KR102556860B1 - Smishing call blocking system and the method - Google Patents

Abstract

The present invention relates to a system and method for blocking outgoing smishing calls, the method comprising the steps of receiving, by a SIM card, a first incoming phone number input by a user for outgoing calls of a user terminal from a service server. , Receiving an envelope command including a second incoming phone number from the user terminal, comparing the first incoming phone number and the second incoming phone number in a SIM card and comparing whether or not they match. Generating data including a result value, generating a response message according to the comparison result value in the SIM card, and transmitting the response message to the user terminal.

Description

SMISHING CALL BLOCKING SYSTEM AND THE METHOD

The present invention relates to a system and method for blocking smishing calls, and prevents damage to users due to a change in incoming phone number due to a malicious program through interworking with a modem and a subscriber identification module (SIM) card of a user terminal. It relates to a system and method for blocking outgoing smishing calls.

Recently, as the number of smartphone users increases, the damage caused by smishing, which induces the installation of malicious applications by linking to Short Message Service (SMS) containing contents such as parcel inquiry, gift certificate receipt, and wedding invitation, is increasing. there is.

For example, after installing a malicious application on the victim's terminal through the above-mentioned short message, the criminal group calls the victim and the account information in the victim's name was leaked or impersonates a public institution to tell the victim the balance of the account to another When transferring to an account or requesting money transfer, and the victim suspects that the call is fraudulent and calls the police station or bank, the installed malicious application changes the actual caller number to the phone number of the criminal group, resulting in financial damage. can happen

Accordingly, in order to prevent damage caused by smishing, telecommunication companies or public institutions remove malicious programs through anti-virus programs or provide information to customers on how to prevent smishing damage, but do not use anti-virus programs or new ones even if they are used. This type of malicious program can be installed in the user terminal, and there is a limit to indirectly providing customers with information on how to prevent smishing damage.

KR 10-2015-0124868 A

The problem to be solved by the present invention is to provide a smishing call blocking system and method for preventing damage caused by changing a received number entered by a user to a phone number of a criminal group by a malicious program installed through smishing. It's what you want to do.

The technical problems of the present invention are not limited to the technical problems mentioned above, and other technical problems not mentioned will be clearly understood by those skilled in the art from the description below.

A method for blocking outgoing smishing calls, according to an embodiment, includes receiving, by a SIM card, a first incoming phone number input by a user for outgoing a call to a user terminal from a service server, and receiving a second incoming phone number from the user terminal. Receiving an envelope command including, comparing the first received phone number and the second received phone number in a SIM card to generate data including a comparison result value on whether or not they match, and in the SIM card Generating a response message according to the comparison result value, and transmitting the response message to the user terminal.

When the comparison result value means that the first incoming phone number and the second incoming phone number match, the response message may mean that the user terminal allows the outgoing call.

When the comparison result value means that the first received telephone number and the second received telephone number do not match, the response message may mean that the user terminal does not allow the outgoing call.

When the comparison result value does not match the first destination phone number and the second destination phone number, the step of generating a response message according to the comparison result value in the SIM card determines whether or not there is at least one predetermined phone number. A confirmation step may be further included.

The preset phone number may be a phone number stored in the SIM card by the service server and/or the user through the user terminal.

If the first incoming phone number matches the at least one preset phone number, the response message does not allow the user terminal to make an outgoing call to the second incoming phone number, but calls to the first incoming phone number. may mean allowing.

The user terminal may perform an outgoing call by changing the calling number from the second called phone number to the first called phone number according to the response message.

When the first received phone number does not match the at least one preset phone number, the response message may mean that the user terminal does not allow the outgoing call.

The SIM card receives data requesting a call to be made to the first incoming phone number regardless of the comparison result value together with the envelope command from the user terminal, and the comparison result value corresponds to the first destination phone number and the first destination phone number. If the second incoming phone number does not match, the response message may mean that outgoing calls to the second incoming phone number of the user terminal are not allowed, but outgoing calls to the first incoming phone number are allowed.

The method may further include providing, by the service server, a notification regarding whether or not the outgoing call is blocked to the user terminal.

When the outgoing call of the user terminal is blocked according to the response message, the notification may include the second incoming phone number and content that the outgoing call is blocked.

If the response message means that calling to the first called phone number is allowed while not allowing the call to the second called phone number of the user terminal, the notification indicates whether or not the user is making an outgoing call. and a button UI for proceeding and canceling the outgoing call for providing a function of selecting, and the user terminal can proceed or block the outgoing call according to the user's selection.

The SIM card according to an embodiment receives a first incoming phone number input by a user for outgoing a call from a service server, and transmits an envelope command including a second incoming phone number from a user terminal. A receiving communication unit, a comparison unit that compares the first received phone number and the second received phone number to generate a comparison result value on whether or not they match, and generates a response message according to the comparison result value, and transmits the response message to the It includes a response unit provided to the user terminal.

When the comparison result value means that the first incoming phone number and the second incoming phone number match, the response message may mean that the user terminal allows the outgoing call.

When the comparison result value means that the first received telephone number and the second received telephone number do not match, the response message may mean that the user terminal does not allow the outgoing call.

The SIM card receives, from the user terminal, data requesting a call to be made to the first called telephone number regardless of the comparison result value together with the envelope command, and the comparison result value is the first called telephone number and the second incoming phone number do not match, the response message may mean that outgoing calls to the first incoming phone number are allowed while not allowing outgoing calls to the second incoming phone number of the user terminal. there is.

A storage unit for storing at least one preset phone number set by the service server and/or the user through the user terminal, wherein the response unit determines that the comparison result value is the first received phone number and the second phone number. When the received phone numbers do not match, it may be checked whether the first received phone number matches the at least one preset phone number.

When the first incoming phone number and the at least one preset phone number match, the response message does not allow the user terminal to make an outgoing call to the second incoming phone number, but calls to the first incoming phone number. may mean allowing.

When the first received phone number does not match the at least one preset phone number, the response message may mean that the user terminal does not allow the outgoing call.

A system for blocking outgoing smishing calls according to an embodiment receives a first incoming phone number for outgoing calls from a user in conjunction with a user terminal, transmits the first incoming phone number to a SIM card, and detects the outgoing call. a service server that transmits a call outgoing command to the user terminal, transmits an envelope command including a second incoming phone number to the SIM card according to the call outgoing command, and sends a response message from the SIM card and comparing the first incoming phone number and the second incoming phone number with the user terminal that proceeds with or blocks the outgoing call by receiving a call, and generates a comparison result value on whether or not they match, and a response message according to the comparison result value. and a SIM card for generating and transmitting to the user terminal.

Other embodiment specifics are included in the detailed description and drawings.

According to the smishing phone outgoing blocking system and method according to the embodiments, by checking whether the incoming phone number entered by the user and the incoming phone number in the modem for actual outgoing match, the phone number changed by the malicious program It is possible to prevent damage to users by blocking outgoing calls.

In addition, it may be advantageous to prevent user damage even if each phone number used in a plurality of smishing methods is not separately managed.

Effects according to the embodiments of the present invention are not limited by the contents exemplified above, and more diverse effects are included in the present specification.

1 is a diagram schematically showing a system for blocking outgoing smishing calls according to an embodiment of the present invention.
2 is a block diagram schematically illustrating the configuration of a user terminal according to an embodiment of the present invention.
3 is a block diagram schematically illustrating the configuration of a SIM card according to an embodiment of the present invention.
4 is a block diagram schematically illustrating the configuration of a service server according to an embodiment of the present invention.
5 is a flowchart illustrating a method of blocking outgoing smishing calls according to an embodiment of the present invention.
6 is a flowchart illustrating a method of checking whether a received phone number matches in a SIM card and generating a response message accordingly according to the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings in order to clarify the technical spirit of the present invention. In describing the present invention, if it is determined that a detailed description of a related known function or component may unnecessarily obscure the subject matter of the present invention, the detailed description will be omitted. Elements having substantially the same functional configuration in the drawings are assigned the same reference numerals and reference numerals as much as possible, even though they are displayed on different drawings. For convenience of description, the device and method are described together if necessary.

Although first, second, etc. are used to describe various components, these components are not limited by these terms, of course. These terms are only used to distinguish one component from another. Accordingly, it goes without saying that the first element mentioned below may also be the second element within the technical spirit of the present invention.

1 is a diagram schematically showing a system for blocking outgoing smishing calls according to an embodiment of the present invention.

Referring to FIG. 1 , a system for blocking outgoing smishing calls according to an embodiment may include a user terminal 100 , a SIM card 200 , a service server 300 , and a network 400 .

The user terminal 100 is a smart device possessed by a user that includes a calling function. For example, the user terminal 100 is a mobile phone, a smart phone, a smart pad, or a notebook computer. , digital broadcasting terminals, personal digital assistants (PDAs), portable multimedia players (PMPs), navigation devices, tablet PCs, and various wearable devices such as smart watches and smart bands.

The user terminal 100 may install and run applications and/or applications provided by the service server 300 . The user terminal 100 may make and receive a call by interworking with the application and/or the application. In addition, the user terminal 100 may exchange data with the service server 300 through the network 400 .

The service server 300 may transmit, to the SIM card 200 , the first received phone number input through interworking with the input unit ( 120 in FIG. 2 ) of the user terminal 100 . The service server 300 may provide a function of receiving or sending a call by interworking with the modem unit ( 130 in FIG. 2 ) of the user terminal 100 .

The service server 300 may exchange data with the user terminal 100 and/or the SIM card 200 through the network 400 . However, it is not limited thereto, and the service server 300 is implemented as an application program or application and stored in the user terminal 100, and data transmission / reception between the service server 300 and the SIM card 200 is performed by the user terminal ( 100) may be performed.

When the user terminal 100 makes an outgoing call by interlocking with the service server 300, the modem unit (130 in FIG. 2 ) of the user terminal 100 receives a call number including the second received phone number, which is the actual outgoing target phone number. An envelope may be provided to the SIM card 200 .

The SIM card 200 may be a smart card that can be attached to and detached from the user terminal 100, includes a microprocessor and a memory chip, and stores and manages various user information. For example, the SIM card 200 may be a Universal Integrated Circuit Card (UICC) including a Card Application Toolkit (CAT), but is not limited thereto.

When the SIM card 200 is installed in the user terminal 100, the SIM card 200 can exchange data with the modem unit (130 in FIG. 2) of the user terminal 100. In addition, the SIM card 200 may transmit and receive data through the service server 300 and the network 400 and/or the user terminal 100 . The SIM card 200 compares the first incoming phone number transmitted from the service server 300 with the second incoming phone number transmitted from the user terminal 100, and responds to whether or not the outgoing call is in progress according to the comparison result. A message may be provided to the user terminal 100 . In addition, the SIM card 200 may provide the first incoming phone number to the modem unit 130 of the user terminal 100 .

Accordingly, when the first incoming phone number and the second incoming phone number are different, the modem unit (130 in FIG. 2 ) of the user terminal 100 suspends (or blocks) the corresponding outgoing call or calls from the SIM card 200. Calling may be performed by changing the received first received phone number to an actual received phone number.

The network 400 is a communication network in which the user terminal 100 and the service server 300 communicate with each other, and may be configured regardless of communication aspect. For example, it may be composed of various communication networks such as a personal area network (PAN), a local area network (LAN), a metropolitan area network (MAN), and a wide area network (WAN). However, it is not limited thereto.

When the service server 300 is implemented in the form of an application program or application and stored in the user terminal 100, the network 400 may be omitted.

In this way, according to the system for blocking outgoing smishing calls according to an embodiment, a malicious program is installed in the user terminal 100, and the malicious program uses the incoming phone number input by the user during the outgoing process of the user terminal 100. Even if is changed, by checking whether the incoming phone number entered by the user and the incoming phone number of the modem (130 in FIG. . Accordingly, even when the user terminal is exposed to a malicious program through a short message for smishing, it is possible to prevent a user from being damaged by a criminal group. In addition, in the case of the smishing call blocking system according to an embodiment, whenever a call is made by the user terminal 100, it is checked whether the phone number input by the user and the phone number in the modem match Therefore, it is possible to provide convenience in preventing user damage without separately managing each phone number used in a plurality of smishing methods.

2 is a block diagram schematically illustrating the configuration of a user terminal according to an embodiment of the present invention.

Referring to FIG. 2 , the user terminal 100 may include a first communication unit 110, an input unit 120, a modem unit 130, a first storage unit 140, and a first control unit 150. The configuration of the user terminal 100 may include configurations known to those skilled in the art (eg, a display unit, a camera, a battery, a microphone, etc.), which are self-evident, so a detailed description thereof is omitted.

The first communication unit 110 may perform data communication with the service server 300 by wire or wirelessly. The first communication unit 110 is a wired Internet communication method supporting TCP/IP (Transmission Control Protocol/Internet Protocol), etc. or WCMDA (Wideband Code Division Multiple Access), LTE (Long Term Evolution), WiBro (Wireless Broadband Internet) and Data may be transmitted and received between the service server 300 and the user terminal 100 through at least one of various wireless communication methods such as WiFi (Wireless Fidelity).

Also, the first communication unit 110 may perform data communication with other user terminals (not shown). For example, the first communication unit 110 may perform data communication with other user terminals via a base station or a core network. However, it is not limited thereto, and the first communication unit 110 may directly perform data communication with other user terminals through a cellular network without going through a base station.

The first communication unit 110 may include an interface function capable of transmitting and receiving data or commands between the user terminal 100 and the SIM card 200 . However, the present invention is not limited thereto, and transmission and reception of data or commands between the user terminal 100 and the SIM card 200 may be performed by electrically and physically connecting the modem unit 130 and the SIM card 200.

The input unit 120 may include a plurality of keys capable of inputting an outgoing phone number. The input unit 120 displays a keypad that includes a plurality of keys and outputs a signal corresponding to a key being pressed and a soft keypad corresponding to the keypad on a screen, and generates key data in response to a key touched on the screen. It may include at least one of the screens.

The modem unit 130 may provide a function of converting an analog signal transmitted from a communication line into a digital signal or converting a digital signal transmitted from the user terminal 100 into an analog signal to transmit information.

When a specific event occurs in the user terminal 100, the modem unit 130 may provide information about the corresponding event to the SIM card 200 through an envelope (Call Control by NAA) command. . Here, the envelope command is for the modem unit 130 to provide event and update-related information to the SIM card 200, and the modem unit 130 responds when an event such as sending or receiving a call or text message occurs. Corresponding information may be provided to the SIM card 200 through an envelope command. For example, the envelope command may include at least one of a received telephone number, a caller's mobile country code, a mobile network code, a location area code, and a cell identity value, but is not limited thereto.

The modem unit 130 may receive a response corresponding to the envelope command from the SIM card 200 . For example, when a user makes an outgoing call using the user terminal 100, the modem unit 130 transmits an envelope command including call information to the SIM card 200, and sends a response corresponding thereto. The transmission may proceed or be stopped by receiving the signal from the SIM card 200 . In addition, the modem unit 130 may perform an outgoing call by changing the received phone number included in the response to a phone number for an actual outgoing call.

2 illustrates that the first communication unit 110 and the modem unit 130 are separate components, but is not limited thereto, and the first communication unit 110 and the modem unit 130 may be implemented as one configuration. there is.

The first storage unit 140 may store application programs and/or applications provided from the service server 300 . The first storage unit 140 may store phone calls and text messages sent and received, a plurality of contact information, etc. of the user terminal 100 in conjunction with the service server 300, but is not limited thereto. The first storage unit 140 is a database of the user terminal 100 and can be implemented in a manner known to those skilled in the art to store various types of data.

The first controller 150 may control overall operations of each component of the user terminal 100 . The first control unit 150 may perform data sharing, transfer, and linkage functions between each component of the user terminal 100 and the service server 300 . For example, when receiving a call request from the service server 300, the first control unit 150 may transmit call information including a received phone number to the modem unit 130. In addition, when a call or text message is received through the modem unit 130, the first controller 150 may transmit received information including an outgoing phone number to the service server 300. The first control unit 150 may transmit key data acquired through the input unit 120 to the service server 300 .

3 is a block diagram schematically illustrating the configuration of a SIM card 200 according to an embodiment of the present invention.

Referring to FIG. 3 , the SIM card 200 may include a second communication unit 210, a second control unit 220, a comparison unit 230, a response unit 240, and a second storage unit 250. .

The second communication unit 210 may include an interface capable of exchanging data with the user terminal 100 . In some embodiments, the second communication unit 210 may support a wireless communication function using a radio frequency signal as a communication medium within a predetermined distance (eg, within 10 m). For example, the second communication unit 210 may include a function of transmitting/receiving data with a card reader or other user terminal through Near Field Communication (NFC) or Radio Frequency Identification (RFID).

The second controller 220 may control and manage overall operations of each component of the SIM card 200 . For example, the second control unit 220 classifies various types of data transmitted through the second communication unit 210 and stores them in the second storage unit 250, or stores the data stored in the second storage unit 250 as a comparison unit. (230). In addition, the second control unit 220 may support transmission of the response message generated by the response unit 240 to the user terminal 100 through the second communication unit 210 . The second controller 220 may include a micro controller unit (MCU) in the form of a printed circuit or chip, but is not limited thereto.

The comparator 230 may compare the first received phone number stored in the second storage unit 250 through the service server 300 with the second received phone number transmitted from the modem unit 130 of the user terminal 100. there is. For example, the comparison unit 230 may compare the first received phone number and the second received phone number to determine whether they match.

The comparator 230 may provide the response unit 240 with data (or a comparison result value) on whether the first received telephone number and the second received telephone number match. The comparison unit 230 may provide the comparison result value to the response unit 240 through the second control unit 220, but is not limited thereto. For example, the comparison unit 230 may provide the comparison result value. It may be directly provided to the response unit 240.

The response unit 240 may generate a response message (or data) according to the comparison result value provided from the comparison unit 230 . For example, when the comparison result value means that the first called phone number and the second called phone number match, the response unit 240 generates a response message indicating permission for outgoing calls, and the comparison result value If this means that the first called phone number and the second called phone number do not match, a response message indicating that calling is not allowed may be generated.

In addition, the response unit 240 indicates that the comparison result value means that the first received telephone number and the second received telephone number do not match, but the first received telephone number matches a preset received telephone number. , it is possible to generate a response message allowing outgoing to the first incoming telephone number without allowing outgoing to the second incoming telephone number. In this case, the response message may include the first received call number.

Here, the preset incoming phone number may mean a incoming phone number set by the service server 300 and/or the user. For example, the preset incoming phone number may be a phone number of a government agency such as a police station, a prosecutor, a financial supervisor, a bank, etc., but is not limited thereto.

As another example, when the data received from the modem unit 130 of the user terminal 100 includes data requesting to proceed with an outgoing call to the first incoming phone number regardless of the comparison result, the response unit 240 returns the comparison result. Even if the value means that the first called phone number and the second called phone number do not match, a response message allowing an outgoing call to the first called phone number may be generated. Similarly in this case, the response message may include the first received phone number.

The response message generated by the response unit 240 may include coded data as a response value. For example, the response value may be as shown in Table 1 below, but is not limited thereto.

Coding Contents first response value 00 Allowed, no modification Second response value 01 Not allowed Third response value 02 Allowed with modification

Specifically, coded data '00' as the first response value may mean allowed, no modification, that is, phone outgoing is allowed without modification. The response unit 240 may generate a response message including a first response value when the comparison result value provided from the comparison unit 230 means that the first received telephone number and the second received telephone number match. there is.

Coded data '01' as the second response value may mean not allowed, that is, call outgoing is not allowed. The response unit 240 may generate a response message including a second response value when the result of the comparison means that the first received telephone number and the second received telephone number do not match.

Coded data '02' as the third response value may mean allowed with modification, that is, allow outgoing calls but modify the received phone number. The response unit 240 indicates that the comparison result value indicates that the first received telephone number and the second received telephone number do not match, but when the first received telephone number matches the preset telephone number, the third received telephone number A response message including a response value and the first received phone number (or a preset phone number) may be generated.

The response message generated by the response unit 240 may be transmitted to the modem unit 130 of the user terminal 100 through the second communication unit 210 . For example, the response message generated by the response unit 240 may be transmitted to the modem unit 130 through the second communication unit 210 under the control of the second control unit 220, but is not limited thereto.

As such, the SIM card 200 according to an embodiment compares the first incoming phone number input by the user with the second incoming phone number transmitted from the modem unit 130 of the user terminal 100, and responds accordingly. By generating a message and transmitting it to the modem unit 130, it is checked whether the incoming phone number intended by the user has been changed by the malicious program of the user terminal 100, and the second incoming phone number changed by the malicious program. It is possible to prevent user damage due to smishing by blocking outgoing.

The second storage unit 250 may store identification information unique to the SIM card 200 (Integrated Circuit Card Identifier, ICCID), user identification information (International Mobile Subscriber Identifier, IMSI), network information, authentication information, and the like. In addition, the second storage unit 250 may store contact information transmitted from the user terminal 100 , various media data, and call records.

The second storage unit 250 stores a security key for encrypting and decrypting communication between the user terminal 100 and the network 400, a secret key shared with an Authentication Center (AuC) for authenticating WCDMA subscribers, and the like. can be saved. In addition, the second storage unit 250 may receive and store at least one preset received telephone number from the user terminal 100 and/or the service server 300 .

In some embodiments, the second storage unit 250 may store at least one application that provides various application services such as banking, securities, credit cards, and electronic money.

4 is a block diagram schematically illustrating the configuration of a service server according to an embodiment of the present invention.

Referring to FIG. 4 , the service server 300 according to an embodiment may include a third communication unit 310, an input/output interface unit 320, a third control unit 330, and a third storage unit 340. . In some embodiments, the service server 300 may further include a notification unit 350.

The third communication unit 310 may perform data communication with the user terminal 100 by wire or wirelessly through the network 400 . Since a communication method of the third communication unit 310 may be substantially the same as that of the first communication unit 110, a detailed description thereof will be omitted.

In some embodiments, when the service server 300 is implemented in the form of an application program or application and stored and driven in the user terminal 100, the third communication unit 310 may be omitted.

The input/output interface unit 320 receives key data from the user terminal 100 and generates data or commands for making a phone call or transmitting a short message (SMS), and the third control unit 330 and/or the third communication unit 310 ) It can be transmitted to the user terminal 100 through. For example, the input/output interface unit 320 interworks with the input unit 120 of the user terminal 100 to receive a plurality of key data, and data including a received phone number corresponding thereto, the contents of a short message, and/or the like. Alternatively, a command may be generated and transmitted to the modem unit 130 of the user terminal 100 through the third control unit 330 and/or the third communication unit 310 .

In addition, the input/output interface unit 320 may receive an outgoing phone number, short message reception data, etc. from the modem unit 130 and generate output data corresponding thereto. Here, the output data displays at least one of an outgoing phone number including a user UI (User Interface), contact information corresponding to the outgoing phone number, and the contents of a short message on a display unit (not shown) of the user terminal 100. It may be data for doing, but is not limited thereto. The output data generated by the input/output interface unit 320 may be transmitted to the user terminal 100 through the third control unit 330 and/or the third communication unit 310 .

The third controller 330 may manage and control each component of the service server 300 . In addition, the third control unit 330 may manage and control interworking between each component of the service server 300 and each component of the user terminal 100, data transmission and reception, and the like.

For example, the third control unit 330 interlocks the input unit 120 of the user terminal 100 with the input/output interface unit 320 and transfers key data generated by the input unit 120 to the input/output interface unit 320. Alternatively, the modem unit 130 and the input/output interface unit 320 of the user terminal 100 may be interlocked to control transmission and reception of data and/or commands. In addition, the third controller 330 retrieves data stored in the user terminal 100 (eg, contact information, media data, call history, etc.) or transfers data stored in the third storage unit 340 to the user terminal 100. You can also provide an export function to .

In addition, when the third controller 330 transmits the key data generated by the input unit 120 of the user terminal 100 to the input/output interface unit 320, the received phone number corresponding to the key data is sent to the SIM card ( 200) can be transmitted. However, it is not limited thereto, and for example, when the third control unit 330 transmits data and/or commands including the received telephone number generated by the input/output interface unit 320 to the modem unit 130, The received phone number may be transmitted to the SIM card 200 .

The third controller 330 may generate at least one incoming phone number data for setting the preset incoming phone number by interworking with the input unit 120 of the user terminal 100 and transmit it to the SIM card 200. .

The third storage unit 340 may store contact information, media data, communication records, communication contents, and the like. The third storage unit 340 blocks outgoing calls from the modem unit 130 in response to a response message transmitted from the SIM card 200, or the incoming phone number to be outgoing from the modem unit 130 (e.g., the second reception When a call is made to an incoming phone number (eg, the first incoming phone number) different from the phone number), a blocking record or a call outgoing record may be separately classified or displayed and stored, but is not limited thereto.

In this way, the service server 300 according to an embodiment is linked with the user terminal 100 through the network 400 or implemented in the form of an application program or application and stored and driven in the user terminal 100 so that the user can By transmitting the received phone number input to the user terminal 100 to the SIM card 200, it is possible to check whether the received phone number has been changed during an outgoing process by the user terminal 100.

If the service server 300 further includes a notification unit 350, the notification unit 350 means that the response message received by the modem unit 130 from the SIM card 200 indicates that outgoing calls are not allowed; In the case where calling is allowed, but the modem unit 130 modifies the incoming phone number to be different from the incoming phone number transmitted to the SIM card 200 to allow outgoing, a notification may be sent to the user terminal 100 .

For example, when the notification unit 350 receives the response message from the modem unit 130 or directly receives the response message from the SIM card 200, and the response message means that outgoing calls are not allowed A notification including that an outgoing call is blocked may be provided to the user terminal 100 through a notification popup or a short message. In some embodiments, the notification may include information warning of damage caused by smishing, but is not limited thereto.

In addition, when the response message allows outgoing calls but modifies the incoming phone number to be different from the incoming phone number transmitted to the SIM card 200 by the modem unit 130 and allows outgoing calls, the notification unit 350 A notification including that a change in the received phone number input by the user to the user terminal 100 by a malicious program is detected may be provided through a notification pop-up or a short message. Here, the notification may include a blocked second incoming phone number, and may provide a notification before outgoing a call by the modem unit 130, but is not limited thereto.

In some embodiments, the notification unit 350 may provide the user terminal 100 with a notification including a confirmation of whether or not to proceed with an outgoing call to the received phone number input by the user. For example, the notification unit 350 provides a notification to the user terminal 100 including a button UI related to whether or not the call is in progress, that is, the progress of the call and the cancellation of the call, and the third control unit 330 provides a notification about whether or not the call is in progress. A function of controlling outgoing calls by the modem unit 130 according to a user's selection may be provided. However, the form of the notification including the notification unit 350 confirming whether or not the transmission is in progress is not limited thereto, and may be implemented in various ways.

As such, the notification unit 350 provides a notification to the user, so that the user can indirectly confirm that the user has been exposed to a malicious program due to smishing. In addition, when the notification unit 350 provides a notification including a blocked second incoming phone number, the user can recognize the second incoming phone number as a phone number of a criminal group and report it to the police station or the Financial Supervisory Service.

5 is a flowchart illustrating a method of blocking outgoing smishing calls according to an embodiment of the present invention. 6 is a flowchart illustrating a method of checking whether a received phone number matches in a SIM card and generating a response message accordingly according to the present invention.

1 to 6, the service server 300 receives a plurality of key data from the user terminal 100 (S100), generates a call command corresponding thereto, and transmits it to the user terminal 100 (S100). S200).

The service server 300 receives key data according to user input through interworking with the input unit 120 of the user terminal 100, generates a call command (or data) including a corresponding received phone number, and It can be provided to the modem unit 130 of the user terminal 100.

Transmission and reception of data, commands, etc. between the service server 300 and the user terminal 100 may be performed through the network 400, but is not limited thereto. For example, the service server 300 may be implemented as an application program or application and stored in the user terminal 100. In this case, transmission and reception of data and commands between the service server 300 and the user terminal 100 is performed by the user terminal. It can be made in various ways, such as being made by the first control unit 150 of (100).

Then, the service server 300 transmits the first received phone number to the SIM card 200 (S300).

Here, the first incoming phone number may be a incoming phone number generated by interworking with the input unit 120 of the user terminal 100 . That is, the first received phone number may correspond to the received phone number input by the user.

In FIG. 5 , transmission of the first received phone number from the service server 300 to the SIM card 200 proceeds after the step of transmitting a call outgoing command from the service server 300 to the user terminal 100 (S200). Although illustrated, it is not limited thereto. For example, the service server 300 may transmit the first received phone number to the SIM card 200 before transmitting the call origination command to the user terminal 100, and may transmit the call origination command to the user terminal 100. ) and the first received phone number may be transmitted to the SIM card 200 at the same time.

In some embodiments, the process of transmitting the first incoming phone number from the service server 300 to the SIM card 200 may be performed through the user terminal 100, but is not limited thereto.

Thereafter, the user terminal 100 transmits an envelope command to the SIM card 200 (S400).

The modem unit 130 of the user terminal 100 may transmit, to the SIM card 200, an envelope command including a second received phone number that is actually an outgoing target in response to the call outgoing command.

Here, the envelope command is for the modem unit 130 to provide event and update-related information to the SIM card 200, and the modem unit 130 responds when an event such as sending or receiving a call or text message occurs. Corresponding information may be provided to the SIM card 200 through an envelope command. For example, the envelope command may include at least one of a received telephone number, a caller's mobile country code, a mobile network code, a location area code, and a cell identity value, but is not limited thereto.

Next, the SIM card 200 checks whether the first incoming phone number and the second incoming phone number match (S500), and generates a response message (or command) corresponding thereto to send the user terminal 100 to (S600).

Specifically, referring to FIG. 6 , the comparison unit 230 of the SIM card 200 checks whether the first incoming phone number and the second incoming phone number match (S510), and data (or comparison result value) may be provided to the response unit 240 .

The response unit 240 generates a response message corresponding to the comparison result value, and the response message may be transmitted to the modem unit 130 of the user terminal 100 through the second communication unit 210, but is limited thereto. it is not going to be

When the comparison result value generated by the comparator 230 means that the first incoming phone number and the second incoming phone number match, the response unit 240 includes a first response value meaning that the outgoing call is allowed. A response message is generated and the corresponding response message is provided to the modem unit 130 (S610).

If the comparison result value means that the first received telephone number and the second received telephone number do not match, the response unit 240 checks whether a preset telephone number exists (S520).

Here, the preset phone number is a phone number stored in the second storage unit 250 and may mean a received phone number set by the service server 300 and/or the user. For example, the preset incoming phone number may be a phone number of a government agency such as a police station, a prosecutor, a financial supervisor, a bank, etc., but is not limited thereto.

If the preset phone number does not exist, the response unit 240 generates a response message including a second response value indicating that calling is not allowed, and provides the corresponding response message to the modem unit 130 ( S630).

If a preset phone number exists, the response unit 240 checks whether the first received phone number matches at least one preset phone number (S530), and at least one of the first received phone numbers matches the preset phone number. If one preset phone number matches, a response message including a third response value indicating that calling to the first incoming phone number is allowed without allowing outgoing calls to the second called phone number is generated. and provides the corresponding response message to the modem unit 130 (S620).

The response message including the third response value may include the first received phone number.

In addition, when the first received phone number and at least one preset phone number do not match, the response unit 240 generates a response message including a second response value indicating that outgoing calls are not allowed, and the corresponding A response message is provided to the modem unit 130 (S630).

The first to third response values generated by the response unit 240 may include coded data, and for example, the response values may be as shown in Table 1 described above, but are not limited thereto.

In FIG. 6 , the process for generating the first to third response values by the responder 240 includes the comparison result value received from the comparator 230, the presence or absence of a preset phone number, and the first received phone number and the preset phone number. It is exemplified that it is determined according to whether the phone number matches, but is not limited thereto.

For example, if the user sets the service server 300 in advance to make a call to the first incoming phone number even when the first incoming phone number and the second incoming phone number are different, the response unit 240 ) may generate a response message including the third response value regardless of the presence or absence of a preset phone number.

Finally, the user terminal 100 proceeds or blocks outgoing calls according to the response message received from the SIM card 200 (S700).

The modem unit 130 of the user terminal 100 may make or block a call according to a response message received from the SIM card 200 .

For example, when the first response value is included in the response message, the modem unit 130 may initiate a call without modifying the call target number, that is, make a call to the second received phone number.

When the second response value is included in the response message, the modem unit 130 may block outgoing calls.

In addition, when the response message includes the third response value, the modem unit 130 may change the call destination number to the first received phone number included in the response message and make an outgoing call.

In this way, according to the method for blocking outgoing calls from smishing according to an embodiment, even if the incoming phone number input by the user is changed in the process of outgoing a call, outgoing calls to the changed incoming phone number are blocked or incoming calls entered by the user are blocked. By allowing a call to be made to the phone number, it is possible to prevent damage to the user due to smishing by a criminal group.

In addition, since it is checked whether the phone number input by the user and the phone number in the modem match each time an outgoing call is made by the user terminal 100, each phone number used in the plurality of smishing methods is checked. Even without separate management, it is possible to provide convenience in preventing user damage caused by smishing.

In some embodiments, the modem unit 130 of the user terminal 100 provides the response message to the service server 300, and the notification unit 350 of the service server 300 sends a notification corresponding to the response message. It can be provided to the user terminal 100 .

For example, when the notification unit 350 receives the response message from the modem unit 130 or directly receives the response message from the SIM card 200, and the response message means that outgoing calls are not allowed A notification including that an outgoing call is blocked may be provided to the user terminal 100 through a notification popup or a short message. The notification may include information warning damage caused by smishing, but is not limited thereto.

In addition, when the response message allows outgoing calls but modifies the incoming phone number to be different from the incoming phone number transmitted to the SIM card 200 by the modem unit 130 and allows outgoing calls, the notification unit 350 A notification including that a change in the received phone number input by the user to the user terminal 100 by a malicious program is detected may be provided through a notification pop-up or a short message. Here, the notification may include a blocked second incoming phone number, and may provide a notification before outgoing a call by the modem unit 130, but is not limited thereto.

The notification unit 350 may provide the user terminal 100 with a notification including a confirmation as to whether or not to proceed with an outgoing call to the received phone number input by the user. For example, the notification unit 350 provides a notification to the user terminal 100 including a button UI related to whether or not the call is in progress, that is, the progress of the call and the cancellation of the call, and the third control unit 330 provides a notification about whether or not the call is in progress. A function of controlling outgoing calls by the modem unit 130 according to a user's selection may be provided. However, the form of the notification including the notification unit 350 confirming whether or not the transmission is in progress is not limited thereto, and may be implemented in various ways.

As such, the notification unit 350 provides a notification to the user, so that the user can indirectly confirm that the user has been exposed to a malicious program due to smishing. In addition, when the notification unit 350 provides a notification including a blocked second incoming phone number, the user can recognize the second incoming phone number as a phone number of a criminal group and report it to the police station or the Financial Supervisory Service.

So far, the present invention has been looked at in detail, focusing on preferred embodiments shown in the drawings. These embodiments are merely illustrative rather than limiting of this invention, and should be considered in an illustrative rather than a limiting sense. The true technical scope of protection of the present invention should be determined by the technical spirit of the appended claims rather than the foregoing description. Although specific terms have been used in this specification, they are only used for the purpose of explaining the concept of the present invention, and are not used to limit the scope of the present invention described in the meaning or claims. Each step of the present invention need not necessarily be performed in the order described and may be performed in parallel, selectively or separately. Those skilled in the art to which the present invention pertains will understand that various modifications and other equivalent embodiments are possible without departing from the essential technical spirit of the present invention claimed in the claims. Equivalents should be understood to include currently known equivalents as well as equivalents developed in the future, that is, all elements invented to perform the same function regardless of structure.

100: user terminal 200: SIM card
300: service server 110: first communication unit
120: input unit 130: modem unit
140: first storage unit 150: first control unit
230: comparison unit 240: response unit
320: input/output interface unit 350: notification unit

Claims (20)

receiving, by a SIM card, a first received phone number input by a user for outgoing a first call of a user terminal from a service server;
receiving, by the SIM card, an envelope command including a second incoming phone number from the user terminal;
comparing the first incoming phone number and the second incoming phone number in the SIM card to generate data including a comparison result value on whether or not they match; and
Generating a response message according to the comparison result value in the SIM card and transmitting the response message to the user terminal;
The response message means that the user terminal allows or does not allow the first call to be made according to the comparison result value,
Wherein the second incoming phone number is an actual outgoing phone number generated as the user inputs the first incoming phone number into the user terminal for outgoing the first call. According to claim 1,
When the comparison result value means that the first incoming phone number and the second incoming phone number match, the response message means that the user terminal allows the outgoing call. According to claim 1,
When the comparison result value means that the first incoming phone number and the second incoming phone number do not match, the response message blocks outgoing smishing calls, which means that the user terminal does not allow the outgoing call. method. According to claim 1,
When the comparison result value does not match the first destination phone number and the second destination phone number, the step of generating a response message according to the comparison result value in the SIM card determines whether or not there is at least one predetermined phone number. A method for blocking outgoing smishing calls, further comprising the step of checking. According to claim 4,
The preset phone number is a phone number stored in the SIM card by the service server and/or the user through the user terminal. receiving, by a SIM card, a first received phone number input by a user for outgoing a call to a user terminal from a service server;
receiving, by the SIM card, an envelope command including a second incoming phone number from the user terminal;
comparing the first incoming phone number and the second incoming phone number in the SIM card to generate data including a comparison result value on whether or not they match; and
Generating a response message according to the comparison result value in the SIM card and transmitting the response message to the user terminal;
When the comparison result value does not match the first destination phone number and the second destination phone number, the step of generating a response message according to the comparison result value in the SIM card determines whether or not there is at least one predetermined phone number. Including further steps to check,
The preset phone number is a phone number stored in the SIM card by the service server and/or the user through the user terminal;
If the first incoming phone number matches the at least one preset phone number, the response message does not allow the user terminal to make an outgoing call to the second incoming phone number, but calls to the first incoming phone number. How to block outgoing smishing calls, which means to allow. According to claim 6,
Wherein the user terminal changes the incoming phone number for outgoing from the second incoming phone number to the first incoming phone number according to the response message and proceeds with the outgoing call. According to claim 6,
If the first received phone number does not match the at least one preset phone number, the response message means that the user terminal does not allow the call to be made by smishing. receiving, by a SIM card, a first received phone number input by a user for outgoing a call to a user terminal from a service server;
receiving, by the SIM card, an envelope command including a second incoming phone number from the user terminal;
comparing the first incoming phone number and the second incoming phone number in the SIM card to generate data including a comparison result value on whether or not they match; and
Generating a response message according to the comparison result value in the SIM card and transmitting the response message to the user terminal;
The SIM card receives data requesting to proceed with an outgoing call to the first incoming telephone number regardless of the comparison result value together with the envelope command from the user terminal;
If the comparison result value does not match the first incoming phone number and the second incoming phone number, the response message does not allow the user terminal to make an outgoing call to the second incoming phone number, but the first incoming phone number A method of blocking outgoing smishing calls, which means allowing outgoing calls to the phone number. According to claim 1,
The method of blocking outgoing smishing calls further comprising: providing, by the service server, a notification to the user terminal as to whether or not the outgoing calls are blocked. According to claim 10,
When the outgoing call of the user terminal is blocked according to the response message, the notification includes the second received phone number and content that the outgoing call is blocked. According to claim 10,
When the response message means that calling to the first called phone number is allowed without allowing the call to the second called phone number of the user terminal,
The notification includes a button UI related to the progress and cancellation of the call to provide the user with a function to select whether or not to proceed with the call;
Wherein the user terminal proceeds or blocks the outgoing call according to the user's selection. A communication unit that receives a first incoming phone number input by a user into a user terminal for outgoing a first call from a service server and receives an envelope command including a second incoming phone number from the user terminal;
a comparison unit which compares the first received telephone number with the second received telephone number and generates a comparison result value on whether or not they match; and
A response unit generating a response message according to the comparison result value and providing the response message to the user terminal;
The response message means that the user terminal allows or does not allow the first call to be made according to the comparison result value,
The second incoming phone number is an actual outgoing phone number generated when the user inputs the first incoming phone number into the user terminal for outgoing the first call. According to claim 13,
If the comparison result value means that the first incoming phone number and the second incoming phone number match, the response message means that the user terminal allows the outgoing call. According to claim 13,
If the comparison result value means that the first incoming phone number and the second incoming phone number do not match, the response message means that the user terminal does not allow the outgoing call. A communication unit that receives a first incoming phone number input by a user for outgoing a call from a service server and receives an envelope command including a second incoming phone number from a user terminal;
a comparison unit which compares the first received telephone number with the second received telephone number and generates a comparison result value on whether or not they match; and
A response unit generating a response message according to the comparison result value and providing the response message to the user terminal;
Receiving, from the user terminal, data requesting to proceed with an outgoing call to the first received telephone number regardless of the comparison result value together with the envelope command;
If the comparison result value does not match the first incoming phone number and the second incoming phone number, the response message does not allow the user terminal to make an outgoing call to the second incoming phone number, but the first incoming call A SIM card that means it allows calling to the number. According to claim 13,
A storage unit for storing at least one preset phone number set by the service server and/or the user through the user terminal; further comprising:
The response unit, when the comparison result value does not match the first incoming phone number and the second incoming phone number, determines whether the first incoming phone number matches the at least one predetermined phone number, the SIM card . According to claim 17,
When the first incoming phone number and the at least one preset phone number match, the response message does not allow the user terminal to make an outgoing call to the second incoming phone number, but calls to the first incoming phone number. sim card, which means to allow According to claim 17,
If the first received phone number does not match the at least one preset phone number, the response message indicates that the user terminal is not allowed to make an outgoing call. It interworks with the user terminal to receive a first incoming phone number for outgoing a first call from the user, transmits the first incoming phone number to the SIM card, and sends a call outgoing command for outgoing the first call to the user terminal. a service server that transmits;
According to the call origination command, an envelope command including a second incoming phone number for the first call origination is transmitted to the SIM card, and a response message is received from the SIM card to initiate the call. The user terminal proceeding or blocking; and
A SIM card that compares the first incoming phone number and the second incoming phone number to generate a comparison result value related to whether or not they match, and generates a response message according to the comparison result value and transmits the message to the user terminal. ,
The response message means that the user terminal allows or does not allow the first call to be made according to the comparison result value,
Wherein the second incoming phone number is an actual outgoing phone number generated as the user inputs the first incoming phone number into the user terminal for outgoing the first call.