned flow process, if being under an embargo, this calling number do not dial this height clearing direction (but the signal code of being), SCP issues request report BCSM (Basic Call State Model BCSM) incident (RRBE)/Apply Charging (AC)/continuation (CONTINUE) message to international telephone traffic transfer point, allows to call out and proceeds.
Corresponding with above-mentioned flow process, the embodiment of the invention also provides the blocking apparatus of malicious call in a kind of international business communication network, and as shown in Figure 5, this device comprises:
Signaling extraction unit 501, communicating number determining unit 502, malicious call type determining unit 503 and interception control unit 504;
Wherein:
Signaling extraction unit 501 is used for extracting and the signaling of setting fields match from the signaling platform of international business signaling collective system;
Communicating number determining unit 502 is used for the described signaling of extracting is resolved, and determines to satisfy the communicating number of the malicious call characteristic parameter of setting;
Malicious call type determining unit 503, the malicious call type of the communicating number correspondence that is used for determining that described communicating number determining unit is determined;
Interception control unit 504 is used for according to the malicious call type of the definite described communicating number correspondence of described malicious call type determining unit and the interception measure corresponding with described malicious call type intercept process being carried out in the calling that described communicating number produces.
Further, in the one embodiment of the invention, communicating number determining unit 502 specifically is used for:
According to the caller communicating number, called communicating number and the duration information that comprise in the described signaling of extracting, determine each communicating number in the setting-up time section with the corresponding information of setting of malicious call characteristic parameter;
The malicious call characteristic parameter corresponding parameters that possesses in the setting-up time section according to each communicating number with set according to the described parameter value of determining, determines to satisfy the communicating number of described malicious call characteristic parameter.
Further, in the one embodiment of the invention, malicious call type determining unit 503 specifically is used for:
According to the corresponding signaling of determining of described communicating number, determine the calling characteristic of correspondence that described communicating number produces;
Described communicating number characteristic of correspondence and the characteristic model that extracts at dissimilar malicious calls are in advance mated, determine the malicious call type of described communicating number correspondence according to matching result.
Further, in the one embodiment of the invention, interception control unit 504 specifically is used for:
If the malicious call type of described communicating number correspondence possesses called communicating number or the call forwarding communicating number is international high feature of settling accounts the communicating number of country, then controlling international office is monitored described communicating number by the section of calling out the numbers intelligent network, when first trigger condition of satisfy setting, trigger the service control point (SCP) and described communicating number is prohibited to exhale or limit exhale operation;
If the malicious call type of described communicating number correspondence possesses the feature that the caller communicating number is the virtual communication number, then controlling the international office master section of calling out the numbers intelligent network monitors described communicating number, when second trigger condition of satisfy setting, trigger SCP and described communicating number is prohibited to exhale or limit exhale operation;
If the malicious call type of described communicating number correspondence possesses the call duration of caller communicating number correspondence less than the feature of setting duration, then controlling SCP monitors described communicating number, when the 3rd trigger condition of satisfy setting, the charge system that triggers described communicating number place network is prohibited to exhale or limit to described communicating number and is exhaled operation.
Further, in the one embodiment of the invention, interception control unit 504 also is used for:
According to malicious call type corresponding and the interception measure corresponding with described malicious call type with the described communicating number of determining, the calling that described communicating number is produced is carried out determining that the malicious call type keyword of Content of Communication corresponding with described communicating number and setting mates before the intercept process.
Be to be understood that, the function that the blocking apparatus of the malicious call that this embodiment provides is realized is corresponding one by one with the hold-up interception method flow process of the malicious call that the foregoing description provides, install the more detailed handling process that each functional unit is realized for this, in said method embodiment, done detailed description, be not described in detail herein.
Above-mentioned at least one technical scheme that provides by the embodiment of the invention, extract and the signaling of setting fields match from the signaling platform of international business signaling collective system, the signaling of extracting is resolved, determine to satisfy the communicating number of the malicious call characteristic parameter of setting; According to the malicious call type corresponding with the communicating number of determining and with the corresponding interception measure of determining of malicious call type, intercept process is carried out in the calling that this communicating number produces, according to this technical scheme, extract by signaling the signaling platform collection of signaling collective system, and carry out the call business analytic statistics according to the malicious call characteristic parameter, draw suspicious communicating number, it is tediously long to have solved complicate statistics analysis operation step, can not the timely and effective problem that malicious call is tackled, improved the efficient and the real-time of malicious call number analysis.
Further, carrying out malicious call by international telephone traffic transfer point combined with intelligent net tackles automatically, normal international traffic and malicious call effectively can be distinguished, simultaneously, utilize intelligent network to carry out the numbers of calling and called parties interception, have easy to operately, data are provided with flexible characteristic, have alleviated the data configuration complexity of international telephone traffic transfer point simultaneously.
Obviously, those skilled in the art can carry out various changes and modification to the present invention and not break away from the spirit and scope of the present invention.Like this, if of the present invention these are revised and modification belongs within the scope of claim of the present invention and equivalent technologies thereof, then the present invention also is intended to comprise these changes and modification interior.

Claims (10)

1. the hold-up interception method of malicious call in the international business communication network is characterized in that, comprising:
Extract and the signaling of setting fields match from the signaling platform of international business signaling collective system;
The described signaling of extracting is resolved, determine to satisfy the communicating number of setting the malicious call characteristic parameter;
According to malicious call type corresponding and the interception measure corresponding, intercept process is carried out in the calling that described communicating number produces with described malicious call type with the described communicating number of determining.
2. the method for claim 1 is characterized in that, the described signaling of extracting is resolved, and determines to satisfy the communicating number of the malicious call characteristic parameter of setting, and comprising:
According to the caller communicating number, called communicating number and the duration information that comprise in the described signaling of extracting, determine that each communicating number possesses in the setting-up time section with the malicious call characteristic parameter corresponding parameters value of setting;
According to the described parameter value of determining, determine to satisfy the communicating number of described malicious call characteristic parameter.
3. the method for claim 1 is characterized in that, definite process of the malicious call type of described communicating number correspondence comprises:
According to the signaling corresponding, determine the calling characteristic of correspondence that described communicating number produces with described communicating number;
Described communicating number characteristic of correspondence and the characteristic model that extracts at dissimilar malicious calls are in advance mated, determine the malicious call type of described communicating number correspondence according to matching result.
4. the method for claim 1 is characterized in that, according to malicious call type corresponding with the described communicating number of determining and the interception measure corresponding with described malicious call type, intercept process is carried out in the calling that described communicating number produces, and comprising:
If the malicious call type of described communicating number correspondence possesses called communicating number or the call forwarding communicating number is international high feature of settling accounts the communicating number of country, then by the section of calling out the numbers intelligent network described communicating number is monitored by international office, when first trigger condition of satisfy setting, trigger the service control point (SCP) and described communicating number is prohibited to exhale or limit exhale operation;
If the malicious call type of described communicating number correspondence possesses the feature that the caller communicating number is the virtual communication number, then described communicating number is monitored by the international office master section of calling out the numbers intelligent network, when second trigger condition of satisfy setting, trigger SCP and described communicating number is prohibited to exhale or limit exhale operation;
If the malicious call type of described communicating number correspondence possesses the call duration of caller communicating number correspondence less than the feature of setting duration, then described communicating number is monitored by SCP, when the 3rd trigger condition of satisfy setting, the charge system that triggers described communicating number place network is prohibited to exhale or limit to described communicating number and is exhaled operation.
5. as each described method of claim 1 to 4, it is characterized in that, according to malicious call type corresponding with the described communicating number of determining and the interception measure corresponding with described malicious call type, the calling that described communicating number is produced is carried out also comprising before the intercept process:
Determine the malicious call type keyword coupling of Content of Communication corresponding and setting with described communicating number.
6. the blocking apparatus of malicious call in the international business communication network is characterized in that, comprising:
The signaling extraction unit is used for extracting and the signaling of setting fields match from the signaling platform of international business signaling collective system;
The communicating number determining unit is used for the described signaling of extracting is resolved, and determines to satisfy the communicating number of the malicious call characteristic parameter of setting;
Malicious call type determining unit, the malicious call type of the communicating number correspondence that is used for determining that described communicating number determining unit is determined;
The interception control unit is used for according to the malicious call type of the definite described communicating number correspondence of described malicious call type determining unit and the interception measure corresponding with described malicious call type intercept process being carried out in the calling that described communicating number produces.
7. device as claimed in claim 6 is characterized in that, described communicating number determining unit specifically is used for:
According to the caller communicating number, called communicating number and the duration information that comprise in the described signaling of extracting, determine that each communicating number possesses in the setting-up time section with the malicious call characteristic parameter corresponding parameters value of setting;
According to the described parameter value of determining, determine to satisfy the communicating number of described malicious call characteristic parameter.
8. device as claimed in claim 6 is characterized in that, described malicious call type determining unit specifically is used for:
According to the signaling corresponding, determine the calling characteristic of correspondence that described communicating number produces with described communicating number;
Described communicating number characteristic of correspondence and the characteristic model that extracts at dissimilar malicious calls are in advance mated, determine the malicious call type of described communicating number correspondence according to matching result.
9. device as claimed in claim 6 is characterized in that, described interception control unit specifically is used for:
If the malicious call type of described communicating number correspondence possesses called communicating number or the call forwarding communicating number is international high feature of settling accounts the communicating number of country, then controlling international office is monitored described communicating number by the section of calling out the numbers intelligent network, when first trigger condition of satisfy setting, trigger the service control point (SCP) and described communicating number is prohibited to exhale or limit exhale operation;
If the malicious call type of described communicating number correspondence possesses the feature that the caller communicating number is the virtual communication number, then controlling the international office master section of calling out the numbers intelligent network monitors described communicating number, when second trigger condition of satisfy setting, trigger SCP and described communicating number is prohibited to exhale or limit exhale operation;
If the malicious call type of described communicating number correspondence possesses the call duration of caller communicating number correspondence less than the feature of setting duration, then controlling SCP monitors described communicating number, when the 3rd trigger condition of satisfy setting, the charge system that triggers described communicating number place network is prohibited to exhale or limit to described communicating number and is exhaled operation.
10. as each described device of claim 6 to 9, it is characterized in that described interception control unit also is used for:
According to malicious call type corresponding and the interception measure corresponding with described malicious call type with the described communicating number of determining, the calling that described communicating number is produced is carried out determining that the malicious call type keyword of Content of Communication corresponding with described communicating number and setting mates before the intercept process.
CN2009101996555A 2009-11-24 2009-11-24 Method and device for intercepting malicious call in international service communication network Pending CN102075639A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2009101996555A CN102075639A (en) 2009-11-24 2009-11-24 Method and device for intercepting malicious call in international service communication network

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2009101996555A CN102075639A (en) 2009-11-24 2009-11-24 Method and device for intercepting malicious call in international service communication network

Publications (1)

Publication Number Publication Date
CN102075639A true CN102075639A (en) 2011-05-25

Family

ID=44033976

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2009101996555A Pending CN102075639A (en) 2009-11-24 2009-11-24 Method and device for intercepting malicious call in international service communication network

Country Status (1)

Country Link
CN (1) CN102075639A (en)

Cited By (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102572124A (en) * 2011-12-16 2012-07-11 西安大唐电信有限公司 Method and system for preventing telecommunication fraud by using No.7 signaling message of switch
WO2013155655A1 (en) * 2012-04-16 2013-10-24 中信国际电讯集团有限公司 Communication control system and communication control method
CN104253907A (en) * 2013-06-28 2014-12-31 中国移动通信集团重庆有限公司 Method and device for detecting callback service
CN107948451A (en) * 2017-11-24 2018-04-20 广州汇智通信技术有限公司 A kind of anti-telecommunication fraud method, apparatus, equipment and storage medium
CN108259688A (en) * 2016-12-28 2018-07-06 广东世纪网通信设备股份有限公司 VoIP platforms telephone fraud behavioral value method, apparatus and detecting system
CN108881648A (en) * 2018-05-29 2018-11-23 维沃移动通信有限公司 A kind of number hold-up interception method and terminal
CN109428976A (en) * 2017-08-31 2019-03-05 中国移动通信集团公司 A kind of method, gateway exchange and platform intercepting malicious call
CN109600524A (en) * 2018-10-24 2019-04-09 深圳市万屏时代科技有限公司 A kind of automatic dial method
CN109819089A (en) * 2017-11-21 2019-05-28 中国移动通信集团广东有限公司 Method, core network element, electronic equipment and the storage medium of voiceprint extraction
CN111083294A (en) * 2018-10-19 2020-04-28 中国移动通信集团有限公司 Communication control method, management and control platform, control equipment and storage medium
CN111200583A (en) * 2018-11-19 2020-05-26 中国移动通信集团安徽有限公司 Crank call processing method, device, equipment and medium
CN111246019A (en) * 2020-01-13 2020-06-05 支付宝(杭州)信息技术有限公司 Network telephone number identification method, device, equipment and medium
CN111294466A (en) * 2018-12-06 2020-06-16 中国移动通信集团安徽有限公司 Illegal call identification method, device, equipment and medium

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101340690A (en) * 2008-08-12 2009-01-07 中国移动通信集团江苏有限公司 Real-time monitoring and catching method for false calling number
CN101453520A (en) * 2007-11-30 2009-06-10 上海粱江通信系统有限公司 System and method for detecting and blocking disturbance call
CN101472008A (en) * 2007-12-28 2009-07-01 中国移动通信集团公司 Method and corresponding system for identifying and controlling disturbance telephone
CN101771757A (en) * 2008-12-30 2010-07-07 上海粱江通信系统股份有限公司 Method for detecting and intercepting nuisance calls

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101453520A (en) * 2007-11-30 2009-06-10 上海粱江通信系统有限公司 System and method for detecting and blocking disturbance call
CN101472008A (en) * 2007-12-28 2009-07-01 中国移动通信集团公司 Method and corresponding system for identifying and controlling disturbance telephone
CN101340690A (en) * 2008-08-12 2009-01-07 中国移动通信集团江苏有限公司 Real-time monitoring and catching method for false calling number
CN101771757A (en) * 2008-12-30 2010-07-07 上海粱江通信系统股份有限公司 Method for detecting and intercepting nuisance calls

Cited By (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102572124B (en) * 2011-12-16 2015-04-15 西安大唐电信有限公司 Method and system for preventing telecommunication fraud by using No.7 signaling message of switch
CN102572124A (en) * 2011-12-16 2012-07-11 西安大唐电信有限公司 Method and system for preventing telecommunication fraud by using No.7 signaling message of switch
WO2013155655A1 (en) * 2012-04-16 2013-10-24 中信国际电讯集团有限公司 Communication control system and communication control method
CN103650468A (en) * 2012-04-16 2014-03-19 中信国际电讯集团有限公司 Communication control system and communication control method
CN103650468B (en) * 2012-04-16 2016-03-16 中信国际电讯集团有限公司 Communication control system and communication control method
EP2866428A4 (en) * 2012-04-16 2016-03-16 Citic Telecom Internat Holdings Ltd Communication control system and communication control method
CN104253907A (en) * 2013-06-28 2014-12-31 中国移动通信集团重庆有限公司 Method and device for detecting callback service
CN108259688A (en) * 2016-12-28 2018-07-06 广东世纪网通信设备股份有限公司 VoIP platforms telephone fraud behavioral value method, apparatus and detecting system
CN109428976A (en) * 2017-08-31 2019-03-05 中国移动通信集团公司 A kind of method, gateway exchange and platform intercepting malicious call
CN109428976B (en) * 2017-08-31 2021-06-11 中国移动通信集团公司 Method, gateway and platform for intercepting malicious call
CN109819089A (en) * 2017-11-21 2019-05-28 中国移动通信集团广东有限公司 Method, core network element, electronic equipment and the storage medium of voiceprint extraction
CN107948451A (en) * 2017-11-24 2018-04-20 广州汇智通信技术有限公司 A kind of anti-telecommunication fraud method, apparatus, equipment and storage medium
CN108881648A (en) * 2018-05-29 2018-11-23 维沃移动通信有限公司 A kind of number hold-up interception method and terminal
CN108881648B (en) * 2018-05-29 2021-04-13 维沃移动通信有限公司 Number interception method and terminal
CN111083294A (en) * 2018-10-19 2020-04-28 中国移动通信集团有限公司 Communication control method, management and control platform, control equipment and storage medium
CN109600524A (en) * 2018-10-24 2019-04-09 深圳市万屏时代科技有限公司 A kind of automatic dial method
CN111200583A (en) * 2018-11-19 2020-05-26 中国移动通信集团安徽有限公司 Crank call processing method, device, equipment and medium
CN111294466A (en) * 2018-12-06 2020-06-16 中国移动通信集团安徽有限公司 Illegal call identification method, device, equipment and medium
CN111294466B (en) * 2018-12-06 2021-07-16 中国移动通信集团安徽有限公司 Illegal call identification method, device, equipment and medium
CN111246019A (en) * 2020-01-13 2020-06-05 支付宝(杭州)信息技术有限公司 Network telephone number identification method, device, equipment and medium

Similar Documents

Publication Publication Date Title
CN102075639A (en) Method and device for intercepting malicious call in international service communication network
CN104244216B (en) The method and system of real-time blocking fraudulent call in a kind of communication process
CN100579150C (en) Method for screen selecting and catching vicious disturbing calls
CN104093153B (en) It is a kind of that the method and its system realized pseudo number call screening and intercepted are analyzed based on signalling route
CN101472008B (en) Method and corresponding system for identifying and controlling disturbance telephone
CN105611084A (en) User fraud suspiciousness degree calculation method and suspiciousness degree calculation system
CN101217820A (en) An identification system and identification method on disturbance telephone numbers
CN101472007A (en) Method and system for determining disturbance telephone
CN107770777B (en) Method for identifying recorded fraud calls
CN106506769B (en) A kind of method and system for realizing malicious call filtering using real time algorithm
CN101453522A (en) Method for non-standardized dialing service monitoring between networks
CN102892117A (en) Method and system for monitoring crank call
CN110233940A (en) It is a kind of to establish call white list library system automatically for user
CN107295491A (en) The method and system of automatic screening calling subscribe during call forwarding
CN102438243A (en) Method for identifying harassing phone call by analyzing frequency of phone call
CN101262520A (en) A terminal with suspicious call filtration function and its filtration method
CN101170829B (en) A soft switching system and method for call limit based on black and white list
CN101771757A (en) Method for detecting and intercepting nuisance calls
CN101931829A (en) Method for intercepting call from inter-province illegal calling party by using intelligent network
CN102638778A (en) System and method for monitoring internetwork junk short messages
CN101188641A (en) A communication method and system based on call leakage detection
CN101610489B (en) OCS-based implementation method of free phone service and system thereof
CN103167502A (en) Method of punishing illegal calling based on over-the-air (OTA) technology
KR20120010372A (en) Auto detecting system and method for illegal call
CN100508463C (en) Method, system and apparatus for realizing intelligent service

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C12 Rejection of a patent application after its publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20110525