KR100869871B1 - Method for detecting a illegal call - Google Patents

Abstract

The present invention relates to a method of detecting a call between the operators using a Signaling System No. 7 (SS7) network monitoring system.

An unsatisfied call detection method of the present invention includes the steps of: collecting, by an access means of an SS7 network monitoring system, an IDN (ISDN User Protocol) message transmitted on a signal link of the interconnection section; The remote processing device of the SS7 network monitoring system includes at least one of a signal link, a call incoming / outgoing call, a call connection time and duration, a call transfer status, a calling number, and a called number for each call from the collected ISUP message. Generating call detail record (CDR) data including information; And detecting, by the central server of the SS7 network monitoring system, collecting and storing the CDR data from the remote processing apparatus, and searching the CDR data with a search condition for detecting an unsatisfactory call at the request of an operator. It is characterized by including.

Unsuccessful call, SS7, CDR data, ISUP message

Description

{Method for detecting a illegal call}             

1 is a network diagram showing an unconventional call detection system using an SS7 network monitoring system according to the present invention;

2 and 3 are diagrams illustrating an interlocking network configuration for explaining a call type of a non-combination between operators;

4 and 5 are flowcharts illustrating a method of detecting an unscheduled call according to the present invention.

※ Explanation of code about main part of drawing ※

111, 121, 131: exchanger

112, 122, 132: gateway signal relay point (GW-STP)

140: SS7 network monitoring system

141: connection point 142-1, 142-2: remote processing unit

143: central server 144: broadband network (WAN)

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a call detection method that is not met. More particularly, the present invention relates to a method for detecting a call between parties that uses a signaling system No. 7 (SS7) network monitoring system.

An arc of agreement between operators is a call that has not been agreed to in the interconnection agreement between the operators, and an arc of agreement may occur in the interconnection section between the operators.

Conventionally, the call of the union was detected at the exchanger, and the call of the union was collected and processed at the central billing settlement. That is, the exchange in each region providing access detects an unsatisfied call by filtering information such as call origination number, call destination number, relay exchange, and call transfer for all calls. The detected unsatisfactory call was collected at a billing settlement in each region, and then collected at a central billing settlement and processed.

Detecting unsuccessful calls at the exchange is costly and additional because it requires changing the source coding of the exchange software for different types of unsuccessful calls, and performing separate filtering and information gathering functions to detect unscheduled calls in addition to call switching. There is a problem that the call processing capacity of the exchange is lowered due to an increase in load. In addition, since the call of the United States detected at the exchange is collected and processed through the local billing settlement center and the central billing settlement settlement, this requires one or two months to collect and process the data and additional costs. There is this.

Therefore, in the related art, since it takes one month or two months from the call generation to the processing of the unscheduled call, there is a problem in that it is difficult to immediately and effectively respond to the unscheduled call of other operators.

An object of the present invention devised to solve the above problems of the prior art, by using the SS7 network monitoring system to detect the ISUP (ISDN User Part) messages for each call, call detail record from the ISUP message (Call Detail Record) (Hereinafter, referred to as CDR) data, and to provide a method for detecting an unidentified call from the CDR data.

Unconventional call detection method according to the present invention for achieving the above object, using an SS7 network monitoring system connected to the interconnection section with any other provider,

Collecting, by the access means of the SS7 network monitoring system, an ISUP (ISDN User Protocol) message transmitted on the signal link of the interconnection section;

The remote processing device of the SS7 network monitoring system includes at least one of a signal link, a call incoming / outgoing call, a call connection time and duration, a call transfer status, a calling number, and a called number for each call from the collected ISUP message. Generating call detail record (CDR) data including information; And

And collecting, by the central server of the SS7 network monitoring system, the CDR data from the remote processing apparatus, and retrieving the CDR data by retrieving the CDR data according to a search condition for detection of an unsatisfactory call according to an operator's request. It is characterized by.

Hereinafter, with reference to the accompanying drawings will be described in more detail "undetected call detection method" according to an embodiment of the present invention.

Signaling System No.7 (SS7) Network Monitoring System is a system to support the monitoring, control and maintenance of the original SS7 network itself. The operator checks the quality of service through the measurement and statistics of the SS7 message. In case of deterioration of service quality, it supports the maintenance of own network. Generally, SS7 network monitoring system is installed and used in SS7 network of own network.

1 is a block diagram of an unconfirmed call detection system between operators using the SS7 network monitoring system according to the present invention. In FIG. 1, it is assumed that an interconnection agreement is concluded between operator A 110 and operator B 120 and between operator D 130 and operator B 120. At this time, a trunk is configured between the exchanger 111 of the operator A and the exchanger 121 of the operator B, and between the exchanger 131 of the operator D and the exchanger 121 of the operator B, and a call is exchanged for an exchange period. do. In addition, between the gateway-signaling transfer point (hereinafter referred to as GW-STP) 112 of the operator A and the GW-STP 122 of the operator B, and the GW-STP 132 of the operator D. A signal link is connected between the GW-STP 122 of the operator B and a signal is transferred between the GW-STP. In the present embodiment, it is assumed that the operator A is a mobile operator, the operator B is a wired operator, and the operator D is a wired operator. In addition, it is assumed that the carrier C disclosed in FIGS. 2 and 3 to be described later is a mobile operator.

SS7 network monitoring system 140 is connected to a connection section (signal link) connecting each GW-STP for detecting a call between the carriers according to the present invention.

SS7 network monitoring system 140 collects ISUP (ISDN User Part) messages used to establish call between providers from the signal link between the carriers through the access point 141 to generate call detail record (CDR) data for each call Remote processing units 142-1 and 142-2, and a central server 143 for detecting an unsuccessful call from CDR data for each call collected from the remote processing units 142-1 and 142-2. The remote processing units 142-1 and 142-2 and the central server 143 are connected through a wide area network (WAN) 144.

The access point 141 is connected to a signal link connecting the GW-STP between operators to collect an ISUP message transmitted through the signal link. The ISUP message includes an initial address message (IAM), an address complete message (ACM), and an ANM ( answer message), REL (release message) and RLC (release complete message) are included. The remote processing units 142-1 and 142-2 generate CDR data for the corresponding call from the ISUP message collected through the access point 141 and provide the CDR data to the central server 143 through the WAN 144.

Looking at the process by which the remote processing units 142-1 and 142-2 generate the CDR data, the remote processing units 142-1 and 142-2 first collect an IAM message and receive an incoming signal point code from the IAM message. Extracts parameter information such as (DPC: Destination Point Code), Originating Point Code (OPC), and Circuit Identification Code (CIC). Then, the remote processing unit 142-1 sends an ACM message having the same parameter value as the DPC, OPC, and CIC parameters extracted from the IAM to the remote processing unit 142-2 connected to another signal link connected with the service provider. Ask them to send you ANM messages, REL messages, and RLC messages. The neighboring remote processing unit 142-2 receiving the request collects the ACM message, the ANM message, the REL message, and the RLC message having the requested DPC, OPC, and CIC parameters, and transmits them to the corresponding remote processing unit 142-1. .

Through the above process, the remote processing unit 142-1 collects an IAM message, an ACM message, an ANM message, an REL message, and an RLC message for a call, and whether the call is received or received from each message, the call start time and end. Time, DPC, OPC, CIC, Called Rarty Number, Calling Party Number, Charge Indicator, Call Duration, Call Release Cause, Call Redirection Information Extracts information such as and generates CDR data to transmit to the central server (143). The central server stores this CDR data in a database with the structure shown in Table 1.

In / Out Arc start time Call end time DPC OPC Called phone number Caller's phone number Call duration Billing Information Call forwarding 0 (outgoing / 1 (incoming broadcast)) Year-month-day-hour-minute-second Year-month-day-hour-minute-second Incoming signal point code Outgoing Signal Point Code Operator Identification Number-Subscriber Identification Number Operator Identification Number-Subscriber Identification Number second won 0 (not transferred) / 1 (transferd)

That is, the CDR data includes information such as incoming / outgoing call, call connection start time and call time, call redirection, caller's phone number and called party's phone number. At the request of the operator, the central server 143 searches the database in which the CDR data is stored as a search condition for detecting the unsatisfactory agreement and detects the unsatisfactory call.

If there is agreement between direct operators between the first providers but no agreement is made for the connection of the relay call, there is a call type in which an originating party arrives at the destination after passing through unconsented relay providers. As shown in FIG. 2, the call types of the United States are as follows. Operator B and Operator A, Operator B and Operator C, Operator B and Operator D, Operator A and Operator C, and Operator A and Operator D respectively agree on direct access. However, this happens when Business B is not agreed as a call relay. In this case, when the exchange 111 of the operator A and the exchange 151 of the operator C are directly connected to each other, the direct call is connected, or the exchange A of the operator A and the exchange 131 of the operator D are directly connected to each other. Is normal routing. However, the exchanger 111 of the operator A and the exchanger 151 of the operator C are connected through the exchanger 121 of the operator B, or the exchanger 111 of the operator A and the exchanger 131 of the operator D are connected to the exchanger of the operator B ( If the connection through 121) is an abnormal routing, the call using the operator B's exchange 121 as a simple relay exchange from the operator B's point of view is an unsatisfactory call. That is, the routing indicated by the dotted arrow in the figure is a normal routing, and the routing indicated by the solid arrow is an abnormal routing, which is an arc of mismatch. From the point of view of the operator B, it is necessary to detect an unscheduled call that uses itself as a simple relay service and take appropriate action on the originating service provider of the call.

As a second type of call of the United States, if there is an agreement on direct access between operators, but not on a connection via another operator, the calling party will be called by the other operator (the operator trying to detect the call). There is an arc type. This non-consensus call type occurs when a direct connection between the operator A and the operator B is agreed as shown in FIG. 3, but the case where the operator A is connected to the operator B via the operator C is not agreed. The direct connection (dashed arrow) from the operator A's exchange 111 to the operator B's exchange 121 is normal routing, and the operator B's exchange 121 through the operator C's exchange 151 through the operator C's exchange 151. (Solid arrow) is an abnormal routing, an arc of mismatch.

This embodiment proposes a method of detecting the two types of unconsensus calls from the operator B's point of view.

Referring to FIG. 4, a method of detecting a call of a union connected to a carrier C or a carrier D through a carrier B in the uncalled call types of FIG. 2 will be described below.                     

First, the connection point of the SS7 network monitoring system is connected to the signal link between the GW-STP between the operator A and the operator B (S401). The remote processing apparatus collects the ISUP messages of all calls between the service provider A and the service provider B through this access point, generates CDR data for each call, and delivers them to the central server (S402). Then, the central server stores the CDR data for all calls in the database in the structure shown in Table 1 (S403).

Thereafter, when a command is inputted from the operator to detect an unsigned call for illegally simply relaying the own carrier, which is the operator belonging to the operator (S404), the central server searches for the call of the unanswered call for all calls relayed to the operator B. The search conditions. In the search condition, select the signal link between the operator A and the operator B as the search target signal link, and select the incoming / outgoing parameter that is relayed from the operator A to the operator B as the incoming / outgoing parameter, and the called number and the call Since whether the transfer to the operator C or the operator D is a legitimate consensus call is selected (S405).

The central server simply selects a signal link between the operator A and the operator B as a search target signal link and retrieves the incoming call to the operator B, in order to search for an unsent call received by the operator C or the operator D by simply relaying the operator B from the operator A. Set the incoming / outgoing parameters to 1 to set up the traffic. In this case, if the input / output relay parameter is 0 for the operator B, the traffic is relayed from the operator B to the operator A. If the input / output parameter is 1, the traffic is relayed from the operator A to the operator B.

Then, the called party's telephone number is set to the prefix of the company C or the company D. In addition, call redirection is selected as a value that is not called. Call forwarding includes call reroute or call forwarding. A parameter indicating whether a call is forwarded is set to 0 and selected as a non-call forwarded value. The central server searches for CDR data of all calls with these search conditions (S406). If a call meeting the above-mentioned search condition is found, the central server displays the call information to the operator (S407). Then, the operator can simply relay the operator B from the operator A to know the information about the call of the United States that is received by the operator C or the operator D.

In the same way, if the connection point of the SS7 network monitoring system and the remote processing device are respectively connected to the signal link between the operator B and the operator C and the signal link between the operator B and the operator D, the operator B or the operator D By simply relaying, it is possible to search for an unscheduled call that is received by the operator A.

That is, the remote processing device connected with the access point to the signal link between the operator B and the operator C and the signal link between the operator B and the operator D collects ISUP messages transmitted and received on each signal link to generate CDR data for all calls. Then provide it to the central server. The central server stores this CDR data in a database. When the operator inputs a call detection command from the operator C or the operator D to the operator A by simply relaying the operator B, the central server detects the call by explaining the search condition for the CDR data. Establish a signaling link between the operator B and the operator C or a signal link between the operator B and the operator D, set up incoming traffic as an incoming / outgoing parameter, prefix of the operator A with the called number, and finally no call transfer. Set the search condition to the wrong value and search the database to detect the call of mismatch.

Next, a method of detecting a call of a non-route routed to a service provider B via the unconfirmed service provider C in the service provider A, rather than being directly routed to the service provider B as shown in FIG. 3, will be described with reference to FIG. 5.

In this case, the connection point of the SS7 network monitoring system and the remote processing device are connected to the signal link between the operator C and the operator B (S501). Then, the remote processing device collects all ISUP messages between the provider C and the provider B to generate CDR data for all calls and provide them to the central server (S502), and the central server stores the CDR data in a database ( S503).

If a call detection command that is received from the operator A to the operator B is simply relayed from the operator A to the operator B (S504), the central server sets a condition for searching a database storing the CDR data (S505). That is, the central server sets the signal link between the service provider B and the service provider C as the search target signal link, sets the incoming call to the service provider B as the incoming / outgoing relay parameter, the prefix of the service provider A as the calling number, and finally The search condition is set to a value that is not transferred, and the CDR data is searched (S506). The central server searches the CDR database, extracts the call information corresponding to the search conditions and displays it to the operator (S507).

While the invention has been described above based on the preferred embodiments thereof, these embodiments are intended to illustrate rather than limit the invention. It will be apparent to those skilled in the art that various changes, modifications, or adjustments to the above embodiments can be made without departing from the spirit of the invention. Therefore, the protection scope of the present invention will be limited only by the appended claims, and should be construed as including all such changes, modifications or adjustments.

As described above, according to the present invention, when the SS7 network monitoring system is applied to the SS7 network of the service provider's interconnection section and used to detect unsatisfactory call between the service providers, the remote processing apparatus generates CDR data to almost the central server via the WAN. It delivers in real time, and the operator of the central server combines and filters various parameters from this CDR data to detect unscheduled calls.Therefore, it does not require additional exchange software supplement cost and no additional load added to the exchange. It does not deteriorate. In addition, since the data monitored by the remote processing device is delivered to the central server in near real time and processed in a batch, no separate data processing time and cost are required, and effective and immediate response can be made to the call of another operator.

Claims (3)

In the call detection method using the SS7 network monitoring system connected to the interconnection section with any other provider, Collecting, by the access means of the SS7 network monitoring system, an ISUP (ISDN User Protocol) message transmitted on the signal link of the interconnection section; The remote processing device of the SS7 network monitoring system includes at least one of a signal link, a call incoming / outgoing call, a call connection time and duration, a call transfer status, a calling number, and a called number for each call from the collected ISUP message. Generating call detail record (CDR) data including information; And The central server of the SS7 network monitoring system collects and stores the CDR data from the remote processing device, and searches for the CDR data in accordance with a set of unsatisfactory call detection conditions to detect a call of the unsatisfactory Detection method. The method of claim 1, wherein the call detection step of the mismatch, If a non-consensus call detection command is received from an operator from any other originator to the other party by simply relaying its own company, which is the operator to which the operator belongs, the central server signals the originator and the own company to be searched. Select a link, set a call that is not call redirection among traffic relayed to the own carrier in the selected search target signal link, and set the called party number as the prefix of the called operator; Undetected call detection method characterized in that it detects the call of the unintentional call illegally received by the other operator using the simple relay function. The method of claim 1, wherein the call detection step of the mismatch, If a non-consensus call detection command is received from an operator from any other originating operator to a simple relay of any relay service and is received by the operator as the operator belonging to the operator, the central server searches for the relay operator and the own carrier. Selects a signal link, sets a call that is not call redirection among traffic relayed to the own carrier in the selected search target signal link, sets a call originating number as the prefix of the calling operator, The call detection method of the agreement, characterized in that for detecting the call of the unintentional call to the owner's side illegally using the simple relay function of the operator.

Images