KR100634577B1 - Method for processing malicious call on wireless internet data call and Apparatus thereof - Google Patents

Abstract

The present invention relates to a malicious call tracking method and apparatus, and more particularly, to a malicious call tracking method and apparatus therefor when using the wireless Internet. According to an embodiment of the present invention, a method of tracking malicious calls in a malicious call tracking device of a network by a selective request of a user according to the present invention includes receiving a data call including pre-set malicious call tracking information from a user terminal to specify a malicious call. Detecting malicious code tracking information in the received data call; extracting malicious code information including a telephone number of a counterpart terminal of the user terminal corresponding to the data call; And storing in a preset area in the malicious tracking device. According to the present invention, a method for tracking malicious calls and a device thereof in accordance with an embodiment of the present invention extract and manage caller information of malicious calls by a selective request of a user when a malicious call occurs during direct data communication between clients. It has the effect of protecting privacy.

Malicious, malicious tracking devices, wireless Internet, P2P.

Description

Malicious call tracking method and device therefor when using wireless internet {Method for processing malicious call on wireless internet data call and Apparatus

1 is a schematic configuration diagram of a wireless Internet service system according to the prior art.

2 is a block diagram of a wireless Internet service system for performing direct data communication between clients according to a preferred embodiment of the present invention.

3 is a flow chart schematically showing a malicious tracking method when using the wireless Internet according to a preferred embodiment of the present invention.

4A is a data format diagram used to track malicious calls when using the wireless Internet according to a preferred embodiment of the present invention.

4B is a screen configuration diagram of a mobile communication terminal for generating and transmitting a malicious tracking signal when using the wireless Internet according to a preferred embodiment of the present invention.

5 is a flowchart illustrating a malicious call tracking method when using the wireless Internet according to a first embodiment of the present invention.

6 is a flowchart illustrating a malicious call tracking method when using the wireless Internet according to a second embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

110: calling party terminal

120: calling base station

130: calling exchange

140: mobile communication network

150: called party exchange

160: called base station

170: called party terminal

180: IWF

185 gateway

200: Internet

The present invention relates to a malicious call tracking method and apparatus, and more particularly, to a malicious call tracking method and apparatus therefor when using the wireless Internet.

If the current user applies for the caller ID service during a voice call, information of the caller may be displayed on the display of the user terminal. A caller identification presentation supplementary service is a service in which a caller's telephone number or preset information is displayed on a screen of a called terminal when a call is made to a user terminal. According to the caller ID display service, a call is received and the called terminal can display the other party's phone number so that it can send and receive malicious calls (calls connected with intentions such as mischief, indecent or violent). ㅇ You can stop violent calls, and you can check and resend calls even if you are away from your office.

Unlike the above-mentioned voice call, when the current user communicates with the other party using the wireless Internet, the information of the sender and the receiver and the communication history (including the transmitted and received contents) are all stored in a server on the network. In this case, information about malicious codes can be extracted by extracting information from a server on a corresponding network. That is, when the caller sends a malicious message while chatting to the called party, the called party may request the chat service provider for information about the caller and check the information about the malicious call.

1 is a schematic configuration diagram of a wireless Internet service system according to the prior art. Referring to FIG. 1, a wireless Internet service system according to the related art includes a calling terminal 110, a calling base station 120, a calling side exchange 130, a mobile communication network 140, a called side exchange 150, and a called party. Base station 160, called terminal 170, IWF (inter working function, hereinafter referred to as IWF) 180, gateway 185 and service server 190 (securities server 190 (1)) , A chat server 190 (2), an email server 190 (3), hereinafter referred to as a 'service server 190'.

The calling terminal 110 and the called terminal 170 connect the calling base station 120, the calling side exchange 130, the called side exchange 150, and the called base station 160 coupled to the mobile communication network 140. And transmit and receive data in the wireless Internet using the IWF 180, the gateway 185, and the service server 190 coupled to the data network. In this case, when chatting using the wireless Internet between the calling party terminal 110 and the called party terminal 170, since the corresponding information may be stored in the service server 190, when one side of the talker reports a malicious call The police, etc. receiving the report may extract the corresponding information by querying the service server 190.

However, when the wireless communication between the user terminals using a peer-to-peer (P2P: peer-to-peer) service is not communicated via the server, the information of the user terminal is not stored. Therefore, there is a problem that can not be reported in real time when the malice occurs.

Accordingly, an object of the present invention is to provide a malicious call tracking method and apparatus for using the wireless Internet that can extract and manage caller information when a malicious call occurs during direct data communication between clients.

Another object of the present invention is to use the wireless Internet that can protect the privacy of the individual without breaching security in the communication network by extracting and managing the caller information of the malicious call by the user's selective request when the malicious call occurs during direct data communication between the clients The present invention provides a malicious tracking method and apparatus.                         

Other objects of the present invention will become more apparent through the preferred embodiments described below.

In order to achieve the above objects, according to an aspect of the present invention, it is possible to provide a malicious call tracking method when using the wireless Internet.

According to a preferred embodiment, a method of tracking malicious calls in a malicious call tracking device of a network by a user's selective request when using the wireless Internet includes receiving a data call including preset malicious tracking information for specifying the malicious call from a user terminal. Receiving, detecting the malicious call tracking information from the received data call, extracting malicious call information including a telephone number of a counterpart terminal of the user terminal corresponding to the data call, the malicious call information Storing the malicious code in a preset area within the malicious tracking device.

Here, the malicious call tracking information may be included in header information of the data packet, and the malicious call information may further include data contents transmitted and received between the user terminal and the counterpart terminal.

In addition, when using the wireless Internet according to the present invention, a method for tracking malicious calls in a device for tracking malicious calls by a user's selective request includes receiving a request signal for transmitting malicious code information from a malicious report server, wherein the preset area The method may further include extracting the stored malicious code information from the malicious code information, and transmitting the malicious code information to the malicious code report server.

In addition, the method for tracking the malicious code in the apparatus for tracking the malicious code in accordance with the selective request of the user when using the wireless Internet according to the present invention comprises the steps of receiving a request signal transmission request for malicious information including an authentication code from the user terminal Wherein the authentication code authenticates that a legitimate application procedure for receiving malicious code information from a public authority has been performed. Detecting the authentication code to determine that the authentication code is legitimate, from the preset area. The method may further include extracting the stored malicious code information and transmitting the malicious code information to the user terminal.

In order to achieve the above objects, according to another aspect of the present invention, it is possible to provide a malicious tracking device when using the wireless Internet.

According to a preferred embodiment, a device for tracking malicious calls by a user's selective request when using the wireless Internet includes a receiving unit for receiving a data call including pre-set malicious call tracking information for specifying a malicious call from a user terminal; A malicious code detection unit for detecting malicious code tracking information in a data call, a malicious code information extracting unit for extracting malicious code information including a telephone number of a counterpart terminal of the user terminal corresponding to the data call, and the malicious code information It may include a storage unit for storing.

Here, the malicious code tracking information may be included in header information of the data packet, and the malicious code information may further include data contents transmitted and received between the user terminal and the counterpart terminal, and the receiving unit reports a malicious code. The malicious code information transmission request signal may be received from the server.

In addition, the apparatus for tracking the malicious call by the user's selective request when using the wireless Internet according to the present invention may further include a transmitting unit for transmitting the stored malicious call information to the malicious call report server.

Hereinafter, a preferred embodiment of the malicious tracking method and the device when using the wireless Internet according to the present invention will be described in detail with reference to the accompanying drawings, in the description with reference to the accompanying drawings, the same or corresponding to the reference numerals The components to be given the same reference numerals and duplicate description thereof will be omitted.

2 is a block diagram of a wireless Internet service system for performing direct data communication between clients according to an exemplary embodiment of the present invention. 2, the wireless Internet service system according to a preferred embodiment of the present invention is the calling terminal 110, the calling base station 120, the calling side switch 130, the mobile communication network 140, the called side switch ( 150, the called base station 160, the called terminal 170, the IWF 180, the gateway 185, and the Internet 200.

The Internet 200 through which data packets are transmitted and received is connected to a mobile communication system through a Packet Data Switching Node (PDSN) or IWF 180. When the called terminal 170 transmits the information including the malicious call tracking signal using the PDSN, it is connected to the Internet 200 via the controller of the called base station 160 and transmitted using the IWF 180. If so, it may be connected to the Internet 200 via the destination exchange 150. Hereinafter, the called terminal 170 will be described based on the case in which the IWF 180 is connected to the Internet 200.

The calling terminal 110 and the called terminal 170 pass through the calling base station 120, the calling side exchange 130, the mobile communication network 140, the called side exchange 150, and the called base station 160. By using the IWF 180, the gateway 185, and the Internet 200, a P2P service may be provided by transmitting and receiving a data call. Here, the data call is a data packet generally transmitted and received between each terminal and the mobile communication system, and the malicious call refers to a malicious data call. In addition, a case in which the calling terminal 110 transmits a malicious call and the called terminal 170 receives it will be described.

According to the related art, a P2P service uses a script included in an HTML document to execute a P2P application embedded in a client, or a web loaded on a client using a web browser executable code included in a P2P application. Performs P2P service by running a browser. Alternatively, you can connect P2P applications such as instant messenger to web browsers pre-loaded on the client in real time, and then connect the P2P applications and web browsers for real-time data communication and event tracking, and P2P applications loaded on different clients. How to synchronize, and how to control and manage other clients' web browsers in real time through synchronized P2P applications. In the present invention, a method for tracking malicious calls when using the wireless Internet using a P2P service according to the related art as described above is provided.

Here, the P2P network is a distributed system in which an unspecified majority participates, and has characteristics such as search efficiency, anonymity, and distribution of storage costs. Each node in the P2P network uses its own hash function of the entire system to create its own representative identifier (ID), which is also used for file storage and retrieval. In a general P2P file storage method, in order to store a file, node A determines a storage destination key using a hash function of a file's characteristics (file name, size, creation date, and other information). This storage location key is used to find the node responsible for this value and store the file in the node it finds. In order to find the corresponding file in Node B, which is the other side of node A, the node is found using the storage location key found using the hash function described above to obtain the file. In addition, according to the related art, a method of performing a P2P service by applying an agent technology has also been proposed.

In order to perform a wireless Internet service through a wireless network, a WAP method currently uses a gateway (Gateway: protocol conversion device), and a ME method uses a PAS (Portal Access Sever: portal connection device, hereinafter referred to as 'PAS'). 2, PAS 185 is coupled between IWF 180 and the Internet 200. A device for extracting and storing malicious call information is referred to as a malicious call tracking device, which is a gateway through which P2P service is performed, and may be a PAS and a separate server. For convenience of description, the PAS 185 will be described based on the case of a malicious call tracking device.

The apparatus for tracking a malicious call includes a receiver for receiving a data call including malicious call tracking information set in advance for specifying a malicious call from a user terminal, a malicious call detection unit for detecting malicious call tracking information from the received data call, and a corresponding call. A malicious code information extracting unit for extracting malicious code information including the telephone number of the counterpart terminal of the user terminal, and a storage unit for storing the malicious code information. Here, the malicious tracker may further include a malicious information recorder which stores the extracted malicious information in a storage unit. In addition, when receiving the malicious information request signal from the called terminal, the malicious call tracking device detects an authentication code that can determine whether the called party has performed a legitimate procedure for receiving the authentication, and determines that the authentication code is legitimate. The code determination unit may further include.

When the called terminal 170 reports a malicious call received from the calling terminal 110, the PAS 185 receives the reported bad call, and extracts and stores the malicious call information. Here, in order to provide the above-mentioned malicious tracking service to the subscriber who applied for the malicious tracking service, the malicious tracking service subscriber information can be inquired. Such malicious tracking service subscriber information may be stored in the PAS 185 or may be managed by a separate device connected to the network. In addition, the network may be provided with a billing server (not shown) that can charge for such malicious call tracking service according to the number of usage.

In addition, the malicious tracker may delete the malicious information after a preset time point for protecting the user's privacy.

In addition, the current HTTP standard is a method of disconnecting soon after a user accesses a specific URL, so that each time a user accesses a homepage or other URL, new connection and disconnection are repeated, resulting in overhead. However, unlike the wired Internet, the wireless Internet environment has a relatively low speed and a long delay time, which greatly affects communication performance due to a large overhead due to connection and disconnection. Therefore, a persistent HTTP is established by configuring a keep-alive system (hereinafter referred to as 'KAS'), a system that manages a continuous HTTP connection between a user (terminal web browser) and a web server, that is, a wireless Internet and a wired Internet. You can keep the connection. All HTTP requests from the user are sent to KAS, and KAS communicates with the WEB server specified in the HTTP request to receive the HTTP response and deliver it to the user. In this case, since KAS does not release the connection upon completion of the response, the burden of setting and releasing the HTTP connection of the user generated when accessing a new site or URL disappears. Here, the KAS may be configured integrally with the above-mentioned malicious tracking device.

Here, KAS, an intermediate system, continuously monitors user requests and responses and stores the final service history. Through this, even after the intentional or abnormal termination of the user's access, the most recently accessed site or menu can be restored to continue using the service. In addition, the user's convenience can be increased by giving the user the option to reconnect to the previous service and select a new connection.

3 is a flowchart schematically illustrating a malicious call tracking method when using the wireless Internet according to a preferred embodiment of the present invention.

In step S310, the receiving terminal 170 receives a malicious call transmitted from the calling terminal 110 during the execution of the wireless Internet service between the calling terminal 110 and the called terminal 170 to notify the called party. Press a predetermined button. Thereafter, the malicious call tracking device receives a data call including malicious call tracking information set in advance in order to specify the malicious call from the called terminal 170. In this case, the malicious call tracking information may be included in a header of a data packet transmitted from the called terminal 170.

In step S320, the malicious tracking device detects malicious tracking information preset in order to specify the malicious calling in the received data call.

In step S330, the malicious call tracking device detects malicious call tracking information and extracts malicious call information that is identification information of the calling party terminal 110 including the telephone number of the calling party terminal 110 corresponding to the received data call. do. Here, the malicious code information may include a telephone number of the calling terminal 110 and data contents (transmission messages transmitted and received between users) transmitted and received between the calling terminal 110 and the called terminal 170. In addition, the malicious call information may further include a telephone number of the called terminal 170 to identify the called party.

In operation S340, the malicious call tracking device stores malicious call information, which is identification information of the calling party terminal 110, in a preset area in the malicious call tracking device. Here, the preset area in the malicious call tracking device is stored in a storage unit of a gateway, a PAS, and a separate server via a P2P service.

After a certain point of time, when the called party reports the malicious code reception to the police or the like, the malicious report report server sends the malicious code information transmission signal stored in advance to the PAS 185 to request the malicious code information, and the PAS 185 in advance. The malicious code information stored therein may be extracted and the malicious code report server may receive malicious code information from the PAS 185. In addition, the caller receives a malicious call reception report from the police, etc., and receives the malicious call information from the PAS 185 by using the called party's terminal 170 through a legitimate procedure (for example, receiving an authentication code). Malicious information can be received.

4A is a data format diagram used to track malicious calls when using the wireless Internet according to a preferred embodiment of the present invention. Referring to FIG. 4A, data used to track malicious calls when using the wireless Internet includes caller terminal identification information 410, called party terminal identification information 420, malicious call tracking information 430, and data contents 440. Include.

The calling party terminal identification information 410 and the called party terminal identification information 420 are telephone numbers and unique numbers of the calling terminal 110 and the called terminal 170, respectively, where the unique numbers are assigned IP to the terminal. Contains the corresponding IP address. The malicious code tracking information 430 is information for specifying the malicious code promised in advance between the terminal and the malicious code tracking device. In addition, the data content 440 is a message content including substantial content transmitted and received between the calling terminal 110 and the called terminal 170. When the malicious tracking device analyzes the received data and detects the malicious tracking information 430, the malicious tracking device receives that the malicious call has been reported from the called terminal 170 and stores the malicious calling information.

4B is a screen configuration diagram of a mobile communication terminal generating and transmitting a malicious call tracking signal when using the wireless Internet according to a preferred embodiment of the present invention. Referring to FIG. 4B, a procedure of transmitting malicious call tracing information by a button manipulation of a called party after the called terminal 170 receives a malicious call is illustrated.

The malice includes, for example, a message of intention such as mischief, indecent or violent, such as 'Hey, XXX', and the called person can report the malice received by clicking a preset button. Here, the report button may be a combination of button inputs for selecting a menu on software embedded in the called party terminal 170, a separate button, and the like. 4B illustrates a case in which a report button is separately provided in an input unit of the called terminal 170. When the user clicks the report button, as described above, the malicious call tracking information is generated and transmitted to the mobile communication network 140, and the malicious call tracking device extracts and stores the information about the malicious call. In addition, the called terminal 170 or the malicious call tracking device may inform the user of the malicious call report result. Referring to Figure 4b, it was reported. 'Warning message has been sent to the other party' is displayed on the output terminal of the called terminal 170. Thereafter, the wireless Internet connected between the sender and the called party may be maintained or terminated by the called party's selection.

In the above description, a system configuration diagram or a flowchart showing a malicious code tracking method and apparatus therefor in general using the wireless Internet has been described. Hereinafter, a malicious code tracking method and device in the wireless internet according to the present invention will be described with reference to the accompanying drawings. It will be described based on the specific embodiment. Embodiments according to the present invention are largely divided into two, first, a method of using a data call connected between the calling terminal 110 and the called terminal 170, second, after receiving the report of malicious calls separate data call It is divided into a method of tracking malicious symbols by accessing. It demonstrates in order below.

5 is a flowchart illustrating a malicious call tracking method when using the wireless Internet according to a first embodiment of the present invention.

In step S510, the caller sends and receives a data call between the calling party terminal 110 and the called party terminal 170, and the called party terminal 170 receives a malicious call transmitted from the calling party terminal 110 and the called party reports it. Press a predetermined button.

In step S520, malicious call tracing information generated by the input of a specific button of the called party terminal 170 is transmitted from the called party terminal 170 to the PAS 185 via the called party exchange 150.

In step S530, the PAS 185 detects malicious call tracing information from the received data packet, and accepts a report on the malicious call.

In step S540, the PAS 185 extracts malicious call tracing information including the telephone number of the calling party terminal 110 from the received data packet and stores it in the storage unit. Thereafter, the PAS 185 may generate a warning message and transmit the generated warning message to the calling terminal 110 to warn the caller not to transmit malicious data anymore.

In step S550, when the called party reports the malicious code reception after the predetermined time, the malicious code report server sends the malicious code information transmission signal stored in advance to the PAS 185 to request the malicious code information, and the PAS ( 185 extracts previously stored malicious code information, and in operation S560, the malicious code reporting server may receive malicious code information from the PAS 185. FIG.

In step S570, after the called party reports a malicious call reception to the police and the like, and receives the malicious call information, the receiver receives a PAS (using the called terminal 170) after passing through a legitimate procedure (for example, receiving an authentication code). 185) and transmits an authentication code and a malicious code information request signal. In this case, the authentication code is a code for authenticating that the called party has performed a legitimate application procedure for receiving malicious information from a public institution such as a police officer, and may be given by a public institution. In step S580, the PAS 185 detects the received authentication code and determines that the authentication code is legitimate. Here, the determination method may determine whether the authentication code is legitimate according to a preset code rule or may receive information about an authentication code assigned to the called party from a public institution and authenticate the authentication code. If it is possible to check whether a separate procedure is permitted, the present invention can be applied. Thereafter, the PAS 185 extracts malicious code information stored in the preset area, and transmits the malicious code information to the called terminal 170 in step S590.

6 is a flowchart illustrating a malicious call tracking method when using the wireless Internet according to a second embodiment of the present invention. The differences from the first embodiment described above will be mainly described.

In step S510, the caller sends and receives a data call between the calling party terminal 110 and the called party terminal 170, and the called party terminal 170 receives a malicious call transmitted from the calling party terminal 110 and the called party reports it. Press a predetermined button.

In step S510, a predetermined button connects a data call between the called terminal 170 and the PAS 185 to create a separate network path. Here, the receiving terminal 170 transmits malicious call tracking information to the PAS 185 by using a separate network path generated between the called terminal 170 and the PAS 185. The method performed in the following steps is as described above in the first embodiment.

The present invention is not limited to the above embodiments, and many variations are possible by those skilled in the art within the spirit of the present invention.

As described above, the malicious call tracking method and apparatus therefor according to the present invention have the effect of extracting and managing caller information when a malicious call occurs during direct data communication between clients.

In addition, the method and the device for tracking malicious calls when using the wireless Internet according to the present invention extracts and manages the caller information of the malicious call by the selective request of the user when the malicious call occurs during direct data communication between the clients without invading security in the communication network It has the effect of protecting individual privacy.

Claims (10)

In the method of tracking the malicious code in the malicious tracking device of the network at the request of the user when using the wireless Internet, Receiving a data call including malicious call tracing information preset for specifying a malicious call from a user terminal; Detecting the malicious call tracking information in the received data call; Extracting malicious call information including a telephone number of a counterpart terminal of the user terminal corresponding to the data call; And Storing the malicious information in a predetermined area within the malicious tracking device, The malicious code information includes a malicious code tracking method when using the wireless Internet, characterized in that the contents of the data transmitted and received between the user terminal and the counterpart terminal. The method of claim 1, The data call is a data packet, and the malicious call tracking information is included in the header information of the data packet. delete The method of claim 1, Receiving a malicious information transmission request signal from a malicious call reporting server; Extracting the stored malicious code information from the preset area; And And transmitting the malicious code information to the malicious report server. The method of claim 1, Receiving a malicious code information transmission request signal including an authentication code from the user terminal corresponding to the malicious code stored in a preset area in the malicious code tracking device; Detecting the authentication code and determining that the authentication code is legitimate; Extracting the stored malicious code information from the preset area; And The method may further include transmitting the malicious code information to the user terminal. The authentication code is a malicious code tracking method when using the wireless Internet, characterized in that it contains information that authenticates that the legitimate application procedure that can receive malicious information from the public authority. In the device for tracking the malicious code by the user's selective request when using the wireless Internet, A receiving unit which receives a data call including malicious call tracing information preset for specifying a malicious call from a user terminal; A malicious call detection unit detecting the malicious call tracking information in the received data call; A malicious code information extracting unit for extracting malicious code information including a telephone number of a counterpart terminal of the user terminal corresponding to the data call; And Including a storage unit for storing the malicious code information, The malicious call information includes a malicious call tracking device including the contents of data transmitted and received between the user terminal and the counterpart terminal. The method of claim 6, The data call is a data packet, and the malicious call tracking information is included in the header information of the data packet. delete The method of claim 6, The receiving unit tracks the malicious code when using the wireless Internet, characterized in that for receiving the malicious code information transmission request signal from the malicious call report server. The method of claim 9, The malicious tracking device when using the wireless Internet, And a transmission unit for transmitting the stored malicious call information to a malicious call reporting server.

Images