CN113518152A

CN113518152A - Telephone number identification method and system and electronic equipment

Info

Publication number: CN113518152A
Application number: CN202010274288.7A
Authority: CN
Inventors: 全俊斌; 李彬; 钟雪慧; 郝建忠; 何振财; 乔雅莉; 孙际勇
Original assignee: China Mobile Communications Group Co Ltd; China Mobile Group Guangdong Co Ltd
Current assignee: China Mobile Communications Group Co Ltd; China Mobile Group Guangdong Co Ltd
Priority date: 2020-04-09
Filing date: 2020-04-09
Publication date: 2021-10-19
Anticipated expiration: 2040-04-09
Also published as: CN113518152B

Abstract

The invention discloses a method, a system and electronic equipment for identifying telephone numbers, wherein the method comprises the following steps: acquiring signaling ticket information of a total number of numbers within historical preset days; screening numbers, of which the number call characteristics meet preset call characteristics, in the full number as non-suspected numbers according to the signaling call bill information of the full number; deleting the non-suspected number in the full number to obtain a suspected number; and analyzing the roaming track information of the suspected number, and determining the suspected number as a target number under the condition that the roaming track information of the suspected number contains a preset area. The embodiment of the invention can identify the normal number in an off-line manner based on the historical call signaling ticket, so that the range of the suspected number is greatly reduced, and then the target number is further identified, thereby further improving the identification accuracy, improving the identification accuracy while expanding the identification range, and further reducing the omission of the identified target number.

Description

Telephone number identification method and system and electronic equipment

Technical Field

The invention relates to the field of information security, in particular to a method and a system for identifying a telephone number and electronic equipment.

Background

The telephone fraud refers to the criminal who compiles false information in a telephone mode, sets a fraud bureau, conducts remote and non-contact fraud on the victim and induces the criminal behavior that the victim pays money to the criminal or transfers money. The telephone fraud measures are multiple, the route is deep and the identification is difficult, and the current identification technology aiming at the telephone fraud mainly comprises the following steps:

1. based on the number blacklist: establishing a fraud number blacklist library by collecting user reporting information or public security scheme information; when the calling number of the call hits the blacklist library, the call is judged to be a fraud call.

2. Signaling analysis based on fraud scenarios: a fraud phone call is judged for a call meeting a scene triggering condition by analyzing fraud number characteristics and behavior characteristics under a specific fraud scene (such as a counterfeit public inspection method, a counterfeit acquaintance and the like), and establishing a judgment threshold value by using a machine learning mode and the like.

3. Semantic analysis based on call content: and judging whether to fraudulently call or not by identifying the voice content in the call process and matching preset keywords and combinations thereof.

However, in the prior art, identification technologies are researched from the perspective of fraudulent calls, and identification results are limited, so that the prior art cannot cover the whole number of fraudulent calls.

Disclosure of Invention

The embodiment of the invention provides a method and a system for identifying a telephone number and electronic equipment, which aim to solve the problem that the identification result of the telephone number in the prior art is limited.

In order to solve the technical problem, the invention is realized as follows:

in a first aspect, a method for identifying a phone number is provided, where the method includes:

acquiring signaling ticket information of a total number of numbers within historical preset days;

screening numbers, of which the number call characteristics meet preset call characteristics, in the full number as non-suspected numbers according to the signaling call bill information of the full number; the preset call feature comprises at least one of the following features: short number trunking network call characteristics, common contact person call characteristics, city call characteristics, balanced call frequency characteristics, night call characteristics and number activity characteristics;

deleting the non-suspected number in the full number to obtain a suspected number;

and analyzing the roaming track information of the suspected number, and determining the suspected number as a target number under the condition that the roaming track information of the suspected number contains a preset area.

In a second aspect, there is provided a system for identifying a telephone number, the system comprising:

the acquisition module is used for acquiring signaling ticket information of the total number within historical preset days;

the screening module is used for screening the number with the number conversation characteristics meeting the preset conversation characteristics in the full number as a non-suspected number according to the signaling ticket information of the full number; the preset call feature comprises at least one of the following features: short number trunking network call characteristics, common contact person call characteristics, city call characteristics, balanced call frequency characteristics, night call characteristics and number activity characteristics;

the deleting module is used for deleting the non-suspected number in the full number to obtain a suspected number;

and the determining module is used for analyzing the roaming track information of the suspected number and determining the suspected number as a target number under the condition that the roaming track information of the suspected number contains a preset area.

In a third aspect, an electronic device is provided, including: a memory, a processor and a computer program stored on the memory and executable on the processor, the computer program, when executed by the processor, implementing the steps of the method according to the first aspect.

In a fourth aspect, a computer-readable storage medium is provided, on which a computer program is stored, which computer program, when being executed by a processor, realizes the steps of the method according to the first aspect.

In the embodiment of the invention, the signaling call bill information of the total number of numbers in the historical preset days is firstly obtained, then the number of the total number, the number of which the number calling characteristics meet the preset calling characteristics, is screened out according to the signaling call bill information to be used as a non-suspected number, the non-suspected number of the total number is deleted to obtain a suspected number, and finally the roaming track information of the suspected number is analyzed to determine the target number. In the embodiment of the invention, the normal number in the full number is screened out through the preset call characteristics, the suspected number with a smaller proportion is obtained after the normal number is removed, and the target number is finally determined according to the roaming information of the suspected number. The method can identify the normal number off line based on the historical call signaling ticket, so that the range of the suspected number is greatly reduced, and then the target number is further identified, thereby further improving the identification accuracy, improving the identification accuracy while expanding the identification range, and further reducing the omission of the identified target number.

Drawings

The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this specification, illustrate embodiments of the invention and together with the description serve to explain the invention and not to limit the invention. In the drawings:

fig. 1 is a schematic flowchart of a method for identifying a phone number according to an embodiment of the present invention;

fig. 2 is a schematic flow chart illustrating a method for screening non-suspected numbers according to an embodiment of the present invention;

fig. 3 is a schematic diagram of a system for identifying a telephone number according to an embodiment of the present invention;

fig. 4 is a schematic diagram of a hardware structure of a terminal device according to an embodiment of the present invention.

Detailed Description

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

Compared with the prior art that the identification result is limited and cannot cover the whole number to be identified, the identification method of the telephone number provided by the embodiment of the invention searches and identifies from the angle of the non-suspected number, firstly filters most of the non-suspected numbers from the whole call, and then determines the target number from the rest of the suspected numbers. And on the premise of further reducing the number of the missed targets in the identification process, the identification efficiency is improved.

Fig. 1 is a schematic flow chart illustrating a method for identifying a phone number according to an embodiment of the present invention. As shown in the figure, the identification method of the telephone number may include the contents shown in step S101 to step S104.

In step S101, signaling ticket information of a total number of numbers within a historical preset number of days is obtained.

In the embodiment of the invention, the signaling ticket information comprises called number information, call duration, number attribution and roaming track information.

In step S102, according to the signaling ticket information of the full number, a number whose number call characteristic satisfies the preset call characteristic in the full number is screened as a non-suspected number.

The preset call feature comprises at least one of the following features: the method comprises the following steps of short number trunking network call characteristics, common contact person call characteristics, city-sharing call characteristics, balanced call frequency characteristics, night call characteristics and number activity characteristics. The detailed expression of each of the above-mentioned call features is described in detail later, and is not described herein again.

In step S103, the suspect number is obtained by deleting the suspect number from the full number.

In the embodiment of the invention, the determined non-suspected numbers are deleted, and the rest are suspected numbers.

In step S104, the roaming trajectory information of the suspected number is analyzed, and the suspected number is determined as the target number when the roaming trajectory information of the suspected number includes the preset area.

In the embodiment of the invention, the signaling call ticket information of the total number in the historical preset days is firstly acquired, then the number with the number conversation characteristics meeting the preset conversation characteristics in the total number is screened out according to the signaling call ticket information to be used as the non-suspected number, the non-suspected number in the total number is deleted to obtain the suspected number, and finally the roaming track information of the suspected number is analyzed to determine the target number. In the embodiment of the invention, the normal number in the full number is screened out through the preset call characteristics, the suspected number with a smaller proportion is obtained after the normal number is removed, and the target number is finally determined according to the roaming information of the suspected number. The method can identify the normal number off line based on the historical call signaling ticket, so that the range of the suspected number is greatly reduced, and then the target number is further identified, thereby further improving the identification accuracy, improving the identification accuracy while expanding the identification range, and further reducing the omission of the identified target number.

In a possible implementation manner of the present invention, as shown in fig. 2, a flowchart of a method for screening a non-suspected number according to an embodiment of the present invention is shown. As shown in the figure, according to the signaling ticket information of the full number, the number with the number call characteristics including the preset call characteristics in the full number is screened as a non-suspected number, and the screening is performed by using at least one of the following modes.

And S1021, taking the number as a non-suspected number when the number calling feature in the full number meets the short number trunking network calling feature.

And S1022, when the call characteristics of the number in the full number meet the balanced call frequency characteristics and the call characteristics of the common contact persons, taking the number as a non-suspected number.

And S1023, taking the number as a non-suspected number under the condition that the call characteristics of the number in the full number meet the balanced call frequency characteristics and the city-sharing call characteristics.

And S1024, taking the number as a non-suspected number under the condition that the number call characteristics in the full number meet the night call characteristics and the number activity characteristics.

In the embodiment of the present invention, whether a certain number is a non-suspected number is determined according to whether the number has the feature after the one or more preset call features are combined, and if the number satisfies the feature, the number is determined to be a non-suspected number, that is, the number is not a number that needs to be selected in the present invention.

In one possible embodiment of the present invention, determining whether a certain number has a predetermined call feature may be determined in the following manner.

Short number trunking network communication characteristics: the short number cluster network is divided into a family cluster network and an enterprise cluster network. For example, a home trunking network number is a number that starts with "5" and has a length of 3 bits for the called number of the opposite end, and an enterprise trunking network number is a number that starts with "6" and has a length of 5 or 6 bits for the called number of the opposite end. For a certain number, if the number has the call success record of the short-number trunking network within the historical preset days, the number has the call characteristics of the short-number trunking network.

Common contact conversation characteristics: and analyzing the call duration of each call between a certain number and another number in preset days in history for the certain number and the other number with which the call record occurs. And after the duplication is removed according to the time granularity of the number of days, the number of the number and the number of the other number are obtained, if the number of the call days is larger than the threshold value of the number of the call days, the number has the call characteristic of the frequently-used contact person, and the frequently-used contact person is the other number.

The same city conversation characteristics: for a certain number and another number with which a call record occurs, the call indexes within historical preset days are as follows: (1) dividing the number of call tickets of the same place as the place of the number in the call place of the number by the total number of call tickets of the number, and (2) dividing the number of call tickets of the same place as the place of the other number in the call place of the number by the total number of call tickets of the number. If the percentage of one index is larger than the percentage threshold value, the number has the same city conversation characteristic.

Equalizing the call frequency characteristic: for a certain number, the call index within the historical preset number of days is as follows: (1) the number has the characteristic of balanced call frequency if the call indexes are all in the range of a first index threshold value and the difference between the numerical values of the two indexes is in the range of a second index threshold value.

The night call characteristic: for a certain number, a call occurs in a night time period within a historical preset number of days, for example, 20:00 to 23:00, and the night call day ratio index, that is, the ratio of the number of days in which a call record exists in the night time period to the historical preset number of days, is greater than the first day threshold, then the number has the night call feature.

Number liveness characteristics: for a certain number, if there is a call record on a certain day, the number is considered to be active on that day. And in the historical preset days, if the ratio index of the number of active days, namely the ratio of the number of active days to the historical preset days, is greater than the threshold of the second days, the number has the number activity characteristic.

In a possible embodiment of the present invention, before deleting the non-suspected number in the full number, the method for identifying the phone number may further include: and carrying out duplication elimination treatment on the screened non-suspected numbers.

In the embodiment of the invention, the non-suspected numbers screened out by the method possibly have repeated numbers, and the screened numbers are subjected to duplicate removal processing, so that the subsequent deletion of the non-suspected numbers is more convenient and has higher efficiency.

In a possible implementation manner of the present invention, the roaming track information of the suspected number is analyzed, and the suspected number is determined as a target number when the roaming track information of the suspected number includes a preset area. The target number can be a fraud number, and the corresponding preset area can be a fraud high-incidence area. The destination number may also be a high-consumption number and the corresponding predetermined area may be an economically developed area. The destination number may also be other numbers that need to be acquired, and the corresponding preset areas are different, which will not be described one by one here.

The embodiment of the invention also provides a system for identifying the telephone number. Fig. 3 is a schematic diagram of a system for identifying a phone number according to an embodiment of the present invention. The system may include: an acquisition module 301, a screening module 302, a deletion module 303, and a determination module 304.

The obtaining module 301 is configured to obtain signaling ticket information of a full number of numbers within a historical preset number of days.

The screening module 302 is configured to screen a number with a number call characteristic meeting a preset call characteristic in the full number as a non-suspected number according to the signaling ticket information of the full number; the preset call feature comprises at least one of the following features: the method comprises the following steps of short number trunking network call characteristics, common contact person call characteristics, city-sharing call characteristics, balanced call frequency characteristics, night call characteristics and number activity characteristics.

The deleting module 303 is configured to delete the non-suspected number in the full number to obtain a suspected number.

The determining module 304 is configured to analyze the roaming track information of the suspected number, and determine the suspected number as a target number when the roaming track information of the suspected number includes a preset area.

In a possible embodiment of the present invention, the signaling ticket information includes: called number information, call duration, number attribution and roaming track information.

In one possible embodiment of the present invention, the screening module 302 may be used to,

under the condition that the number call characteristics in the full number meet the short number trunking network call characteristics, taking the number as a non-suspected number;

under the condition that the number call characteristics in the full number meet the balanced call frequency characteristics and the common contact call characteristics, taking the number as a non-suspected number;

under the condition that the number call characteristics in the full number meet the balanced call frequency characteristics and the same city call characteristics, taking the number as a non-suspected number;

and under the condition that the number call characteristics in the full number meet the night call characteristics and the number activity characteristics, taking the number as a non-suspected number.

In a possible embodiment of the present invention, the system for identifying a telephone number may further include: and a deduplication module.

The duplication elimination module is configured to conduct duplication elimination processing on the screened non-suspected numbers.

The functions of the telephone number identification system of the present invention have been described in detail in the method embodiments shown in fig. 1 to 2, so that the description of the embodiment is not detailed, and reference may be made to the related descriptions in the foregoing embodiments, which are not repeated herein.

Fig. 4 is a schematic diagram of a hardware structure of a terminal device for implementing various embodiments of the present invention.

The terminal device 400 includes but is not limited to: radio frequency unit 401, network module 402, audio output unit 403, input unit 404, sensor 405, display unit 406, user input unit 407, interface unit 408, memory 409, processor 410, and power supply 411. Those skilled in the art will appreciate that the terminal device configuration shown in fig. 4 does not constitute a limitation of the terminal device, and that the terminal device may include more or fewer components than shown, or combine certain components, or a different arrangement of components. In the embodiment of the present invention, the terminal device includes, but is not limited to, a mobile phone, a tablet computer, a notebook computer, a palm computer, a vehicle-mounted terminal, a wearable device, a pedometer, and the like.

Wherein, the processor 410 may be configured to:

screening numbers with the number conversation characteristics meeting preset conversation characteristics in the full number as non-suspected numbers according to the signaling bill information of the full number; the preset call feature comprises at least one of the following features: short number trunking network call characteristics, common contact person call characteristics, city call characteristics, balanced call frequency characteristics, night call characteristics and number activity characteristics;

It should be understood that, in the embodiment of the present invention, the radio frequency unit 401 may be used for receiving and sending signals during a message sending and receiving process or a call process, and specifically, receives downlink data from a base station and then processes the received downlink data to the processor 410; in addition, the uplink data is transmitted to the base station. Typically, radio unit 401 includes, but is not limited to, an antenna, at least one amplifier, a transceiver, a coupler, a low noise amplifier, a duplexer, and the like. Further, the radio unit 401 can also communicate with a network and other devices through a wireless communication system.

The terminal device provides wireless broadband internet access to the user through the network module 402, such as helping the user send and receive e-mails, browse web pages, and access streaming media.

The audio output unit 403 may convert audio data received by the radio frequency unit 401 or the network module 402 or stored in the memory 409 into an audio signal and output as sound. Also, the audio output unit 403 may also provide audio output related to a specific function performed by the terminal apparatus 400 (e.g., a call signal reception sound, a message reception sound, etc.). The audio output unit 403 includes a speaker, a buzzer, a receiver, and the like.

The input unit 404 is used to receive audio or video signals. The input Unit 404 may include a Graphics Processing Unit (GPU) 4041 and a microphone 4042, and the Graphics processor 4041 processes image data of a still picture or video obtained by an image capturing apparatus (such as a camera) in a video capturing mode or an image capturing mode. The processed image frames may be displayed on the display unit 406. The image frames processed by the graphic processor 4041 may be stored in the memory 409 (or other storage medium) or transmitted via the radio frequency unit 401 or the network module 402. The microphone 4042 may receive sound, and may be capable of processing such sound into audio data. The processed audio data may be converted into a format output transmittable to a mobile communication base station via the radio frequency unit 401 in case of the phone call mode.

The terminal device 400 further comprises at least one sensor 405, such as light sensors, motion sensors and other sensors. Specifically, the light sensor includes an ambient light sensor that adjusts the brightness of the display panel 4061 according to the brightness of ambient light, and a proximity sensor that turns off the display panel 4061 and/or the backlight when the terminal apparatus 400 is moved to the ear. As one of the motion sensors, the accelerometer sensor can detect the magnitude of acceleration in each direction (generally three axes), detect the magnitude and direction of gravity when stationary, and can be used to identify the terminal device posture (such as horizontal and vertical screen switching, related games, magnetometer posture calibration), vibration identification related functions (such as pedometer, tapping), and the like; the sensors 405 may also include a fingerprint sensor, a pressure sensor, an iris sensor, a molecular sensor, a gyroscope, a barometer, a hygrometer, a thermometer, an infrared sensor, etc., which will not be described in detail herein.

The display unit 406 is used to display information input by the user or information provided to the user. The Display unit 406 may include a Display panel 4061, and the Display panel 4061 may be configured in the form of a Liquid Crystal Display (LCD), an Organic Light-Emitting Diode (OLED), or the like.

The user input unit 407 may be used to receive input numeric or character information and generate key signal inputs related to user settings and function control of the terminal device. Specifically, the user input unit 407 includes a touch panel 4071 and other input devices 4072. Touch panel 4071, also referred to as a touch screen, may collect touch operations by a user on or near it (e.g., operations by a user on or near touch panel 4071 using a finger, a stylus, or any suitable object or attachment). The touch panel 4071 may include two parts, a touch detection device and a touch controller. The touch detection device detects the touch direction of a user, detects a signal brought by touch operation and transmits the signal to the touch controller; the touch controller receives touch information from the touch sensing device, converts the touch information into touch point coordinates, sends the touch point coordinates to the processor 410, receives a command from the processor 410, and executes the command. In addition, the touch panel 4071 can be implemented by using various types such as a resistive type, a capacitive type, an infrared ray, and a surface acoustic wave. In addition to the touch panel 4071, the user input unit 407 may include other input devices 4072. Specifically, the other input devices 4072 may include, but are not limited to, a physical keyboard, function keys (such as volume control keys, switch keys, etc.), a track ball, a mouse, and a joystick, which are not described herein again.

Further, the touch panel 4071 can be overlaid on the display panel 4061, and when the touch panel 4071 detects a touch operation thereon or nearby, the touch operation is transmitted to the processor 410 to determine the type of the touch event, and then the processor 410 provides a corresponding visual output on the display panel 4061 according to the type of the touch event. Although in fig. 4, the touch panel 4071 and the display panel 4061 are two independent components to implement the input and output functions of the terminal device, in some embodiments, the touch panel 4071 and the display panel 4061 may be integrated to implement the input and output functions of the terminal device, which is not limited herein.

The interface unit 408 is an interface for connecting an external device to the terminal apparatus 400. For example, the external device may include a wired or wireless headset port, an external power supply (or battery charger) port, a wired or wireless data port, a memory card port, a port for connecting a device having an identification module, an audio input/output (I/O) port, a video I/O port, an earphone port, and the like. The interface unit 408 may be used to receive input (e.g., data information, power, etc.) from an external device and transmit the received input to one or more elements within the terminal apparatus 400 or may be used to transmit data between the terminal apparatus 400 and an external device.

The memory 409 may be used to store software programs as well as various data. The memory 409 may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application program required by at least one function (such as a sound playing function, an image playing function, etc.), and the like; the storage data area may store data (such as audio data, a phonebook, etc.) created according to the use of the cellular phone, and the like. Further, the memory 409 may include high speed random access memory, and may also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid state storage device.

The processor 410 is a control center of the terminal device, connects various parts of the entire terminal device by using various interfaces and lines, and performs various functions of the terminal device and processes data by operating or executing software programs and/or modules stored in the memory 409 and calling data stored in the memory 409, thereby performing overall monitoring of the terminal device. Processor 410 may include one or more processing units; preferably, the processor 410 may integrate an application processor, which mainly handles operating systems, user interfaces, application programs, etc., and a modem processor, which mainly handles wireless communications. It will be appreciated that the modem processor described above may not be integrated into the processor 410.

The terminal device 400 may further include a power supply 411 (e.g., a battery) for supplying power to various components, and preferably, the power supply 411 may be logically connected to the processor 410 through a power management system, so as to implement functions of managing charging, discharging, and power consumption through the power management system.

In addition, the terminal device 400 includes some functional modules that are not shown, and are not described in detail herein.

Preferably, an embodiment of the present invention further provides a terminal device, which includes a processor 410, a memory 409, and a computer program that is stored in the memory 409 and can be run on the processor 410, and when being executed by the processor 410, the computer program implements each process of the implementation method embodiment for identifying a phone number, and can achieve the same technical effect, and in order to avoid repetition, details are not described here again.

The embodiment of the present invention further provides a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the computer program implements each process of the above-mentioned telephone number identification method embodiment, and can achieve the same technical effect, and in order to avoid repetition, details are not repeated here. The computer-readable storage medium may be a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk or an optical disk.

It should be noted that, in this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.

Through the above description of the embodiments, those skilled in the art will clearly understand that the method of the above embodiments can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware, but in many cases, the former is a better implementation manner. Based on such understanding, the technical solutions of the present invention may be embodied in the form of a software product, which is stored in a storage medium (such as ROM/RAM, magnetic disk, optical disk) and includes instructions for enabling a terminal (such as a mobile phone, a computer, a server, an air conditioner, or a network device) to execute the method according to the embodiments of the present invention.

While the present invention has been described with reference to the embodiments shown in the drawings, the present invention is not limited to the embodiments, which are illustrative and not restrictive, and it will be apparent to those skilled in the art that various changes and modifications can be made therein without departing from the spirit and scope of the invention as defined in the appended claims.

Claims

1. A method for identifying a telephone number, comprising:

2. The method of claim 1, wherein the signaling ticket information comprises: called number information, call duration, number attribution and roaming track information.

3. The method according to claim 1, wherein the screening, according to the signaling ticket information of the full-scale number, a number with a number call feature including a preset call feature in the full-scale number as a non-suspected number comprises screening in at least one of the following manners:

taking the number as a non-suspected number under the condition that the number call characteristics in the full number meet the call characteristics of the short number trunking network;

4. The method of claim 3, wherein prior to said deleting the non-suspected number of the full-size number, the method further comprises:

and carrying out duplication elimination treatment on the screened non-suspected numbers.

5. A system for identifying telephone numbers, comprising:

6. The system of claim 5, wherein the signaling ticket information comprises: called number information, call duration, number attribution and roaming track information.

7. The system of claim 5, wherein the screening module is configured to,

8. The system of claim 7, further comprising:

and the duplication eliminating module is used for carrying out duplication eliminating treatment on the screened non-suspected numbers.

9. An electronic device, comprising: memory, processor and computer program stored on the memory and executable on the processor, which computer program, when executed by the processor, carries out the steps of the method according to any one of claims 1 to 4.

10. A computer-readable storage medium, comprising: the computer-readable storage medium has stored thereon a computer program which, when being executed by a processor, carries out the steps of the method according to any one of claims 1 to 4.