CN104519469A

CN104519469A - SMS (short message service) charging behavior detection method, device and terminal

Info

Publication number: CN104519469A
Application number: CN201310465807.8A
Authority: CN
Inventors: 申宇; 翟征德
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2013-10-08
Filing date: 2013-10-08
Publication date: 2015-04-15
Also published as: WO2015051623A1

Abstract

The invention relates to the technical field of communication. An embodiment of the invention discloses an SMS (short message service) charging behavior detection method. The method includes that a terminal receives a short message containing an order number of a VAS (value added service) provided by a service provider, and the moment T1 when the terminal receives the short message is acquired; as the terminal to reply the short message, the moment T2 when the terminal sends the reply message is acquired; if time difference of the T1 and the T2 is less than a preset value, a malicious charging software is determined at the terminal. The embodiment of the invention further discloses a corresponding terminal. The SMS charging behavior detection method is applicable to eliminating the malicious software which charges while the terminal equipment owner unknown on the terminal equipment.

Description

Note fee suction behavioral value method, device and terminal

Technical field

The present invention relates to communication technique field, particularly relate to note fee suction behavioral value method, device and terminal.

Background technology

At present, note fee suction has become the problem that Android mobile phone user pays close attention to the most, wherein the common approach of note fee suction be when user cannot perception, by to value-added service provider (SP, ServiceProvider) send the note of order value-added service to open value-added service, right rear line is collected the charges.

Operator is in order to prevent the generation of above-mentioned situation, the precautionary measures taked are " secondary-confirmations ", as shown in Figure 1, wherein, " secondary-confirmation " refers to after carrier server receives the order value-added service note of user terminal transmission, and whether described carrier server can send user terminal described in short message prompt and confirm to order, and described user terminal only has transmission note again to determine to order, could produce order relations, generation is deducted fees.

The defect of described " secondary-confirmation " precautionary measures is: current, malice fee suction software is included in the third-party application software of a lot of Android system, when user downloads and installs described third-party application software, described malice fee suction software is also mounted on the subscriber terminal in the unwitting situation of user.Described malice fee suction software can complete described " secondary-confirmation " automatically, first, described malice fee suction software initiatively sends the note ordering value-added service to carrier server, after receiving the confirmation SMS Tip of described carrier server, described malice fee suction software can send " secondary-confirmation " note immediately automatically, whole process does not allow user participate in and perception, helps user to order its unwanted value-added service and produce to deduct fees in the unwitting situation of user.

Summary of the invention

Embodiments provide note fee suction behavioral value method, device and terminal, on sense terminals equipment, whether there is malice fee suction software, to reduce the problem that expense drawn by the malice fee suction software that existing terminal equipment exists.

First aspect, propose a kind of note fee suction behavioral value method, the method comprises: terminal receives note; When the note that described note is the order number of value-added service that carries operator and provide, described terminal obtains the moment T1 that described terminal receives described note; When described terminal pins answer short message to be sent to described note, described terminal obtains the moment T2 of described terminal described answer short message to be sent; Be less than preset value when the time difference of described moment T1 and described moment T2, then determine that described terminal exists malice fee suction software.

In conjunction with first aspect, in the implementation that the first is possible, the method also comprises: terminal described in described terminal monitoring receives or the behavior carrying the note of the order number of the value-added service that operator provides to be sent; Described when the note that described note is the order number of value-added service that carries operator and provide, described terminal obtains the moment T1 that described terminal receives described note, comprise: when the note that the note that described terminal monitoring receives to described terminal is the order number of value-added service that carries operator and provide, described terminal obtains the moment T1 that described terminal receives described note; And/or, described when described terminal pins answer short message to be sent to described note, described terminal obtains the moment T2 of described terminal described answer short message to be sent, comprise: when described terminal monitoring answer short message to be sent to described note to described terminal pins, described terminal obtains the moment T2 of described terminal described answer short message to be sent.

In conjunction with the first possible implementation of first aspect, in the implementation that the second is possible, the method also comprises: when the note that the note that described terminal monitoring receives to described terminal is the order number of value-added service that carries operator and provide, described terminal is by the note record time of reception or be updated to T1, and described note refers to that described terminal receives the moment carrying the note of the order number of the value-added service that described operator provides the time of reception; Described terminal obtains the moment T1 that described terminal receives described note: described terminal obtains the described note T1 time of reception of described terminal record or renewal; And/or, when described terminal monitoring answer short message to be sent to described note to described terminal pins, described terminal is by moment to be sent for note record or be updated to T2, and the described note moment to be sent refers to that described terminal pins is to described note to be sent moment carrying the answer short message of the order number of the value-added service that described operator provides; The moment T2 that described terminal obtains described terminal answer short message to be sent is: described terminal obtains the described note moment T2 to be sent of described terminal record or renewal.

In conjunction with the first possible implementation of first aspect or the possible implementation of the second, in the implementation that the third is possible, the note of the order number of value-added service of the note that described terminal monitoring receives to described terminal for carrying operator and providing, comprise: after described terminal receives note, described terminal traversal value added service ordering number storehouse, to judge whether the number that described note is carried is present in described value added service ordering number storehouse, the order number of value-added service of wherein said value added service ordering number storehouse for storing operator and providing, if the number that described note is carried is present in described value added service ordering number storehouse, then the note of the order number of value-added service of the described note that receives to described terminal of described terminal monitoring for carrying operator and providing.

In conjunction with the first possible implementation of first aspect to any one possible implementation in the third possible implementation, in the 4th kind of implementation, described terminal monitoring to described terminal pins to described note answer short message to be sent, comprise: the number carried when the described answer short message that described terminal is to be sent is identical with the number that the described note that described terminal receives is carried, and described number is when being present in described value added service ordering number storehouse, then described terminal monitoring to described terminal pins to described note answer short message to be sent.

In conjunction with the first possible implementation of first aspect or first aspect to any one possible implementation in the 4th kind of possible implementation, in the 5th kind of implementation, before described terminal receives note, described method also comprises: described terminal sends value added service ordering note to carrier server; Wherein, the note carrying the order number of the value-added service that operator provides that described terminal receives is the confirmation SMS Tip that described carrier server returns for the described value-added service order note that described terminal sends; The answer short message of what described terminal was to be sent the carry order number of the value-added service that operator provides is the secondary-confirmation note that described terminal pins returns the described confirmation SMS Tip that described carrier server sends.

In conjunction with the first possible implementation of first aspect or first aspect to any one possible implementation in the 5th kind of possible implementation, in the 6th kind of implementation, the method also comprises: be more than or equal to preset value when the time difference of described moment T1 and described moment T2, then described terminal completes the transmission of the described answer short message for described note.

In conjunction with the first possible implementation of first aspect or first aspect to any one possible implementation in the 6th kind of possible implementation, in the 7th kind of implementation, describedly determine that described terminal exists malice fee suction software, comprising: export information, there is malice fee suction software for the described terminal pointing out the holder of described terminal to use in described information; Or described terminal stops sending the answer short message for described note; Or, unload or point out the holder of described terminal to unload the application of carrying described malice fee suction software.

Second aspect, propose a kind of note fee suction behavioral value method, the method comprises: terminal receives note, and when the note that described note is the order number of value-added service that carries operator and provide, described terminal obtains the moment T1 that described terminal receives described note; When in the prefixed time interval of described terminal from described moment T1 for described short message sending answer short message, then determine that described terminal exists malice fee suction software.

In conjunction with second aspect, in the implementation that the first is possible, the method also comprises: terminal described in described terminal monitoring receives or sends the behavior carrying the note of the order number of the value-added service that operator provides; Described when the note that described note is the order number of value-added service that carries operator and provide, described terminal obtains the moment T1 that described terminal receives described note, comprise: when the note that the note that described terminal monitoring receives to described terminal is the order number of value-added service that carries operator and provide, described terminal obtains the moment T1 that described terminal receives described note; And/or, described when in the prefixed time interval of described terminal from described moment T1 for described short message sending answer short message, then determine that described terminal exists malice fee suction software, comprise: when in described terminal monitoring to the prefixed time interval of described terminal from described moment T1 for described short message sending answer short message, then determine that described terminal exists malice fee suction software.

In conjunction with the first possible implementation of second aspect, in the implementation that the second is possible, the method also comprises: when the note that the note that described terminal monitoring receives to described terminal is the order number of value-added service that carries operator and provide, described terminal is by the note record time of reception or be updated to T1, and described note refers to that described terminal receives the moment carrying the note of the order number of the value-added service that operator provides the time of reception; Described terminal obtains the moment T1 that described terminal receives described note: described terminal obtains the described note T1 time of reception of described terminal record or renewal.

In conjunction with the first possible implementation of second aspect or the possible implementation of the second, in the implementation that the third is possible, the note of the order number of value-added service of the note that described terminal monitoring receives to described terminal for carrying operator and providing, comprise: after described terminal receives note, described terminal traversal value added service ordering number storehouse, to judge whether the number that described note is carried is present in described value added service ordering number storehouse, the order number of value-added service of wherein said value added service ordering number storehouse for storing operator and providing, if the number that described note is carried is present in described value added service ordering number storehouse, then the note of the order number of value-added service of the described note that receives to described terminal of described terminal monitoring for carrying operator and providing.

In conjunction with the first possible implementation of second aspect to any one possible implementation in the third possible implementation, in the 4th kind of possible implementation, for described short message sending answer short message in described terminal monitoring to the prefixed time interval of described terminal from described moment T1, comprise: the number carried when the described answer short message sent in the prefixed time interval of described terminal from described moment T1 is identical with the number that the described note that described terminal receives is carried, and described number is when being present in described value added service ordering number storehouse, then in described terminal monitoring to the prefixed time interval of described terminal from described moment T1 for answer short message described in described short message sending.

In conjunction with the first possible implementation of second aspect or second aspect to any one possible implementation in the 4th kind of possible implementation, in the 5th kind of possible implementation, before described terminal receives note, described method also comprises: described terminal sends value added service ordering note to carrier server; Wherein, to be described carrier server take industry for the described increment that described terminal sends to the note carrying the order number of the value-added service that operator provides that described terminal receives orders the confirmation SMS Tip that note returns; Described terminal pins is the secondary-confirmation note that described terminal pins returns the described confirmation SMS Tip that described carrier server sends to the answer short message of described short message sending.

In conjunction with the first possible implementation of second aspect or second aspect to any one possible implementation in the 5th kind of possible implementation, in the 6th kind of possible implementation, describedly determine that described terminal exists malice fee suction software and comprises: export information, described information exists maliciously fee suction software for the described terminal pointing out the holder of described terminal to use; Or, unload or point out the holder of described terminal to unload the application of carrying described malice fee suction software.

The third aspect, proposes a kind of terminal, and this terminal comprises: receiving element, for receiving note; Transmitting element, for sending note; Acquiring unit, for when the note that the note that described receiving element receives is the order number of value-added service that carries operator and provide, obtains the moment T1 that described receiving element receives described note; And also for when described transmitting element answer short message to be sent for described note, obtain the moment T2 of described transmitting element described answer short message to be sent; Decision package, is less than preset value for the time difference as described moment T1 and described moment T2, then determine that described transmitting element exists malice fee suction software.

In conjunction with the third aspect, in the implementation that the first is possible, this terminal also comprises: monitoring unit, receives for monitoring described receiving element the behavior carrying the note of the order number of the value-added service that operator provides; And/or, also for monitoring the behavior carrying the note of the order number of the value-added service that operator provides to be sent of described transmitting element; Then described acquiring unit, during specifically for listening to note that note that described receiving element receives is the order number of value-added service that carries operator and provide when described monitoring unit, obtains the moment T1 that described receiving element receives described note; And/or, described acquiring unit is also specifically for listening to described transmitting element answer short message to be sent for described note during when described monitoring unit, obtain the moment T2 of described transmitting element described answer short message to be sent.

In conjunction with the first possible implementation of the third aspect or the third aspect, in the implementation that the second is possible, this terminal also comprises: record cell, during for listening to note that note that described receiving element receives is the order number of value-added service that carries operator and provide when described monitoring unit, note recorded or be updated to T1 the time of reception, described note refers to that described receiving element receives the moment carrying the note of the order number of the value-added service that described operator provides the time of reception; Then described acquiring unit, specifically for obtaining the described note T1 time of reception of described recording unit records or renewal; And/or, described record cell, during for listening to described transmitting element answer short message to be sent for described note when described monitoring unit, recorded in moment to be sent for note or be updated to T2, the described note moment to be sent refers to that described transmitting element is for the described note moment carrying the answer short message of the order number of the value-added service that described operator provides to be sent; Then described acquiring unit, the moment T2. to be sent of the described note specifically for obtaining described recording unit records or renewal

In conjunction with the third aspect or the first possible implementation of the third aspect or the possible implementation of the second of the third aspect, in the implementation that the third is possible, described monitoring unit, specifically for after described receiving element receives note, traversal value added service ordering number storehouse, to judge whether the number that described note is carried is present in described value added service ordering number storehouse, the order number of value-added service of wherein said value added service ordering number storehouse for storing operator and providing; If the number that described note is carried is present in described value added service ordering number storehouse, then listen to described note that described receiving element the receives note of the order number of value-added service for carrying operator and providing.

In conjunction with the first possible implementation of the third aspect to any one possible implementation in the third possible implementation of the third aspect, in the 4th kind of possible implementation, described monitoring unit, number also for carrying when described transmitting element answer short message to be sent is identical with the number that the note that described receiving element receives is carried, and described number is when being present in described value added service ordering number storehouse, then listen to described transmitting element for described note described answer short message to be sent.

In conjunction with any one possible implementation in the third aspect or the first possible implementation of the third aspect or the 4th kind of possible implementation of the third aspect, in the 5th kind of possible implementation, before described receiving element receives note, described transmitting element is also for sending value added service ordering note to carrier server; Wherein, the note carrying the order number of the value-added service that operator provides that described receiving element receives is the confirmation SMS Tip that described carrier server returns for the described value added service ordering note that described transmitting element sends; The answer short message of what described transmitting element was to be sent the carry order number of the value-added service that operator provides is the secondary-confirmation note that described transmitting element returns for the described confirmation SMS Tip that described carrier server sends.

In conjunction with any one possible implementation in the third aspect or the first possible implementation of the third aspect or the 5th kind of possible implementation of the third aspect, in the 6th kind of possible implementation, described decision package, also be more than or equal to preset value for the time difference as described moment T1 and described moment T2, then trigger the transmission that described transmitting element completes the answer short message for described note.

In conjunction with any one possible implementation in the third aspect or the first possible implementation of the third aspect or the 5th kind of possible implementation of the third aspect, in the 7th kind of possible implementation, described decision package, specifically for when the time difference of described moment T1 and described moment T2 is less than preset value, generating and export information, there is malice fee suction software for the described terminal pointing out the holder of described terminal to use in described information; Or described decision package, specifically for when the time difference of described moment T1 and described moment T2 is less than preset value, triggers described transmitting element and stops sending the answer short message for described note; Or described decision package, specifically for when the time difference of described moment T1 and described moment T2 is less than preset value, unloads or points out the holder of described terminal to unload the application of carrying described malice fee suction software.

Fourth aspect, proposes a kind of terminal, and this terminal comprises: receiving element, for receiving note; Transmitting element, for sending note; Acquiring unit, for when the note that the note that described receiving element receives is the order number of value-added service that carries operator and provide, obtains the moment T1 that described receiving element receives described note; Decision package, for when in the prefixed time interval of described transmitting element from described moment T1 for described short message sending answer short message, then determine that described terminal exists malice fee suction software.

In conjunction with fourth aspect, in the implementation that the first is possible, this terminal also comprises: monitoring unit, receives for monitoring described receiving element the behavior carrying the note of the order number of the value-added service that operator provides; Or, also send for monitoring described transmitting element the behavior carrying the note of the order number of the value-added service that operator provides; Described acquiring unit, during specifically for listening to note that note that described receiving element receives is the order number of value-added service that carries operator and provide when described monitoring unit, obtains the moment T1 that described receiving element receives described note.Described decision package, specifically for listening in the prefixed time interval of described transmitting element from described moment T1 for described short message sending answer short message when described monitoring unit, then determines that described transmitting element exists malice fee suction software.

In conjunction with the first possible implementation of fourth aspect, in the implementation that the second is possible, this terminal also comprises: record cell, during for listening to note that note that described receiving element receives is the order number of value-added service that carries operator and provide when described monitoring unit, note recorded or be updated to T1 the time of reception, described note refers to that described receiving element receives the moment carrying the note of the order number of the value-added service that described operator provides the time of reception; Then described acquiring unit, during specifically for listening to note that note that described receiving element receives is the order number of value-added service that carries operator and provide when described monitoring unit, obtain the described note T1 time of reception of described recording unit records or renewal.

In conjunction with the first possible implementation of fourth aspect or the possible implementation of the second of fourth aspect, in the implementation that the third is possible, described monitoring unit, specifically for after described receiving element receives note, traversal value added service ordering number storehouse, to judge whether the number that described note is carried is present in described value added service ordering number storehouse, the order number of value-added service of wherein said value added service ordering number storehouse for storing operator and providing; If the number that described note is carried is present in described value added service ordering number storehouse, then listen to described note that described receiving element the receives note of the order number of value-added service for carrying operator and providing.

In conjunction with the first possible implementation of fourth aspect to any one possible implementation in the third possible implementation of fourth aspect, in the 4th kind of possible implementation, described monitoring unit, number also for carrying when the described answer short message sent in the prefixed time interval of described transmitting element from described moment T1 is identical with the number that the note that described receiving element receives is carried, and described number exist with described value added service ordering number storehouse in time, then listen in the prefixed time interval of described transmitting element from described moment T1 for answer short message described in described short message sending.

In conjunction with the first possible implementation of fourth aspect or fourth aspect to any one possible implementation in the 4th kind of possible implementation of fourth aspect, in the 5th kind of possible implementation, before described receiving element receives note, described transmitting element is also for sending value added service ordering note to carrier server; Wherein, to be described carrier server take industry for the described increment that described transmitting element sends to the note carrying the order number of the value-added service that operator provides that described receiving element receives orders the confirmation SMS Tip that note returns; Described transmitting element is the secondary-confirmation note that described transmitting element returns for the described confirmation SMS Tip that described carrier server sends for the answer short message of described short message sending.

In conjunction with the first possible implementation of fourth aspect or fourth aspect to any one possible implementation in the 5th kind of possible implementation of fourth aspect, in the 6th kind of possible implementation, described decision package is specifically for working as in the prefixed time interval of described transmitting element from described moment T1 for described short message sending answer short message, then generating and export information, there is malice fee suction software for the described terminal pointing out the holder of described terminal to use in described information; Or, described decision package specifically for when in the prefixed time interval of described transmitting element from described moment T1 for described short message sending answer short message, then unload or point out the holder of described terminal to unload and carry the application of described malice fee suction software.

Visible, the embodiment of the invention discloses note fee suction behavioral value method, described method comprises: terminal receives note; When the note that described note is the order number of value-added service that carries operator and provide, described terminal obtains the moment T1 that described terminal receives described note; When described terminal pins answer short message to be sent to described note, described terminal obtains the moment T2 of described terminal answer short message to be sent; Be less than preset value when the time difference of described moment T1 and described moment T2, then determine that described terminal exists malice fee suction software.Whether the sense terminals equipment that the embodiment of the present invention provides existing the method for malice fee suction software, drawing the problem of expense for reducing the malice fee suction software that existing terminal equipment exists.In addition, the embodiment of the present invention additionally provides corresponding terminal.

Accompanying drawing explanation

In order to be illustrated more clearly in the embodiment of the present invention or technical scheme of the prior art, be briefly described to the accompanying drawing used required in embodiment or description of the prior art below, apparently, accompanying drawing in the following describes is only some embodiments of the present invention, for those of ordinary skill in the art, under the prerequisite not paying creative work, other accompanying drawing can also be obtained according to these accompanying drawings.

Fig. 1 is the method flow diagram of " secondary-confirmation " precautionary measures that existing operator commonly uses;

Fig. 2 is the logical construction schematic diagram of existing a kind of terminal;

The method flow diagram of a kind of note fee suction behavioral value method that Fig. 3 a provides for the embodiment of the present invention;

The method flow diagram of the another kind of note fee suction behavioral value method that Fig. 3 b provides for the embodiment of the present invention;

The method flow diagram of another note fee suction behavioral value method that Fig. 3 c provides for the embodiment of the present invention;

The method flow diagram of another note fee suction behavioral value method that Fig. 4 provides for the embodiment of the present invention;

The method flow diagram of another note fee suction behavioral value method that Fig. 5 provides for the embodiment of the present invention;

The method flow diagram of another note fee suction behavioral value method that Fig. 6 provides for the embodiment of the present invention;

The method flow diagram of a kind of note fee suction behavioral value method that Fig. 7 a provides for the embodiment of the present invention;

The method flow diagram of the another kind of note fee suction behavioral value method that Fig. 7 b provides for the embodiment of the present invention;

The method flow diagram of another note fee suction behavioral value method that Fig. 7 c provides for the embodiment of the present invention;

The method flow diagram of another note fee suction behavioral value method that Fig. 7 d provides for the embodiment of the present invention;

The method flow diagram of another note fee suction behavioral value method that Fig. 7 e provides for the embodiment of the present invention;

The structural representation of a kind of terminal that Fig. 8 provides for the embodiment of the present invention;

The structural representation of the another kind of terminal that Fig. 9 provides for the embodiment of the present invention;

The structural representation of another terminal that Figure 10 provides for the embodiment of the present invention;

The structural representation of another terminal that Figure 11 provides for the embodiment of the present invention;

The structural representation of a kind of terminal that Figure 12 provides for the embodiment of the present invention;

The structural representation of the another kind of terminal that Figure 13 provides for the embodiment of the present invention;

The structural representation of another terminal that Figure 14 provides for the embodiment of the present invention;

The structural representation of another terminal that Figure 15 provides for the embodiment of the present invention.

Embodiment

Below in conjunction with the accompanying drawing in the embodiment of the present invention, be clearly and completely described the technical scheme in the embodiment of the present invention, obviously, described embodiment is only the present invention's part embodiment, instead of whole embodiments.Based on the embodiment in the present invention, those of ordinary skill in the art, not making the every other embodiment obtained under creative work prerequisite, belong to the scope of protection of the invention.

Embodiment one

As shown in Figure 3 a, a kind of flow chart of note fee suction behavioral value method disclosed in the embodiment of the present invention, the note fee suction behavioral value method that the embodiment of the present invention provides is applied particularly on the terminal equipment of communication technique field, and this terminal can be on the handheld terminal such as mobile phone, PAD.

Introduce the building-block of logic of the terminal of the note fee suction behavioral value method application that the embodiment of the present invention provides for Fig. 2, this terminal is specifically as follows a smart mobile phone.As shown in Figure 2, the bottom be hardware layer, described hardware layer comprises CPU, memory DDR, input equipment, display controller etc., drive layer on described hardware layer, described driving layer comprises various driving, such as keyboard drive, sound driver, power drives etc., be positioned on described driving layer is core library layer, ccf layer on described core library layer, SMS detection module SMS Monitor involved in the present invention is just at described ccf layer, in addition, described terminal also comprises application layer, described application layer is positioned on described ccf layer, this application layer comprises the common main interface Home of Android operation system, contact book Contact, browser Browser, Mobile Phone Short Message Service SMS etc.In this terminal, adopt the note fee suction behavioral value method that the embodiment of the present invention provides, effectively can detect described terminal and whether there is malice fee suction software, thus avoid described malice fee suction software malice in the unwitting situation of user to draw the problem of described terminal expense.

A kind of note fee suction behavioral value method, comprising: terminal receives note; When the note that described note is the order number of value-added service that carries operator and provide, described terminal obtains the moment T1 that described terminal receives described note; When described terminal pins answer short message to be sent to described note, described terminal obtains the moment T2 of described terminal answer short message to be sent; Be less than preset value when the time difference of described moment T1 and described moment T2, then determine that described terminal exists malice fee suction software.

As shown in Figure 3 a, idiographic flow can be as follows:

S101, terminal receive note;

S103, when the note that described note is the order number of value-added service that carries operator and provide, described terminal obtains the moment T1 that described terminal receives described note;

Concrete, the note of the order number of value-added service of described note for carrying operator and providing, refer to that the transmission main body of described note is carrier server, described note sends from carrier server side in other words.Further, the order number of the value-added service that described operator provides, refer to the number for ordering value-added service that operator provides to terminal use, so-called value-added service comprises business of networking, Ring Back Tone service, information on demand and wireless music business etc., for each value-added service value added service ordering number that all correspondence one is unique, described value added service ordering number is provided by described operator.So when carrier server sends for terminal the short message sending answer short message ordering value-added service request, described answer short message can carry the order number of the described value-added service that operator provides.

It should be noted that, described terminal obtains the moment T1 that described terminal receives described note, comprise two kinds of situations, respectively: if described terminal inherently can record and store it receive the time information of note, then described terminal directly obtains it and records and the moment T1 carrying the note of the order number of the value-added service that operator provides described in the reception stored; If described terminal itself can not record and store the time information that it receives note, then described terminal receive described in carry the note of order number of the value-added service that operator provides after, first record and store down the moment T1 that it receives described note, then at the described moment T1 of acquisition.

S105, when described terminal pins answer short message to be sent to described note, described terminal obtains the moment T2 of described terminal described answer short message to be sent;

Concrete, described terminal pins, to described note answer short message to be sent, refers to after carrying the note of order number of the value-added service that operator provides described in receiving in described terminal, will for described short message sending answer short message.Described answer short message to be sent refers to that described terminal has been edited and has been ready for sending, but does not also have the described answer short message of actual transmission.

It should be noted that, described terminal obtains the moment T2 of described terminal answer short message to be sent, also two kinds of situations are comprised, respectively: if described terminal inherently records and stores the time information of its answer short message to be sent, then described terminal directly obtain its record and the described terminal pins stored to described note answer short message moment to be sent T2; If described terminal itself does not have to record and stores the time information of its answer short message to be sent, then during described terminal pins answer short message to be sent to described note, first described terminal records and stores down the moment T2 of its described answer short message to be sent, and then obtains described moment T2.

It should be noted that, described terminal receive by described carrier server by the switching network such as router, switch equipment send described in carry the note of order number of the value-added service that operator provides after, described terminal pins is to described note answer short message to be sent.So after described moment T2 mono-fixes on described moment T1, that is, described moment T2 is greater than described moment T1, if T2-T1=T, that ⊿ T>0.

S107, be less than preset value when the time difference of described moment T1 and described moment T2, then determine that described terminal exists malice fee suction software.

Concrete, described preset value can be pre-set by described terminal, also can be dynamically generate, described preset value arrange with reference to empirical value, time difference of described moment T2 and described moment T1 when described preset value is less than artificial answer short message and time difference of described moment T2 and described moment T1 when being more than or equal to maliciously fee suction software reverts note.

Further, described determine that described terminal exists malice fee suction software after, described method can also comprise described terminal and generates and export information, the described terminal existence maliciously fee suction software of described information for pointing out described holder terminal to use.Concrete, described information can preset, and also can be according to preset regular in-time generatin.Described information can show as jingle bell, vibrations, display dialog box etc.; all informations that terminal described in described holder terminal can be reminded to there is malice fee suction software are all within scope, and the present invention is to the form of expression of described information not limiting property regulation.

Or, described determine that described terminal exists malice fee suction software after, described method can also comprise described terminal and stop sending the answer short message for described note.Concrete, it can be that described terminal directly abandons described note thus stops sending that described terminal stops sending described answer short message, also can be that described terminal directly stops sending described note.

Or, described determine that described terminal exists malice fee suction software after, described method can also comprise unloading or point out the holder of described terminal to unload the application software carrying described malice fee suction software.

Accordingly, preset value is greater than or equal to when the time difference of described moment T1 and described moment T2, then determine that described terminal does not exist malice fee suction software, now, as shown in Figure 6, the described answer short message that described terminal will be sent completely for described note, it should be noted that described terminal is sent completely the behavior of described answer short message identical with the behavior of described terminal normal short message sending.

As from the foregoing, the note fee suction behavioral value method that the embodiment of the present invention provides, when terminal receives the note of the order number carrying the value-added service that operator provides, obtains the moment T1 that described terminal receives described note; When described terminal pins answer short message to be sent to described note, obtain the moment T2 of described terminal described answer short message to be sent; Be less than preset value when the time difference of described moment T1 and described moment T2, then determine that described terminal exists malice fee suction software.By described detection method, the embodiment of the present invention can detect whether terminal equipment exists malice fee suction software, thus reduce the problem that described terminal equipment expense drawn by the malice fee suction software that terminal equipment exists in the unwitting situation of the holder of described terminal equipment.

Embodiment two

Refer to accompanying drawing 3b, be the method flow diagram of the another kind of note fee suction behavioral value method that the embodiment of the present invention discloses, described method can be applied on the terminal equipment of communication technique field, and this terminal can be on the handheld terminal such as mobile phone, PAD.Concrete, described method can be applied in terminal as shown in Figure 2.

Described method comprises:

S301, terminal receive note;

S303, when the note that the note that described terminal monitoring receives to described terminal is the order number of value-added service that carries operator and provide, described terminal obtains the moment T1 that described terminal receives described note;

Concrete, why described terminal has the function detecting and whether described terminal exists malice fee suction software, because described terminal can be monitored the note that it receives, whether monitor its note received for carrying the note of the order number of the value-added service that operator provides, if so, the moment T1 carrying the note of the order number of the value-added service that operator provides described in the reception of described terminal is then obtained.

Further, whether the note that terminal described in described terminal monitoring receives is for carrying the note of the order number of the value-added service that operator provides, can be determined by following method: after described terminal receives note, first value added service ordering number storehouse is traveled through, judge whether the number that described note is carried is present in described value added service ordering number storehouse, the order number of value-added service of wherein said value added service ordering number storehouse for storing operator and providing; If the number that described note is carried is present in described value added service ordering number storehouse, then described terminal monitoring this time note reception behavior features.

It should be noted that, described value added service ordering number storehouse is pre-set at described terminal inner, certainly, described value added service ordering number storehouse may not be and is stored in described terminal inner, but it is first-class to be stored in described cloud server, the memory location of the present invention to described value added service ordering number storehouse does not limit.Can the complete order number that store the value-added service that operator provides specifically in wherein said value added service ordering number storehouse, such as 106558670012120830,106590007306699671 etc., described order number can obtain from public channel.Accordingly, because the value added service ordering number that same operator provides is often with several identical Arabic numerals beginnings, the value added service ordering number of such as CHINAUNICOM is with 10655 beginnings, the value added service ordering number of China Mobile is with 10657, 10658 beginnings, the value added service ordering number of China Telecom be with 10659 beginnings etc., so also can only limit former bit digital of described order number in described value added service ordering number storehouse, such as with the number of 10655 beginnings, with the number etc. of 10657 beginnings, as long as former bit digital of the number that the note that described terminal receives is carried is identical with former bit digital of the described number stored in described value added service ordering number storehouse, the number that then described note is carried is the order number of the value-added service that operator provides.

Further, when the order number of the value-added service that described terminal monitoring provides to the number Bu Shi operator that the described note that described terminal receives is carried, then carry out reception process according to normal note.Accordingly, the order number of the value-added service that the number Bu Shi operator that described terminal monitoring carries to the described note that described terminal receives provides, comprise, described terminal travels through described value added service ordering number storehouse, judge that the number that described note is carried does not exist in described value added service ordering number storehouse, then the order number of value-added service that provides to the number Bu Shi operator that described note is carried of described terminal monitoring.

S305, when described terminal monitoring answer short message to be sent to described note to described terminal pins, described terminal obtains the moment T2 of described terminal described answer short message to be sent;

Concrete, described terminal pins is to described note answer short message to be sent, refer to that the number that described terminal described answer short message to be sent carries is identical with the number that the described note that described terminal receives is carried, and described terminal described return information to be sent carries out after described terminal receives described note.

It should be noted that, described terminal monitoring to described terminal pins to described note answer short message to be sent, refer to accompanying drawing 4, refer to that the number carried when the described answer short message that described terminal is to be sent is identical with the number that the described note that described terminal receives is carried, and the order number of the value-added service that described number is operator to be provided, described number is present in described value added service ordering number storehouse in other words, then the behavior of the described answer short message to be sent of terminal described in described terminal monitoring.

S307, be less than preset value when the time difference of described moment T1 and described moment T2, then determine that described terminal exists malice fee suction software.

As from the foregoing, the note fee suction behavioral value method that the embodiment of the present invention provides, when terminal monitoring to receive the note of the order number carrying the value-added service that operator provides to described terminal, obtains the moment T1 that described terminal receives described note; When described terminal monitoring answer short message to be sent to described note to described terminal pins, obtain the moment T2 of described terminal described answer short message to be sent; Be less than preset value when the time difference of described moment T1 and described moment T2, then determine that described terminal exists malice fee suction software.By described detection method, the embodiment of the present invention can detect whether terminal equipment exists malice fee suction software, thus reduce the problem that described terminal equipment expense drawn by the malice fee suction software that terminal equipment exists in the unwitting situation of the holder of described terminal equipment.

Embodiment three

As shown in Figure 3 c, be the method flow diagram of another note fee suction behavioral value method that the embodiment of the present invention discloses, described method can be applied on the terminal equipment of communication technique field, and this terminal can be on the handheld terminal such as mobile phone, PAD.Concrete, described method can be applied in terminal as shown in Figure 2.

Described method comprises:

S501, terminal receive note;

S5031, when the note that the note that described terminal monitoring receives to described terminal is the order number of value-added service that carries operator and provide, described terminal is by the note record time of reception or be updated to T1, and described note refers to that described terminal receives the moment carrying the note of the order number of the value-added service that described operator provides the time of reception;

S5032, described terminal obtain the described note T1 time of reception of described terminal record or renewal;

Concrete, described note refers to that described terminal receives the moment carrying the note of the order number of the value-added service that described operator provides the time of reception.Known, order number correspondence one the described note time of reception of the value-added service that operator described in each provides, when terminal receives the note of the order number carrying the value-added service that described operator provides, described terminal by the described note record time of reception or can be updated to T1.

It should be noted that, described by record or be updated to T1 note time of reception, described terminal comprises: if can not record the time information that it receives note originally, after then described terminal receives the note of the order number carrying the value-added service that operator provides, described terminal will record the time information that described terminal receives described note; And if described terminal will record the time information that it receives note originally, then, after described terminal receives the note of the order number carrying the value-added service that operator provides, described terminal will

From the described time information of its record, obtain the time information that described terminal receives described note, and upgrade described note time of reception according to the time information that described terminal receives described note.

S5051, when described terminal monitoring answer short message to be sent to described note to described terminal pins, described terminal is by moment to be sent for note record or be updated to T2, and the described note moment to be sent refers to that described terminal pins is to described note to be sent moment carrying the answer short message of the order number of the value-added service that described operator provides;

S5053, described terminal obtain the described note moment T2 to be sent of described terminal record or renewal;

Concrete, the described note moment to be sent, refer to that the number carried when the answer short message that described terminal is to be sent is identical with the number that the note that described terminal receives is carried, and during the order number of the value-added service that provides of described number Dou Shi operator, then described terminal can record or upgrade the moment T2 of described terminal described reply to be sent.

It should be noted that, described by moment to be sent for note record or be updated to T2, described terminal comprises: if can not record the time information of its note to be sent originally, then when described terminal pins answer short message to be sent to the described note carrying the order number of the value-added service that operator provides, described terminal can record the time information that described terminal is sent to described answer short message;

And if described terminal will record the time information of its note to be sent originally, then when described terminal pins answer short message to be sent to the described note carrying the order number of the value-added service that operator provides, described terminal will obtain the time information of described terminal described answer short message to be sent from the time information of its note to be sent of its record, and upgrades the described note moment to be sent according to the time information of described terminal described answer short message to be sent.

S5057, be less than preset value when the time difference of described moment T1 and described moment T2, then determine that described terminal exists malice fee suction software.

As from the foregoing, the note fee suction behavioral value method that the embodiment of the present invention provides, when terminal monitoring to receive the note of the order number carrying the value-added service that operator provides to described terminal, by the note record time of reception or be updated to T1, and obtains T1; When described terminal monitoring answer short message to be sent to described note to described terminal pins, the moment to be sent for note recorded or is updated to T2, and obtaining T2; Be less than preset value when the time difference of described moment T1 and described moment T2, then determine that described terminal exists malice fee suction software.The described detection method that the embodiment of the present invention provides is only when determining that described note is sent from described carrier server side, just monitor this note reception behavior features, so the described detection method adopting the embodiment of the present invention to provide can save monitor resource, and can detect whether terminal equipment exists malice fee suction software, thus reduce the problem that described terminal equipment expense drawn by the malice fee suction software that terminal equipment exists in the unwitting situation of the holder of described terminal equipment.

Embodiment four

In order to better understand embodiment one to embodiment three, the method flow diagram of another note fee suction behavioral value method that the embodiment of the present invention also discloses, specifically as shown in Figure 5, described method can be applied on the terminal equipment of communication technique field, and this terminal can be on the handheld terminal such as mobile phone, PAD.Concrete, described method can be applied in terminal as shown in Figure 2.

Described method comprises:

S701, described terminal send value added service ordering note to carrier server;

Concrete, when described terminal is for ordering value-added service, described terminal sends value added service ordering note in order to order value-added service by the apparatus for network node such as gateway, router to carrier server.

S703, described terminal receive described carrier server and order note for the described value-added service that described terminal sends and the confirmation SMS Tip that returns, and described terminal obtains the moment T1 that described terminal receives described confirmation SMS Tip;

Concrete, after described carrier server receives the described value added service ordering note of described terminal transmission, in order to confirm that to described terminal described terminal have sent described value added service ordering note really further, described carrier server returns confirmation SMS Tip to described terminal, then described terminal as described in previous embodiment one to three any embodiment obtain as described in terminal receive the moment T1 of described confirmation SMS Tip, wherein, namely described confirmation SMS Tip is the note carrying the order number of the value-added service that operator provides described in embodiment one to embodiment three.

The described confirmation SMS Tip that S705, described terminal pins send described carrier server and secondary-confirmation note to be returned, described terminal obtains the moment T2 of described terminal described secondary-confirmation note to be returned;

Concrete, after described terminal receives described confirmation SMS Tip (or described in carry the note of the order number of the value-added service that operator provides), described terminal pins returns secondary-confirmation note to described confirmation SMS Tip to described carrier server, for confirming to order value-added service to described carrier server further, namely wherein said secondary-confirmation note is carry the note of the order number of the value-added service that operator provides described in the described terminal pins described in embodiment one to embodiment three receives it and the answer short message sent, corresponding as described in previous embodiment one to three any embodiment, described terminal obtains the moment T2 of described terminal described secondary-confirmation note to be returned.

S707, be less than preset value when the time difference of described moment T1 and described moment T2, then determine that described terminal exists malice fee suction software.

Note fee suction behavioral value method described in the present embodiment can realize the beneficial effect of the note fee suction behavioral value method described in embodiment one to embodiment three equally, does not repeat them here.

Embodiment five

Refer to accompanying drawing 7a, be the method flow diagram of the another kind of note fee suction behavioral value method that the embodiment of the present invention discloses, described method can be applied on the terminal equipment of communication technique field, and this terminal can be on the handheld terminal such as mobile phone, PAD.Concrete, described method can be applied in terminal as shown in Figure 2.

As shown in Figure 7a, idiographic flow can be as follows:

S9001, terminal receive note;

S9003, when the note that described note is the order number of value-added service that carries operator and provide, described terminal obtains the moment T1 that described terminal receives described note;

S9005, when in the prefixed time interval of described terminal from described moment T1 for described short message sending answer short message, then determine that described terminal exists malice fee suction software.

Concrete, described terminal pins to described short message sending answer short message, refer to described terminal receive described in carry the note of order number of the value-added service that operator provides after, for the answer short message of described short message sending.

It should be noted that, described prefixed time interval, can be pre-set by described terminal, also can be dynamically generate, described prefixed time interval arrange with reference to empirical value, when described prefixed time interval is less than artificial answer short message described terminal send the moment of described answer short message with the time interval of described moment T1 and be more than or equal to maliciously fee suction software reverts note time described terminal send the moment of described answer short message and the time interval of described moment T1.

Accordingly, when described terminal send moment of described answer short message and described moment T1 interval greater than or equal prefixed time interval, then determine that described terminal does not exist malice fee suction software, now, the described answer short message that described terminal will be sent completely for described note, it should be noted that described terminal is sent completely the behavior of described answer short message identical with the behavior of described terminal normal short message sending.

As from the foregoing, the note fee suction behavioral value method that the embodiment of the present invention provides, when terminal receives the note of the order number carrying the value-added service that operator provides, obtains the moment T1 that described terminal receives described note; When in the prefixed time interval of described terminal from described moment T1 for described short message sending answer short message, then determine that described terminal exists malice fee suction software.By described detection method, the embodiment of the present invention can detect whether terminal equipment exists malice fee suction software, thus reduce the problem that described terminal equipment expense drawn by the malice fee suction software that terminal equipment exists in the unwitting situation of the holder of described terminal equipment.

Embodiment six

Refer to accompanying drawing 7b, be the method flow diagram of the another kind of note fee suction behavioral value method that the embodiment of the present invention discloses, described method can be applied on the terminal equipment of communication technique field, and this terminal can be on the handheld terminal such as mobile phone, PAD.Concrete, described method can be applied in terminal as shown in Figure 2.

Described method comprises:

S9011, terminal receive note;

S9013, when the note that the note that described terminal monitoring receives to described terminal is the order number of value-added service that carries operator and provide, described terminal obtains the moment T1 that described terminal receives described note;

Further, whether the note that terminal described in described terminal monitoring receives is for carrying the note of the order number of the value-added service that operator provides, can accompanying drawings 7d, determined by following method: after described terminal receives note, first value added service ordering number storehouse is traveled through, judge whether the number that described note is carried is present in described value added service ordering number storehouse, the order number of value-added service of wherein said value added service ordering number storehouse for storing operator and providing; If the number that described note is carried is present in described value added service ordering number storehouse, then described terminal monitoring this time note reception behavior features.

S9015, when in described terminal monitoring to the prefixed time interval of described terminal from described moment T1 for described short message sending answer short message, then determine that described terminal exists malice fee suction software.

Concrete, described terminal pins is to described short message sending answer short message, refer to that the number that the described answer short message that described terminal sends carries is identical with the number that the described note that described terminal receives is carried, and the described return information that described terminal sends carries out after described terminal receives described note.

It should be noted that, for described short message sending answer short message in described terminal monitoring to the prefixed time interval of described terminal from described moment T1, can accompanying drawings 7d, determined by following method: whether the number that the number that the described answer short message sent in the prefixed time interval of described terminal from described moment T1 carries and the described note that described terminal receives are carried is identical, and judge whether described number is present in described value added service ordering number storehouse by the described value added service ordering number storehouse of traversal.

As from the foregoing, the note fee suction behavioral value method that the embodiment of the present invention provides, there is the function that same embodiment one to embodiment five is identical, the problem that described terminal equipment expense drawn by the malice fee suction software that terminal equipment exists in the unwitting situation of the holder of described terminal equipment can be reduced.

Embodiment seven

Refer to accompanying drawing 7c, be the method flow diagram of the another kind of note fee suction behavioral value method that the embodiment of the present invention discloses, described method can be applied on the terminal equipment of communication technique field, and this terminal can be on the handheld terminal such as mobile phone, PAD.Concrete, described method can be applied in terminal as shown in Figure 2.

Described method comprises:

S9101, terminal receive note;

S9103, when the note that the note that described terminal monitoring receives to described terminal is the order number of value-added service that carries operator and provide, described terminal is by the note record time of reception or be updated to T1, and described note refers to that described terminal receives the moment carrying the note of the order number of the value-added service that described operator provides the time of reception;

S9104, described terminal obtain the described note T1 time of reception of described terminal record or renewal;

S9105, when in described terminal monitoring to the prefixed time interval of described terminal from described moment T1 for described short message sending answer short message, then determine that described terminal exists malice fee suction software.

As from the foregoing, the note fee suction behavioral value method that the embodiment of the present invention provides, only when determining that described note is sent from described carrier server side, just monitor this note reception behavior features, so the terminal that the embodiment of the present invention provides is on the basis of saving monitor resource, the problem that described terminal equipment expense drawn by the malice fee suction software that terminal equipment exists in the unwitting situation of the holder of described terminal equipment can be reduced.

Embodiment eight

In order to better understand embodiment five to embodiment seven, the method flow diagram of another note fee suction behavioral value method that the embodiment of the present invention also discloses, specifically as shown in figure 7e, described method can be applied on the terminal equipment of communication technique field, and this terminal can be on the handheld terminal such as mobile phone, PAD.Concrete, described method can be applied in terminal as shown in Figure 2.

Described method comprises:

A701, described terminal send value added service ordering note to carrier server;

A703, described terminal receive described carrier server and order note for the described value-added service that described terminal sends and the confirmation SMS Tip that returns, and described terminal obtains the moment T1 that described terminal receives described confirmation SMS Tip;

Concrete, after described carrier server receives the described value added service ordering note of described terminal transmission, in order to confirm that to described terminal described terminal have sent described value added service ordering note really further, described carrier server returns confirmation SMS Tip to described terminal, wherein, namely described confirmation SMS Tip is the note carrying the order number of the value-added service that operator provides described in embodiment five to embodiment seven, corresponding, as in previous embodiment five to embodiment seven as described in any embodiment, described terminal obtains the moment T1 that described terminal receives described confirmation SMS Tip.

A705, when the described confirmation SMS Tip sent for described carrier server in the prefixed time interval of described terminal from described moment T1 returns secondary-confirmation note, then determine that described terminal exists malice fee suction software.

Concrete, after described terminal receives described confirmation SMS Tip (or described in carry the note of the order number of the value-added service that operator provides), described terminal pins returns secondary-confirmation note to described confirmation SMS Tip to described carrier server, for confirming to order value-added service to described carrier server further, namely wherein said secondary-confirmation note is carry the note of the order number of the value-added service that operator provides described in the described terminal pins described in embodiment five to embodiment seven receives it and the answer short message sent, same, if it is in the prefixed time interval from described moment T1 that described terminal returns described secondary-confirmation note, then determine that described terminal exists malice fee suction software.

Note fee suction behavioral value method described in the present embodiment can realize the beneficial effect of the note fee suction behavioral value method described in embodiment five to embodiment seven equally, does not repeat them here.

It should be noted that, embodiment one to eight all adopts the mode of going forward one by one to describe, between each embodiment identical similar part mutually see, what each embodiment stressed is the difference with other embodiments.Such as, determine whether note that described terminal receives carries the order number of the value-added service that operator provides, can by after described terminal receive note, the method in traversal value added service ordering number storehouse judges.

Embodiment nine

In order to implement above method better, the embodiment of the present invention also provides a kind of terminal 10, and the logical construction of described terminal 10 as shown in Figure 2, can refer to accompanying drawing 8, and this terminal 10 comprises receiving element 11, transmitting element 13, acquiring unit 17 and decision package 19

Receiving element 11, for receiving note;

Transmitting element 13, for sending note;

Acquiring unit 17, for when the note that the note that described receiving element 11 receives is the order number of value-added service that carries operator and provide, obtains the moment T1 that described receiving element 11 receives described note; And for when described transmitting element 13 answer short message to be sent for described note, obtain the moment T2 of described transmitting element 13 described answer short message to be sent;

Decision package 19, is less than preset value for the time difference as described moment T1 and described moment T2, then determine that described transmitting element 13 exists malice fee suction software.

Concrete, described transmitting element 13 is for sending value added service ordering note to carrier server; Described receiving element 11 is for receiving the note of the order number carrying the value-added service that operator provides, the described note carrying the order number of the value-added service that operator provides is the confirmation SMS Tip that described carrier server returns for the described value added service ordering note that described transmitting element 13 sends, and the note carrying the order number of the value-added service that operator provides described in being also is exactly the described confirmation SMS Tip that described carrier server returns.After described receiving element 11 receives the described confirmation SMS Tip that described carrier server returns, described transmitting element 13 is also for returning secondary-confirmation note for described confirmation SMS Tip, wherein, namely described secondary-confirmation note is that described transmitting element 13 is for the described short message sending answer short message carrying the order number of the value-added service that operator provides.

It should be noted that, described preset value can pre-set, also can be dynamically generate, described preset value arrange with reference to empirical value, time difference of described moment T2 and described moment T1 when described preset value is less than artificial answer short message and time difference of described moment T2 and described moment T1 when being more than or equal to maliciously fee suction software reverts note.

It should be noted that, when described decision package 19 determines that described transmitting element 13 exists malice fee suction software, also for generating and exporting information, there is malice fee suction software for pointing out described transmitting element 13 in described decision package 19.Wherein, described information can preset, and also can be according to preset regular in-time generatin.Described information can show as jingle bell, vibrations, display dialog box etc.; all can exist the information of malice fee suction software all within scope by transmitting element 13 described in prompt terminal holder, and the present invention is to the form of expression of described information not limiting property regulation.

Or when described decision package 19 determines that described transmitting element 13 exists malice fee suction software, described decision package 19 is also for making described transmitting element 13 stop sending the answer short message for described note.Concrete, it can be that described transmitting element 13 directly abandons described note thus stops sending that described transmitting element 13 stops sending described answer short message, also can be that described transmitting element 13 directly stops sending described note.

Or when described decision package 19 determines that described transmitting element 13 exists malice fee suction software, described decision package 19 is also for unloading or point out the holder of described terminal to unload the application software of carrying described malice fee suction software.

Accordingly, preset value is greater than or equal to when the time difference of described moment T1 and described moment T2, then described decision package 19 is also for determining that described transmitting element 13 does not exist malice fee suction software, now, the described answer short message that described transmitting element 13 will be sent completely for described note, it should be noted that the behavior that described transmitting element 13 is sent completely described answer short message is identical with the normal short message sending behavior of described transmitting element 13.

During concrete enforcement, above unit can realize as independently entity, and can carry out combination in any yet, realize as same or several entities, the concrete enforcement of above unit see embodiment above, can not repeat them here.

As from the foregoing, the terminal that the embodiment of the present invention provides, when receiving the note of the order number carrying the value-added service that operator provides, obtains the moment T1 that it receives described note; And when described terminal pins answer short message to be sent to described note, obtain the moment T2 that it sends described answer short message; Be less than preset value when the time difference of described moment T1 and described moment T2, then determine that described terminal exists malice fee suction software.The terminal equipment that the embodiment of the present invention provides can reduce the malice fee suction software that described terminal equipment exists, and the problem of described terminal equipment expense drawn by described malice fee suction software in the unwitting situation of the holder of described terminal equipment.

Embodiment ten

Accordingly, the embodiment of the present invention also provides a kind of terminal 100, and the logical construction of described terminal 100 can be as shown in Figure 2, as shown in Figure 9, described terminal 100 not only comprises receiving element 101, transmitting element 103, acquiring unit 107 and decision package 109, also comprises monitoring unit 105, wherein;

Described monitoring unit 105, receives for monitoring described receiving element 101 behavior carrying the note of the order number of the value-added service that operator provides; Or, for monitoring the behavior carrying the note of the order number of the value-added service that operator provides to be sent of described transmitting element 103.

Then corresponding, described acquiring unit 107 is also for listening to note that note that described receiving element 101 receives is the order number of value-added service that carries operator and provide during when described monitoring unit 105, obtain the moment T1 that described receiving element 101 receives described note; And described acquiring unit 107 also for listening to described transmitting element 103 answer short message to be sent for described note when described monitoring unit 105 time, obtain the moment T2 of described transmitting element 103 described answer short message to be sent.

Selectable, described monitoring unit 105, also for after described receiving element 101 receives note, traversal value added service ordering number storehouse, to judge whether the number that described note is carried is present in described value added service ordering number storehouse, the order number of value-added service of wherein said value added service ordering number storehouse for storing operator and providing; If the number that described note is carried is present in described value added service ordering number storehouse, then monitor the behavior that described receiving element 101 receives described note.

And/or, the number that described monitoring unit 105 also carries for the answer short message to be sent when described transmitting element 103 is identical with the number that the note that described receiving element 101 receives is carried, and described number is when being present in described value added service ordering number storehouse, monitor the behavior that described transmitting element 103 sends described answer short message.

Further, terminal 110 as shown in Figure 10, described terminal 110, except comprising receiving element 111, transmitting element 113, monitoring unit 115, acquiring unit 117 and decision package 119, can also comprise record cell 116, wherein;

Described record cell 116, during for listening to note that note that described receiving element 111 receives is the order number of value-added service that carries operator and provide when described monitoring unit 115, note recorded or be updated to T1 the time of reception, described note refers to that described receiving element 111 receives the moment carrying the note of the order number of the value-added service that described operator provides the time of reception;

Then corresponding, described acquiring unit 117 is also for obtaining the described note T1 time of reception that described record cell 116 records or upgrades.

And/or, described record cell 116, time also for listening to described transmitting element 113 answer short message to be sent for described note when described monitoring unit 115, recorded in moment to be sent for note or be updated to T2, the described note moment to be sent refers to that described transmitting element 113 is for the described note moment carrying the answer short message of the order number of the value-added service that described operator provides to be sent;

Accordingly, described acquiring unit 117 is also for obtaining the described note moment T2 to be sent that described record cell 116 records or upgrades.

As from the foregoing, the terminal that the embodiment of the present invention provides adds monitoring unit on the basis of embodiment nine, whether described monitoring unit sends from carrier server side for the note judging described terminal and receive, only when determining that described note is sent from described carrier server side, just monitor this note reception behavior features, so the terminal that the embodiment of the present invention provides is on the basis of saving monitor resource, still can reduce the malice fee suction software that described terminal equipment exists, and the problem of described terminal equipment expense drawn by described malice fee suction software in the unwitting situation of the holder of described terminal equipment.

Embodiment 11

Accordingly, the embodiment of the present invention also provides a kind of terminal 600, as shown in figure 11, this terminal 600 can comprise at least one processor 601, such as CPU, at least one network interface 604, such as physical network card, or other user interface 903, and memory 605 and at least one communication bus 602.

Wherein, communication bus 602 is for realizing the connection communication between these assemblies, this communication bus 602 can be ISA(Industry Standard Architecture, industry standard architecture) bus, PCI(Peripheral Component, peripheral component interconnect) bus or EISA(Extended IndustryStandard Architecture, extended industry-standard architecture) bus etc.Described communication bus 602 can be one or more physical circuit, can be divided into address bus, data/address bus, control bus etc. when being many physical circuits.In some other implementation of the present invention, the modules that the embodiment of the present invention provides also can not be connected by the mode of bus, and directly establishes a communications link according to signal transmission relation.

Network interface 604 is for realizing the connection communication between this physical host and network, and such as this network interface 604 may be used for connecting the equipment such as physical network card and/or physical switches.

Optionally, user interface 603, can comprise display, keyboard or other pointing devices, such as, and mouse, trace ball (trackball), touch-sensitive plate or touch sensitive display screen etc.

Memory 605 may comprise high random access memory body (RAM, Random AccessMemory), still may comprise non-labile memory (non-volatile memory), such as at least one magnetic disc store.Optionally, this memory 605 can also comprise at least one and is positioned at storage device away from aforementioned processor 601.

In some embodiments, memory 605 stores following element, executable module or data structure, or their subset, or their superset:

Operating system 6051, comprises various system program, for realizing various basic business and processing hardware based task;

Application module 6052, comprises various application program, for realizing various applied business.

Concrete, described processor 601, for receiving note and when the note that the described note of its reception is the order number of value-added service that carries operator and provide, obtaining the moment T1 that described processor 601 receives described note; And during for answer short message to be sent for described note, obtain the moment T2 of described processor 601 described answer short message to be sent; Be less than preset value when the time difference of described moment T1 and described moment T2, then described processor 601 can determine to there is malice fee suction software in application module 6052.

Optionally, described processor 601 also receives or the to be sent behavior carrying the note of the order number of the value-added service that operator provides for monitoring it.

Further, when described processor 601 listens to the note that note that described processor 601 receives is the order number of value-added service that carries operator and provide, described processor 601 is by the note record time of reception or be updated to T1, and described note refers to that described processor 601 receives the moment carrying the note of the order number of the value-added service that described operator provides the time of reception;

When described processor 601 listens to described processor 601 answer short message to be sent for described note, described processor 601 is by moment to be sent for note record or be updated to T2, and the described note moment to be sent refers to that described processor 601 is for described note to be sent moment carrying the answer short message of the order number of the value-added service that described operator provides.

Further, described processor 601 is also for after receiving note, first value added service ordering number storehouse is traveled through, the order number of value-added service of described value added service ordering number storehouse for storing operator and providing, if the number that described note is carried is present in described value added service ordering number storehouse, then this note reception behavior features monitored by described processor 601.And, the number carried when the answer short message that described processor 601 is to be sent is identical with the number that the described note of its reception is carried, and described number is when being present in described value added service ordering number storehouse, then the behavior of its described answer short message to be sent monitored by described processor 601.

The concrete enforcement of each equipment see embodiment above, can not repeat them here above.

Known, the terminal that the embodiment of the present invention provides can be used in reducing the malice fee suction software that described terminal equipment exists, and the problem of described terminal equipment expense drawn by described malice fee suction software in the unwitting situation of the holder of described terminal equipment.

Embodiment 12

In order to implement above method better, the embodiment of the present invention also provides a kind of terminal 20, and the logical construction of described terminal 20 as shown in Figure 2, can refer to accompanying drawing 12, this terminal 20 comprises receiving element 21, transmitting element 23, acquiring unit 27 and decision package 29, wherein:

Receiving element 21, for receiving note;

Transmitting element 23, for sending note;

Acquiring unit 27, for when the note that the note that described receiving element 21 receives is the order number of value-added service that carries operator and provide, obtains the moment T1 that described receiving element 21 receives described note;

Decision package 29, for when in the prefixed time interval of described transmitting element 23 from described moment T1 for described short message sending answer short message, then determine that described transmitting element 23 exists malice fee suction software.

Concrete, described transmitting element 23 is for sending value added service ordering note to carrier server; Described receiving element 21 is for receiving the note of the order number carrying the value-added service that operator provides, the described note carrying the order number of the value-added service that operator provides is the confirmation SMS Tip that described carrier server returns for the described value added service ordering note that described transmitting element 23 sends, and the note carrying the order number of the value-added service that operator provides described in being also is exactly the described confirmation SMS Tip that described carrier server returns.After described receiving element 21 receives the described confirmation SMS Tip that described carrier server returns, described transmitting element 23 is also for returning secondary-confirmation note for described confirmation SMS Tip, wherein, namely described secondary-confirmation note is that described transmitting element 23 is for the described short message sending answer short message carrying the order number of the value-added service that operator provides.

It should be noted that, described prefixed time interval, can pre-set, also can be dynamically generate, described prefixed time interval arrange with reference to empirical value, when described prefixed time interval is less than artificial answer short message described transmitting element 23 send the moment of described answer short message with the time interval of described moment T1 and be more than or equal to maliciously fee suction software reverts note time described transmitting element 23 send the moment of described answer short message and the time interval of described moment T1.

It should be noted that, when described decision package 29 determines that described transmitting element 23 exists malice fee suction software, also for generating and exporting information, there is malice fee suction software for pointing out described transmitting element 23 in described decision package 29.Wherein, described information can preset, and also can be according to preset regular in-time generatin.Described information can show as jingle bell, vibrations, display dialog box etc.; all can exist the information of malice fee suction software all within scope by transmitting element 23 described in prompt terminal holder, and the present invention is to the form of expression of described information not limiting property regulation.

Or when described decision package 29 determines that described transmitting element 23 exists malice fee suction software, described decision package 29 is also for unloading or point out the holder of described terminal to unload the application of carrying described malice fee suction software.

Accordingly, when described transmitting element 23 send moment of described answer short message and described moment T1 interval greater than or equal prefixed time interval, then described decision package 29 is also for determining that described transmitting element 23 does not exist malice fee suction software, now, the described answer short message that described transmitting element 23 will be sent completely for described note, it should be noted that the behavior that described transmitting element 23 is sent completely described answer short message is identical with the normal short message sending behavior of described transmitting element 23.During concrete enforcement, above unit can realize as independently entity, and can carry out combination in any yet, realize as same or several entities, the concrete enforcement of above unit see embodiment above, can not repeat them here.

As from the foregoing, the terminal that the embodiment of the present invention provides, when receiving the note of the order number carrying the value-added service that operator provides, obtains the moment T1 that it receives described note; And when in the prefixed time interval of described terminal from described moment T1 for described short message sending answer short message, then determine that described terminal exists malice fee suction software.The terminal equipment that the embodiment of the present invention provides can reduce the malice fee suction software that described terminal equipment exists, and the problem of described terminal equipment expense drawn by described malice fee suction software in the unwitting situation of the holder of described terminal equipment.

Embodiment 13

Accordingly, the embodiment of the present invention also provides a kind of terminal 200, and the logical construction of described terminal 200 can be as shown in Figure 2, as shown in figure 13, described terminal 200 not only comprises receiving element 201, transmitting element 203, acquiring unit 207 and decision package 209, also comprises monitoring unit 205, wherein;

Described monitoring unit 205, receives specifically for monitoring described receiving element 201 behavior carrying the note of the order number of the value-added service that operator provides; Or, also send for monitoring described transmitting element 203 behavior carrying the note of the order number of the value-added service that operator provides.

Then corresponding, described acquiring unit 207 is also for listening to note that note that described receiving element 201 receives is the order number of value-added service that carries operator and provide during when described monitoring unit 205, obtain the moment T1 that described receiving element 201 receives described note.Described decision package 209 also for listening in the prefixed time interval of described transmitting element 203 from described moment T1 for described short message sending answer short message when described monitoring unit 205, then determines that described transmitting element 203 exists malice fee suction software.

Selectable, described monitoring unit 205, for after described receiving element 201 receives note, traversal value added service ordering number storehouse, to judge whether the number that described note is carried is present in described value added service ordering number storehouse, the order number of value-added service of wherein said value added service ordering number storehouse for storing operator and providing; If the number that described note is carried is present in described value added service ordering number storehouse, then monitor the behavior that described receiving element 201 receives described note.

And/or, selectable, the number that described monitoring unit 205 also carries for the described answer short message sent when described transmitting element 203 is identical with the number that the note that described receiving element 201 receives is carried, and described number is when being present in described value added service ordering number storehouse, monitor the behavior that described transmitting element 203 sends described answer short message.

Further, as an alternative embodiment of the invention, terminal 210 as shown in figure 14, described terminal 210 is except comprising receiving element 211, transmitting element 213, monitoring unit 215, acquiring unit 217 and decision package 219, record cell 216 can also be comprised, wherein;

Described record cell 216, during for listening to note that note that described receiving element 211 receives is the order number of value-added service that carries operator and provide when described monitoring unit 215, note recorded or be updated to T1 the time of reception, described note refers to that described receiving element 211 receives the moment carrying the note of the order number of the value-added service that described operator provides the time of reception;

Then corresponding, described acquiring unit 217 is also for obtaining the described note T1 time of reception that described record cell 216 records or upgrades.

As from the foregoing, the terminal that the embodiment of the present invention provides adds monitoring unit on the basis of embodiment 13, whether described monitoring unit sends from carrier server side for the note judging described terminal and receive, only when determining that described note is sent from described carrier server side, just monitor this note reception behavior features, so the terminal that the embodiment of the present invention provides is on the basis of saving monitor resource, still can reduce the malice fee suction software that described terminal equipment exists, and the problem of described terminal equipment expense drawn by described malice fee suction software in the unwitting situation of the holder of described terminal equipment.

Embodiment 14

Accordingly, the embodiment of the present invention also provides a kind of terminal 800, as shown in figure 15, this terminal 800 can comprise at least one processor 801, such as CPU, at least one network interface 804, such as physical network card, or other user interface 803, and memory 805 and at least one communication bus 802.

Wherein, communication bus 802 is for realizing the connection communication between these assemblies.This communication bus 802 can be ISA(Industry Standard Architecture, industry standard architecture) bus, PCI(Peripheral Component, peripheral component interconnect) bus or EISA(Extended IndustryStandard Architecture, extended industry-standard architecture) bus etc.Described communication bus 802 can be one or more physical circuit, can be divided into address bus, data/address bus, control bus etc. when being many physical circuits.In some other implementation of the present invention, the modules that the embodiment of the present invention provides also can not be connected by the mode of bus, and directly establishes a communications link according to signal transmission relation.

Network interface 804 is for realizing the connection communication between this physical host and network, and such as this network interface 804 may be used for connecting the equipment such as physical network card and/or physical switches.

Optionally, user interface 803, can comprise display, keyboard or other pointing devices, such as, and mouse, trace ball (trackball), touch-sensitive plate or touch sensitive display screen etc.

Memory 805 may comprise high random access memory body (RAM, Random AccessMemory), still may comprise non-labile memory (non-volatile memory), such as at least one magnetic disc store.Optionally, this memory 805 can also comprise at least one and is positioned at storage device away from aforementioned processor 801.

In some embodiments, memory 805 stores following element, executable module or data structure, or their subset, or their superset:

Operating system 8051, comprises various system program, for realizing various basic business and processing hardware based task;

Application module 8052, comprises various application program, for realizing various applied business.

Concrete, described processor 601, for receiving note and when the note that the described note of its reception is the order number of value-added service that carries operator and provide, obtaining the moment T1 that described processor 601 receives described note; And for when in the prefixed time interval of described processor 601 from described moment T1 for described short message sending answer short message, then determine in application module 6052, to there is malice fee suction software.

Optionally, described processor 601 also receives for monitoring it or sends the behavior carrying the note of the order number of the value-added service that operator provides.

Further, when described processor 601 listens to the note that note that described processor 601 receives is the order number of value-added service that carries operator and provide, described processor 601 is by the note record time of reception or be updated to T1, and described note refers to that described processor 601 receives the moment carrying the note of the order number of the value-added service that described operator provides the time of reception.Described processor 601 to listen in the prefixed time interval of described processor 601 from described moment T1 for described short message sending answer short message, then determine to there is malice fee suction software in described application module 6052.

Selectable, after described processor 601 receives note, first described value added service ordering number storehouse is traveled through, the order number of value-added service of described value added service ordering number storehouse for storing operator and providing, if the number that described note is carried is present in described value added service ordering number storehouse, then this note reception behavior features monitored by described processor 601; And, the number carried when the answer short message of described processor 601 transmission is identical with the number that the described note of its reception is carried, and described number is when being present in described value added service ordering number storehouse, then the behavior that it sends described answer short message monitored by described processor 601.

It should be noted that, each embodiment in this specification all adopts the mode of going forward one by one to describe, between each embodiment identical similar part mutually see, what each embodiment stressed is the difference with other embodiments.Especially, for device embodiment and terminal embodiment, because it is substantially similar to embodiment of the method, so describe fairly simple, relevant part illustrates see the part of embodiment of the method.Such as, the determination of described preset value and described information can with reference to described in previous embodiment.

By the description of above execution mode, those skilled in the art can be well understood to the mode that terminal described in the embodiment of the present invention can add required common hardware by software and realize, and can certainly comprise application-specific integrated circuit (ASIC), dedicated cpu, private memory, special components and parts etc. realize by specialized hardware.Generally, all functions completed by computer program can realize with corresponding hardware easily, and the particular hardware structure being used for realizing same function also can be diversified, such as analog circuit, digital circuit or special circuit etc.

The above; be only the specific embodiment of the present invention, but protection scope of the present invention is not limited thereto, is anyly familiar with those skilled in the art in the technical scope that the present invention discloses; change can be expected easily or replace, all should be encompassed within protection scope of the present invention.Therefore, protection scope of the present invention should be as the criterion with the protection range of described claim.

Claims

1. a note fee suction behavioral value method, is characterized in that, described method comprises:

Terminal receives note;

When the note that described note is the order number of value-added service that carries operator and provide, described terminal obtains the moment T1 that described terminal receives described note;

When described terminal pins answer short message to be sent to described note, described terminal obtains the moment T2 of described terminal described answer short message to be sent;

Be less than preset value when the time difference of described moment T1 and described moment T2, then determine that described terminal exists malice fee suction software.

2. note fee suction behavioral value method according to claim 1, it is characterized in that, described method also comprises:

Terminal described in described terminal monitoring receives or the behavior carrying the note of the order number of the value-added service that operator provides to be sent;

Described when the note that described note is the order number of value-added service that carries operator and provide, described terminal obtains the moment T1 that described terminal receives described note, comprising:

When the note that the note that described terminal monitoring receives to described terminal is the order number of value-added service that carries operator and provide, described terminal obtains the moment T1 that described terminal receives described note;

And/or,

Described when described terminal pins answer short message to be sent to described note, described terminal obtains the moment T2 of described terminal described answer short message to be sent, comprising:

When described terminal monitoring answer short message to be sent to described note to described terminal pins, described terminal obtains the moment T2 of described terminal described answer short message to be sent.

3. note fee suction behavioral value method according to claim 2, it is characterized in that, described method also comprises:

When the note that the note that described terminal monitoring receives to described terminal is the order number of value-added service that carries operator and provide, described terminal is by the note record time of reception or be updated to T1, and described note refers to that described terminal receives the moment carrying the note of the order number of the value-added service that described operator provides the time of reception;

Described terminal obtains the moment T1 that described terminal receives described note: described terminal obtains the described note T1 time of reception of described terminal record or renewal;

And/or,

When described terminal monitoring answer short message to be sent to described note to described terminal pins, described terminal is by moment to be sent for note record or be updated to T2, and the described note moment to be sent refers to that described terminal pins is to described note to be sent moment carrying the answer short message of the order number of the value-added service that described operator provides;

The moment T2 that described terminal obtains described terminal answer short message to be sent is: described terminal obtains the described note moment T2 to be sent of described terminal record or renewal.

4. the note fee suction behavioral value method according to Claims 2 or 3, is characterized in that, the note that described terminal monitoring receives to described terminal is the note of the order number of value-added service carrying operator and provide, and comprising:

After described terminal receives note, described terminal traversal value added service ordering number storehouse, to judge whether the number that described note is carried is present in described value added service ordering number storehouse, the order number of value-added service of wherein said value added service ordering number storehouse for storing operator and providing;

If the number that described note is carried is present in described value added service ordering number storehouse, then the note of the order number of value-added service of the described note that receives to described terminal of described terminal monitoring for carrying operator and providing.

5. the note fee suction behavioral value method according to Claims 2 or 3 or 4, it is characterized in that, described terminal monitoring, comprising to described terminal pins described note answer short message to be sent:

The number carried when the described answer short message that described terminal is to be sent is identical with the number that the described note that described terminal receives is carried, and described number is when being present in described value added service ordering number storehouse, then described terminal monitoring to described terminal pins to described note answer short message to be sent.

6. the note fee suction behavioral value method according to any one of claim 1-5, is characterized in that, before described terminal receives note, described method also comprises:

Described terminal sends value added service ordering note to carrier server;

Wherein, the note carrying the order number of the value-added service that operator provides that described terminal receives is the confirmation SMS Tip that described carrier server returns for the described value-added service order note that described terminal sends;

The answer short message of what described terminal was to be sent the carry order number of the value-added service that operator provides is the secondary-confirmation note that described terminal pins returns the described confirmation SMS Tip that described carrier server sends.

7. the note fee suction behavioral value method according to any one of claim 1-6, it is characterized in that, described method also comprises:

Be more than or equal to preset value when the time difference of described moment T1 and described moment T2, then described terminal completes the transmission of the described answer short message for described note.

8. the note fee suction behavioral value method according to any one of claim 1-7, is characterized in that, describedly determines that described terminal exists malice fee suction software, comprising:

Exporting information, there is malice fee suction software for the described terminal pointing out the holder of described terminal to use in described information;

Or described terminal stops sending the answer short message for described note;

Or, unload or point out the holder of described terminal to unload the application of carrying described malice fee suction software.

9. a note fee suction behavioral value method, is characterized in that, described method comprises:

Terminal receives note,

When in the prefixed time interval of described terminal from described moment T1 for described short message sending answer short message, then determine that described terminal exists malice fee suction software.

10. note fee suction behavioral value method according to claim 9, it is characterized in that, described method also comprises:

Terminal described in described terminal monitoring receives or sends the behavior carrying the note of the order number of the value-added service that operator provides;

And/or,

Described when in the prefixed time interval of described terminal from described moment T1 for described short message sending answer short message, then determine that described terminal exists malice fee suction software, comprising:

When in described terminal monitoring to the prefixed time interval of described terminal from described moment T1 for described short message sending answer short message, then determine that described terminal exists malice fee suction software.

11. note fee suction behavioral value methods according to claim 10, it is characterized in that, described method also comprises:

When the note that the note that described terminal monitoring receives to described terminal is the order number of value-added service that carries operator and provide, described terminal is by the note record time of reception or be updated to T1, and described note refers to that described terminal receives the moment carrying the note of the order number of the value-added service that operator provides the time of reception;

Described terminal obtains the moment T1 that described terminal receives described note: described terminal obtains the described note T1 time of reception of described terminal record or renewal.

12. note fee suction behavioral value methods according to claim 10 or 11, is characterized in that, the note that described terminal monitoring receives to described terminal is the note of the order number of value-added service carrying operator and provide, and comprising:

13. note fee suction behavioral value methods according to claim 10 or 11 or 12, is characterized in that, for described short message sending answer short message in described terminal monitoring to the prefixed time interval of described terminal from described moment T1, comprising:

The number carried when the described answer short message sent in the prefixed time interval of described terminal from described moment T1 is identical with the number that the described note that described terminal receives is carried, and described number is when being present in described value added service ordering number storehouse, then in described terminal monitoring to the prefixed time interval of described terminal from described moment T1 for answer short message described in described short message sending.

14. note fee suction behavioral value methods according to any one of claim 9-13, it is characterized in that, before described terminal receives note, described method also comprises:

Described terminal sends value added service ordering note to carrier server;

Wherein, to be described carrier server take industry for the described increment that described terminal sends to the note carrying the order number of the value-added service that operator provides that described terminal receives orders the confirmation SMS Tip that note returns;

Described terminal pins is the secondary-confirmation note that described terminal pins returns the described confirmation SMS Tip that described carrier server sends to the answer short message of described short message sending.

15. note fee suction behavioral value methods according to any one of claim 9-14, is characterized in that, describedly determine that described terminal exists malice fee suction software and comprises:

Exporting information, there is malice fee suction software for the described terminal pointing out the holder of described terminal to use in described information; Or, unload or point out the holder of described terminal to unload the application of carrying described malice fee suction software.

16. 1 kinds of terminals, is characterized in that, described terminal comprises:

Receiving element, for receiving note;

Transmitting element, for sending note;

Acquiring unit, for when the note that the note that described receiving element receives is the order number of value-added service that carries operator and provide, obtains the moment T1 that described receiving element receives described note; And also for when described transmitting element answer short message to be sent for described note, obtain the moment T2 of described transmitting element described answer short message to be sent;

Decision package, is less than preset value for the time difference as described moment T1 and described moment T2, then determine that described transmitting element exists malice fee suction software.

17. terminals according to claim 16, is characterized in that, described terminal also comprises:

Monitoring unit, receives for monitoring described receiving element the behavior carrying the note of the order number of the value-added service that operator provides; And/or, also for monitoring the behavior carrying the note of the order number of the value-added service that operator provides to be sent of described transmitting element; Then described acquiring unit, during specifically for listening to note that note that described receiving element receives is the order number of value-added service that carries operator and provide when described monitoring unit, obtains the moment T1 that described receiving element receives described note;

And/or,

Described acquiring unit is also specifically for listening to described transmitting element answer short message to be sent for described note during when described monitoring unit, obtain the moment T2 of described transmitting element described answer short message to be sent.

18. terminals according to claim 16 or 17, it is characterized in that, described terminal also comprises:

Record cell, during for listening to note that note that described receiving element receives is the order number of value-added service that carries operator and provide when described monitoring unit, note recorded or be updated to T1 the time of reception, described note refers to that described receiving element receives the moment carrying the note of the order number of the value-added service that described operator provides the time of reception;

Then described acquiring unit, specifically for obtaining the described note T1 time of reception of described recording unit records or renewal;

And/or,

Described record cell, during for listening to described transmitting element answer short message to be sent for described note when described monitoring unit, recorded in moment to be sent for note or be updated to T2, the described note moment to be sent refers to that described transmitting element is for the described note moment carrying the answer short message of the order number of the value-added service that described operator provides to be sent;

Then described acquiring unit, the moment T2 to be sent of the described note specifically for obtaining described recording unit records or renewal.

19. terminals according to any one of claim 16-18, is characterized in that:

Described monitoring unit, specifically for after described receiving element receives note, traversal value added service ordering number storehouse, to judge whether the number that described note is carried is present in described value added service ordering number storehouse, the order number of value-added service of wherein said value added service ordering number storehouse for storing operator and providing;

If the number that described note is carried is present in described value added service ordering number storehouse, then listen to described note that described receiving element the receives note of the order number of value-added service for carrying operator and providing.

20. terminals according to any one of claim 17-19, is characterized in that:

Described monitoring unit, number also for carrying when described transmitting element answer short message to be sent is identical with the number that the note that described receiving element receives is carried, and described number is when being present in described value added service ordering number storehouse, then listen to described transmitting element for described note described answer short message to be sent.

21. terminals according to any one of claim 16-20, is characterized in that:

Before described receiving element receives note, described transmitting element is also for sending value added service ordering note to carrier server;

Wherein, the note carrying the order number of the value-added service that operator provides that described receiving element receives is the confirmation SMS Tip that described carrier server returns for the described value added service ordering note that described transmitting element sends;

The answer short message of what described transmitting element was to be sent the carry order number of the value-added service that operator provides is the secondary-confirmation note that described transmitting element returns for the described confirmation SMS Tip that described carrier server sends.

22. terminals according to any one of claim 16-21, is characterized in that:

Described decision package, is also more than or equal to preset value for the time difference as described moment T1 and described moment T2, then triggers the transmission that described transmitting element completes the answer short message for described note.

23. terminals according to any one of claim 16-21, is characterized in that:

Described decision package, specifically for when the time difference of described moment T1 and described moment T2 is less than preset value, generates and exports information, and described information exists malice fee suction software for the described terminal pointing out the holder of described terminal to use;

Or described decision package, specifically for when the time difference of described moment T1 and described moment T2 is less than preset value, triggers described transmitting element and stops sending the answer short message for described note;

Or described decision package, specifically for when the time difference of described moment T1 and described moment T2 is less than preset value, unloads or points out the holder of described terminal to unload the application of carrying described malice fee suction software.

24. 1 kinds of terminals, is characterized in that, described terminal comprises:

Receiving element, for receiving note;

Transmitting element, for sending note;

Acquiring unit, for when the note that the note that described receiving element receives is the order number of value-added service that carries operator and provide, obtains the moment T1 that described receiving element receives described note;

Decision package, for when in the prefixed time interval of described transmitting element from described moment T1 for described short message sending answer short message, then determine that described terminal exists malice fee suction software.

25. terminals according to claim 24, is characterized in that, described terminal also comprises:

Monitoring unit, receives for monitoring described receiving element the behavior carrying the note of the order number of the value-added service that operator provides; Or, also send for monitoring described transmitting element the behavior carrying the note of the order number of the value-added service that operator provides;

Described acquiring unit, during specifically for listening to note that note that described receiving element receives is the order number of value-added service that carries operator and provide when described monitoring unit, obtains the moment T1 that described receiving element receives described note.

Described decision package, specifically for listening in the prefixed time interval of described transmitting element from described moment T1 for described short message sending answer short message when described monitoring unit, then determines that described transmitting element exists malice fee suction software.

26. terminals according to claim 25, is characterized in that, described terminal also comprises:

Then described acquiring unit, during specifically for listening to note that note that described receiving element receives is the order number of value-added service that carries operator and provide when described monitoring unit, obtain the described note T1 time of reception of described recording unit records or renewal.

27. terminals according to any one of claim 25-26, is characterized in that:

28. terminals according to any one of claim 25-27, is characterized in that:

Described monitoring unit, number also for carrying when the described answer short message sent in the prefixed time interval of described transmitting element from described moment T1 is identical with the number that the note that described receiving element receives is carried, and described number exist with described value added service ordering number storehouse in time, then listen in the prefixed time interval of described transmitting element from described moment T1 for answer short message described in described short message sending.

29., according to the terminal weighed described in any one of claim 24-28, is characterized in that:

Wherein, to be described carrier server take industry for the described increment that described transmitting element sends to the note carrying the order number of the value-added service that operator provides that described receiving element receives orders the confirmation SMS Tip that note returns;

Described transmitting element is the secondary-confirmation note that described transmitting element returns for the described confirmation SMS Tip that described carrier server sends for the answer short message of described short message sending.

30. terminals according to any one of claim 24-29, is characterized in that:

Described decision package is specifically for working as in the prefixed time interval of described transmitting element from described moment T1 for described short message sending answer short message, then generating and export information, there is malice fee suction software for the described terminal pointing out the holder of described terminal to use in described information;

Or, described decision package specifically for when in the prefixed time interval of described transmitting element from described moment T1 for described short message sending answer short message, then unload or point out the holder of described terminal to unload and carry the application of described malice fee suction software.