CN104853357B - A kind of method and system of automatic identification and triggering swindle number - Google Patents
A kind of method and system of automatic identification and triggering swindle number Download PDFInfo
- Publication number
- CN104853357B CN104853357B CN201510191086.5A CN201510191086A CN104853357B CN 104853357 B CN104853357 B CN 104853357B CN 201510191086 A CN201510191086 A CN 201510191086A CN 104853357 B CN104853357 B CN 104853357B
- Authority
- CN
- China
- Prior art keywords
- swindle
- doubtful
- calling
- time
- expenses
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/12—Detection or prevention of fraud
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Telephonic Communication Services (AREA)
Abstract
The method and system of a kind of automatic identification and triggering swindle number, method include：Step 1: from the calling ticket of certain time cycle T, according to the behavioural characteristic of calling number, the doubtful swindle number that there are similar features with swindle number is identified；Step 2: search the Gateway Mobile Switching Center GMSC or home signature user server HSS belonging to doubtful swindle number, then the doubtful swindle number that will identify that is sent to GMSC or HSS belonging to it, so that when GMSC or call session control function server CSCF receive the calling that doubtful swindle number is initiated, the calling is forwarded to anti-swindle platform.The invention belongs to network communication technology fields, the accurate identification and triggering of swindle number can be realized, so as to reduce a large amount of consumption of system trigger resource.
Description
Technical field
The present invention relates to a kind of automatic identifications and the method and system of triggering swindle number, belong to network communication technology neck
Domain.
Background technology
With popularizing for mobile phone, telephone fraud emerges in an endless stream.Although warp-wise society sends out and carries for relevant government department
It wakes up, all kinds of news media also report again and again, however, still having a large number of users to have dust thrown into the eyes daily, and economic loss is in rise year by year
Trend.
In the prior art, the identification and trigger flow of swindling number are generally as follows：It is first that the whole network all-calls are unified tactile
SCP is sent to, then is identified one by one by SCP to largely calling, the doubtful fraudulent call of minority therein is gone into anti-swindle platform, finally
Recording evidence obtaining is carried out to doubtful fraudulent call by anti-swindle platform, if right number, then calling and called are normally connect
It is logical；If it is confirmed that be fraudulent call, then direct interrupt call.Since the prior art is using full dose triggering mode, Ji Jiangquan
The all unified triggering of net calling is to SCP processing, in this way, often in order to intercept a small amount of several swindle numbers, but result in SCP and
The triggering resource of the core network elements such as gateway exchange is largely consumed.
Therefore, the accurate identification and triggering of swindle number how to be realized, so as to reduce a large amount of consumption of system trigger resource,
The technical issues of being a worth further investigation.
Invention content
In view of this, the object of the present invention is to provide a kind of automatic identification and the method and system of triggering swindle number, energy
The accurate identification and triggering of swindle number are realized, so as to reduce a large amount of consumption of system trigger resource.
In order to achieve the above object, the present invention provides a kind of automatic identification and the method for triggering swindle number, include：
Step 1: from the calling ticket of certain time cycle T, according to the behavioural characteristic of calling number, identify and cheat
Deceiving number has the doubtful swindle number of similar features；
Step 2: search the Gateway Mobile Switching Center GMSC or home signature user server belonging to doubtful swindle number
HSS, the doubtful swindle number that then will identify that is sent to GMSC or HSS belonging to it, so that GMSC or call session
When control function server CSCF receives the calling that doubtful swindle number is initiated, the calling is forwarded to anti-swindle platform；
Step 3: doubtful swindle number in the period of time T and after the period of time T K of statistics is even
The number of calls in continuous period of time T, and judge whether doubtful swindle number is cheated according to the downward trend of the number of calls
Deceive one's share of expenses for a joint undertaking to abandon, GMSC or HSS belonging to it be sent to if it is, one's share of expenses for a joint undertaking will be swindled and abandon number so that GMSC or
CSCF receive swindle one's share of expenses for a joint undertaking abandon number initiation calling when, no longer by it is described calling be forwarded to anti-swindle platform,
In step 3, judge whether doubtful swindle number is abandoned by swindle one's share of expenses for a joint undertaking according to the downward trend of the number of calls
With further comprising having：
Step C31, K of doubtful swindle number in the period of time T and after the period of time T are counted
The number of calls in continuous period of time T；
Step C32, judge doubtful swindle number exhaling in K continuous period of time T after the period of time T
It is the sum of numberWhether it is 0, if it is, represent that doubtful swindle number is abandoned by swindle one's share of expenses for a joint undertaking, this
Flow terminates, wherein, CallingTA (t) is doubtful swindle number exhaling in t-th of period of time T after period of time T
It is number,
In step C32, exhaling in K continuous period of time T after doubtful swindle number is in the period of time T
It is the sum of numberWhen not being 0, further include：
Step C33, the total number of calls for calculating doubtful swindle number is averaged suppression ratio Calling_minus_ratio：Wherein, CallingT is that doubtful swindle number exists
The number of calls in the period of time T, and judge whether Calling_minus_ratio averagely declines less than total number of calls
The minimum threshold of ratio, if it is, representing that doubtful swindle number is abandoned by swindle one's share of expenses for a joint undertaking, this flow terminates,
In step C33, when Calling_minus_ratio is averaged the minimum threshold of suppression ratio not less than total number of calls
When, it has further included：
Step C34, the least square slope ratio Slope_ratio of doubtful swindle number is calculated：Wherein, Calling_
Ratio (t) is number of calls suppression ratio of the doubtful swindle number in t-th of period of time T after the period of time T,
Further, the calculation formula of Calling_ratio (t) is as follows：
And judge whether Slope_ratio in (A1, A2) numerical intervals in the range of and Calling_minus_ratio be less than total calling
Number is averaged the max-thresholds of suppression ratio, if it is, representing that doubtful swindle number is abandoned by swindle one's share of expenses for a joint undertaking, this flow terminates,
Wherein, A1、A2It is minimum, the big threshold value of least square slope ratio.
In order to achieve the above object, the system for swindling number with triggering the present invention also provides a kind of automatic identification, including
Have：
NID number identifier is swindled, it is special according to the behavior of calling number for from the calling ticket of certain time cycle T
Sign identifies the doubtful swindle number for having similar features with swindle number, then searches the gateway belonging to doubtful swindle number
Mobile switching centre GMSC or home signature user server HSS, the doubtful swindle number that finally will identify that are sent to its institute
The GMSC or HSS of category are initiated so that GMSC or call session control function server CSCF receive doubtful swindle number
Calling when, by it is described calling be forwarded to anti-swindle platform,
Swindle NID number identifier further comprises having：
Abandon Number Reorganization component, for count it is doubtful swindle number in the period of time T and the time week
The number of calls in K after phase T continuous period of time T, and doubtful swindleness is judged according to the downward trend of the number of calls
It deceives whether number is abandoned by swindle one's share of expenses for a joint undertaking, GMSC or HSS belonging to it is sent to if it is, one's share of expenses for a joint undertaking will be swindled and abandon number,
So that GMSC or CSCF receive swindle one's share of expenses for a joint undertaking abandon number initiation calling when, no longer by it is described calling be forwarded to anti-swindleness
Deceive platform,
Number Reorganization component is abandoned to include：
Number of calls accumulated unit, for calculating K continuous time weeks of the doubtful swindle number after period of time T
The sum of number of calls in phase TAnd judge whether the sum of number of calls is 0, if it is, representing
Doubtful swindle number is abandoned by swindle one's share of expenses for a joint undertaking, wherein, CallingTA (t) is the of doubtful swindle number after period of time T
The number of calls in t period of time T；
Total number of calls be averaged suppression ratio unit, is averaged suppression ratio for calculating the doubtful total number of calls for swindling number
Calling_minus_ratio：Wherein,
CallingT is the doubtful number of calls of the swindle number in period of time T, CallingTA (t) be doubtful swindle number when
Between the number of calls in t-th of period of time T after cycle T, and judge whether Calling_minus_ratio is less than and always exhale
The minimum threshold that number is made to be averaged suppression ratio, if it is, representing that doubtful swindle number is abandoned by swindle one's share of expenses for a joint undertaking.
Compared with prior art, the beneficial effects of the invention are as follows：Present invention will identify that doubtful swindle number notifying give
GMSC or HSS belonging to it when such GMSC or CSCF receive calling, are identified the calling number in calling, then
Only the calling that wherein a small amount of doubtful swindle number is initiated is triggered to anti-swindle platform and is handled, so as to swindling number
It is accurately identified and is triggered, a large amount of callings for effectively preventing the whole network full-service trigger and reduce a large amount of of triggering resource
Consumption；The present invention not only can identify new doubtful swindle number from the calling ticket of each period of time T, can be with needle
To calling behavioural characteristic of each doubtful swindle number after above-mentioned period of time T, swindle one's share of expenses for a joint undertaking is further precisely identified
It does not use or what is do not used in a period of time abandons number, so as to release the calling triggering that these abandon number, further
Reduce system's work-load.
Description of the drawings
Fig. 1 is the flow chart of a kind of automatic identification of the present invention and the method for triggering swindle number.
Fig. 2 is to judge whether doubtful swindle number is abandoned by swindle one's share of expenses for a joint undertaking in step 3 according to the downward trend of the number of calls
Concrete operations flow chart.
Fig. 3 is the composition structure diagram for abandoning Number Reorganization component.
Specific embodiment
To make the object, technical solutions and advantages of the present invention clearer, the present invention is made below in conjunction with the accompanying drawings further
Detailed description.
As shown in Figure 1, a kind of automatic identification of the present invention and the method for triggering swindle number, include：
Step 1: from the calling ticket of certain time cycle T, according to the behavioural characteristic of calling number, identify and cheat
Deceiving number has the doubtful swindle number of similar features；
Step 2: search the GMSC (i.e. Gateway Mobile Switching Center) belonging to doubtful swindle number or HSS (i.e. ownership signings
Client server), the doubtful swindle number that then will identify that is sent to GMSC or HSS belonging to it so that GMSC or
When CSCF (i.e. call session control function server) receives the calling that doubtful swindle number is initiated, the calling is forwarded to
Anti- swindle platform.
It, can be by decision tree and the combinational algorithm of logistic regression, from the whole network of certain time cycle T in Fig. 1 step 1
Doubtful swindle number is identified in calling ticket, and what particular content was referred to applicant applies for a patent CN 201410512208.
(patent name：The method and system of real-time blocking fraudulent call, date of application in a kind of communication process：2014/9/29), have
Body realizes that process does not repeat herein.
Particularly one is mentioned that, the present invention can not only identify new doubtful from the calling ticket of each period of time T
Number is swindled, calling behavioural characteristic of each doubtful swindle number after above-mentioned period of time T can also be directed to, further known
Do not go out to swindle that one's share of expenses for a joint undertaking does not use or what is do not used in a period of time abandons number, and swindle one's share of expenses for a joint undertaking is abandoned into number from doubtful
It is deleted in swindle number list, so as to effectively reduce system's work-load.The present invention can also include：
Step 3: doubtful swindle number in the period of time T and after the period of time T K of statistics is even
The number of calls in continuous period of time T, and judge whether doubtful swindle number is cheated according to the downward trend of the number of calls
Deceive one's share of expenses for a joint undertaking to abandon, GMSC or HSS belonging to it be sent to if it is, one's share of expenses for a joint undertaking will be swindled and abandon number, wherein, K be one from
So number, value can be set according to actual conditions, so that GMSC or CSCF (i.e. call session control function server)
Receive swindle one's share of expenses for a joint undertaking abandon number initiation calling when, no longer by it is described calling be forwarded to anti-swindle platform.
It the composite can be widely applied in TDM or IMS network, when in applied to TDM networks, Fig. 1 step 2 is further
Include：
Step A21, and the GMSC belonging to doubtful swindle number establishes TCP connection, then by the TCP connection link,
Addition trigger request is sent to the GMSC belonging to doubtful swindle number, includes doubtful swindle number in the addition trigger request
Code；
Step A22, GMSC extracts doubtful swindle number from the addition trigger request received, and is saved in local, so
Judge whether calling number is doubtful swindle number in the message related to calls being subsequently received afterwardsIf it is, by calling triggering extremely
SCP, and calling is forwarded to anti-swindle platform by SCP；If it is not, then original operation flow is performed,
In this way, step 3 further comprises having：
Step A31, the GMSC belonging to number is abandoned to swindle one's share of expenses for a joint undertaking and sends releasing trigger request, the releasing trigger request
In include swindle one's share of expenses for a joint undertaking abandon number；
Step A32, GMSC extracts swindle one's share of expenses for a joint undertaking from the releasing trigger request received and abandons number, and from local preservation
Doubtful swindle number in delete it is described swindle one's share of expenses for a joint undertaking abandon number.
When in applied to IMS network, Fig. 1 step 2 further comprises having：
Step B21, it sends doubtful swindle number to the HSS belonging to doubtful swindle number and adds the instruction of trigger data,
HSS adds iFC user contracting datas for the doubtful swindle number；
Step B22, HSSs of the CSCF into the message related to calls received belonging to calling number inquires its user contracting data,
Then the iFC user contracting datas returned according to HSS trigger the calling that doubtful swindle number is initiated to anti-swindle platform,
In this way, step 3 further comprises having：
Step B31, the HSS transmission swindle one's shares of expenses for a joint undertaking belonging to number are abandoned to swindle one's share of expenses for a joint undertaking to abandon number and delete trigger data
Instruction, HSS deletes swindle one's share of expenses for a joint undertaking and abandons the iFC user contracting datas of number.
It is explained by taking TDM network applications as an example：In the prior art, in order to realize that the whole network of fraudulent call is unified
Reason, calling can be uniformly triggered to SCP by current 10 province, nearly 200 gateway exchange GMSC, for example, in order to intercept Hangzhou gateway exchange
A calling number be 0057110086 fraudulent call, then need all to trigger the calling of this 200 gateway exchanges to SCP,
Then it identifies whether the calling number each called is 0057110086 one by one by SCP, is blocked if it is, being given to calling
It cuts, therefore swindling the identification of number and triggering can cause SCP and gateway exchange to trigger a large amount of consumption of resource.And the present invention passes through words
Single analysis, it is doubtful swindle number to identify 0057110086 this number in real time, then notifies 0057110086 correspondence automatically
Hangzhou gateway exchange only by 0057110086 initiate calling trigger to SCP, then directly given and intercepted by SCP.It is although of the invention
It is similar with the final result of the prior art, but but exist to the resource consumption of SCP and gateway exchange triggering and be as far apart as heaven and earth.IMS
Network is also similar, it is therefore apparent that compared to the prior art, the present invention can effectively save triggering resource consumption, improve system work
Make efficiency.
As shown in Fig. 2, in step 3, judged according to the downward trend of the number of calls doubtful swindle number whether by
Swindle one's share of expenses for a joint undertaking is abandoned, and can further include：
Step C31, K of doubtful swindle number in the period of time T and after the period of time T are counted
The number of calls in continuous period of time T, K is a natural number, and value can be set according to actual conditions, such as K=
5；
Step C32, judge doubtful swindle number exhaling in K continuous period of time T after the period of time T
It is the sum of numberWhether it is 0If it is, represent that doubtful swindle number is abandoned by swindle one's share of expenses for a joint undertaking, this
Flow terminates；If it is not, then continue in next step；Wherein, CallingTA (t) is doubtful swindle number after period of time T
The number of calls in t-th of period of time T；
Step C33, the total number of calls for calculating doubtful swindle number is averaged suppression ratio Calling_minus_ratio：Wherein, CallingT is that doubtful swindle number exists
The number of calls in the period of time T, and judge whether Calling_minus_ratio averagely declines less than total number of calls
The minimum threshold of ratioIf it is, representing that doubtful swindle number is abandoned by swindle one's share of expenses for a joint undertaking, this flow terminates；If it is not, then continue
In next step；
Calling_minus_ratio can be used for the whole number of calls for representing doubtful swindle number to decline situation；
Step C34, the least square slope ratio Slope_ratio of doubtful swindle number is calculated：Wherein, Calling_
Ratio (t) is number of calls suppression ratio of the doubtful swindle number in t-th of period of time T after the period of time T,
Further, the calculation formula of Calling_ratio (t) is as follows：
And judge whether Slope_ratio in (A1, A2) numerical intervals in the range of and Calling_minus_ratio be less than total calling
Number is averaged the max-thresholds of suppression ratioIf it is, representing that doubtful swindle number is abandoned by swindle one's share of expenses for a joint undertaking, this flow terminates；
If it is not, then this flow terminates；Wherein, A1、A2It is minimum, the big threshold value of least square slope ratio, total number of calls averagely declines
Value, Slope_ratio it can be used for representing to doubt according to actual conditions than the most large and small threshold value with least square slope ratio
Like the variation tendency of every group of number of calls suppression ratio of swindle number.
Fig. 2 is further illustrated, when period of time T is 5 minutes, K=5 when, the present invention is first from the calling of 5 minutes
Doubtful swindle number is identified in ticket as learning sample, then each doubtful swindle number of interception is in subsequent 25 minutes
Call data, with every 5 minutes for 1 group of test sample, call data are divided into 5 groups of test samples altogether within 25 minutes.Passing through will
In learning sample and thereafter, the behavioural characteristic in 5 groups of test samples is compared each doubtful swindle number, using one-to-one throwing
Ticket mode carries out being individually identified for each doubtful swindle number, brighter than declining so as to find out the calling in rear 5 groups of test samples
Aobvious doubtful swindle number.In this way, by the circular flow of -25 minutes test samples of 5 minutes learning samples, so as to final essence
Standard identifies doubtful swindle number and swindle one's share of expenses for a joint undertaking does not use or what is do not used in a period of time abandons number, is promoted
Accuracy, while also enhance stability.
The system of a kind of automatic identification of the present invention and triggering swindle number, includes：
NID number identifier is swindled, it is special according to the behavior of calling number for from the calling ticket of certain time cycle T
Sign identifies the doubtful swindle number for having similar features with swindle number, then searches the GMSC belonging to doubtful swindle number
(i.e. Gateway Mobile Switching Center) or HSS (i.e. home signature user server), the doubtful swindle number hair that finally will identify that
Give the GMSC or HSS belonging to it so that GMSC or CSCF (i.e. call session control function server) receive it is doubtful
When swindling the calling that number is initiated, the calling is forwarded to anti-swindle platform.
The present invention not only can identify new doubtful swindle number from the calling ticket of each period of time T, may be used also
To be directed to calling behavioural characteristic of each doubtful swindle number after above-mentioned period of time T, swindle one's share of expenses for a joint undertaking is further identified
It does not use or what is do not used in a period of time abandons number.The swindle NID number identifier can further include
Have：
Doubtful Number Reorganization component, for passing through the combinational algorithm of decision tree and logistic regression, from certain time cycle T
Doubtful swindle number is identified in the whole network calling ticket；
Abandon Number Reorganization component, for count it is doubtful swindle number in the period of time T and the time week
The number of calls in K after phase T continuous period of time T, and doubtful swindleness is judged according to the downward trend of the number of calls
It deceives whether number is abandoned by swindle one's share of expenses for a joint undertaking, GMSC or HSS belonging to it is sent to if it is, one's share of expenses for a joint undertaking will be swindled and abandon number,
So that GMSC or CSCF (i.e. call session control function server) receive the calling that swindle one's share of expenses for a joint undertaking abandons number initiation
When, the calling is no longer forwarded to anti-swindle platform, wherein, K is a natural number, and value can be set according to actual conditions
It is fixed.
TDM or IMS network are the composite can be widely applied to, when in applied to TDM networks, swindle NID number identifier is also
Include：
Doubtful number notifying component, for establishing TCP connection with the GMSC belonging to doubtful swindle number, then by described
TCP connection link sends addition trigger request to the GMSC belonging to doubtful swindle number, includes in the addition trigger request
Doubtful swindle number；
Number notifying component is abandoned, releasing trigger request, institute are sent for abandoning the GMSC belonging to number to swindle one's share of expenses for a joint undertaking
State release trigger request in include swindle one's share of expenses for a joint undertaking abandon number,
The invention also includes have：
GMSC for extracting doubtful swindle number from the addition trigger request received, and is saved in local, then sentences
Whether calling number is doubtful swindle number in the disconnected message related to calls being subsequently received, if it is, by calling triggering to SCP,
And calling is forwarded to anti-swindle platform by SCP；Meanwhile the extraction swindle one's share of expenses for a joint undertaking number of abandoning from the releasing trigger request received
Code, and delete the swindle one's share of expenses for a joint undertaking from the doubtful swindle number locally preserved and abandon number.
When in applied to IMS network, swindle NID number identifier has further included：
Doubtful number notifying component touches for sending doubtful swindle number to the HSS belonging to doubtful swindle number and adding
Send out the instruction of data；
Number notifying component is abandoned, number is abandoned for abandoning the HSS transmission swindle one's shares of expenses for a joint undertaking belonging to number to swindle one's share of expenses for a joint undertaking
And the instruction of trigger data is deleted,
The invention also includes have：
HSS, for adding iFC user contracting datas for doubtful swindle number or deleting the iFC for swindling one's share of expenses for a joint undertaking and abandoning number
User contracting data,
CSCF inquires user contracting data, Ran Hougen for the HSS belonging to the calling number into the message related to calls received
According to the iFC user contracting datas that HSS is returned, the calling that doubtful swindle number is initiated is triggered to anti-swindle platform.
It can further include as shown in figure 3, abandoning Number Reorganization component：
Number of calls accumulated unit, for calculating K continuous time weeks of the doubtful swindle number after period of time T
The sum of number of calls in phase TAnd judge whether the sum of number of calls is 0, if it is, representing to doubt
It is abandoned like swindle number by swindle one's share of expenses for a joint undertaking, wherein, CallingTA (t) is t of the doubtful swindle number after period of time T
The number of calls in a period of time T, K are a natural numbers, and value can be set according to actual conditions, such as K=5；
Total number of calls be averaged suppression ratio unit, is averaged suppression ratio for calculating the doubtful total number of calls for swindling number
Calling_minus_ratio：Wherein,
CallingT is the number of calls of the doubtful swindle number in period of time T, and judges whether Calling_minus_ratio is small
The minimum threshold for the suppression ratio that is averaged in total number of calls, if it is, representing that doubtful swindle number is abandoned by swindle one's share of expenses for a joint undertaking；
Every group of number of calls suppression ratio unit, for calculating the least square slope ratio Slope_ of doubtful swindle number
ratio：Wherein, Calling_
Ratio (t) is number of calls suppression ratio of the doubtful swindle number in t-th of period of time T after period of time T, into one
Step says that the calculation formula of Calling_ratio (t) is as follows：And sentence
It is disconnected that whether Slope_ratio is in (A1, A2) numerical intervals in the range of and Calling_minus_ratio be less than total number of calls
The max-thresholds of average suppression ratio, if it is, represent that doubtful swindle number is abandoned by swindle one's share of expenses for a joint undertaking, wherein, A1、A2It is minimum
Two multiply minimum, the big threshold value of slope ratio.
The be averaged most large and small threshold value of suppression ratio and least square slope ratio of total number of calls can take according to actual conditions
Value.
The present invention carried out test of many times in existing net, from the point of view of test effect, when K=5, total number of calls averagely under
Minimum threshold=- 0.7443 of ratio drops, total number of calls is averaged max-thresholds=- 0.5013 of suppression ratio, A1=-0.2906, A2
When=0.1257, the present invention can obtain preferable application effect, precisely identify that swindle one's share of expenses for a joint undertaking abandons number.
The foregoing is merely illustrative of the preferred embodiments of the present invention, is not intended to limit the invention, all essences in the present invention
God and any modification, equivalent substitution, improvement and etc. within principle, done, should be included within the scope of protection of the invention.
Claims (6)
1. a kind of method of automatic identification and triggering swindle number, which is characterized in that include：
Step 1: from the calling ticket of certain time cycle T, according to the behavioural characteristic of calling number, identify and swindle number
Code has the doubtful swindle number of similar features；
Step 2: the Gateway Mobile Switching Center GMSC or home signature user server HSS belonging to doubtful swindle number are searched,
Then the doubtful swindle number that will identify that is sent to GMSC or HSS belonging to it, so that GMSC or Call-Establish-Success rate
When function server CSCF receives the calling that doubtful swindle number is initiated, the calling is forwarded to anti-swindle platform；
Step 3: K of the doubtful swindle number of statistics in the period of time T and after the period of time T is a continuous
The number of calls in period of time T, and judge doubtful swindle number whether by swindle part according to the downward trend of the number of calls
Son is abandoned, and GMSC or HSS belonging to it is sent to if it is, will swindle one's share of expenses for a joint undertaking and abandon number, so that GMSC or CSCF
Receive swindle one's share of expenses for a joint undertaking abandon number initiation calling when, no longer by it is described calling be forwarded to anti-swindle platform,
In step 3, judge whether doubtful swindle number is abandoned by swindle one's share of expenses for a joint undertaking according to the downward trend of the number of calls,
Further comprise having：
Step C31, it is a continuous to count K of the doubtful swindle number in the period of time T and after the period of time T
Period of time T in the number of calls；
Step C32, judge calling time of the doubtful swindle number in K continuous period of time T after the period of time T
The sum of numberWhether it is 0, if it is, represent that doubtful swindle number is abandoned by swindle one's share of expenses for a joint undertaking, this flow
Terminate, wherein, CallingTA (t) is calling time of the doubtful swindle number in t-th of period of time T after period of time T
Number,
In step C32, the calling time in K continuous period of time T after doubtful swindle number is in the period of time T
The sum of numberWhen not being 0, further include：
Step C33, the total number of calls for calculating doubtful swindle number is averaged suppression ratio Calling_minus_ratio：
Wherein, CallingT is doubtful swindle number
The number of calls in the period of time T, and judge Calling_minus_ratio whether be less than total number of calls averagely under
The minimum threshold of ratio drops, if it is, representing that doubtful swindle number is abandoned by swindle one's share of expenses for a joint undertaking, this flow terminates,
In step C33, when Calling_minus_ratio not less than total number of calls be averaged suppression ratio minimum threshold when, and also
Include：
Step C34, the least square slope ratio Slope_ratio of doubtful swindle number is calculated：
Wherein,
Calling_ratio (t) is calling of the doubtful swindle number in t-th of period of time T after the period of time T
Number suppression ratio, further, the calculation formula of Calling_ratio (t) are as follows：
And judge whether Slope_ratio in (A1, A2) numerical value area
Between in the range of and Calling_minus_ratio be less than total number of calls and be averaged the max-thresholds of suppression ratio, if it is, table
Show that doubtful swindle number is abandoned by swindle one's share of expenses for a joint undertaking, this flow terminates, wherein, A1、A2It is minimum, the big threshold of least square slope ratio
Value.
2. according to the method described in claim 1, it is characterized in that, step 2 further comprises having：
Step A21, and the GMSC belonging to doubtful swindle number establishes TCP connection, then by the TCP connection link, to doubting
GMSC like belonging to swindle number sends addition trigger request, includes doubtful swindle number in the addition trigger request；
Step A22, GMSC extracts doubtful swindle number from the addition trigger request received, and is saved in local, then sentences
Whether calling number is doubtful swindle number in the disconnected message related to calls being subsequently received, if it is, by calling triggering to calling
Control node SCP, and calling is forwarded to anti-swindle platform by SCP；If it is not, then original operation flow is performed,
Step 3 further comprises having：
Step A31, the GMSC belonging to number is abandoned to swindle one's share of expenses for a joint undertaking and sends releasing trigger request, is wrapped in the releasing trigger request
It has included swindle one's share of expenses for a joint undertaking and has abandoned number；
Step A32, GMSC extracts swindle one's share of expenses for a joint undertaking from the releasing trigger request received and abandons number, and is doubted from what is locally preserved
Number is abandoned like the swindle one's share of expenses for a joint undertaking is deleted in swindle number.
3. according to the method described in claim 1, it is characterized in that, step 2 further comprises having：
Step B21, it sends doubtful swindle number to the HSS belonging to doubtful swindle number and adds the instruction of trigger data, HSS is
The doubtful swindle number addition iFC user contracting datas；
Step B22, HSSs of the CSCF into the message related to calls received belonging to calling number inquires its user contracting data, then
According to the iFC user contracting datas that HSS is returned, the calling that doubtful swindle number is initiated is triggered to anti-swindle platform,
Step 3 further comprises having：
Step B31, the HSS transmission swindle one's shares of expenses for a joint undertaking belonging to number are abandoned to swindle one's share of expenses for a joint undertaking to abandon number and delete the finger of trigger data
It enables, HSS deletes the iFC user contracting datas that swindle one's share of expenses for a joint undertaking abandons number.
4. the system of a kind of automatic identification and triggering swindle number, which is characterized in that include：
NID number identifier is swindled, for from the calling ticket of certain time cycle T, according to the behavioural characteristic of calling number,
It identifies the doubtful swindle number that there are similar features with swindle number, then searches the gateway movement belonging to doubtful swindle number
Switching centre GMSC or home signature user server HSS, the doubtful swindle number that finally will identify that are sent to belonging to it
GMSC or HSS, so that GMSC or call session control function server CSCF receive exhaling for doubtful swindle number initiation
When crying, the calling is forwarded to anti-swindle platform,
Swindle NID number identifier further comprises having：
Number Reorganization component is abandoned, for counting doubtful swindle number in the period of time T and the period of time T
The number of calls in K later continuous period of time T, and doubtful swindle number is judged according to the downward trend of the number of calls
Whether code is abandoned by swindle one's share of expenses for a joint undertaking, and GMSC or HSS belonging to it are sent to if it is, will swindle one's share of expenses for a joint undertaking and abandon number, so as to
So that GMSC or CSCF receive swindle one's share of expenses for a joint undertaking when abandoning the calling of number initiation, it is flat that the calling is no longer forwarded to anti-swindle
Platform,
Number Reorganization component is abandoned to include：
Number of calls accumulated unit, for calculating K continuous period of time T of the doubtful swindle number after period of time T
The sum of interior number of callsAnd judge whether the sum of number of calls is 0, if it is, representing doubtful
Swindle number is abandoned by swindle one's share of expenses for a joint undertaking, wherein, CallingTA (t) is t-th of doubtful swindle number after period of time T
The number of calls in period of time T；
Total number of calls be averaged suppression ratio unit, is averaged suppression ratio for calculating the doubtful total number of calls for swindling number
Calling_minus_ratio：Wherein,
CallingT is the doubtful number of calls of the swindle number in period of time T, CallingTA (t) be doubtful swindle number when
Between the number of calls in t-th of period of time T after cycle T, and judge whether Calling_minus_ratio is less than and always exhale
The minimum threshold that number is made to be averaged suppression ratio, if it is, representing that doubtful swindle number is abandoned by swindle one's share of expenses for a joint undertaking.
5. system according to claim 4, which is characterized in that further included：
GMSC for extracting doubtful swindle number from the addition trigger request received, and is saved in local, then judge with
Whether calling number is doubtful swindle number in the message related to calls received afterwards, if it is, by calling triggering to Call- Control1
Node SCP, and calling is forwarded to anti-swindle platform by SCP；Meanwhile extraction swindle part from the releasing trigger request received
Son abandons number, and deletes the swindle one's share of expenses for a joint undertaking from the doubtful swindle number locally preserved and abandon number,
The swindle NID number identifier has further included：
Doubtful number notifying component for establishing TCP connection with the GMSC belonging to doubtful swindle number, then passes through the TCP
Connecting link sends addition trigger request to the GMSC belonging to doubtful swindle number, includes in the addition trigger request doubtful
Like swindle number；
Number notifying component is abandoned, releasing trigger request, the solution are sent for abandoning the GMSC belonging to number to swindle one's share of expenses for a joint undertaking
Number is abandoned except swindle one's share of expenses for a joint undertaking is included in trigger request.
6. system according to claim 4, which is characterized in that further included：
HSS, for adding iFC user contracting datas for doubtful swindle number or deleting the iFC user for swindling one's share of expenses for a joint undertaking and abandoning number
Subscription data,
CSCF inquires user contracting data, then basis for the HSS belonging to the calling number into the message related to calls received
The iFC user contracting datas that HSS is returned trigger the calling that doubtful swindle number is initiated to anti-swindle platform,
Swindle NID number identifier has further included：
Doubtful number notifying component, for sending doubtful swindle number and addition triggering number to the HSS belonging to doubtful swindle number
According to instruction；
Number notifying component is abandoned, sending swindle one's share of expenses for a joint undertaking for abandoning HSS belonging to number to swindle one's share of expenses for a joint undertaking abandons number and delete
Except the instruction of trigger data.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510191086.5A CN104853357B (en) | 2015-04-21 | 2015-04-21 | A kind of method and system of automatic identification and triggering swindle number |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510191086.5A CN104853357B (en) | 2015-04-21 | 2015-04-21 | A kind of method and system of automatic identification and triggering swindle number |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104853357A CN104853357A (en) | 2015-08-19 |
| CN104853357B true CN104853357B (en) | 2018-07-10 |
Family
ID=53852632
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510191086.5A Active CN104853357B (en) | 2015-04-21 | 2015-04-21 | A kind of method and system of automatic identification and triggering swindle number |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104853357B (en) |
Families Citing this family (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107046593A (en) * | 2017-04-07 | 2017-08-15 | 北京安云世纪科技有限公司 | A kind of harassing call hold-up interception method and device |
| CN110213448B (en) * | 2018-09-13 | 2021-08-24 | 腾讯科技（深圳）有限公司 | Malicious number identification method and device, storage medium and computer equipment |
| CN109462582B (en) * | 2018-10-30 | 2020-11-20 | 腾讯科技（深圳）有限公司 | Text recognition method, text recognition device, server and storage medium |
| CN110166635B (en) * | 2019-07-11 | 2021-06-08 | 中国联合网络通信集团有限公司 | Suspicious terminal identification method and suspicious terminal identification system |
| CN111049993B (en) * | 2019-12-19 | 2021-10-08 | 广西东信易通科技有限公司 | Mass code number abnormal state detection method and system based on map and bicc signaling |
| CN113891324A (en) * | 2020-06-17 | 2022-01-04 | 中国移动通信集团福建有限公司 | Method and device for preventing telecommunication fraud and electronic equipment |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20050071949A (en) * | 2004-01-05 | 2005-07-08 | 에스케이 텔레콤주식회사 | Mobile communication system for interception of malicious call and malicious call interception method |
| CN101242559A (en) * | 2007-02-05 | 2008-08-13 | 华为技术有限公司 | SMS interception method, device and system |
| CN102572124A (en) * | 2011-12-16 | 2012-07-11 | 西安大唐电信有限公司 | Method and system for preventing telecommunication fraud by using No.7 signaling message of switch |
| CN103906067A (en) * | 2012-12-28 | 2014-07-02 | 中国移动通信集团设计院有限公司 | Method and device for identifying false calling number |
| CN104105079A (en) * | 2013-04-15 | 2014-10-15 | 中国移动通信集团河南有限公司 | Call transfer method and device |
| CN104244216A (en) * | 2014-09-29 | 2014-12-24 | 中国移动通信集团浙江有限公司 | Method and system for intercepting fraud phones in real time during calling |
| CN104469025A (en) * | 2014-11-26 | 2015-03-25 | 杭州东信北邮信息技术有限公司 | Clustering-algorithm-based method and system for intercepting fraud phone in real time |
-
2015
- 2015-04-21 CN CN201510191086.5A patent/CN104853357B/en active Active
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20050071949A (en) * | 2004-01-05 | 2005-07-08 | 에스케이 텔레콤주식회사 | Mobile communication system for interception of malicious call and malicious call interception method |
| CN101242559A (en) * | 2007-02-05 | 2008-08-13 | 华为技术有限公司 | SMS interception method, device and system |
| CN102572124A (en) * | 2011-12-16 | 2012-07-11 | 西安大唐电信有限公司 | Method and system for preventing telecommunication fraud by using No.7 signaling message of switch |
| CN103906067A (en) * | 2012-12-28 | 2014-07-02 | 中国移动通信集团设计院有限公司 | Method and device for identifying false calling number |
| CN104105079A (en) * | 2013-04-15 | 2014-10-15 | 中国移动通信集团河南有限公司 | Call transfer method and device |
| CN104244216A (en) * | 2014-09-29 | 2014-12-24 | 中国移动通信集团浙江有限公司 | Method and system for intercepting fraud phones in real time during calling |
| CN104469025A (en) * | 2014-11-26 | 2015-03-25 | 杭州东信北邮信息技术有限公司 | Clustering-algorithm-based method and system for intercepting fraud phone in real time |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104853357A (en) | 2015-08-19 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104853357B (en) | A kind of method and system of automatic identification and triggering swindle number | |
| WO2016197675A1 (en) | Method and apparatus for identifying crank call | |
| CN104936182B (en) | A kind of method and system of intelligence management and control fraudulent call | |
| CN113810224A (en) | Information processing method and device | |
| CN106331390B (en) | A kind of method and system identifying swindle number based on communicating data | |
| CN106658564B (en) | The recognition methods of domestic consumer a kind of and device | |
| CN101137085B (en) | Garbage message and multimedia message blocking method | |
| US20070233861A1 (en) | Method and apparatus for implementing SMS SPAM filtering | |
| CN105357146B (en) | Buffer queue saturation attack defence method, apparatus and system in egress gateways | |
| CN101350957A (en) | Method and equipment for shielding rubbish short message | |
| CN108737622A (en) | Monitoring method of conversing and device | |
| CN101389074B (en) | Short message monitoring method ensuring identity of sender based social network mechanism | |
| CN101945006B (en) | Detection method of abnormal call | |
| CN104883671A (en) | Junk message determining method and system | |
| CN105451234A (en) | Signaling interactive data-based suspicious number analyzing method and device | |
| CN103281464B (en) | Based on signaling deficient stop missed call notification system and method | |
| CN108271189A (en) | A kind of quality of service monitoring method and device | |
| CN109673011A (en) | A kind of mobile terminal identity information association analysis method and device | |
| CN104581729B (en) | Junk information processing method and device | |
| CN109151229A (en) | Abnormal call automatic identification early warning system and its working method, call center system | |
| CN105681287A (en) | Screening rule based user service allocation screening method | |
| CN103716471B (en) | A kind of user being applicable to rubbish voice filtering calls out the generation method of behavior model | |
| CN107526690A (en) | Remove the method and device of caching | |
| CN106302436B (en) | A kind of autonomous discovery method, apparatus and equipment of attack message characteristics | |
| CN114205462A (en) | Fraud telephone identification method, device, system and computer storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| EXSB | Decision made by sipo to initiate substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information | ||
| CB02 | Change of applicant information |
Address after: 310013, Zhejiang, Xihu District, Wensanlu Road, No. 398, 4 floor, Hangzhou Applicant after: EB Information Technology Ltd. Address before: 100191 Beijing, Zhichun Road, No. 9, hearing the building on the floor of the 7 floor, Applicant before: EB Information Technology Ltd. |
|
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| CP01 | Change in the name or title of a patent holder | ||
| CP01 | Change in the name or title of a patent holder |
Address after: 310013 4th floor, No.398 Wensan Road, Xihu District, Hangzhou City, Zhejiang Province Patentee after: Xinxun Digital Technology (Hangzhou) Co.,Ltd. Address before: 310013 4th floor, No.398 Wensan Road, Xihu District, Hangzhou City, Zhejiang Province Patentee before: EB Information Technology Ltd. |