WO2011153749A1

WO2011153749A1 - Method and apparatus for preventing malicious subscriptions using third party interactive voice response platform

Info

Publication number: WO2011153749A1
Application number: PCT/CN2010/077147
Authority: WO
Inventors: 刘绍琼
Original assignee: 中兴通讯股份有限公司
Priority date: 2010-06-09
Filing date: 2010-09-20
Publication date: 2011-12-15
Also published as: CN101888619A

Abstract

Disclosed are a method and an apparatus for preventing malicious subscriptions using a third party interactive voice response (IVR) platform, wherein the method includes: when a user terminal performs a subscription to a ring back tone through a third party IVR platform, a color ring back tone system stores the record of the user terminal calling the third party IVR platform; when the third party IVR platform initiates a request for subscribing the ring back tone to the color ring back tone system, the color ring back tone system performs the subscription operation if it is determined after verification that the record of the user terminal calling the third party IVR platform exists. The scheme of the present invention can realize the purposes of enhancing the safety of the color ring back tone system, and reducing unnecessary troubles brought to operators and users due to malicious subscriptions.

Description

Method and apparatus for preventing malicious ordering by using third party interactive voice response platform

The present invention relates to a ring back tone system security technique, and more particularly to a method and apparatus for preventing malicious ordering using a third party interactive voice response platform. Background technique

Currently, the user can select a ring tone through a third-party IVR (Interactive Voice Response) platform. The third-party IVR platform will assemble a ring tone message to the ring back tone system to complete the ring tones subscription. There are usually two ways to access the third-party IVR platform: one is to dial the IVR access code of the CRBT system (such as 12530) and then press the button to go to the third-party IVR platform. The other is to directly dial the third-party IVR platform. IVR access code (such as 12530300).

Based on the existing access to the third-party IVR platform, some criminals will use the third-party IVR platform to directly send the ringing tone message to the CRBT system without the user dialing the IVR access code, and maliciously order ringtones for a large number of users. Therefore, it poses a great threat to the security of the CRBT system. Summary of the invention

In view of the foregoing analysis, the present invention is directed to a method and apparatus for preventing malicious ordering by using a third-party interactive voice response platform, which is used to solve the problem of using a third-party IVR platform to maliciously order ringtones for users in the prior art. Security issue.

In order to solve the above technical problem, the technical solution of the present invention is implemented as follows:

A method for preventing malicious ordering by using a third party interactive voice response IVR platform, the method comprising:

A: When the user terminal subscribes to the ringtone through the third-party IVR platform, the ring back tone system saves The user terminal calls a record of the third party IVR platform;

B: When the third-party IVR platform initiates a subscription ring tone request to the CRBT system, the CRBT system performs a subscription operation by verifying that there is a record of the user terminal calling the third-party IVR platform.

The step A includes: after the user terminal accesses the CRBT system through the IVR access code of the CRBT system, sends a request to the CRBT system to call the third-party IVR platform, and the CRBT system saves the record of the user terminal calling the third-party IVR platform. , and forward the call to a third-party IVR platform.

The step A includes: when the user terminal accesses the third-party IVR access code directly through the third-party IVR access code to subscribe to the ring tone, triggers the CRBT system, and the CRBT system saves the record of the user terminal calling the third-party IVR platform, and notifies the The tripartite IVR platform continues to be processed.

The step B specifically includes:

B1: The third-party IVR platform constructs a ringtone order message and sends it to the ring back tone system;

B2: The CRBT system verifies whether there is a valid record of the user terminal calling the third party IVR platform. When it is confirmed that the user terminal calls the valid record of the third party IVR platform, the order operation is performed and the order result is returned.

The step B2 specifically includes:

B21: The CRBT system verifies whether there is a record that the user terminal calls the third-party IVR platform: If yes, perform step B22; otherwise, notify the third-party IVR platform that the ring tone is not allowed to be ordered;

B22: The CRBT system verifies whether the record of the user terminal calling the third-party IVR platform is within the valid period of time, and if so, performs the ordering operation and returns the result of the successful order, otherwise returns the result of the order failure.

A device for preventing malicious ordering by using a third-party interactive voice response platform, including: a storage module and an ordering module, wherein

The storage module is configured to save a record of the user terminal calling a third-party IVR platform when the user terminal subscribes to the ringtone through the third-party IVR platform;

The ordering module is configured to initiate a ringing tone request to the CRBT system on the third-party IVR platform And verifying, in the storage module, whether the user terminal dials a record of the third-party IVR platform, and completes the ordering operation when confirming that the user terminal has dialed the record of the access code.

The storage module is specifically configured to: when a user terminal calls a CRBT system through a color ring system IVR access code, and then transfers to a third-party IVR platform or directly enters a third-party IVR platform to perform a ring tone ordering through a third-party IVR access code. , save the record of the user terminal calling the third-party IVR platform.

The ordering module specifically includes: a message sending unit and a verifying unit, wherein the message sending unit is configured to construct a ring tone order message and send the message to the verification unit of the CRBT system; the verification unit is configured to receive the ring according to the ring The tone subscription message verifies whether there is a valid record of the user terminal calling the third-party IVR platform in the storage module, and when confirming that the user terminal calls a valid record of the third-party IVR platform, performs a subscription operation and returns the order result.

The verification unit is specifically configured to: verify, according to the received ringtone subscription message, whether there is a record of the user terminal calling the third-party IVR platform: If yes, further verify whether the record is within a predetermined effective period, and if yes, perform a subscription operation And return the result of the successful order, otherwise return the result of the order failure; if not, notify the third-party IVR platform does not allow ringing tone.

The beneficial effects of the present invention are as follows:

The invention can achieve the purpose of enhancing the security of the CRBT system, and reduce unnecessary troubles caused by malicious ordering to operators and users.

In addition, in the embodiment of the present invention, an effective aging is added, and it is considered that the user terminal calls the third-party IVR platform to initiate the subscription within the effective aging range of the configuration, otherwise it is considered illegal, which can further reduce the adoption. The probability that a third-party IVR platform will give users a malicious order.

Other features and advantages of the invention will be set forth in the description in the description which follows. The objectives and other advantages of the invention will be apparent from the description, the claims and the appended claims. Constructed to achieve and obtain. DRAWINGS

1 is a schematic flowchart of a ringtone system IVR access code to a third party IVR platform to subscribe to a ring tone in the method according to the embodiment of the present invention;

2 is a schematic diagram of a process for a user to directly dial a third-party IVR access code to subscribe to a ring tone according to an embodiment of the present invention;

3 is a schematic flowchart of a ring back tone system requesting a subscription ring tone request initiated by a third-party IVR platform according to an embodiment of the present invention;

FIG. 4 is a schematic structural diagram of an apparatus according to an embodiment of the present invention. detailed description

The preferred embodiments of the present invention are described in detail below with reference to the accompanying drawings in which FIG. For the sake of clarity and simplicity, detailed descriptions of known functions and structures in the devices described herein will be omitted when they may obscure the subject matter of the present invention.

First, the method according to the embodiment of the present invention will be described in detail with reference to FIG. 1 to FIG. 3. The embodiment of the invention provides a method for preventing malicious ordering by using a third-party IVR platform, and ensuring that the ringing tone operation initiated by the third-party IVR platform is effective only after the user terminal dials the IVR access code, otherwise the failure returns to the third party. IVR platform, ordering is not allowed.

As shown in FIG. 1 , FIG. 1 is a schematic diagram of a process for a user to dial a ring to ring system IVR access code to a third-party IVR platform to subscribe to a ring tone, which may include the following steps: Step 101: The user passes the user. The terminal dials the IVR access code of the CRBT system (such as 12530), and the user terminal calls and accesses the IVR platform of the CRBT system.

Step 102: The user selects a third-party IVR platform according to the voice prompt button of the color ring system IVR platform (for example, pressing the No. 9 key), and the user terminal sends a call to the third-party IVR platform to the CRBT system. Request, the CRBT system stores the record of the user terminal calling the third-party IVR platform, and transfers the call to the third-party IVR platform; the CRBT system can use the database when storing, that is, the user terminal is called to the third-party IVR platform. At the request, insert a record of the user terminal calling the third-party IVR platform into the database;

Step 103: The user selects a ring tone subscription according to the voice prompt of the third party IVR platform, and the third party IVR platform initiates a ring tone request to the CRBT system, that is, constructs a subscription ring tone message and sends the message to the CRBT system.

Step 104: The CRBT system verifies whether there is a record in the database that the user terminal calls the third-party IVR platform: If yes, the order operation is completed and the operation result of the success or failure of the ringing tone is returned to the third-party IVR platform; , informing the third party that the IVR platform does not allow ringing to be ordered;

Step 105: The third-party IVR platform returns the operation result of the success or failure of the ringing tone to the user by using a voice prompt, and prompts the user to perform the next step.

As shown in FIG. 2, FIG. 2 is a schematic diagram of a process for a user to directly dial a third-party IVR access code to subscribe to a ring tone in the method according to the embodiment of the present invention, which may specifically include the following steps:

Step 201: The user directly dials a third-party IVR access code (such as 12530300) through the user terminal, and the user terminal initiates a call to the third-party IVR platform according to the third-party IVR access code, and accesses the third-party IVR platform;

Step 202: After receiving the call request of the user terminal, the third-party IVR platform promptly prompts the user to perform the operation, and then forwards and triggers the CRBT system according to the request of the user to subscribe to the ring tone. Step 203: The CRBT system inserts one into the database. The user terminal calls the record of the third party IVR platform;

Step 204: After the CRBT system completes the storage, notify the third-party IVR platform to continue processing. Step 205: The user selects a ringtone subscription according to the voice prompt of the third-party IVR platform, and the third-party IVR platform constructs a subscription ringtone message and sends the message to the CRBT platform. ; Step 206: The CRBT system verifies whether there is a valid record of the user terminal calling the third-party IVR platform in the database, and if so, completing the ordering operation and returning the operation result of the ringing tone success or failure to the third-party IVR platform; If not, the third-party IVR platform is notified that the ring tone is not allowed to be ordered;

Step 205: The third-party IVR platform returns the operation result of the success or failure of the ringing tone to the user by using a voice prompt, and prompts the user to perform the next operation.

As shown in FIG. 3, FIG. 3 is a schematic flowchart of a ring-tone system performing a subscription operation according to a subscription ring tone request initiated by a third-party IVR platform according to the method in the embodiment of the present invention, which may include the following steps:

Step 301: The CRBT system receives the subscription ring tone request initiated by the third-party IVR platform. Step 302: The CRBT system determines whether there is a record in the database that the user terminal calls the third-party IVR platform, and the record is within the effective aging period. And if the record is within valid aging, step 303 is performed; if there is a record but the record is not within valid aging, step 304 is performed; if there is no record, step 305 is performed; effective aging means: recording time of one record is The length of the current time is compared with the preset time length. If it is less than, it indicates that the record is within the effective aging. If it is greater than, it indicates that the record is not within the effective aging; the specific value of the preset time length can be based on the CRBT system. Depending on the security needs;

Step 303: The CRBT system completes the ordering operation, and the operation result is successful, and the result of the successful subscription is returned to the third-party IVR platform; after the subscription is successful, the CRBT system can delete the record of the user terminal calling the third-party IVR platform in the database;

Step 304: The operation result of the CRBT system is failed, and the result of the subscription failure is returned to the third party IVR platform; after the subscription is successful, the CRBT system may also delete the record of the user terminal calling the third party IVR platform in the database;

Step 305: The CRBT system returns the result of not allowing the subscription to the third party IVR platform.

Next, the device according to the embodiment of the present invention will be described in detail with reference to FIG. 4. As shown in FIG. 4, FIG. 4 is a schematic structural diagram of an apparatus according to an embodiment of the present invention, which may specifically include: a storage module and an ordering module, where the ordering module may specifically include: a message sending unit and a verifying unit, and the following functions Modules and functional units are described in detail.

The storage module saves the record of the user terminal calling the third-party IVR platform when the user terminal calls the third-party IVR platform for the ring tone ordering; specifically, the user terminal calls the color ring tone through the color ring system IVR access code. After the system transfers to the third-party IVR platform or directly enters the third-party IVR platform for ring-tone ordering through the third-party IVR access code, the record of the user terminal calling the third-party IVR platform is saved;

The ordering module, when the third-party IVR platform initiates a ringing tone request to the CRBT system, verifying whether there is a record of the user terminal calling the third-party IVR platform in the storage module, and confirming that the user terminal calls the third-party IVR platform The ordering operation is performed when recording.

The ordering module may specifically include: a message sending unit and a verifying unit, where

a message sending unit, constructing a ring tone ordering message, and sending the ring tone ordering message to the verification unit of the ring back tone system;

The verification unit receives the incoming ringtone subscription message, and verifies, according to the received ringtone subscription message, whether there is a record of the user terminal calling the third-party IVR platform in the storage module, and confirms that the user terminal calls the third-party IVR platform. When recording, perform the ordering operation and return the order result;

Specifically, the verification unit receives the sent ringtone subscription message, and verifies whether there is a record of the user terminal calling the third party IVR platform according to the received ringtone subscription message:

If yes, further verify that the record is within valid aging, if within the effective aging, perform the ordering operation and return the result of the successful order, otherwise return the result of the order failure;

If it is not within the effective time limit, notify the third party IVR platform that ringing tone is not allowed.

In summary, the embodiment of the present invention provides a method and device for preventing malicious ordering by using a third-party interactive voice response platform. After the user dials the IVR access code of the color ring system, the user goes to the third. The front ringtone system of the square IVR platform calls the database to record the third-party IVR platform of the user terminal. After the user directly dials the third-party IVR access code, the third-party IVR platform initiates the ordering operation to the CRBT system, because there is no interaction with the CRBT system. The CRBT system cannot record the record of the user terminal calling the third-party IVR platform. Therefore, the third-party IVR platform first calls to the CRBT system. The CRBT system calls the database to record the user terminal to the third-party IVR platform, and then jumps back to the third-party IVR. After the user terminal selects the ring tone through the third-party IVR platform, when the third-party IVR platform initiates a subscription operation to the CRBT system, the CRBT system increases whether the user terminal calls the record of the third-party IVR platform in the database, and records and records are valid. The user only subscribes to the ring tone, otherwise it is considered to be a malicious order, so that the security of the CRBT system can be enhanced, and the unnecessary trouble caused by the malicious order to the operator and the user can be reduced. Moreover, in the embodiment of the present invention, an effective aging (for example, 30 minutes) is added, and it is considered that the user terminal calls the third-party IVR platform to initiate the subscription within the effective aging range of the configuration, otherwise it is considered illegal. This can further reduce the probability of malicious subscriptions to users through third-party IVR platforms.

The above is only a preferred embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or within the technical scope disclosed by the present invention. Alternatives are intended to be covered by the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the claims.

Claims

Claim

A: When the user terminal subscribes to the ring tone through the third-party IVR platform, the ring back tone system saves the record of the user terminal calling the third-party IVR platform;

The method according to claim 1, wherein the step A comprises: after the user terminal accesses the CRBT system through the IVR access code of the CRBT system, and sends a request for the call to the third-party IVR platform to the CRBT system. The ring back tone system saves the record of the user terminal calling the third-party IVR platform, and transfers the call to the third-party IVR platform.

The method according to claim 1, wherein the step A specifically includes: when the user terminal directly accesses the third-party IVR accessing platform through the third-party IVR access code to perform ring tone ordering, triggering the CRBT system, the CRBT The system saves the record of the user terminal calling the third-party IVR platform, and notifies the third-party IVR platform to continue processing.

The method according to claim 1, 2 or 3, wherein the step B includes:

The method according to claim 4, wherein the step B2 specifically includes: B21: The CRBT system verifies whether there is a record that the user terminal calls the third-party IVR platform: If yes, perform step B22; The third-party IVR platform does not allow ringtones to be ordered; B22: The CRBT system verifies that the record of the user terminal calling the third-party IVR platform is valid. Within the aging period, if yes, the ordering operation is performed and the result of the successful order is returned, otherwise the result of the order failure is returned.

6. A device for preventing malicious ordering by using a third-party interactive voice response platform, the method comprising: a storage module and a subscription module, wherein

The ordering module is configured to verify, when the third-party IVR platform initiates a ringing tone request to the CRBT system, whether the user terminal dials a record of the third-party IVR platform, and confirms that the user terminal is dialed. The ordering operation is completed when the access code is recorded.

The device according to claim 6, wherein the storage module is specifically configured to: after a user terminal calls a CRBT system through a color ring system IVR access code, transfer to a third-party IVR platform or directly through a third party. When the IVR access code enters the third-party IVR platform for ring tone ordering, the record of the user terminal calling the third-party IVR platform is saved.

The device according to claim 6 or 7, wherein the ordering module comprises: a message sending unit and a verifying unit, wherein

The message sending unit is configured to construct a ring tone order message and send the message to the verification unit of the ring back tone system;

The verification unit is configured to verify, according to the received ringtone subscription message, whether there is a valid record of the user terminal calling the third-party IVR platform in the storage module, and confirming that the user terminal calls a valid record of the third-party IVR platform. , perform the ordering operation and return the order result.

The device according to claim 8, wherein the verification unit is specifically configured to: verify, according to the received ringtone subscription message, whether there is a record of the user terminal calling a third-party IVR platform: If yes, further verifying Whether the record is within the predetermined effective aging, if yes, the ordering operation is performed and the result of the successful order is returned, otherwise the result of the order failure is returned; if not, the third-party IVR platform is notified not to order the ring tone.