CN106657535B

CN106657535B - Incoming call and outgoing call processing method and device

Info

Publication number: CN106657535B
Application number: CN201610862916.7A
Authority: CN
Inventors: 高祎玮; 杨颖慧; 齐会峰; 周楠; 高双武; 庞晓
Original assignee: Beijing Qihoo Technology Co Ltd
Current assignee: Beijing Qihoo Technology Co Ltd
Priority date: 2016-09-28
Filing date: 2016-09-28
Publication date: 2020-03-24
Anticipated expiration: 2036-09-28
Also published as: CN106657535A

Abstract

The embodiment of the invention provides an incoming call and outgoing call processing method and device, wherein the incoming call and outgoing call processing method specifically comprises the following steps: after hanging up to call, showing a fraud prompt window; wherein, the fraud prompt window comprises at least one type of fraud path information, and the represented fraud path information is provided with a link so that a user jumps to a page of the fraud path information by triggering the fraud path information. The fraud routing information displayed by the embodiment of the invention can play a certain role in fraud warning and fraud routing knowledge education for the user, so that the user can be effectively prevented from being cheated due to the incoming call which is just answered, and the embodiment of the invention can effectively prevent the fraudulent behavior caused by answering a new fraud telephone number.

Description

Incoming call and outgoing call processing method and device

Technical Field

The present invention relates to the field of communications technologies, and in particular, to an incoming call and outgoing call processing method and an incoming call and outgoing call processing apparatus.

Background

With the continuous development of communication technology, especially the development of mobile communication technology, more and more users adopt telephones for communication, and telephone communication brings convenience to the users, so that the users can conveniently and quickly communicate. But many fraud phones come along, and these fraud phones usually take advantage of personal data (such as name, phone, address, etc.) left by users during online shopping to perform fraud on the users through the phones, thereby causing huge economic loss to the victims.

In order to deal with these increasingly rampant fraud behaviors, the existing scheme may store the marked malicious phone in the number tag library at the network side, so that when an incoming and outgoing number hits the number tag library, the incoming and outgoing number may be intercepted, thereby helping a user intercept some malicious phones to a certain extent, and effectively preventing the user from suffering economic loss due to the malicious phone.

However, the inventor finds in the course of implementing the present invention that in practical applications, after discovering that the fraud phone numbers are marked, fraudsters often continue to implement fraud using new fraud phone numbers that are unlikely to appear in the number marking library because of non-implementation of fraud, and thus, the existing schemes are unable to prevent fraud of new fraud phone numbers.

Disclosure of Invention

In view of the above problems, the present invention has been made to provide a method of incoming call processing and an incoming call processing apparatus that overcome or at least partially solve the above problems.

According to an aspect of the present invention, there is provided an incoming and outgoing call processing method including:

after hanging up to call, showing a fraud prompt window; wherein, the fraud prompt window comprises at least one type of fraud path information, and the represented fraud path information is provided with a link so that a user jumps to a page of the fraud path information by triggering the fraud path information.

According to another aspect of the present invention, there is provided an incoming and outgoing call processing apparatus including:

the first showing module is used for showing a fraud prompting window after hanging up to remove the call; wherein, the fraud prompt window comprises at least one type of fraud path information, and the represented fraud path information is provided with a link so that a user jumps to a page of the fraud path information by triggering the fraud path information.

According to the incoming call processing method and device provided by the embodiment of the invention, the fraud routing information such as common fraud calls can be shown through the fraud prompt window, and the shown fraud routing information can help a user to determine whether a fraud call behavior is generated on a just received incoming call, so that even if the user receives a fraud call, the fraud routing information shown in the embodiment of the invention can play a certain role in fraud warning and fraud routing knowledge education on the user, and therefore, the user can be effectively prevented from being cheated due to the just received incoming call.

In addition, because the embodiment of the invention delivers the fraud warning information and the fraud routing information to the user through the display fraud prompting window under the condition of hanging up the incoming call and going out the call without depending on the storage content of the number mark library, the embodiment of the invention is not limited by whether the incoming call number exists in the number mark library or not, namely, even if the incoming call number is a new number, the embodiment of the invention can still play the roles of fraud warning and fraud routing knowledge education, therefore, the embodiment of the invention can effectively prevent fraud behaviors caused by answering new fraud telephone numbers.

The foregoing description is only an overview of the technical solutions of the present invention, and the embodiments of the present invention are described below in order to make the technical means of the present invention more clearly understood and to make the above and other objects, features, and advantages of the present invention more clearly understandable.

Drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the alternative embodiments. The drawings are only for purposes of illustrating alternative embodiments and are not to be construed as limiting the invention. Also, like reference numerals are used to refer to like parts throughout the drawings. In the drawings:

FIG. 1 illustrates a schematic view of a fraud prompt window of the present invention;

FIG. 2 is a flow chart illustrating the steps of a method for de-electrifying according to one embodiment of the present invention;

FIG. 3 shows a structural schematic of a page of fraud routing information of the present invention;

FIG. 4 is a flow chart illustrating steps of a method for de-electrifying a substrate according to one embodiment of the present invention;

FIG. 5 is a flow chart illustrating steps of a method for de-electrifying according to one embodiment of the present invention;

FIG. 6 is a flow chart illustrating steps of a method for de-electrifying according to one embodiment of the present invention; and

fig. 7 shows a schematic configuration of a de-electrifying processing apparatus according to an embodiment of the present invention.

Detailed Description

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.

The embodiment of the invention provides an incoming call and outgoing call processing method, which can show a fraud prompt window after hanging up the incoming call and outgoing call; wherein, at least one type of fraud path information can be included in the fraud prompt window, and the represented fraud path information can be provided with a link so as to enable a user to jump to a page of the fraud path information by triggering the fraud path information.

The hanging up incoming call and outgoing call of the embodiment of the invention can specifically comprise the following steps: the embodiment of the invention mainly takes the situation that the incoming call is hung up after being connected as an example, and the situation that the incoming call is hung up after being connected can be referred to each other.

The fraud routing information can be used to indicate the way of fraud by telephone. In practical application, fraud routing information of some common fraud calls can be shown on the fraud prompt window of the embodiment of the invention, and the shown fraud routing information can help a user determine whether a fraud call behavior is generated by a call just answered, so that even if the user answers the fraud call, the fraud routing information shown in the embodiment of the invention can play a certain role in fraud warning and fraud routing knowledge education for the user, and therefore, the user can be effectively prevented from being cheated by the call just answered.

Alternatively, the process of the user determining whether the action of the fraudulent call is generated by the just answered incoming call may be that the user compares the call content of the just answered incoming call with the displayed fraud routing information and helps the user determine whether the action of the fraudulent call is generated by the just answered incoming call according to the comparison result, for example, when the call content of the just answered incoming call is similar to the displayed certain fraud routing information, the user may determine that the action of the fraudulent call is generated by the just answered incoming call. Of course, the embodiment of the present invention does not impose any limitation on the specific process of the user determining whether the incoming call just answered produces the fraudulent call behavior.

In addition, because the embodiment of the invention delivers the fraud warning information and the fraud routing information to the user through the display fraud prompting window under the condition of hanging up the incoming call and going out the call without depending on the storage content of the number mark library, the embodiment of the invention is not limited by whether the incoming call number exists in the number mark library or not, namely, even if the incoming call number is a new number, the embodiment of the invention can still play the roles of fraud warning and fraud routing knowledge education, therefore, the embodiment of the invention can prevent the fraud behavior of new fraud telephone numbers.

And, the fraud routing information revealed in the embodiments of the present invention may have a link, so that the user jumps to the page of the fraud routing information by triggering the fraud routing information. The page of the fraud routing information can display the relevant information of the more abundant fraud routing information, such as fraud types, fraud type influence, fraudster characteristics, cases, fraud prevention skills and the like, so that the user can know more relevant information of the fraud routing information, and the user is further prevented from being cheated by the incoming call which is just answered.

The incoming call and outgoing call processing method provided by the embodiment of the invention can be applied to any incoming call and outgoing call processing APP (Application program) with an incoming call and outgoing call processing function, and the incoming call and outgoing call processing method provided by the embodiment of the invention can be applied to Application environments corresponding to a client and a server, wherein the client and the server can be located in a wired or wireless network, and the client and the server perform data interaction through the wired or wireless network.

Specifically, the client may be operated on an intelligent terminal having a call function, where the intelligent terminal specifically includes but is not limited to: smart phones, tablet computers, electronic book readers, MP3 (Moving Picture Experts Group Audio Layer III) players, MP4 (Moving Picture Experts Group Audio Layer IV) players, laptop portable computers, car computers, set-top boxes, smart televisions, wearable devices, and the like.

In practical application, the server can obtain the fraud routing information on the basis of analyzing a large number of telephone fraud cases and issue the fraud routing information to the client. It is understood that the fraud routing information described above can increase as the number of phone fraud cases (e.g., phone fraud cases of hot spots) increases.

In an optional embodiment of the present invention, the server may utilize the advantage of rich resources to obtain the content of the fraud prompt window, and issue the content of the fraud prompt window to the client, so that the user performs the display of the fraud prompt window directly according to the content of the fraud prompt window. Optionally, the content of the fraud prompt window may further include corresponding fraud warning information in addition to the fraud routing information and the corresponding link information thereof, so as to better play a role in fraud warning and fraud routing knowledge education. Further optionally, the content of the fraud prompting window may further include a preset presentation pattern of the fraud prompting window, and the like, so that the client performs presentation of the fraud prompting window according to the preset presentation pattern.

Referring to FIG. 1, a schematic diagram of a fraud prompting window of the present invention is shown, wherein the fraud prompting window can be presented on the smart terminal in the form of a pop-up window after hanging up to remove the power. In fig. 1, the content of the fraud prompt window may specifically include: fraud warning information 101 and at least one type of fraud trajectory information 102, wherein the fraud warning information 101 specifically includes: the number of recent fraud calls is more, whether the following phone behaviors are met in the phone is confirmed, or the opposite party is prompted to cheat you in the following way if the recent fraud calls are sent out at a high rate; the fraud routing information 102 may specifically include: asking for bank card numbers, claiming to be public security, asking for verification codes, calling out to be consumed abroad, claiming bank personnel, giving your money transfer and the like, and it can be understood that the embodiment of the invention does not limit the specific fraud warning information 101 and the fraud routing information 102.

In the embodiment of the present invention, each type of fraud routing information 102 presented may have a link, so that the user can jump to the page of the fraud routing information through the link. In an application example of the present invention, the link may be H5 (HyperText Markup Language5), and after receiving a trigger operation of the user on the fraud routing information, the corresponding link may be opened through a webview (web view) plug-in of the smart terminal, and it is understood that the embodiment of the present invention is not limited to a specific link and a specific link opening manner.

In an optional embodiment of the present invention, the incoming call and outgoing call processing method according to an embodiment of the present invention may further include: responding to a trigger instruction of a user for the harassment interception interface, and showing a fraud prompt window; wherein, at least one type of fraud routing information can be included in the fraud prompt window, and the represented fraud routing information is provided with a link so that a user jumps to a page of the fraud routing information by triggering the fraud routing information. The harassment interception interface is used for displaying intercepted harassment calls, namely the harassment calls displayed by the harassment interception interface are not answered by the user. The harassing call can be intercepted in any mode, for example, when the number of the incoming call is consistent with the number with the fraud type of the mark stored in the number mark library, the incoming call can be intercepted and added to a harassing call intercepting interface. In practical application, when a viewing requirement of a harassing call exists, a user may generate a trigger instruction for a harassing interception interface through any portal, for example, a portal provided on a desktop by an incoming and outgoing call processing APP generates a trigger instruction for a harassing interception interface, and the like.

Optionally, when a trigger instruction of the user for the harassment interception interface is received, the fraud prompt window may be presented in a pop-up window manner. Because the harassing calls shown by the harassing interception interface are not answered by the user, the optional embodiment can show fraud routing information of some common fraud calls on the fraud prompt window under the condition that the user does not answer the incoming call, and the displayed fraud routing information can play a certain role in fraud warning and fraud routing knowledge education for the user, so that the user can be effectively prevented from dialing the harassing calls shown by the harassing interception interface, and the user is prevented from being cheated by dialing the incoming call.

In another optional embodiment of the present invention, the incoming and outgoing processing method according to the embodiment of the present invention may further include: and responding to the triggering operation of the user on the fraud routing information, and uploading fraud routing information corresponding to the triggering operation and number information of incoming and outgoing calls to a server. The uploaded fraud routing information and the number information of the incoming call and the outgoing call can enable the server to analyze the number information of the incoming call and the outgoing call, judge whether the incoming call number is a fraud number or not according to the analysis result, and if so, add the incoming call number information to the number marking library. It is understood that the above-mentioned process of analyzing the incoming and outgoing number information by the server is only an optional embodiment, and in fact, the embodiment of the present invention does not limit the specific process of analyzing the incoming and outgoing number information by the server.

In summary, according to the incoming call processing method of the embodiment of the present invention, after the incoming call is suspended, the fraud routing information shown in the fraud prompt window can help the user determine whether the incoming call just answered generates a fraud call behavior, so that even if the user answers the fraud call, the fraud routing information shown in the embodiment of the present invention can play a certain role in fraud warning and fraud routing knowledge education for the user, and thus, the user can be effectively prevented from being cheated by the incoming call just answered.

In addition, because the embodiment of the invention transmits the fraud warning information and the fraud routing information to the user through the display fraud prompting window under the condition of hanging up the incoming call and going out the call without depending on the storage content of the number marking library, the embodiment of the invention is not limited by whether the incoming call number exists in the number marking library or not, namely, even if the incoming call number is a new number, the embodiment of the invention can still play the roles of fraud warning and fraud routing knowledge education, therefore, the embodiment of the invention can effectively prevent fraud behaviors caused by answering new fraud telephone numbers.

It should be noted that there may be cases related to fraud calls in the existing webpages, but this requires the user to retrieve the corresponding webpages by means of, for example, searching, so that the existing users need to spend a lot of operation costs to acquire the cases related to fraud calls. In addition, the users of the intelligent terminal are numerous (for example, Chinese mobile phone users exceed 13 hundred million), and not every user has the requirement of knowledge of the fraud paths, and this need is often potential and not realistic, it has been demonstrated that most users do not actively retrieve fraud-related information, the embodiment of the invention transmits fraud routing information to the user through the fraud presentation prompt window under the specific scene after the user hangs up to go off the electricity, because the user just answers the incoming call in the specific scene after hanging up the incoming call, the potential requirement of knowledge of the fraud path exists, the conversation content of the just answered incoming call can be better memorized, therefore, the call content can be compared with the displayed fraud routing information more accurately, and whether the action of a fraud call is generated by the call which is just answered is determined according to the comparison result. Therefore, the embodiment of the invention can effectively prevent the fraud behavior caused by answering a new fraud telephone number under the condition of digging the potential requirement of the user on the fraud path knowledge.

Referring to fig. 2, a flowchart illustrating steps of a power-off processing method according to an embodiment of the present invention may specifically include the following steps:

step 201, after hanging up to call, showing a fraud prompt window; wherein, at least one type of fraud routing information can be included in the fraud prompt window, and the represented fraud routing information is linked with a link so that a user jumps to a page of the fraud routing information by triggering the fraud routing information;

step 202, in response to a triggering operation of the user on the fraud routing information, presenting a page of the fraud routing information, where the page of the fraud routing information may include: information related to the fraud routing information.

The embodiment of the invention not only transmits the fraud routing information to the user through the fraud prompting window, but also helps the user accurately identify whether the user suffers from a fraud call in a mode of jumping to the page of the fraud routing information. Wherein, the page of the fraud routing information may include: the fraud routing information may be more detailed and richer information of the fraud routing information.

In an optional embodiment of the present invention, the related information may specifically include at least one of the following information: fraud types, fraud type effects, fraudster characteristics, cases, anti-fraud skills, page links and shared information of other fraud routing information. The page links of the other fraud routing information can be used for jumping to pages of the other fraud routing information, and the sharing information can be used for sharing the current page to other users such as friends.

Referring to fig. 3, a structural schematic of a page of fraud routing information of the present invention is shown, where the page may specifically include: fraud type 301, fraud type impact 302, fraudster characteristics 303, case 304 and anti-fraud trick 305. Referring to table 1, a specific example of a page of fraud routing information of the present invention is shown. It is understood that the related information contained in the page of the fraud routing information shown in table 1 is only an alternative embodiment, and actually, those skilled in the art can adopt the corresponding related information according to the actual fraud case.

TABLE 1

In summary, the incoming call processing method of the embodiment of the invention generates the fraud prompting window after the call is hung up, and the fraud prompting window has the fraud routing information of some common fraud calls, so that the method can help the user to confirm whether the fraud call is generated or not; in addition, the user can be helped to confirm whether the user suffers from fraud or not through the form of the warning and the form of the skipping real case, so that the fraud caused by answering a new fraud telephone number can be effectively prevented.

Referring to fig. 4, a flowchart illustrating steps of a power-off processing method according to an embodiment of the present invention may specifically include the following steps:

step 401, judging whether a fraud prompting window is shown or not according to the number attribute of the incoming and outgoing calls so as to obtain a corresponding judgment result;

step 402, when the judgment result is yes, displaying a fraud prompt window after hanging up to call; wherein, at least one type of fraud path information can be included in the fraud prompt window, and the represented fraud path information can be provided with a link so as to enable a user to jump to a page of the fraud path information by triggering the fraud path information.

The embodiment of the invention can judge whether the fraud prompting window is shown or not according to the number attribute of the incoming and outgoing calls, and specifically can judge whether the incoming and outgoing numbers have the risk of fraudulent calls or not according to the number attribute of the incoming and outgoing calls, and if so, the fraud prompting window is shown. According to the embodiment of the invention, under the condition that the incoming and outgoing numbers have the risk of fraudulent calls, the fraud prompt window is displayed after the incoming and outgoing numbers are hung up, so that the interference of the fraud prompt window to the user can be avoided under the condition that the incoming and outgoing numbers do not have the risk of fraudulent calls, and the user experience is improved. For example, when the incoming and outgoing number is the user's friend's number stored in the address book, it may be determined that the incoming and outgoing number does not risk a fraud call, and thus the fraud prompt window may not be presented in this case.

In an optional embodiment of the present invention, the number attribute of the incoming/outgoing call may specifically include at least one of the following attributes: the calling behavior attribute of the number, whether the number opens the preset merchant function and the mark type of the number. The calling behavior attribute of the number can be used for representing the calling behavior condition of the number; the mark type of the number may be user identification mark information of a number input by an incoming/outgoing user through a mark entry, for example, common mark types include: house intermediation, insurance financing, advertising promotion, express meal delivery, suspected fraud, and the like.

At present, cases of fraud by counterfeit network merchants and e-commerce website customer service are frequently seen, and a fraudster usually notifies net friends of 'order failure' through short messages, induces buyers to call back, and implements further fraud. Although the cheat is a very old sleeve, since such cheaters usually already have knowledge of the user, the cheat is likely to be cheated if not carefully screened; the preset merchant function is a function provided by the incoming call processing program, when a user calls with a strange merchant (including an incoming call) recorded by the incoming call processing program, merchant information can be displayed in real time on a call interface, fraud by a fake customer is avoided, meanwhile, the incoming call processing program can also display effective information such as the star level, the address, the distance between the current position and the like of the merchant on the call interface in real time, the identity of the incoming call merchant is clear at a glance, the credibility of the relevant merchant can be searched, and reference is provided for the user to select.

It can be understood that the calling behavior attribute of the number, whether the number has the preset merchant function or not, and the marking type of the number are only optional embodiments as the number attribute, actually, a person skilled in the art can also adopt other number attributes according to the actual application requirements, such as the short message behavior attribute, and the like, and if a short message (for example, a winning result, i.e., your lead) is received, the corresponding number can also be marked, so as to realize linkage of the short message behavior and the calling behavior.

In another optional embodiment of the present invention, the manner of determining whether to present the fraud prompting window according to the number attribute of the incoming and outgoing calls to obtain the corresponding determination result may specifically include at least one of the following manners:

judging mode 1, when the calling behavior model of the incoming and outgoing number judges black, the preset merchant function is not opened, and the marking type comprises a preset fraud type, obtaining a judgment result of yes; or

Judging mode 2, when the calling behavior model judges grey, the mark type comprises a preset fraud type and the called number is a stranger of the calling number, the obtained judgment result is yes; or

Judging mode 3, when the incoming and outgoing number is judged by the calling behavior model, judging whether the obtained judgment result is negative; or

Judging mode 4, judging whether the incoming and outgoing number is grey according to the called behavior model and whether the preset merchant function is opened, wherein the obtained judgment result is negative; or

Judging mode 5, if the calling behavior model judges grey, the preset merchant function is not opened, and the marking type does not include the preset fraud type, obtaining a judgment result of no; or

And 6, judging whether the incoming and outgoing number is judged by the calling behavior model, the preset merchant function is not opened, and the marking type is a preset non-fraud type, wherein the obtained judgment result is negative.

Wherein. The call behavior model may be a recognition model trained by using behavior data and number attributes corresponding to known number samples, where the behavior data corresponding to the known number samples is data generated during a communication behavior performed by a user to which the known number samples belong, and the communication behavior may include: call behavior and/or short message behavior. Optionally, the training algorithm of the call behavior model specifically may include: SVM (Support vector machine), decision tree algorithm, etc., and the embodiment of the present invention does not limit the specific training algorithm.

In practical application, information of multiple call behaviors performed by a user to which a number sample belongs may be acquired as corresponding behavior data, and further statistical analysis may be performed on the behavior data to obtain a corresponding call behavior attribute, where optionally, the call behavior attribute may include: at least one of an outgoing call percentage, a number of outgoing calls within 1 hour, a number of strangers calls, and a hang-up rate. It is understood that the above-mentioned call behavior attributes are only used as alternative embodiments, and actually, those skilled in the art can adopt other call behavior characteristics, such as incoming call duty ratio, call duration, etc., according to the actual application requirements.

Optionally, after acquiring a call behavior attribute such as call duty of a call behavior (call behavior) of an incoming/outgoing number, the call behavior attribute is input into the call behavior model, and a determination result corresponding to the outgoing number is output by the call behavior model, where the determination result may optionally include: black, white and gray. Optionally, when the incoming and outgoing number meets at least one of the following conditions: when the calling percentage exceeds a first threshold, the number of calling exceeds a second threshold within 1 hour, the number of calling strangers exceeds a third threshold, and the hang-up rate exceeds a fourth threshold, the judgment result corresponding to the outgoing number output by the calling behavior model can be black. Similarly, when the number attribute of the incoming call and the outgoing call meets at least one of the following conditions: and when the calling percentage does not exceed a fifth threshold, the number of calling within 1 hour does not exceed a sixth threshold, the number of calling strangers does not exceed a seventh threshold, and the hang-up rate does not exceed an eighth threshold, the judgment result corresponding to the outgoing number output by the calling behavior model can be white. The threshold corresponding to the determination result being gray may be a threshold corresponding to a case of not being black or not being white, for example, when the exhalation occupancy exceeds the fifth threshold and is smaller than the first threshold, the corresponding determination result may be gray. It is understood that, a person skilled in the art may determine the first threshold to the eighth threshold according to practical application requirements, and the embodiment of the present invention does not limit the specific determination manner and the specific numerical value of the first threshold to the eighth threshold.

In an application example of the present invention, a user of a number a dials a phone twenty times a day, the number of times of being hung up is 16, the number of times of being hung up is encrypted by an asymmetric encryption algorithm and then sent to a cloud server, and the cloud server analyzes that the number of times of being hung up is 80% (information); according to a calling behavior model trained by a cloud server, under the condition that the hanging-up percentage exceeds 60%, judging that the number can be shielded; number a may be blackened (added to the blacklist).

The optional embodiment can comprehensively utilize the judgment result of the calling behavior model, and at least two of the preset merchant function and the mark type to judge whether the fraud prompt window is displayed.

The judgment result of the calling behavior model is black, which indicates that the number coming to and going to has risk and has risk of phone fraud.

The mark types may specifically include a preset fraud type and a preset non-fraud type, wherein the preset non-fraud types such as house intermediaries, insurance financing, advertising promotion, express delivery are not usually of a fraud nature, whereas the preset fraud types such as suspected fraud, malicious fraud are of a fraud nature.

Numbers that do not have the preset merchant function description open to call are not merchant numbers and therefore risk fraud. On the contrary, the number for calling by opening the preset merchant function is the merchant number, so that the risk of phone fraud is less.

In the judgment mode 1, when the incoming and outgoing number is subjected to the black judgment result of the called behavior model, the preset merchant function is not opened, and the mark type includes the preset fraud type, the judgment result of the calling behavior model, whether the preset merchant function is opened or not and the mark type all have risks of fraudulent calls, so that the incoming and outgoing number is considered to have a high risk of fraudulent calls, and the obtained judgment result is yes.

For the judgment mode 2, when the incoming and outgoing number is judged to be grey by the calling behavior model, the mark type comprises the preset fraud type, and the called number is a stranger of the incoming and outgoing number, because the preset fraud type has fraud property, the grey judgment result of the calling behavior model does not exclude risks, and the called number is a stranger of the incoming and outgoing number, the incoming and outgoing number is considered to be a high risk of a fraud call, and the obtained judgment result is yes. Whether the called number is in the address list corresponding to the incoming and outgoing number or not can be judged, and if not, the called number can be considered as a stranger of the incoming and outgoing number. It can be understood that for an outgoing call, the outgoing number is a stranger of the number of the current user, that is, when the outgoing number is not in the address book of the current user, the incoming number can be considered to be a fraud call with higher risk.

In the determination method 3, when the incoming and outgoing number is determined by the call behavior model, it is described that the incoming and outgoing number is relatively safe or has a high possibility of being at risk, and thus the obtained determination result may be no.

For the judgment mode 4, when the incoming and outgoing number is judged to be grey by the calling behavior model and the preset merchant function is activated, the incoming and outgoing number is the merchant number, and the calling behavior has no obvious risk, so that the obtained judgment result can be judged to be no.

For the determination method 5, when the incoming and outgoing number is judged by the calling behavior model, the preset merchant function is not opened, and the marking type does not include the preset fraud type, the obtained determination result may be no, because the calling behavior has no obvious risk and is not marked by the user as the preset fraud type suspected to be fraudulent.

For the judgment mode 6, when the incoming and outgoing number is judged to be grey by the calling behavior model, the preset merchant function is not opened, and the mark type is the preset non-fraud type, the obtained judgment result can be no, because the preset non-fraud type such as house agency, insurance financing, advertising promotion and express meal delivery does not usually have fraud property, and the calling behavior has no obvious risk.

The above scheme of determining whether to present the fraud prompting window according to the number attribute of the incoming and outgoing calls is described in detail through the determination modes 1 to 6, and it can be understood that a person skilled in the art can adopt one or a combination of the determination modes 1 to 6 or other determination modes according to the actual application requirements, and the embodiment of the present invention does not limit the specific determination mode.

In an optional embodiment of the present invention, after the incoming call request is monitored, the client may send the outgoing number to the server, so that the server determines whether to display the fraud prompting window according to the incoming call number attribute, and receives the determination result returned by the server.

In another optional embodiment of the present invention, the server may obtain, according to the number attribute, a number set of the fraud prompting window to be presented from the number database, and periodically issue the number set to the client, then step 401 may query the number set according to the incoming and outgoing numbers, and determine whether to present the fraud prompting window, for example, if the query is hit, the fraud prompting window is presented. The number set query mode can improve the judgment speed and enhance the user experience. Optionally, when the client requests the server for displaying the relevant content of the incoming call, the server issues the number set to the client. The number database may be located at a server for storing known number samples. Optionally, the server may determine whether the number sample in the number database needs to reveal the fraud prompting window by using at least one of the above-mentioned determination methods 1-6 according to the number attribute, and if so, may add it to the number set.

The incoming and outgoing call processing method provided by the embodiment of the invention can judge whether the fraud prompting window is shown or not according to the number attribute of the incoming and outgoing call, specifically judge whether the incoming and outgoing call has the risk of a fraud call or not according to the number attribute of the incoming and outgoing call, and show the fraud prompting window if the incoming and outgoing call is judged to have the risk of a fraud call. According to the embodiment of the invention, under the condition that the incoming and outgoing numbers have the risk of fraudulent calls, the fraud prompt window is displayed after the incoming and outgoing numbers are hung up, so that the interference of the fraud prompt window to the user can be avoided under the condition that the incoming and outgoing numbers do not have the risk of fraudulent calls, and the user experience is improved.

In order to make the person skilled in the art better understand the present invention, an application example of a de-electrifying processing method according to the present invention is provided herein, and the application example specifically may include the following steps:

step S1, the server may determine whether the number sample in the number database needs to show a fraud prompt window according to the number attribute, and if so, may add it to the number set;

step S2, the server sends the number set to the client periodically;

step S3, the server periodically issues the content of the fraud prompting window to the client, where the content of the fraud prompting window may include: fraud routing information and corresponding link information, fraud warning information and preset presentation patterns of fraud prompt windows;

step S4, the client inquires the number set according to the incoming and outgoing numbers, judges whether a fraud prompting window is displayed, if yes, executes step S5;

step S5, after hanging up to call, the client displays a fraud prompt window; wherein, at least one type of fraud routing information can be included in the fraud prompt window, and the represented fraud routing information can be provided with a link so as to enable a user to jump to a page of the fraud routing information by triggering the fraud routing information;

step S6, in response to the user' S trigger operation on the fraud routing information, the client displays a page of the fraud routing information, where the page of the fraud routing information may include: information related to the fraud routing information.

Referring to fig. 5, a flowchart illustrating steps of a power-off processing method according to an embodiment of the present invention may specifically include the following steps:

step 501, judging whether incoming calls are incoming calls of strange people;

step 502, when the incoming call is an unfamiliar incoming call, displaying unfamiliar incoming call warning information in an incoming call display interface;

step 503, after hanging up to call, showing a fraud prompt window; wherein, at least one type of fraud path information can be included in the fraud prompt window, and the represented fraud path information can be provided with a link so as to enable a user to jump to a page of the fraud path information by triggering the fraud path information.

The embodiment of the invention can also display strange incoming and outgoing call warning information in the incoming and outgoing call display interface so as to send corresponding warning to the user. For example, the unfamiliar incoming call warning message may specifically include: the user has certain precaution psychology for the current incoming call, and can be further prevented from being cheated due to the current incoming call to a certain extent.

Optionally, when the number of the incoming call and the outgoing call are not in the address book of the current user, the number of the incoming call and the outgoing call can also be considered as an unknown incoming call, and it can be understood that the specific judgment mode of the unknown incoming call and the outgoing call is not limited in the embodiment of the present invention.

Optionally, the cloud server may configure the strange incoming call warning information through the cloud control file, and issue the cloud control file to the client, so that the client displays the strange incoming call warning information according to the cloud control file.

Referring to fig. 6, a flowchart illustrating steps of a power-off processing method according to an embodiment of the present invention may specifically include the following steps:

step 601, judging whether incoming call is suspicious incoming call;

step 602, when the incoming and outgoing call is a suspicious incoming and outgoing call, displaying suspicious incoming and outgoing call warning information in an incoming and outgoing call display interface;

step 603, displaying a fraud prompt window after hanging up to call; wherein, at least one type of fraud path information can be included in the fraud prompt window, and the represented fraud path information can be provided with a link so as to enable a user to jump to a page of the fraud path information by triggering the fraud path information.

The embodiment of the invention can also display suspicious incoming and outgoing call warning information in the incoming and outgoing call display interface so as to send corresponding warning to the user. For example, the suspicious incoming and outgoing call warning message may specifically include: the user has certain precaution psychology for the current incoming call, and further can prevent cheating caused by the current incoming call to a certain extent.

In an optional embodiment of the present invention, the step of determining whether the incoming call is suspicious may specifically include: and judging whether the incoming call is a suspicious incoming call or not according to at least one of the incoming call number section, the calling behavior and the short message behavior.

Optionally, the preset non-fraudulent type of number may be filtered out from the number segment of the virtual operator to obtain a corresponding suspicious number set, and if the incoming and outgoing number hits the suspicious number set, the incoming and outgoing call is considered as a suspicious incoming and outgoing call. For example, "170" and "171" are numbers of the virtual carrier, and the probability of fraudulent calls in this number is high.

In the process of determining whether the incoming call is suspicious according to the call behavior, the call behavior model may be used, for example, when the determination result of the call behavior model is black and the flag type is fraud, the incoming call may be considered suspicious.

In the process of judging whether the incoming call is suspicious of incoming call according to the short message behavior, if the number of the incoming call generates the behavior of fraud short message, the incoming call can be considered as suspicious of incoming call. Or, the call behavior and the short message behavior can be comprehensively utilized to judge whether the incoming and outgoing call is a suspicious incoming and outgoing call, and the embodiment of the invention does not limit the specific judgment process of the incoming and outgoing call.

For simplicity of explanation, the method embodiments are described as a series of acts or combinations, but those skilled in the art will appreciate that the embodiments are not limited by the order of acts described, as some steps may occur in other orders or concurrently with other steps in accordance with the embodiments of the invention. Further, those skilled in the art will appreciate that the embodiments described in the specification are exemplary embodiments and that no single embodiment is necessarily required by the inventive embodiments.

The embodiment of the invention provides an incoming call and outgoing call processing device, which specifically comprises: the first showing module is used for showing a fraud prompting window after hanging up to remove the call; wherein, the fraud prompt window comprises at least one type of fraud path information, and the represented fraud path information is provided with a link so that a user jumps to a page of the fraud path information by triggering the fraud path information.

Optionally, the apparatus may further include:

the second display module is used for responding to a trigger instruction of the user to the harassment interception interface and displaying a fraud prompt window; wherein, the fraud prompt window comprises at least one type of fraud path information, and the represented fraud path information is provided with a link so that a user jumps to a page of the fraud path information by triggering the fraud path information.

Referring to fig. 7, a block diagram of a incoming/outgoing call processing apparatus according to an embodiment of the present invention is shown, which may specifically include the following modules:

a first showing module 701, configured to show a fraud prompting window after hanging up to remove the call; wherein the fraud prompt window comprises at least one type of fraud traffic information, and the represented fraud traffic information is provided with a link so that a user jumps to a page of the fraud traffic information by triggering the fraud traffic information;

a third presenting module 702, configured to present a page of the fraud routing information in response to a user's triggering operation on the fraud routing information, where the page of the fraud routing information includes: information related to the fraud routing information.

Optionally, the related information may include at least one of the following information: fraud types, fraud type effects, fraudster characteristics, cases, anti-fraud skills, page links and shared information of other fraud routing information.

Optionally, the apparatus may further include:

the pop-up window judging module is used for judging whether a fraud prompting window is shown or not according to the number attribute of the incoming and outgoing calls so as to obtain a corresponding judgment result;

the first presenting module is specifically configured to present a fraud prompting window after the power is turned off and the power is removed when the determination result is yes.

Optionally, the incoming and outgoing number attribute may include at least one of the following attributes:

the calling behavior attribute of the number, whether the number opens the preset merchant function and the mark type of the number.

Optionally, the pop-up window determining module may include:

the first popup window judging submodule is used for obtaining a judging result of yes when the calling behavior model of the incoming and outgoing number judges black, the preset merchant function is not opened, and the mark type can comprise a preset fraud type; or

The second popup judgment sub-module is used for obtaining a judgment result of yes when the calling number is judged to be grey by the called behavior model, the mark type can comprise a preset fraud type, and the called number is a stranger of the calling number; or

The third popup window judgment submodule is used for judging whether the incoming and outgoing number is judged by the calling behavior model or not; or

The fourth popup judgment submodule is used for judging whether the incoming and outgoing number is grey according to the calling behavior model and opening the preset merchant function, and the obtained judgment result is negative; or

The fifth popup window judgment submodule is used for judging whether the calling number is grey by the called behavior model, the preset merchant function is not opened and the mark type cannot include the preset fraud type or not, and judging whether the obtained judgment result is negative; or

And the sixth popup window judging submodule is used for judging whether the calling number is grey judged by the calling behavior model, the preset merchant function is not opened and the marking type is a preset non-fraud type, and judging whether the obtained judgment result is negative.

Optionally, the call behavior attributes used by the call behavior model may include: at least one of an outgoing call percentage, a number of outgoing calls within 1 hour, a number of strangers calls, and a hang-up rate.

Optionally, the pop-up window determining module may include:

the query submodule is used for querying the number set of the fraud prompting window to be shown according to the number of the incoming call and judging whether the fraud prompting window is shown or not according to the query result; the number set is a set issued by the server periodically, and the number set is obtained by the server from a number database according to the number attribute.

Optionally, the apparatus may further include:

and the uploading module is used for responding to the triggering operation of the user on the fraud routing information, and uploading the fraud routing information corresponding to the triggering operation and the number information of incoming calls to the server.

Optionally, the apparatus may further include:

the strange judgment module is used for judging whether the incoming call is an strange call;

and the fourth display module is used for displaying the strange incoming and outgoing call warning information in the incoming and outgoing call display interface when the incoming and outgoing call is a strange incoming and outgoing call.

Optionally, the apparatus may further include:

the suspicious judging module is used for judging whether the incoming call and the outgoing call are suspicious;

and the fifth display module is used for displaying the suspicious incoming and outgoing call warning information in the incoming and outgoing call display interface when the incoming and outgoing call is a suspicious incoming and outgoing call.

Optionally, the suspicion determination module may include:

and the suspicious judging submodule is used for judging whether the incoming call is suspicious of the incoming call according to at least one of the number section, the calling behavior and the short message behavior of the incoming call.

For the device embodiment, since it is basically similar to the method embodiment, the description is simple, and for the relevant points, refer to the partial description of the method embodiment.

The algorithms and displays presented herein are not inherently related to any particular computer, virtual machine, or other apparatus. Various general purpose systems may also be used with the teachings herein. The required structure for constructing such a system will be apparent from the description above. Moreover, the present invention is not directed to any particular programming language. It is appreciated that a variety of programming languages may be used to implement the teachings of the present invention as described herein, and any descriptions of specific languages are provided above to disclose the best mode of the invention.

In the description provided herein, numerous specific details are set forth. It is understood, however, that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure an understanding of this description.

Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the invention, various features of the invention are sometimes grouped together in a single embodiment, figure, or description thereof for the purpose of streamlining the disclosure and aiding in the understanding of one or more of the various inventive aspects. However, the disclosed method should not be interpreted as reflecting an intention that: that the invention as claimed requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the detailed description are hereby expressly incorporated into this detailed description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art will appreciate that the modules in the device in an embodiment may be adaptively changed and disposed in one or more devices different from the embodiment. The modules or units or components of the embodiments may be combined into one module or unit or component, and furthermore they may be divided into a plurality of sub-modules or sub-units or sub-components. All of the features disclosed in this specification (including any accompanying claims, abstract and drawings), and all of the processes or elements of any method or apparatus so disclosed, may be combined in any combination, except combinations where at least some of such features and/or processes or elements are mutually exclusive. Each feature disclosed in this specification (including any accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will appreciate that while some embodiments described herein include some features included in other embodiments, rather than other features, combinations of features of different embodiments are meant to be within the scope of the invention and form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.

The various component embodiments of the invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. Those skilled in the art will appreciate that a microprocessor or Digital Signal Processor (DSP) may be used in practice to implement some or all of the functions of some or all of the components of the de-electrifying processing method and apparatus according to embodiments of the present invention. The present invention may also be embodied as apparatus or device programs (e.g., computer programs and computer program products) for performing a portion or all of the methods described herein. Such programs implementing the present invention may be stored on computer-readable media or may be in the form of one or more signals. Such a signal may be downloaded from an internet platform or provided on a carrier signal or in any other form.

It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention may be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In the unit claims enumerating several means, several of these means may be embodied by one and the same item of hardware. The usage of the words first, second and third, etcetera do not indicate any ordering. These words may be interpreted as names.

The invention discloses A1 and a incoming call and de-electrifying treatment method, which comprises the following steps:

A2, the method of a1, the method further comprising:

responding to a trigger instruction of a user for the harassment interception interface, and showing a fraud prompt window; wherein, the fraud prompt window comprises at least one type of fraud path information, and the represented fraud path information is provided with a link so that a user jumps to a page of the fraud path information by triggering the fraud path information.

A3, the method of a1, the method further comprising:

in response to a triggering operation of the fraud routing information by a user, revealing a page of the fraud routing information, wherein the page of the fraud routing information comprises: information related to the fraud routing information.

A4, the method of A3, the related information comprising at least one of: fraud types, fraud type effects, fraudster characteristics, cases, anti-fraud skills, page links and shared information of other fraud routing information.

A5, the method as recited in A1, further comprising, prior to the step of presenting a fraud cue window after hanging up to remove the power, the method further comprising:

judging whether a fraud prompting window is shown or not according to the number attribute of the incoming and outgoing calls so as to obtain a corresponding judgment result;

the step of displaying the fraud prompting window after hanging up the incoming and outgoing calls comprises the following steps: and when the judgment result is yes, displaying a fraud prompt window after hanging up the incoming and outgoing calls.

A6, the method as in a5, the number attributes of incoming and outgoing calls including at least one of:

A7, the method as recited in a6, wherein the step of determining whether to display a fraud indicator window according to the number attribute of the incoming/outgoing call to obtain a corresponding determination result comprises:

when the calling behavior model judges that the number of the incoming and outgoing call is dark, the preset merchant function is not opened, and the marking type comprises a preset fraud type, the obtained judgment result is yes; or

When the calling behavior model judges the number to be called, the mark type comprises a preset fraud type, and the called number is a stranger of the number to be called, the obtained judgment result is yes; or

When the incoming and outgoing number is judged by the calling behavior model, the obtained judgment result is negative; or

Judging whether the incoming and outgoing number is grey by the calling behavior model and activating a preset merchant function, wherein the obtained judgment result is negative; or

When the calling behavior model judges that the number of the incoming and outgoing calls is grey, the preset merchant function is not opened, and the marking type does not comprise the preset fraud type, the obtained judgment result is negative; or

And when the calling behavior model judges that the incoming and outgoing number is grey, the preset merchant function is not opened, and the marking type is a preset non-fraud type, judging whether the obtained judgment result is negative.

A8, the method of a7, the call behavior attributes used by the call behavior model comprising: at least one of an outgoing call percentage, a number of outgoing calls within 1 hour, a number of strangers calls, and a hang-up rate.

A9, the method as recited in a5, wherein the step of determining whether to display a fraud indicator window according to the number attribute of the incoming/outgoing call to obtain a corresponding determination result comprises:

inquiring a number set of a fraud prompting window to be shown according to the number of the incoming call, and judging whether the fraud prompting window is shown or not according to an inquiry result; the number set is a set issued by the server periodically, and the number set is obtained by the server from a number database according to the number attribute.

A10, the method of any one of a1 to a9, the method further comprising:

and responding to the triggering operation of the user on the fraud routing information, and uploading fraud routing information corresponding to the triggering operation and number information of incoming and outgoing calls to a server.

A11, the method as in any one of A1-A9, further comprising, before the step of revealing a fraud cue window after hanging up to remove power, the method comprising:

judging whether the incoming call is an unfamiliar incoming call;

and displaying the strange incoming and outgoing call warning information in the incoming and outgoing call display interface when the incoming and outgoing call is a strange incoming and outgoing call.

A12, the method as in any one of A1-A9, further comprising, before the step of revealing a fraud cue window after hanging up to remove power, the method comprising:

judging whether the incoming call is suspicious;

and displaying suspicious incoming and outgoing call warning information in an incoming and outgoing call display interface when the incoming and outgoing call is a suspicious incoming and outgoing call.

A13, the method of a12, wherein the determining whether the incoming call is suspicious comprises:

and judging whether the incoming call is a suspicious incoming call or not according to at least one of the incoming call number section, the calling behavior and the short message behavior.

The invention also discloses B14, a incoming call de-electrifying processing device, comprising:

B15, the apparatus of B14, further comprising:

B16, the apparatus of B14, further comprising:

a third presentation module, configured to present a page of the fraud routing information in response to a user's trigger operation on the fraud routing information, where the page of the fraud routing information includes: information related to the fraud routing information.

B17, the apparatus as in B16, the related information comprising at least one of the following information: fraud types, fraud type effects, fraudster characteristics, cases, anti-fraud skills, page links and shared information of other fraud routing information.

B18, the apparatus of B14, further comprising:

B19, the apparatus as in B18, the incoming and outgoing number attributes including at least one of the following:

B20, the apparatus as described in B19, the popup judging module includes:

the first popup window judging submodule is used for obtaining a judging result of yes when the calling behavior model of the incoming and outgoing number is judged to be black, the preset merchant function is not opened, and the marking type comprises a preset fraud type; or

The second popup judgment submodule is used for obtaining a judgment result of yes when the calling number is judged to be grey by the called behavior model, the mark type comprises a preset fraud type and the called number is a stranger of the calling number; or

The fifth popup window judgment submodule is used for judging whether the calling number is grey by the called behavior model, the preset merchant function is not opened and the marking type does not include the preset fraud type, and judging whether the obtained judgment result is negative; or

B21, the apparatus as in B20, the call behavior attributes used by the call behavior model comprising: at least one of an outgoing call percentage, a number of outgoing calls within 1 hour, a number of strangers calls, and a hang-up rate.

B22, the apparatus as described in B18, the popup judging module includes:

B23, the apparatus as in any one of B14-B22, further comprising:

B24, the apparatus as in any one of B14-B22, further comprising:

B25, the apparatus as in any one of B14-B22, further comprising:

B26, the apparatus as in B25, the suspicion determination module comprising:

Claims

1. An incoming and outgoing electricity processing method, comprising:

after hanging up to call, showing a fraud prompt window; the fraud prompt window comprises at least one type of fraud traffic path information, and the represented fraud traffic path information is provided with a link, so that a user can judge whether the incoming call is a fraud call by triggering the fraud traffic path information to jump to a page of the fraud traffic path information;

the method further comprises the following steps:

2. The method of claim 1, wherein the method further comprises:

3. The method of claim 1, wherein the related information comprises at least one of: fraud types, fraud type effects, fraudster characteristics, cases, anti-fraud skills, page links and shared information of other fraud routing information.

4. The method as recited in claim 1, wherein prior to said step of presenting a fraud cue window after hanging up to remove power, said method further comprises:

5. The method of claim 4, wherein the incoming and outgoing number attributes include at least one of the following attributes:

6. The method as claimed in claim 5, wherein the step of determining whether to display the fraud indicator window according to the number attribute of the incoming and outgoing calls to obtain the corresponding determination result comprises:

7. The method of claim 6, wherein the call behavior attributes used by the call behavior model include: at least one of an outgoing call percentage, a number of outgoing calls within 1 hour, a number of strangers calls, and a hang-up rate.

8. The method as claimed in claim 4, wherein the step of determining whether to display the fraud indicator window according to the number attribute of the incoming and outgoing calls to obtain the corresponding determination result comprises:

9. The method as recited in any one of claims 1 to 8, wherein prior to said step of presenting a fraud cue window after hanging up to remove the power, said method further comprises:

judging whether the incoming call is an unfamiliar incoming call;

10. The method as recited in any one of claims 1 to 8, wherein prior to said step of presenting a fraud cue window after hanging up to remove the power, said method further comprises:

judging whether the incoming call is suspicious;

11. The method of claim 10, wherein the step of determining whether the incoming call is suspect comprises:

12. An incoming and outgoing call processing device comprising:

the first showing module is used for showing a fraud prompting window after hanging up to remove the call; the fraud prompt window comprises at least one type of fraud traffic path information, and the represented fraud traffic path information is provided with a link, so that a user can judge whether the incoming call is a fraud call by triggering the fraud traffic path information to jump to a page of the fraud traffic path information;

the device further comprises:

13. The apparatus of claim 12, wherein the apparatus further comprises:

14. The apparatus of claim 12, wherein the related information comprises at least one of: fraud types, fraud type effects, fraudster characteristics, cases, anti-fraud skills, page links and shared information of other fraud routing information.

15. The apparatus of claim 12, wherein the apparatus further comprises:

16. The apparatus of claim 15, wherein the incoming and outgoing number attributes include at least one of the following:

17. The apparatus of claim 16, wherein the pop determination module comprises:

18. The apparatus of claim 17, wherein the call behavior attributes used by the call behavior model comprise: at least one of an outgoing call percentage, a number of outgoing calls within 1 hour, a number of strangers calls, and a hang-up rate.

19. The apparatus of claim 15, wherein the pop window determination module comprises:

20. The apparatus of any of claims 12 to 19, further comprising:

21. The apparatus of any of claims 12 to 19, further comprising:

22. The apparatus of any of claims 12 to 19, further comprising:

23. The apparatus of claim 22, wherein the suspicion determination module comprises: