CN103024206A - Method for preventing suspected telephone fraudulence on basis of telecommunication network - Google Patents
Method for preventing suspected telephone fraudulence on basis of telecommunication network Download PDFInfo
- Publication number
- CN103024206A CN103024206A CN2013100140106A CN201310014010A CN103024206A CN 103024206 A CN103024206 A CN 103024206A CN 2013100140106 A CN2013100140106 A CN 2013100140106A CN 201310014010 A CN201310014010 A CN 201310014010A CN 103024206 A CN103024206 A CN 103024206A
- Authority
- CN
- China
- Prior art keywords
- swindle
- module
- fraudulence
- doubtful
- outgoing call
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Telephonic Communication Services (AREA)
Abstract
The invention relates to a method for preventing suspected telephone fraudulence on the basis of a telecommunication network. The method includes that a call ticket acquisition module monitors call tickets of a call ticket server in real time and transmits the call tickets to a judging and identifying module; the judging and identifying module stores the received call tickets in a main memory database, and judges whether the received call tickets meet fraud conditions or not; and an outbound module plays voice warning notice if the received call tickets meet the fraud conditions. The method has the advantages that the call tickets are analyzed and processed, the suspected telephone fraudulence is judged, the bottleneck problem in bit stream processing is solved, processing load on a system platform is reduced, the processing efficiency is greatly improved, the method can be implemented in provincial-level telecommunication networks, and the cost is lowered; and a provincial-level telephone fraudulence preventive voice prompting platform can be quickly constructed by the method, corresponding prevention measures such as warning voice and the like can be transmitted to telephones of users once phone calls received via the telephones of the users are domestic or foreign suspected fraudulence phone calls, and the users are notified of preventing the fraudulence.
Description
Technical field
The present invention relates to information security field, especially a kind of implementation method of taking precautions against doubtful phone swindle based on telecommunications network.
Background technology
At present, part manufacturer provides some to take precautions against the solution of suspicion phone swindle both at home and abroad, and the China Telecom's signalling system No.7 code stream level analysis technology that is based on that major part is taked realizes.Owing to need directly access telecommunications core network, data are carried out the analysis of code stream level, system requires too high to the software and hardware disposal ability, generate at the telecommunications Bulk Call in the situation of mass data, make the system platform load excessive, the processing bottleneck is serious, is economizing under the one-level scale because real-time performance is poor even cause and can't use; System handles data discovery suspicion fraudulent call and guards against upper required overlong time to reminding user, may have dust thrown into the eyes thereby the user is not reminded also timely, therefore loses practical significance.In addition, mostly take Processing tasks is decomposed each districts and cities' local network level subsystem, arrive practical effect to reduce load, cause overlapping investment, the wasting of resources, cost is high, and also very inconvenient in the service management.
Summary of the invention
The object of the present invention is to provide a kind of can be implemented in second to find doubtful swindle phone in the level time and remind the low implementation method of taking precautions against doubtful phone swindle based on telecommunications network of callee, cost.
For achieving the above object, the present invention has adopted following technical scheme: a kind of implementation method of taking precautions against doubtful phone swindle based on telecommunications network, and the method comprises the step of following order:
(1) ticket of bill record collection module real-time listening Record Bill Server, and be sent to the judgement identification module;
(2) judge that identification module is stored to memory database with the ticket that receives, and judge whether the ticket that receives satisfies the swindle condition;
(3) if the judged result of previous step is yes, then play the alarm verbal announcement by the outgoing call module.
Described judgement identification module reads the call bill data that the bill record collection module sends, write formation, load filter event rule and response adapter that should the rule correspondence, application rule responds respectively relevant adapter one by one, judges when being written to memory database whether ticket satisfies the swindle condition, if judged result is yes, start the outgoing call module, by outgoing call module loading play rules, play the alarm verbal announcement.
Described judgement identification module phone bill when the number in judging blacklist satisfies the swindle condition, continues to judge that called number is whether in white list, if the determination result is NO, then by outgoing call module broadcast alarm verbal announcement when judging.
Described judgement identification module timing scan memory database is removed ineligible data, and partial data is transferred to physical database, keeps effective free memory of memory database.
Described blacklist is clearly for the swindle number or with the number segment of prefix feature, and described white list is for receiving the number of outgoing call alarm.
Described judgement identification module should be swindled number and write blacklist after the swindle number is determined in audit, and play the alarm verbal announcement by the outgoing call module.
As shown from the above technical solution, the present invention is by carrying out analyzing and processing to ticket, the behavior of differentiation suspicion fraudulent call, solved the bottleneck problem that code stream is processed, reduced the processing load of system platform, greatly improved treatment effeciency, the one-level telecommunications network can be realized easily in province, has reduced cost.The present invention can prevent swindle voice suggestion platform by provincial phone of Fast Construction, belong to local and overseas suspicion fraudulent calls in case recognize the phone that subscriber phone answers, namely take to send the corresponding precautionary measures such as phonetic warning, notify the user to take precautions against fraudulent act.
Description of drawings
Fig. 1 is workflow diagram of the present invention;
Fig. 2 is the flow chart of black and white lists monitoring among the present invention;
Fig. 3 is Real-Time Monitoring screening process figure among the present invention.
Embodiment
A kind of implementation method of taking precautions against doubtful phone swindle based on telecommunications network, the method comprises the step of following order: the first, the ticket of bill record collection module real-time listening Record Bill Server, and be sent to the judgement identification module; The second, judge that identification module is stored to memory database with the ticket that receives, and judge whether the ticket that receives satisfies the swindle condition; The 3rd, if the judged result of previous step is yes, then play the alarm verbal announcement by the outgoing call module.As shown in Figure 1.
As shown in Figure 1, described judgement identification module reads the call bill data that the bill record collection module sends, write formation, load filter event rule and response adapter that should the rule correspondence, one by one application rule, respond respectively relevant adapter, judge when being written to memory database whether ticket satisfies the swindle condition, if judged result is yes, start the outgoing call module, by outgoing call module loading play rules, play the alarm verbal announcement.The bill record collection module adopts asynchronous formation mode for acceptance and the processing of ticket; The judgement identification module is received call bill data from signal collecting module, writes immediately formation and returns the processing next record, farthest supports a large amount of call bill datas, and adjusts flexibly the size of formation according to actual conditions.For fraud, provide active analysis to prevent; The outgoing call module is introduced small-sized memory database the call bill data in several hours is carried out real-time analysis, for the data of every day, then downloads to physical database analysis.
As shown in Figure 2, described judgement identification module phone bill when the number in judging blacklist satisfies the swindle condition, continues to judge that called number is whether in white list when judging, if the determination result is NO, then play the alarm verbal announcement by the outgoing call module.Described blacklist is clearly for the swindle number or with the number segment of prefix feature, and described white list is for receiving the number of outgoing call alarm.That is to say that when the number attempted fraud in the system discovery blacklist, can giving immediately not, the number in white list carries out the outgoing call alarm.
As shown in Figure 3, described judgement identification module timing scan memory database is removed ineligible data, and partial data is transferred to physical database, keeps effective free memory of memory database.Described judgement identification module should be swindled number and write blacklist after the swindle number is determined in audit, and play the alarm verbal announcement by the outgoing call module.Carry out in batches ticket of real-time analysis according to hour level, can be adjusted into a minute level, second level according to actual conditions, in case find the swindle feature, analysis rule can be expanded by self-defined, reaches the purpose of prevention.Consider the data storage size restriction of memory database, therefore the data for every day then download to physical database analysis, and this also is the crucial precautionary measures of mending-leakage.Analyze according to present ticket statistical conditions and swindle feature, memory database keeps 3～5 hours up-to-date call bill data, then in the formation mode call bill data is moved on to physical database according to rule hourly.
The present invention adopts U time window technology, and the time slot width of time window is adjustable according to the telephone traffic self adaptation, in conjunction with the data stream frequent item algorithm that excavates in the sliding window, on provincial communication network platform, suppose that doubtful phone caller every day number of times is 0.5% of total calling number of times, realize that calling signal collecting disposal ability reaches 2777CAPS, the terminating call screening disposal ability reaches 2777CAPS, and the outgoing call disposal ability reaches 27CAPS; Adopt the real-time rule engine technique of AFT, reception is from the call bill data of signal collecting module, utilize the algorithm of Complex event processing to carry out the analysis rule modeling, by the suspicious user in the analysis rule screening calling, realize that disposal ability reaches 357042TPMC, and suspicious user is put into the affirmation that the later stage is waited in doubtful storehouse; The Real-Time Monitoring black and white lists when finding in the blacklist number attempted fraud, gives immediately that number carries out the outgoing call alarm outside the white list.Employing memory database mechanism, provide the active analysis function to prevent, every ticket memory word joint number on hard disk is 0.3K, then the call bill data of every day reaches 1025GB, this is introduced small-sized memory database the call bill data in several hours is carried out real-time analysis, then download to physical database analysis and realize real-time processing.
In sum, the present invention differentiates the behavior of suspicion fraudulent call by ticket is carried out analyzing and processing, solve the bottleneck problem that code stream is processed, reduced the processing load of system platform, greatly improved treatment effeciency, the one-level telecommunications network can be realized easily in province, has reduced cost.The present invention can prevent swindle voice suggestion platform by provincial phone of Fast Construction, belong to local and overseas suspicion fraudulent calls in case recognize the phone that subscriber phone answers, namely take to send the corresponding precautionary measures such as phonetic warning, notify the user to take precautions against fraudulent act.
Claims (6)
1. implementation method of taking precautions against the swindle of doubtful phone based on telecommunications network, the method comprises the step of following order:
(1) ticket of bill record collection module real-time listening Record Bill Server, and be sent to the judgement identification module;
(2) judge that identification module is stored to memory database with the ticket that receives, and judge whether the ticket that receives satisfies the swindle condition;
(3) if the judged result of previous step is yes, then play the alarm verbal announcement by the outgoing call module.
2. implementation method of taking precautions against the swindle of doubtful phone based on telecommunications network according to claim 1, it is characterized in that: described judgement identification module reads the call bill data that the bill record collection module sends, write formation, load filter event rule and response adapter that should the rule correspondence, application rule one by one, respond respectively relevant adapter, judge when being written to memory database whether ticket satisfies the swindle condition, if judged result is yes, start the outgoing call module, by outgoing call module loading play rules, play the alarm verbal announcement.
3. implementation method of taking precautions against the swindle of doubtful phone based on telecommunications network according to claim 1, it is characterized in that: when described judgement identification module phone bill certificate is judged, when the number in judging blacklist satisfies the swindle condition, continue to judge that called number is whether in white list, if the determination result is NO, then play the alarm verbal announcement by the outgoing call module.
4. implementation method of taking precautions against the swindle of doubtful phone based on telecommunications network according to claim 1, it is characterized in that: described judgement identification module timing scan memory database, remove ineligible data, and partial data is transferred to physical database, keep effective free memory of memory database.
5. implementation method of taking precautions against the swindle of doubtful phone based on telecommunications network according to claim 3, it is characterized in that: clearly for the swindle number or with the number segment of prefix feature, described white list is for receiving the number of outgoing call alarm for for described blacklist.
6. implementation method of taking precautions against the swindle of doubtful phone based on telecommunications network according to claim 4, it is characterized in that: described judgement identification module is after the swindle number is determined in audit, should swindle number and write blacklist, and play the alarm verbal announcement by the outgoing call module.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2013100140106A CN103024206A (en) | 2013-01-15 | 2013-01-15 | Method for preventing suspected telephone fraudulence on basis of telecommunication network |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2013100140106A CN103024206A (en) | 2013-01-15 | 2013-01-15 | Method for preventing suspected telephone fraudulence on basis of telecommunication network |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN103024206A true CN103024206A (en) | 2013-04-03 |
Family
ID=47972317
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2013100140106A Pending CN103024206A (en) | 2013-01-15 | 2013-01-15 | Method for preventing suspected telephone fraudulence on basis of telecommunication network |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103024206A (en) |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104065836A (en) * | 2014-05-30 | 2014-09-24 | 小米科技有限责任公司 | Method and device for monitoring calls |
| CN104410974A (en) * | 2014-11-20 | 2015-03-11 | 杭州东信北邮信息技术有限公司 | Prompting message sending method and system for phone fraud |
| CN107342986A (en) * | 2017-06-20 | 2017-11-10 | 深圳安巽科技有限公司 | A kind of fraudulent call early warning system and method for early warning |
| CN107948451A (en) * | 2017-11-24 | 2018-04-20 | 广州汇智通信技术有限公司 | A kind of anti-telecommunication fraud method, apparatus, equipment and storage medium |
| CN110933667A (en) * | 2019-10-18 | 2020-03-27 | 国家计算机网络与信息安全管理中心 | Extensible system and method for preventing fraud calls |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101217820A (en) * | 2008-01-15 | 2008-07-09 | 中兴通讯股份有限公司 | An identification system and identification method on disturbance telephone numbers |
| CN102572124A (en) * | 2011-12-16 | 2012-07-11 | 西安大唐电信有限公司 | Method and system for preventing telecommunication fraud by using No.7 signaling message of switch |
| US20120263285A1 (en) * | 2005-04-21 | 2012-10-18 | Anthony Rajakumar | Systems, methods, and media for disambiguating call data to determine fraud |
-
2013
- 2013-01-15 CN CN2013100140106A patent/CN103024206A/en active Pending
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20120263285A1 (en) * | 2005-04-21 | 2012-10-18 | Anthony Rajakumar | Systems, methods, and media for disambiguating call data to determine fraud |
| CN101217820A (en) * | 2008-01-15 | 2008-07-09 | 中兴通讯股份有限公司 | An identification system and identification method on disturbance telephone numbers |
| CN102572124A (en) * | 2011-12-16 | 2012-07-11 | 西安大唐电信有限公司 | Method and system for preventing telecommunication fraud by using No.7 signaling message of switch |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104065836A (en) * | 2014-05-30 | 2014-09-24 | 小米科技有限责任公司 | Method and device for monitoring calls |
| CN104410974A (en) * | 2014-11-20 | 2015-03-11 | 杭州东信北邮信息技术有限公司 | Prompting message sending method and system for phone fraud |
| CN104410974B (en) * | 2014-11-20 | 2017-08-25 | 杭州东信北邮信息技术有限公司 | A kind of method and system that prompting message is sent to fraudulent call |
| CN107342986A (en) * | 2017-06-20 | 2017-11-10 | 深圳安巽科技有限公司 | A kind of fraudulent call early warning system and method for early warning |
| CN107342986B (en) * | 2017-06-20 | 2018-08-24 | 深圳安巽科技有限公司 | A kind of fraudulent call early warning system and method for early warning |
| CN107948451A (en) * | 2017-11-24 | 2018-04-20 | 广州汇智通信技术有限公司 | A kind of anti-telecommunication fraud method, apparatus, equipment and storage medium |
| CN110933667A (en) * | 2019-10-18 | 2020-03-27 | 国家计算机网络与信息安全管理中心 | Extensible system and method for preventing fraud calls |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US6567511B2 (en) | System and method for real-time fraud detection within a telecommunications system | |
| WO2016197675A1 (en) | Method and apparatus for identifying crank call | |
| CN107819747B (en) | Telecommunication fraud association analysis system and method based on communication event sequence | |
| CN103024206A (en) | Method for preventing suspected telephone fraudulence on basis of telecommunication network | |
| CN101548506A (en) | Apparatus and a security node for use in determining security attacks | |
| CN101217820A (en) | An identification system and identification method on disturbance telephone numbers | |
| CN107770777B (en) | Method for identifying recorded fraud calls | |
| CN101350957A (en) | Method and equipment for shielding rubbish short message | |
| CN101854609A (en) | Short message monitoring system and method | |
| CN107094291B (en) | System, method and terminal for preventing telecommunication fraud | |
| CN101873618A (en) | Communication monitoring method and device | |
| CN103415004A (en) | Method and device for detecting junk short message | |
| CN114169438A (en) | Telecommunication network fraud identification method, device, equipment and storage medium | |
| US20060269050A1 (en) | Adaptive fraud management systems and methods for telecommunications | |
| CN109819125A (en) | A kind of method and device limiting telecommunication fraud | |
| CN106358162A (en) | Method and device for prompting fraud phone in time of calling | |
| CN103167502A (en) | Method of punishing illegal calling based on over-the-air (OTA) technology | |
| CN108513303A (en) | The abnormality monitoring method and device of jack per line terminal | |
| CN109005543B (en) | System and method for limiting mobile phone use based on IMEI | |
| CN111064850A (en) | System and method for realizing prevention, control and reminding of crank calls based on communication network | |
| JP2009171115A (en) | Charge calculation system, charge calculation method, charge calculation program, service utilization monitoring system, service utilization monitoring method and service utilization monitoring program | |
| CN113286035B (en) | Abnormal call detection method, device, equipment and medium | |
| Goode | Forensic extraction of electronic evidence from GSM mobile phones | |
| CN112261654B (en) | Method and system for generating mobile phone number white list in telecommunication anti-fraud process | |
| CN114338916B (en) | Theft-fighting alarm method and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C53 | Correction of patent of invention or patent application | ||
| CB03 | Change of inventor or designer information |
Inventor after: Qi Wenping Inventor after: Ding Xuxing Inventor after: Liu Xinyue Inventor before: Qi Wenping Inventor before: Ding Xuxing Inventor before: Liu Xingyue |
|
| COR | Change of bibliographic data |
Free format text: CORRECT: INVENTOR; FROM: QI WENPING DING XUXING LIU XINGYUE TO: QI WENPING DING XUXING LIU XINYUE |
|
| C12 | Rejection of a patent application after its publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20130403 |