JP2018107769A - Crime determination device, relay system, telephone system, crime determination method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To automatically correspond to crime of the new means.SOLUTION: A crime determination device comprises: a keyword acquisition part that acquires an appearance increase keyword as a keyword of which an appearance number is increased in a predetermined site of the Internet; and a crime determination part that determines whether the appearance increase keyword appears during a telephone call by a predetermined condition or more, and determines whether the telephone call is used for a crime at a condition looser than a case where it is determined that the appearance increase keyword does not appear by the predetermined condition or more.SELECTED DRAWING: Figure 4

Description

  The present invention relates to a crime determination device, a relay system, a telephone system, a crime determination method, and a program.

Several techniques for detecting crimes using telephone calls such as wire fraud have been proposed.
For example, in the telephone device described in Patent Document 1, data such as a phrase and a keyword assumed for a transfer fraud is registered in a database in advance. The call device collates the voice data at the time of the call with the data registered in the database. If the data matches, the call device records the call or notifies the third party.

  Moreover, the transfer fraud prevention system described in Patent Document 2 determines a determination level by checking whether account information included in the call contents matches account information for fraud registered in advance. The wire fraud prevention system takes measures such as displaying determination result information corresponding to the determination level on the user telephone terminal.

  In the voice authentication system described in Patent Document 3, the caller generates a predetermined user ID. The voice authentication system performs personal authentication by comparing a voice signal generated by a caller with a previously registered voice signal. The called party's telephone displays the authentication result, and the called party determines whether to call or reject the call with reference to the authentication result.

  Further, the authentication device described in Patent Document 4 determines whether or not the caller is a related party of the receiver based on the voiceprint data of the caller. Specifically, the authentication device transmits a call when the voiceprint data of the caller does not match the voiceprint data registered in advance and the preregistered keyword is included in the text data of the caller's utterance. The person is impersonating a scam.

  The IP telephone device described in Patent Document 5 compares the current call with previously registered voiceprint data and document information to determine whether the call is from a known party. . Then, the IP telephone device performs fraud prevention processing such as continuation of the call, disconnection of the call, or output of a warning voice according to the comparison result.

JP 2006-324715 A JP 2008-210085 A JP 2008-234398 A Japanese Patent Application Laid-Open No. 2006-149636 JP 2006-158153 A

Crime of new technique about transfer fraud etc. has occurred. For example, when a disaster such as an earthquake occurs, there is a case in which a scam that describes the reconstruction of the earthquake is performed. It is desired that a crime detection system or apparatus can cope with such a new trick.
In this regard, it is conceivable to update data registered in advance in a crime detection system or apparatus so as to be compatible with a new technique. For example, Patent Document 2 describes updating fraud account information from a police terminal. As a result, it is expected that the latest fraud information obtained by the police will be reflected in the wire fraud prevention system.

  Furthermore, it is preferable that the system or apparatus for detecting a crime can automatically cope with a crime of a new technique. In this case, there is a possibility that this system or apparatus can detect a criminal offense not yet recognized by the person who updates the data. It is also possible that this system or apparatus can detect new crimes that occurred before the data was updated. Furthermore, even if the administrator of this system or apparatus does not update the data, this system or apparatus may be able to detect new crimes, and in this respect, the burden on the administrator can be reduced. .

  An object of the present application is to provide a crime determination device, a relay system, a telephone system, a crime determination method, and a program that can solve the above-described problems.

  According to the first aspect of the present invention, the crime determination device includes a keyword acquisition unit that acquires an increasing keyword that is a keyword whose number of occurrences is increasing at a predetermined site on the Internet, and the increasing keyword is during a call. If it is determined whether or not it has appeared above a predetermined condition, and it is determined that it has appeared above the predetermined condition, the call is used for a crime under conditions that are looser than when it is determined that it does not appear above the predetermined condition. A crime determination unit that determines whether or not

  According to the second aspect of the present invention, the relay system includes a crime determination device and a telephone exchange system, and the crime determination device is an increase in appearance that is a keyword whose number of appearances is increasing at a predetermined site on the Internet. A keyword acquisition unit that acquires a keyword, and whether or not the appearance increasing keyword appears in a call more than a predetermined condition, and when it is determined that the appearance increasing keyword appears above the predetermined condition, it appears above the predetermined condition A crime determination unit that determines whether or not the call is used for a crime under conditions that are less severe than the case where it is determined that the call is not, and the telephone exchange system performs call control of the call.

  According to the third aspect of the present invention, the telephone system includes a crime determination device, a telephone exchange system, and a plurality of telephones, and the crime determination device has an increased number of appearances at a predetermined site on the Internet. A keyword acquisition unit that acquires an appearance increase keyword that is a keyword, and determines whether or not the appearance increase keyword appears in a predetermined condition or more during a call between the plurality of telephones; A crime determination unit that determines whether or not the call is used for a crime under conditions that are more lenient than when it is determined that the predetermined condition or less does not appear, and the telephone exchange system includes: Perform call control of the call.

  According to the fourth aspect of the present invention, the crime determination method includes a keyword acquisition step of acquiring an appearance increasing keyword which is a keyword whose number of appearances is increasing at a predetermined site on the Internet, and the appearance increasing keyword is in a call. When it is determined whether or not it has appeared above a predetermined condition, and it is determined that it has appeared above the predetermined condition, the call is used for a crime under conditions that are looser than when it is determined that it does not appear above the predetermined condition And a crime determination step of determining whether or not

  According to the fifth aspect of the present invention, the program obtains, on a computer, a keyword acquisition step of acquiring an increasing keyword that is a keyword whose number of occurrences is increasing at a predetermined site on the Internet, and the increasing keyword is busy. If it is determined whether or not it has appeared above a predetermined condition, and if it is determined that it has appeared above the predetermined condition, the call is a crime under a looser condition than when it is determined that it does not appear above the predetermined condition And a crime determination step for determining whether or not it is used.

  According to the present invention, it is possible to deal with a crime of a new technique even if data registered in advance is not updated.

It is a schematic block diagram which shows the apparatus structural example of the telephone system which concerns on embodiment of this invention. It is a schematic block diagram which shows the 1st example of a function structure of the telephone with a sensor which concerns on the embodiment. It is a schematic block diagram which shows the 2nd example of a function structure of the telephone with a sensor which concerns on the embodiment. It is a schematic block diagram which shows the function structural example of the determination apparatus which concerns on the same embodiment. It is a figure which shows the example of the process sequence which the determination apparatus which concerns on the embodiment determines whether the telephone call is used for the crime. It is a flowchart which shows the example of the process which the detection program which concerns on the embodiment performs. It is explanatory drawing which shows the minimum structure of the crime determination apparatus which concerns on this invention. It is explanatory drawing which shows the minimum structure of the relay system which concerns on this invention. It is explanatory drawing which shows the minimum structure of the telephone system which concerns on this invention.

Hereinafter, although embodiment of this invention is described, the following embodiment does not limit the invention concerning a claim. In addition, not all the combinations of features described in the embodiments are essential for the solving means of the invention.
FIG. 1 is a schematic configuration diagram showing a device configuration example of a telephone system according to an embodiment of the present invention. In the example shown in FIG. 1, the telephone system 1 includes a sensor-equipped telephone 100, a general telephone 200, and a relay system 300. The relay system 300 includes a telephone exchange system 400 and a determination device 500. The determination apparatus 500 is connected to the Internet 900 for communication.
Hereinafter, the sensor-equipped telephone 100 and the general telephone 200 are collectively referred to as a telephone 600.

The telephone system 1 communicatively connects a plurality of telephones 600 according to a user operation on the telephone 600. A user of the telephone 600 can make a call between the telephones 600 connected for communication. Hereinafter, when the user of the telephone set 600 is busy, this user is referred to as a caller.
In addition, the telephone system 1 determines whether a call between the telephones 600 is used for crimes such as a transfer fraud. When it is determined that the call is being used for crime, the telephone system 1 is a crime response process that is predetermined as a process for protecting the caller from crime damage, such as encouraging a third party to participate in the call. I do.

The sensor-equipped telephone 100 is a telephone that includes a sensor that measures a caller's biological data. The sensor-equipped telephone 100 functions as a communication terminal device in the telephone system 1.
The sensor-equipped telephone 100 may be a general telephone except that the sensor-equipped telephone 100 is provided, and the sensor-equipped telephone 100 can be configured using various devices having a telephone function. For example, the sensor-equipped telephone 100 may be configured using a fixed telephone, or may be configured using a mobile phone. The mobile phone here may be a smart phone or a non-smart phone type mobile phone such as a so-called feature phone. Alternatively, the sensor-equipped telephone 100 may be configured using a personal computer (PC) having an Internet telephone function.

FIG. 2 is a schematic block diagram showing a first example of a functional configuration of the sensor-equipped telephone 100. As shown in FIG. In the example illustrated in FIG. 2, the sensor-equipped telephone 100 includes a telephone-side communication unit 110, a microphone 120, a speaker 130, an operation input unit 140, and a biological information acquisition unit 150.
The telephone side communication unit 110 is connected to the telephone exchange system 400 for communication. The telephone-side communication unit 110 is connected to another telephone 600 through call control performed by the telephone exchange system 400 and transmits / receives voice data. Specifically, the telephone-side communication unit 110 transmits voice data of a caller who is a user of the sensor-equipped telephone 100 including the telephone-side communication unit 110, and voices of the caller who is a user of the communication-destination telephone 600. Receive data. In the following, a caller who is a user of the communication connection destination telephone 600 is referred to as a call partner.

Furthermore, the telephone-side communication unit 110 transmits the caller's biometric data measured by the biometric information acquisition unit 150. The biometric data transmitted by the telephone side communication unit 110 is used to determine the stress level of the caller.
The microphone 120 collects ambient sounds and converts them into electrical signals. In particular, the microphone 120 converts a caller's voice into an electrical signal. The electric signal output from the microphone 120 is transmitted as call voice data from the telephone side communication unit 110 to the telephone 600 of the communication connection destination. Call voice data here is data indicating the voice uttered by the caller during a call.

The speaker 130 converts call voice data of the call partner received by the telephone side communication unit 110 from the communication destination telephone 600 to voice and outputs the voice.
The operation input unit 140 includes an input device such as a push button and receives a user operation. For example, when the operation input unit 140 receives a telephone call operation such as input of a telephone number, the telephone side communication unit 110 transmits a call setting request including the input telephone number to the telephone exchange system 400.

The biometric information acquisition unit 150 measures the caller's biometric data. The biometric data measured by the biometric information acquisition unit 150 is used by the determination device 500 to determine the stress level of the caller. The biometric information acquisition unit 150 measures a part or all of, for example, a sweater's sweat state, body temperature, heart rate, and blood pressure.
For example, when the sensor-equipped telephone 100 is a fixed telephone, the biometric information acquisition unit 150 may include a sweat sensor provided in the handle portion of the handset to measure the sweating state of the caller. Further, when the sensor-equipped telephone 100 is a fixed telephone, the biometric information acquisition unit 150 may include a temperature sensor provided in the ear pad portion of the receiver to measure the body temperature of the caller. The biometric information acquisition unit 150 may include a pressure sensor such as an FGB sensor (Fiber Bragg Grating Sensor) provided in the ear pad portion, and measure the heart rate and blood pressure of the caller.

However, the biometric data measured by the biometric information acquisition unit 150 is not limited to these, and various biometric data that can be used to determine the stress level of the caller can be used. For example, the biological information acquisition unit 150 may measure the caller's breathing speed in addition to or in place of some or all of the caller's sweat state, body temperature, heart rate, and blood pressure. .
Further, the biometric information acquisition unit 150 may be configured as a device different from the sensor-equipped telephone 100. For example, the biological information acquisition unit 150 may be realized as a fitness band function. The fitness band here is a wristband type activity meter.

FIG. 3 is a schematic block diagram showing a second example of the functional configuration of the sensor-equipped telephone 100. As shown in FIG. FIG. 3 shows a configuration example when the sensor-equipped telephone 100 includes a CPU (Central Processing Unit), such as when the sensor-equipped telephone 100 is a smartphone.
In the example shown in FIG. 3, the sensor-equipped telephone 100 includes a telephone-side communication unit 110, a microphone 120, a speaker 130, an operation input unit 140, a biological information acquisition unit 150, a telephone-side storage unit 180, and a telephone-side And a control unit 190.

  Among the units in FIG. 3, the functions of the telephone side communication unit 110, the microphone 120, the speaker 130, the operation input unit 140, and the biological information acquisition unit 150 are the same as those described with reference to FIG. Note that the sensor-equipped telephone 100 may include a display screen such as a liquid crystal panel, and the operation input unit 140 may include a touch sensor that is provided on the display screen and forms a touch panel.

The telephone side storage unit 180 stores various types of information. The telephone-side storage unit 180 is configured using a storage device provided in the sensor-equipped telephone 100.
The telephone-side control unit 190 executes various functions by controlling each unit of the sensor-equipped telephone 100. The telephone-side control unit 190 is configured by a CPU (Central Processing Unit) provided in the sensor-equipped telephone 100 reads out and executes a program from the telephone-side storage unit 180.

General telephone 200 is the same telephone as sensor-equipped telephone 100 except that it does not include a sensor that measures the caller's biometric data. The general telephone 200 functions as a communication terminal device in the telephone system 1.
As in the case of the sensor-equipped telephone 100, the general telephone 200 can be configured using various devices having a telephone function. For example, the general telephone 200 may be configured using a fixed telephone or may be configured using a mobile phone. Or the general telephone 200 may be comprised using the personal computer provided with the internet telephone function.

  The telephone system 1 may include a plurality of sensor-equipped telephones 100 and general telephones 200 as long as the sensor-equipped telephone 100 and the general telephone 200 are combined. In particular, the plurality of telephones 600 included in the telephone system 1 may be all the general telephones 200. That is, the configuration in which the telephone 600 includes a sensor that measures the caller's biological data like the general telephone 200 is not essential for the telephone system 1.

The relay system 300 relays communication between the plurality of telephones 600.
The telephone exchange system 400 performs call control for calls between a plurality of telephones 600. Specifically, the telephone exchange system 400 transmits a call signal to the connection destination telephone 600 indicated in the call setting request in response to the call setting request from any of the telephones 600. When the connection destination telephone 600 transmits a response signal in response to the user's response operation, the telephone exchange system 400 that has received the response signal establishes communication connection between the connection request source telephone 600 and the connection destination telephone 600. As a result, a call is set between the connection request source telephone 600 and the connection destination telephone 600.

When either the connection requesting telephone set 600 or the connection destination telephone set 600 transmits a disconnection signal based on the user's call termination operation, the telephone exchange system 400 and the connection requesting telephone set 600 are connected to the connection destination telephone set 600. Communication with the telephone 600 is disconnected. As a result, the call between the connection requesting telephone set 600 and the connection destination telephone set 600 is terminated.
A general telephone exchange system can be used as the telephone exchange system 400. The telephone exchange system here is a system that performs call control in the telephone network.

The determination device 500 determines whether a call between the telephones 600 to which the telephone exchange system 400 is connected for communication is used for crime. If it is determined that the call is being used for a crime, the determination apparatus 500 is a crime response process that is predetermined as a process for protecting the caller from crime damage, such as encouraging a third party to participate in the call. I do.
The determination device 500 is configured using a computer such as a server device.

  FIG. 4 is a schematic block diagram illustrating a functional configuration example of the determination apparatus 500. In the example illustrated in FIG. 4, the determination apparatus 500 includes a determination apparatus side communication unit 510, a determination apparatus side storage unit 580, and a determination apparatus side control unit 590. The determination device side storage unit 580 includes a call data storage unit 581, a crime identification data storage unit 582, and a rapid increase keyword storage unit 583. The determination device side control unit 590 includes a call data management unit 591, a voice recognition unit 592, a crime identification data management unit 593, a rapid increase keyword management unit 594, a stress determination unit 595, a crime determination unit 596, a crime And a corresponding processing unit 597.

The determination apparatus side communication unit 510 communicates with other apparatuses. In particular, the determination apparatus side communication unit 510 obtains (receives), from the telephone exchange system 400, call voice data transmitted / received in a call between the telephones 600 to which the telephone exchange system 400 is connected.
Further, the determination apparatus side communication unit 510 is connected to the Internet 900 to acquire keywords used in text on a predetermined site of the Internet 900. For example, the determination-device-side communication unit 510 connects to a news site server device to receive news articles. Thereby, the determination apparatus side communication part 510 acquires the keyword contained in a news article.

The determination device-side storage unit 580 stores various types of information. The determination device-side storage unit 580 is configured using a storage device provided in the determination device 500.
The call data storage unit 581 stores data obtained during a call between the telephones 600 according to the control of the call data management unit 591. For example, the on-call data storage unit 581 stores time-series data from the start of passage of the call voice data, call text data, and biometric data.

As described above, the call voice data is data indicating the voice uttered by the caller during the call. The call data storage unit 581 stores call voice data for each telephone set 600. Thereby, the on-call data storage unit 581 stores the call voice data for each caller.
The call text data is data indicating the content of the call indicated by the call voice data in text (character string). The call text data is generated by the voice recognition unit 592 performing voice recognition on the call voice data. As in the case of call voice data, the call data storage unit 581 stores call text data for each telephone set 600. Thereby, the on-call data storage unit 581 stores the call text data for each caller.

The biometric data stored in the call data storage unit 581 is biometric data. This is biometric data measured by the biometric information acquisition unit 150 of the sensor-equipped telephone 100. When the telephone 600 is the determination apparatus 500, the determination apparatus 500 cannot obtain biometric data from the telephone 600. In this case, the call data storage unit 581 stores call voice data and call text data in association with the telephone 600.
Hereinafter, the data stored in the call data storage unit 581 are collectively referred to as call data.

The crime identification data storage unit 582 stores data referred to by the crime determination unit 596 according to the control of the crime identification data management unit 593 to determine whether or not the call indicated in the on-call data is used for crime. To do. For example, the crime identification data storage unit 582 stores crime keyword data, related party data, actual case data, and a calling dictionary.
Crime keyword data is data indicating a crime keyword. A crime keyword is a keyword that is expected to appear in a call when the call is used for crime. For example, the crime identification data storage unit 582 stores crime keyword data indicating keywords such as “account”, “XX yen” (amount), “accident” and “refund” as a crime keyword in the case of a transfer fraud. .

  The related party data is data used for authenticating the parties related to the caller such as the caller's family and friends. The crime identification data storage unit 582 stores related party data for each user of the telephone set 600. For example, the crime identification data storage unit 582 stores the identification information of the telephone 600 such as the voice data or voiceprint data of the related person and the telephone number of the telephone 600 possessed by the related person as the related person data. Or the crime identification data memory | storage part 582 may contain the secret word predetermined for the person authentication of the person concerned, and memorize | store it in the person concerned data.

  The actual incident data is data obtained from crimes committed in the past. For example, the crime identification data storage unit 582 stores the criminal call voice data recorded in the past transfer fraud case as the actual case data or the criminal voice print data obtained by analyzing the call voice data.

The calling dictionary is data indicating a calling method assumed when a caller calls a related party. For example, the crime identification data storage unit 582 may be used when a caller calls a close relative such as a family member, such as chanting ("XX"), kuning ("XX"), and discarding ("XX" )) Is stored.
Hereinafter, the data stored in the crime identification data storage unit 582 are collectively referred to as crime identification data.
While the on-call data storage unit 581 stores the on-call data at the time of the call, the crime identification data storage unit 582 has already stored the crime identification data before the start of the call.

The rapidly increasing keyword storage unit 583 stores appearance increasing keyword data. The appearance increasing keyword data is data indicating the appearance increasing keyword. The appearance increasing keyword is a keyword whose number of appearances is increasing at a predetermined site on the Internet.
The appearance increasing keyword is considered as a keyword indicating an event that has recently become a hot topic. In this way, crimes such as wire fraud may be carried out in connection with events that have recently become a hot topic. This is because many people do not have enough knowledge about the recent new events, and in this respect, the other party is more likely to believe the scammers' remarks.

  For example, a transfer fraud related to a system such as the My Number system may be performed at the time when a system becomes a hot topic. In this case, the caller who received the call from the criminal knows that there is a system, but does not know the specific contents, and also does not know the cases where fraud related to the system was done. It is done. As a result, there is a relatively high possibility that a caller who receives a call from the criminal believes the criminal's story and suffers a crime.

  Therefore, the rapidly increasing keyword storage unit 583 stores the appearance increasing keyword. The determination apparatus 500 determines whether or not the call is used for a crime by using the appearance frequency of the appearance increasing keyword in the call as one of the determination criteria, and is performed in relation to an event that has recently become a hot topic. There is a possibility of detecting crime and protecting the caller from crime damage.

The determination apparatus side control unit 590 controls each unit of the determination apparatus 500 to perform various processes. The determination apparatus side control unit 590 is configured by a CPU included in the determination apparatus 500 reading out and executing a program from the determination apparatus side storage unit 580.
The call data management unit 591 manages call data. For example, the call time data management unit 591 stores the time series data of the call voice data received from the telephone exchange system 400 by the determination device side communication unit 510 in the call time data storage unit 581 for each telephone 600 of the transmission source. When the transmission source telephone 600 is the sensor-equipped telephone 100, the on-call data management unit 591 converts the biometric data time series data received together with the call voice data from the telephone exchange system 400 by the determination device side communication unit 510 into the call voice. Along with the data time-series data, each telephone set 600 is stored in the call data storage unit 581.

  Further, the on-call data management unit 591 outputs the call voice data received from the telephone exchange system 400 by the determination device side communication unit 510 to the voice recognition unit 592 to perform voice recognition. Then, the call data management unit 591 stores the obtained call text data time-series data in the call data storage unit 581 together with the call-voice data time-series data for each telephone 600 of the transmission source.

  In addition, the on-call data management unit 591 outputs the call voice data and the call text data to the crime determination unit 596, and determines whether or not the call indicated by these data is used for crime. When the telephone 600 that is the transmission source of the call voice data is the sensor-equipped telephone 100, the call data management unit 591 outputs the biometric data to the crime determination unit 596 together with the call voice data and the call text data. The on-call data management unit 591 may output the data received by the determination apparatus side communication unit 510 to the crime determination unit 596 as it is, or once stored in the on-call data storage unit 581 and then the crime determination unit 596. You may make it output to.

The voice recognition unit 592 receives voice data, performs voice recognition, and outputs text data. In particular, the voice recognition unit 592 performs voice recognition on the call voice data from the call data management unit 591 to generate call text data. The speech recognition unit 592 outputs the generated call text data to the on-call data management unit 591.
The algorithm that the voice recognition unit 592 performs voice recognition is not limited to a specific algorithm. In particular, a known speech recognition algorithm can be used as an algorithm by which the speech recognition unit 592 performs speech recognition.

  The crime identification data management unit 593 manages crime identification data. For example, the crime identification data management unit 593 stores the crime identification data indicated in the registration request in the crime identification data storage unit 582 according to the crime identification data registration request transmitted by the administrator of the determination apparatus 500 using the terminal device. .

Alternatively, the crime identification data management unit 593 may extract the crime identification data automatically or semi-automatically and store it in the crime identification data storage unit 582. For example, among the calls made between the telephone sets 600 by the crime identification data management unit 593, the keywords appearing more than a predetermined frequency in the call text data of the calls that the crime determination unit 596 has determined to be used for crimes May be extracted as crime keyword candidates. Then, the crime identification data management unit 593 may store the extracted crime keyword candidates in the crime identification data storage unit 582. Alternatively, the crime identification data management unit 593 transmits the extracted crime keyword candidates to the administrator's terminal device of the determination apparatus 500 and causes the crime identification data storage unit 582 to store the keyword selected by the administrator as the crime keyword. You may do it.
The crime identification data management unit 593 also automatically or semi-automatically extracts the voice data of the scammers from the call voice data of the call that the crime determination unit 596 has determined to be used for the crime, and stores the crime identification data. You may make it memorize | store in the part 582. FIG.

The sudden increase keyword management unit 594 manages the appearance increase keywords. For example, the rapidly increasing keyword management unit 594 extracts a keyword by periodically referring to a predetermined site on the Internet such as a news site every week or the like, and counts the number of appearances in the site for each keyword. The rapid increase keyword management unit 594 stores the extracted keywords and the number of appearances in the determination device-side storage unit 580. Further, the rapidly increasing keyword management unit 594 calculates an increase / decrease from the number of appearances at the time of the previous reference for each extracted keyword, and the number of appearances increases, for example, more than a predetermined condition such as a keyword whose number of appearances is more than doubled. The keyword is detected as an appearance increasing keyword. The rapid increase keyword management unit 594 stores the detected keyword in the rapid increase keyword storage unit 583 as an appearance increase keyword.
The rapid increase keyword management unit 594 corresponds to an example of a keyword acquisition unit.

The stress determination unit 595 determines the degree of stress of the caller based on the caller's biometric data. The stress level here is a level at which the mental state of the caller differs from the normal mental state, for example, the level of tension of the caller.
The stress determination unit 595 may determine the stress level of the caller based on the change in the caller's biometric data. For example, the stress determination unit 595 may determine the degree of stress of the caller by comparing the biometric data at the start of the call with the current biometric data.

Alternatively, normal biological data may be stored in advance by the determination device-side storage unit 580 (for example, the crime identification data storage unit 582) for each caller (for each user of the telephone 600). Then, the stress determination unit 595 may determine the stress level of the caller by comparing the registered biometric data with the current biometric data.
As described above, the stress determination unit 595 can reduce the influence of individual differences in the biometric data by determining the degree of stress of the caller based on the change in the biometric data of the caller. Unit 595 can determine the degree of stress on the caller with higher accuracy.
Further, the stress determination unit 595 may detect the maximum value and the minimum value of each data included in the biological data. For example, the stress determination unit 595 may detect the caller's heart rate, blood pressure, sweating amount, and body temperature. The maximum and minimum values may be detected and stored in the on-call data storage unit 581.

  Crime determination unit 596 determines whether a call between telephone sets 600 is used for a crime. In particular, the crime determination unit 596 determines whether or not the appearance increasing keyword appears more than a predetermined condition during a call. If it is determined that a predetermined condition or more has appeared, the crime determination unit 596 determines whether or not the call is used for a crime under a looser condition than when it has been determined that the predetermined condition or more has not appeared.

For example, the crime determination unit 596 determines that the call is being used for a crime when the appearance frequency of the crime keyword is equal to or higher than the first threshold when it is determined that the appearance increasing keyword does not appear more than a predetermined condition during the call. To do. On the other hand, when the crime determination unit 596 determines that the appearance increasing keyword appears more than a predetermined condition during the call, the call is used for a crime when the appearance frequency of the crime keyword is the second threshold or more. judge. The second threshold is a threshold smaller than the first threshold.
As the appearance frequency of the crime keyword, for example, the ratio of the word corresponding to the crime keyword among the words issued so far in the call can be used, but is not limited thereto.

  The crime determination unit 596 may detect that the stress of the caller increases more than a predetermined condition during a call as an event that affirms that the call is used for a crime. For example, the crime determination unit 596 indicates that the stress of the caller after a predetermined keyword is issued during a call is greater than the stress of the caller before the keyword is issued. You may make it detect as an event which affirms being used.

Here, as a trick of criminals such as wire fraud, it is conceivable that the other party is frustrated and cannot be judged calmly. For example, a criminal pretending to be the son of a caller may be panicked by saying that a traffic accident has occurred.
Therefore, the crime determination unit 596 determines whether or not the stress of the caller has increased beyond a predetermined condition during the call. As a result, the crime determination unit 596 can detect that the criminal used a trick to panic the opponent. In particular, the crime determination unit 596 determines whether or not the caller's stress is increasing before and after a keyword assumed to be used by a criminal such as “traffic accident”. As a result, the crime determination unit 596 can detect with high accuracy that the criminal has intentionally hit the opponent.

An event in which the crime determination unit 596 affirms that the call is being used for a crime that the caller's wording is a wording to a close relative and that the other party cannot be authenticated as the caller's close relative May be detected.
For example, the crime determination unit 596 determines whether the caller's wording is a wording for a close relative using a calling dictionary. When it is determined that the wording is for the close relative, the crime determination unit 596 uses the related party information stored in the crime identification data storage unit 582 to determine whether the other party is actually the close relative of the caller. Attempts to authenticate the person. If the personal authentication fails for any related data of any close relative, the crime determination unit 596 processes this event as an event that affirms that the call is used for a crime.

For example, the crime determination unit 596 may calculate a score indicating the possibility that a call is used for a crime. In the above case, the crime determination unit 596 may add a predetermined point to the score. The crime determination unit 596 determines that the call is used for a crime when the score is equal to or higher than a threshold value together with points under other conditions.
Thereby, the crime determination unit 596 can detect that the other party is impersonating the caller's close relative.

When the crime determination unit 596 determines that the call is used for a crime, the crime response processing unit 597 performs a predetermined process as a process for protecting the caller from the crime.
For example, the crime response processing unit 597 sends a notification to the other person's telephone 600 that prompts the other person to participate in the call. The other person here is a person other than the current caller. For example, the other person here may be a police or a security company, or may be a person registered in advance for each caller.
When someone else participates in the call, the caller on the crime victim side can be asked to make a calm decision. In addition, when another person participates in the call, it is intimidating the caller on the criminal side.

Next, the operation of the determination apparatus 500 will be described with reference to FIGS.
FIG. 5 is a diagram illustrating an example of a processing procedure in which the determination apparatus 500 determines whether a call is used for a crime. When determining device 500 detects that a telephone conversation has started between telephone sets 600, it starts the processing of FIG. Specifically, when a call is started between the telephones 600, the telephone exchange system 400 transmits call voice data to the determination device 500. The determination device 500 receives the call voice data from the telephone exchange system 400, detects that the call has started, and starts the process of FIG.
When the telephone exchange system 400 sets a plurality of calls, the determination apparatus 500 performs the process of FIG. 5 for each call.

  The determination apparatus 500 that has detected that the call has started starts data recording (sequence S101). Specifically, the determination apparatus 500 activates the on-call data management unit 591 and the voice recognition unit 592 (sequences S101-1 and S101-2). As described above, the call data management unit 591 stores the call data in the call data storage unit 581. The voice recognition unit 592 performs voice recognition on the call voice data to generate call text data. The call data management unit 591 stores the call text data generated by the voice recognition unit 592 in the call data storage unit 581 as one of the call data.

Next, determination device 500 activates crime determination unit 596 (sequence S102). Specifically, determination device 500 activates a plurality of detection programs (sequences S102-1 to S102-n). The crime determination unit 596 is configured by executing these detection programs in parallel.
The plurality of detection programs include detection programs that perform determination on individual items such as determination of the appearance frequency of criminal keywords in a conversation and determination of the stress level of a caller. The plurality of programs include a detection program that comprehensively evaluates the determination results of the individual items and determines whether or not the call is used for a crime. As a method for comprehensively evaluating the determination results for individual items, a method for calculating a score as described above may be used.

  Since the determination condition and the corresponding processing method for determining whether or not a call is used for a crime are different for each crime content, it is assumed that a plurality of programs are executed in parallel in the processing of sequence S102. However, the determination apparatus 500 may perform the processing of the sequence S102 by executing one program, such as performing processing of a plurality of detection programs of the sequence S102 by one inference engine.

When the crime determination unit 596 determines that the call is being used for a crime, the crime response processing unit 597 performs processing for protecting the caller from crime damage as described above.
When determining that the call has been completed (sequence S103), the determination apparatus 500 performs an end process such as stopping an operating program (sequence S104).
After the sequence S104, the determination apparatus 500 ends the process of FIG.

FIG. 6 is a flowchart illustrating an example of processing performed by the detection program activated in sequence S102 of FIG. The processing performed by the program means that the CPU executes the processing by executing the program.
FIG. 6 shows an example of processing performed by a detection program that performs call partner determination and identity authentication. Hereinafter, this detection program is referred to as a detection program 1. The detection program 1 starts the processing of FIG. 6 when it starts up.

In the process of FIG. 6, the detection program 1 determines a call partner (step S201). For example, the detection program 1 refers to the calling dictionary as described above to determine whether the other party is a close relative of the caller.
Then, the detection program 1 determines whether or not the determination of the call partner has been completed (step S202). If it is determined that the call partner determination has not been completed (step S202: NO), the detection program 1 returns to step S201 to continue the call partner determination.

  On the other hand, when it is determined that the determination of the call partner has been completed (step S202: YES), the detection program 1 performs personal authentication (step S203). Specifically, the detection program 1 determines whether or not the other party is the same as the person determined in step S201. Alternatively, the detection program 1 determines whether or not the call partner is included in the group of persons determined in step S201 (for example, a close relative of the caller). As described above, the detection program 1 performs person authentication using the related party data.

  Then, the detection program 1 determines whether or not personal authentication has been completed (step S204). When it is determined that the personal authentication has not been completed (step S204: NO), the detection program 1 returns to step S203 and continues the personal authentication.

On the other hand, when it is determined that the personal authentication is completed (step S204: YES), the detection program 1 determines whether the personal authentication is successful (step S205). If it is determined that the personal authentication is successful (step S205: YES), the detection program 1 ends the process of FIG. When the processing in FIG. 6 ends, the detection program ends its own operation.
On the other hand, when it is determined that the personal authentication has failed (step S205: NO), the detection program adds a predetermined point to a score indicating the possibility that the call is used for a crime (step S206).
After step S206, the detection program 1 ends the process of FIG.

  As described above, the rapid increase keyword management unit 594 acquires an appearance increase keyword. The crime determination unit 596 determines whether or not the appearance increasing keyword appears more than a predetermined condition during the call. If it is determined that a predetermined condition or more has appeared, the crime determination unit 596 determines whether or not the call is used for a crime under conditions that are more lenient than when it is determined that the condition does not appear.

As described above, the appearance increasing keyword is considered to be a keyword indicating an event that has recently become a hot topic. In this way, crimes such as wire fraud may be carried out in connection with events that have recently become a hot topic.
Therefore, when the crime determination unit 596 determines that the appearance increasing keyword appears more than a predetermined condition during a call, the crime determination unit 596 applies a looser condition than the case where it is determined that the appearance increasing keyword does not appear more than the predetermined condition. Increases the possibility of detecting crimes related to newly-discussed events. In this case, even if the administrator of the determination apparatus 500 does not update the crime identification data, the crime determination unit 596 can detect a crime related to an event that has recently become a hot topic. In this respect, the determination apparatus 500 can automatically cope with a crime of a new trick.

  Since the determination apparatus 500 can automatically cope with a crime of a new trick, there is a possibility that a crime of a trick that the person who updates data does not recognize yet can be detected. Further, there is a possibility that the determination apparatus 500 can detect a crime of a new trick that was performed before the data was updated. Furthermore, even if the administrator of the determination apparatus 500 does not update the data, the determination apparatus 500 may be able to detect a crime of a new technique. In this respect, the burden on the administrator can be reduced.

The stress determination unit 595 determines the degree of stress of the caller based on the caller's biometric data. The crime determination unit 596 detects that the stress of the caller has increased more than a predetermined condition during a call as an event that affirms that the call is being used for a crime.
Thereby, the crime determination part 596 can detect that the criminal used the trick which makes a partner panic.

Also, the crime determination unit 596 indicates that the stress of the caller after a predetermined keyword is issued during a call is greater than the stress of the caller before the keyword is issued, It is detected as an event that affirms that it is being used.
As a result, the crime determination unit 596 can detect with high accuracy that the criminal has intentionally hit the opponent.

Also, the crime determination unit 596 confirms that the call is used for a crime that the caller's wording is a wording for a close relative and the caller is not authenticated as a close relative of the caller. Detect as an event.
Thereby, the crime determination unit 596 can detect that the other party is impersonating the caller's close relative.

In addition, when the crime determination unit 596 determines that the call is used for a crime, the crime response processing unit 597 notifies the other person to participate in the call.
When someone else participates in the call, the caller on the crime victim side can be asked to make a calm decision. In addition, when another person participates in the call, it is intimidating the caller on the criminal side.

Next, the minimum configuration of the present invention will be described with reference to FIGS.
FIG. 7 is an explanatory diagram showing the minimum configuration of the crime determination apparatus according to the present invention. The crime determination apparatus 10 illustrated in FIG. 7 includes a keyword acquisition unit 11 and a crime determination unit 12.
With this configuration, the keyword acquisition unit 11 acquires an appearance increasing keyword, which is a keyword whose number of appearances is increasing at a predetermined site on the Internet. The crime determining unit 12 determines whether or not the appearance increasing keyword appears more than a predetermined condition during the call. When it is determined that a predetermined condition or more has appeared, the crime determination unit 12 determines whether or not the call is used for a crime under a looser condition than when it is determined that the predetermined condition or more does not appear.
This increases the possibility that the crime determination unit 12 can detect a crime related to an event that has recently become a hot topic. Even if the administrator of the crime determination device 10 does not update the crime identification data, the crime determination device 12 can detect a crime related to an event that has recently become a hot topic. It is possible to automatically respond to the crime of the trick.

FIG. 8 is an explanatory diagram showing the minimum configuration of the relay system according to the present invention. The relay system 20 illustrated in FIG. 8 includes a crime determination device 21 and a telephone exchange system 24. The crime determination device 21 includes a keyword acquisition unit 22 and a crime determination unit 23.
With this configuration, the keyword acquisition unit 22 acquires an appearance increasing keyword that is a keyword whose number of appearances is increasing at a predetermined site on the Internet. The crime determining unit 23 determines whether or not the appearance increasing keyword appears more than a predetermined condition during the call. When it is determined that a predetermined condition or more has appeared, the crime determination unit 23 determines whether or not the call is used for a crime under a looser condition than when it is determined that the predetermined condition or more does not appear. The telephone exchange system 24 performs call control for telephone calls.
Thereby, the possibility that the crime determination part 23 can detect the crime related to the event which became a new topic recently increases. Even if the administrator of the crime determination device 21 does not update the crime identification data, the crime determination device 23 can detect a crime related to an event that has recently become a hot topic. It is possible to automatically respond to the crime of the trick.

FIG. 9 is an explanatory diagram showing the minimum configuration of the telephone system according to the present invention. A telephone system 30 shown in FIG. 8 includes a crime determination device 31, a telephone exchange system 34, and a plurality of telephones 35. The crime determination device 31 includes a keyword acquisition unit 32 and a crime determination unit 33.
With this configuration, the keyword acquisition unit 22 acquires an appearance increasing keyword that is a keyword whose number of appearances is increasing at a predetermined site on the Internet. The crime determination unit 23 determines whether or not the appearance increasing keyword appears more than a predetermined condition during a call between the plurality of telephones 35. When it is determined that a predetermined condition or more has appeared, the crime determination unit 23 determines whether or not the call is used for a crime under a looser condition than when it is determined that the predetermined condition or more does not appear. The telephone exchange system 24 performs call control for telephone calls.
This increases the possibility that the crime determination unit 33 can detect a crime related to an event that has recently become a hot topic. Even if the administrator of the crime determination device 31 does not update the crime identification data, the crime determination device 33 can detect a crime related to an event that has recently become a hot topic. It is possible to automatically respond to the crime of the trick.

Note that a program for realizing all or part of the functions of the determination apparatus side control unit 590 is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read into a computer system and executed. The processing of each unit may be performed as necessary. Here, the “computer system” includes an OS and hardware such as peripheral devices.
The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system. The program may be a program for realizing a part of the functions described above, and may be a program capable of realizing the functions described above in combination with a program already recorded in a computer system.

  The embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and includes designs and the like that do not depart from the gist of the present invention.

DESCRIPTION OF SYMBOLS 1 Telephone system 100 Sensor telephone 110 Telephone side communication part 120 Microphone 130 Speaker 140 Operation input part 150 Biometric information acquisition part 180 Telephone side memory | storage part 190 Telephone side control part 200 General telephone 300 Relay system 400 Telephone switching system 500 Judgment device 510 Judgment Device side communication unit 580 Judgment device side storage unit 581 Call data storage unit 582 Crime identification data storage unit 583 Rapid increase keyword storage unit 590 Judgment device side control unit 591 Call data management unit 592 Voice recognition unit 593 Crime identification data management unit 594 Rapid increase keyword management unit 595 Stress determination unit 596 Crime determination unit 597 Crime response processing unit

Claims (9)

A keyword acquisition unit that acquires an appearance increasing keyword that is a keyword whose number of appearances is increasing at a predetermined site on the Internet;
It is determined whether or not the appearance increasing keyword appears in a call more than a predetermined condition, and when it is determined that the appearance increasing keyword appears more than the predetermined condition, the condition is milder than when it is determined that the appearance increasing keyword does not appear more than the predetermined condition And a crime determination unit for determining whether or not the call is used for a crime,
Crime judgment device comprising A stress determination unit that determines the stress level of the caller based on the caller's biometric data;
The crime according to claim 1, wherein the crime determination unit detects that the stress of the caller has increased more than a predetermined condition during the call as an event that affirms that the call is used for a crime. Judgment device.   The crime determination unit determines that the stress of the caller after a predetermined keyword is issued during the call is greater than the stress of the caller before the keyword is issued. The crime determination device according to claim 2, wherein the crime determination device is detected as an event that affirms being used for a crime.   The criminal judgment unit confirms that the call is used for a crime that the caller's wording is a wording for a close relative and the call partner cannot be authenticated as a close relative of the caller. The crime determination device according to any one of claims 1 to 3, wherein the crime determination device is detected as an event to be performed.   5. The crime response processing unit according to claim 1, further comprising a crime response processing unit that performs a notification that encourages others to participate in the call when the crime determination unit determines that the call is used for a crime. Crime judgment device as described in. A crime determination device and a telephone exchange system;
The crime determination device
A keyword acquisition unit that acquires an appearance increasing keyword that is a keyword whose number of appearances is increasing at a predetermined site on the Internet;
It is determined whether or not the appearance increasing keyword appears in a call more than a predetermined condition, and when it is determined that the appearance increasing keyword appears more than the predetermined condition, the condition is milder than when it is determined that the appearance increasing keyword does not appear more than the predetermined condition A crime determination unit for determining whether the call is used for crime;
With
The telephone exchange system performs call control of the call.
Relay system. A crime determination device, a telephone exchange system, and a plurality of telephones;
The crime determination device
A keyword acquisition unit that acquires an appearance increasing keyword that is a keyword whose number of appearances is increasing at a predetermined site on the Internet;
It is determined whether or not the appearance increasing keyword appears over a predetermined condition during a call between the plurality of telephones. When it is determined that the appearance increasing keyword appears over the predetermined condition, it is determined that the appearance increasing keyword does not appear over the predetermined condition. A crime determination unit that determines whether or not the call is used for a crime under conditions that are looser than if
With
The telephone exchange system performs call control of the call.
Phone system. A keyword acquisition step of acquiring an increase keyword that is an increasing number of occurrences on a predetermined site on the Internet;
It is determined whether or not the appearance increasing keyword appears in a call more than a predetermined condition, and when it is determined that the appearance increasing keyword appears more than the predetermined condition, the condition is milder than when it is determined that the appearance increasing keyword does not appear more than the predetermined condition Then, a crime determination step for determining whether or not the call is used for a crime,
Crime determination method including On the computer,
A keyword acquisition step of acquiring an increase keyword that is an increasing number of occurrences on a predetermined site on the Internet;
It is determined whether or not the appearance increasing keyword appears in a call more than a predetermined condition, and when it is determined that the appearance increasing keyword appears more than the predetermined condition, the condition is milder than when it is determined that the appearance increasing keyword does not appear more than the predetermined condition Then, a crime determination step for determining whether or not the call is used for a crime,
A program for running

Images