KR101094006B1 - Method and apparatus for monitoring state of roaming mobile station - Google Patents

Abstract

The present invention relates to a roaming mobile terminal state monitoring method and a monitoring apparatus for the same, and more particularly, to a method for monitoring a fraudulent roaming mobile terminal in real time and a monitoring apparatus for the same. It counts the number of call origination of the roaming mobile terminal for a certain time and determines that the counted number of call origination is greater than or equal to the reference value. Subscribers who perform voice phishing abroad by stealing personal information typically attempt to make multiple calls in succession, so roaming mobile terminals that attempt to make calls more than a predetermined number of times within a certain time are likely to be fraudulent terminals. It is very high and judges to be a fraudulent terminal.

Roaming, Fraud, Call Origination, Count, Surveillance, Mobile Communications, Monitoring

Description

Roaming mobile terminal status monitoring method and monitoring device therefor {METHOD AND APPARATUS FOR MONITORING STATE OF ROAMING MOBILE STATION}

The present invention relates to a roaming service, and more particularly, to a method for monitoring an unauthorized use roaming mobile terminal and a monitoring apparatus therefor.

With the development of mobile communication technology, mobile subscribers can be provided with mobile communication service in the same way as in home network by bilateral agreement and system interworking between mobile operators when visiting overseas or visiting other mobile operators. In particular, recently, 3G communication service has been started, and as the user's terminal can be used as it is abroad without renting or changing the terminal, the use of overseas roaming service is increasing.

However, recent cases of fraudulent use of such overseas roaming services have increased. Voice phishing, which is called voice phishing, is calling on domestic subscribers to demand remittances and collecting personal information, and roaming services are being used for voice phishing. There are frequent cases where the personal information of domestic mobile subscribers is stolen and used to voice phishing after being subscribed to overseas roaming service without the user's knowledge. In addition, there is an increasing number of cases in which a member of a normal overseas roaming service is refused to pay domestic expenses after using a roaming service indiscriminately after joining an overseas roaming service.

As a way to monitor fraudulent subscribers who attempt roaming calls for such fraudulent purposes, the mobile service provider collects billing data from customers and delivers a high usage report (HUR) between operators for customers who have spent particularly large amounts of money. Although it is used, it is possible to notify the fraudulent call after collecting the billing data and it takes more than one day to check the fraudulent call. When notified to the operator, there is a problem in that the subscriber who has been stealing personal information after one day or more and the telecommunication operator who does not receive the call charges suffer a lot of damage.

The present invention has been proposed to solve the above problems, and an object of the present invention is to provide a roaming mobile terminal state monitoring method and a monitoring apparatus for monitoring a fraudulent call among outgoing calls of an overseas roaming mobile terminal in real time.

Other objects and advantages of the invention will be described below and will be appreciated by the practice of the invention. Further, objects and advantages of the present invention can be realized by the means and the combination shown in the appended claims.

According to an aspect of the present invention, a method for monitoring a state of a roaming mobile terminal in a communication system includes: counting a number of call originations of a roaming mobile terminal for a predetermined time; Checking whether the counted number of call origination is equal to or greater than a reference value; And determining the roaming mobile terminal as an unauthorized use terminal when the number of call origination is greater than or equal to a reference value.

The monitoring method may further include transmitting an illegally used roaming terminal notification message to a communication service provider to which the roaming mobile terminal is subscribed.

In the monitoring method, the call origination counting step may count the number of times of receiving the intelligent network service request message.

On the other hand, according to another aspect of the present invention for achieving the above object, a monitoring device for monitoring the status of a roaming mobile terminal in a communication network, receiving means for receiving a message according to the call origination of a roaming mobile terminal; And determining means for counting the number of call origination of the roaming mobile terminal for a predetermined time based on the received message, and determining the roaming mobile terminal as an unauthorized use terminal if the counted number of call origination is equal to or greater than a reference value.

The monitoring apparatus may further include notification means for transmitting an illegally used roaming terminal notification message to a communication service provider to which the roaming mobile terminal is subscribed.

In addition, the determining means of the monitoring apparatus may count the number of receptions of the intelligent network service request message in counting the number of call origination.

The present invention as described above, by monitoring the roaming mobile terminal for fraudulent use in real time, it is possible to prevent the enormous damage caused by the theft of personal information in terms of communication subscribers in advance, and to prevent unnecessary waste of communication costs from the carriers side have.

The foregoing and other objects, features and advantages of the present invention will become more apparent from the following detailed description of the present invention when taken in conjunction with the accompanying drawings, in which: There will be. In the following description, well-known functions or constructions are not described in detail since they would obscure the invention in unnecessary detail. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram schematically illustrating a configuration of a roaming system for registering a location of an overseas roaming subscriber according to an embodiment of the present invention.

Referring to FIG. 1, the roaming system according to the present embodiment includes a home network 110 and a visited network 130, and subscribers of the home network 110 roam to the visited network 130 to provide a communication service. Receive. The visit network 130 may be an overseas network.

In FIG. 1, the mobile terminal 131 is a communication terminal having a voice call, a video call, a text message transmission, and a global roaming function. In this embodiment, the mobile terminal 131 is a terminal roaming to the visited network 130 as a terminal of a subscriber to the home network 110.

Referring to FIG. 1, the home network 110 includes a gateway location register (GLR) 111, a home location register (HLR) 113, and a roaming service control point (SCP) 115. A wireless access network (access network, base station, base station controller, etc.), an exchange (MSC), a message center, etc. are included together, but a description thereof will be omitted here.

The gateway location register 111 serves as a gateway for location registration processing of the mobile terminal 131 roaming from the home network 110 to the visited network 130. When a location registration request is received from the roaming mobile terminal 131, Request a location registration to the home location register 113 that accommodates the roaming mobile terminal 131.

The gateway location register 111 downloads the subscriber profile from the home location register 113 and sends it down to the exchange 133 on the roaming mobile terminal 131 side. In addition, the gateway location register 111 relays the exchange of routing information between the home location register 113 of the home network 110 and the exchange of the visited network 130 or between the home location register of the visited network and the exchanger of the home network. .

The home location register 113 manages the profile of the mobile subscriber as well as the current location information of the mobile terminal. The home location register 113 stores the location information of the roaming mobile terminal 133 when a location registration request from the roaming mobile terminal 131 comes up through the gateway location register 111 and stores a subscriber profile in the gateway location register 111. Down. The subscriber profile includes intelligent network service trigger information (Global Title (GT), etc. of roaming SCP 115).

The home location register 113 serves to provide routing information for the mobile terminal using the stored location information and the subscriber profile of the mobile terminal. That is, when the routing information request for a specific mobile terminal is received from the originating exchange, the home location register 113 checks the destination exchange using the location information of the mobile terminal, and obtains the routing number from the destination exchange. Transmit to originating exchange.

Roaming SCP 115 provides intelligent network services for roaming subscribers roaming from home network 110 to visited network 130. For example, intelligent network services such as local discount service and prepaid service are controlled. The roaming SCP 115 receives a subscriber profile of the roaming subscriber from the gateway location register 111 when the roaming mobile terminal 131 registers a location and based on the intelligent network service trigger information included in the received subscriber profile. In conjunction with the exchange 133 of the visited network 130 to provide an intelligent network service.

In the present invention, the roaming SCP 115 counts the number of call origination attempts of the roaming mobile terminal 131 roaming to the visited network 130 other than the intelligent network service, so that the roaming mobile terminal 131 is a fraudulent use terminal. In case of doubt, the relevant fact is notified to the communication service provider to which the roaming mobile terminal 131 is subscribed, and the call origination of the roaming mobile terminal 131 is blocked when necessary. This will be described later in detail with reference to FIG. 3.

When the outgoing call is received from the roaming mobile terminal 131 roaming into the visitor network 130, the switch 133 of the visitor network 130 may roam the incoming call before the incoming call processing (for example, call processing through an international telephone network). Service request message is sent to SCP 115 to request the intelligent network service processing for roaming subscriber.

Hereinafter, the location registration procedure of the roaming mobile terminal 131 will be described in more detail with reference to FIG. 2.

2 is a flowchart illustrating a location registration procedure of a roaming mobile terminal roaming into a visited network according to an embodiment of the present invention.

Referring to FIG. 2, the mobile terminal 131 roaming from the home network 110 to the visited network 130 receives a location registration request message to the switch 133 through a wireless access network when a location registration requirement such as power-on occurs. Location (S201), and the exchange 133 receiving the location registration request confirms that the subscriber is the subscriber of the home network 110 based on the identification number of the roaming mobile terminal 133, and the gateway location register 111 of the home network 110. In step S203, a location registration request message (Update Location) is transmitted.

The gateway location register 111 that receives the location registration request message from the exchange 133 of the visited network 130 is a location registration request message to the home location register 113 that accommodates the roaming mobile terminal 131. ) Is transmitted (S205).

Then, the home location register 113 updates the location information of the roaming mobile terminal 131 and inquires the profile of the roaming subscriber and transmits it to the gateway location register 111 by putting it in an Insert Subscriber Data (ISD) message (S207). ). Upon receiving the ISD message including the subscriber profile, the gateway location register 111 transmits the received ISD message to the exchange 133 on the roaming mobile terminal 131 side (S209). The exchange 133 of the visited network 130 registers and stores the subscriber profile included in the ISD in the visited location register.

In addition, the gateway location register 111 registers the roaming subscriber's profile to the visited network 130 and simultaneously inserts the roaming subscriber's profile into the roaming SCP 115 which provides the intelligent network service to the roaming subscriber. Data) carried on the message and transmitted (S211). The roaming SCP 115 registers the roaming subscriber's profile and then provides the intelligent network service to the roaming subscriber.

3 is a diagram illustrating a schematic configuration of a roaming system for monitoring fraudulent use of a roaming mobile terminal according to an embodiment of the present invention. In FIG. 3, the same reference numerals as in FIG. 1 will be omitted.

Referring to FIG. 3, when the exchange 133 of the visiting network 130 receives an outgoing call originated from the roaming mobile terminal 131, before the outgoing call is processed through an inter-network switching network (eg, an international telephone network), Based on the identification number of the roaming mobile terminal 131 included in the outgoing call, the intelligent network service is requested to the roaming SCP 115 of the home network 110 through the signal network.

When the exchange 133 of the visited network 130 receives the completion response to the intelligent network service request, the exchange 133 receives the outgoing call through the network between the network (eg, international telephone network). That is, the exchange 133 of the visited network 130 resumes the incoming call processing of the outgoing call, which is held, and establishes a call to the gateway exchanger (GMSC) 310 of the home network 110 through the manganese exchange network (for example, the international exchange network). .

The gateway exchange 310 of the home network 110 is an element that serves as a call processing gateway from the home network 110 to the visited network 130, or from the visited network 130 to the home network 110. The gateway exchange 310 is connected to a manganese exchange network (eg, an international telephone network) to perform call processing. The gateway exchange 310 of the home network 110 sends a routing information request message (SRI) to the home location register (HLR) 113 of the home network 110 for the incoming call processing of the roaming mobile terminal 131. ), And requests the incoming call processing of the outgoing call to the destination side exchange of the home network 110 based on the routing information received from the home location register 113.

When the roaming SCP 115 receives the intelligent network service request message (Initial DP) from the exchange 133 of the visited network 130, the roaming SCP 115 performs roaming-related intelligent network service logic such as prepaid charge deduction and regional discount with reference to the subscriber profile. .

In the present invention, the roaming SCP 115 counts the number of times of receiving the intelligent network service request message (Initial DP) from the switch 133 of the visited network 130 for each roaming mobile terminal, in addition to the intelligent network service logic, for a predetermined time. When the intelligent network service request message (Initial DP) having a reference value or more is repeatedly received from the same roaming mobile terminal 131, the roaming mobile terminal 131 is determined to be an illegal use terminal.

If the roaming SCP 115 determines that a particular roaming mobile terminal 131 is a fraudulent use terminal, the roaming SCP 115 determines the relevant facts of the communication service provider to which the roaming mobile terminal 131 is subscribed (e.g., for example, fax, or e-). Notify by mail or SMS message). In addition, when the roaming SCP 115 receives an intelligent network service request message (Initial DP) from a roaming mobile terminal 131 that is suspected to be an illegal use terminal, the roaming SCP 115 transmits a call release message to the originating exchange 133. The call can be stopped.

Preferably, roaming SCP 115 is based on identification number (IMSI / MSISDN) of roaming mobile terminal 131 included in intelligent network service request message (Initial DP) received from exchange 133 of visited network 130. The number of call attempts of the roaming mobile terminal 131 is counted, and when the number of call attempts for a predetermined time (for example, 10 minutes) is equal to or greater than a reference value, the roaming mobile terminal 131 is determined to be an illegal use terminal. In general, a fraudulent terminal attempts an excessive call for a predetermined time. For example, in the case of voice phishing, a large number of victims need to be dialed, and thus a lot of call attempts occur for a predetermined time, and thus a roaming mobile terminal attempting a call above a reference value for a predetermined time is suspected to be a fraudulent terminal attempting voice phishing. .

As described with reference to FIG. 3, when a call is sent from the roaming mobile terminal 131 roaming to the visited network 130 to the subscriber of the home network 110, the calling side exchange 133 of the visited network 133 transmits the call. Before the call is forwarded to the home network 110 through a manganese switching network (e.g., an international telephone network), the intelligent network service request message (Initial DP) is transmitted to the roaming SCP 115 of the home network 110 and a response thereof is received. After the incoming call of the outgoing call to the destination subscribers of the home network 110 through the manganese switching network (for example, international telephone network). As described above, when a call is transmitted from the roaming mobile terminal 131, the roaming SCP 115 determines that the roaming mobile terminal 131 attempts to call a reference value for a predetermined time as a fraudulent terminal. Notify the service provider of the relevant facts, and further interrupt the call connection to block fraudulent calls.

In the embodiment of FIG. 3, when the subscriber of the home network 110 roams to the visited network 130, the roaming SCP 115 of the home network 110 transmits a call from the visited network 130 to the home network 110. Although only the determination of whether the terminal is a fraudulent terminal, the terminal of the visited network 130 roams to the home network 110 when the roaming SCP 115 of the home network 110 according to the agreement between the operators even when calling As described above, the roaming SCP 115 of the home network 110 counts the number of call attempts of the terminal of the visited network 130 that originates a call from the home network 110, and the reference value for a predetermined time. When the above call is attempted, the terminal may be determined to be an illegally used terminal, and the related service provider may be notified to the communication service provider to which the terminal is subscribed, and further, the call origination from the home network 110 may be stopped.

Hereinafter, a method of real-time monitoring of an illegally used roaming mobile terminal will be described in detail with reference to FIGS. 4 and 5.

4 is a flowchart illustrating a method for real-time monitoring of an illegally used roaming mobile terminal according to an embodiment of the present invention.

Referring to FIG. 4, when a call originates from roaming mobile terminal 131, the originating call is sent to originating exchange (MSC) 133, and originating exchange 133 receives the subscriber profile registered in the visited location register. Check the intelligent network service trigger information. If the intelligent network service trigger is set, the originating exchange 133 suspends the incoming call processing of the originating call and transmits an Initial DP operation for requesting the intelligent network service to the roaming SCP 115 according to the intelligent network service trigger information. (S401).

Roaming SCP 115 periodically counts the number of Initial DP operations received from roaming mobile terminal 131 for a period of time (T time). Accordingly, the roaming SCP 115 checks the time by starting the timer and increases the number of call originating attempts of the roaming mobile terminal 131 from '0' to '1' as the initial DP operation is received (S403). . After roaming SCP 115 processes the intelligent network service logic, the roaming SCP 115 transmits a connection message (Connect) to the originating exchange 133 to allow call processing (S405).

On the other hand, when roaming SCP 115 receives the Initial DP operation according to the origination of the roaming mobile terminal 131 from the originating exchange device 133 again (S407), the roaming mobile terminal attempts to make a call ' It increases from 1 'to' 2 '(S409), and processes the intelligent network service logic and transmits a connection message (Connect) to the originating exchange 133 to perform call processing (S411). As described above, the roaming SCP 115 performs the above-described operation repeatedly for the predetermined time, and receives the initial DP operation according to the call origination of the roaming mobile terminal 131 from the calling exchange device 133. 131) continues to increase the number of attempts to call (S413 ~ S417).

After the predetermined time has elapsed, the roaming SCP 115 checks whether the roaming mobile terminal 131 attempts to make a call greater than or equal to a reference value (S419), and if the roaming mobile terminal 131 attempts to make a call If the reference value is greater than or equal to, the roaming SCP 115 determines that the roaming mobile terminal 131 is a fraudulent use terminal, and notifies the relevant fact to a specific management system of the communication service provider to which the roaming mobile terminal 131 is subscribed (S421, S423). Here, the specific management system may correspond to a customer information management system (eg, WISE in the case of KT). In the present embodiment, when the roaming mobile terminal 131 is a subscriber of the home network 110, the related fact is notified to the customer information management system of the home network 110. Alternatively, according to an agreement between telecommunication operators, the related fact may be notified to the terminal of a specific administrator in an e-mail or fax form, or the related fact may be notified by an SMS message.

Meanwhile, in the present embodiment, the roaming SCP 115 confirms that the number of call origination attempts is equal to or greater than the reference value after a predetermined time elapses, but before the predetermined time elapses, the number of call origination attempts from the same roaming mobile terminal is greater than or equal to the reference value. In this case, it may be determined that the fraudulent terminal is notified at that time and the related fact is notified.

In addition, in the present embodiment, a case in which the subscriber of the home network 110 roams from the home network 110 to the visited network 130 has been described, but the terminal of the visited network 130 roams to the home network 110 according to the agreement between the operators. After the call is made, the call processing can be performed via the roaming SCP 115 of the home network 110, and the roaming SCP 115 is negative if the inbound roaming terminal's number of call origination attempts exceeds a reference value for a predetermined time. The determination may be made as to the use terminal to notify the related service provider of the visited network 130.

5 is a flowchart illustrating a method for monitoring an illegally used roaming mobile terminal according to another embodiment of the present invention.

Referring to Fig. 5, when a call is originated from roaming mobile terminal 131, the originating call is sent to originating exchange (MSC) 133, and originating exchange 133 receives the subscriber profile registered in the visited location register. Check the intelligent network service trigger information. When the intelligent network service trigger is set, the originating exchange 133 suspends the incoming call processing of the originating call and transmits an Initial DP operation for requesting the intelligent network service to the roaming SCP 115 according to the intelligent network service trigger information. (S501).

Roaming SCP 115 periodically counts the number of Initial DP operations received from roaming mobile terminal 131 for a period of time (T time). Therefore, the roaming SCP 115 checks the time by starting the timer and increases the number of call origination attempts of the roaming mobile terminal 131 from '0' to '1' as the initial DP operation is received (S503). . After roaming SCP 115 processes the intelligent network service logic, the roaming SCP 115 transmits a connection message (Connect) to the originating exchange 133 to allow call processing (S505).

On the other hand, when roaming SCP 115 receives the Initial DP operation according to the origination of the roaming mobile terminal 131 from the originating exchange device 133 again (S507), the roaming mobile terminal attempts to make a call ' It increases from 1 'to' 2 '(S509), processes the intelligent network service logic, and transmits a connection message (Connect) to the originating exchange 133 to perform call processing (S511). As described above, the roaming SCP 115 performs the above-described operation repeatedly for the predetermined time, and receives the initial DP operation according to the call origination of the roaming mobile terminal 131 from the calling exchange device 133. 131) continues to increase the number of call origination attempts (S513 to S517).

After the predetermined time has elapsed, the roaming SCP 115 checks whether the roaming mobile terminal 131 attempts to make a call more than a reference value (S519), and if the roaming mobile terminal 131 attempts to make a call is a reference value. In this case, the roaming SCP 115 determines that the roaming mobile terminal 131 is an illegal use terminal, and notifies the relevant fact to a specific management system of the communication service provider to which the roaming mobile terminal 131 is subscribed (S521, S523). ). Here, the specific management system may correspond to a customer information management system (eg, WISE in the case of KT). In the present embodiment, when the roaming mobile terminal 131 is a subscriber of the home network 110, the related fact is notified to the customer information management system of the home network 110. Alternatively, according to an agreement between telecommunication operators, the related fact may be notified to the terminal of a specific administrator in an e-mail or fax form, or the related fact may be notified by an SMS message.

Meanwhile, in the present embodiment, the roaming SCP 115 confirms that the number of call origination attempts is equal to or greater than the reference value after a predetermined time elapses, but before the predetermined time elapses, the number of call origination attempts from the same roaming mobile terminal is greater than or equal to the reference value. In this case, it may be determined that the fraudulent terminal is notified at that time and the related fact is notified.

When the call is continuously made from the roaming mobile terminal 131 determined as the illegal use terminal and thus the Initial DP operation is received from the calling exchange device 133 back to the roaming SCP 115 (S525), roaming is performed. SCP 115 checks whether the roaming mobile terminal 131 is determined to be a fraudulent terminal (S527), and if it is determined to be a fraudulent terminal, sends a call release message (Release) to stop the call connection. In step 133, the call connection is interrupted (S529). If the roaming mobile terminal 131 is not a fraudulent use terminal, after performing the intelligent network service logic according to a conventional procedure, a call connection message (Connect) is transmitted to the originating exchange 133 (S531).

Accordingly, when the roaming mobile terminal 131 is suspected to be a fraudulent use terminal, the call processing itself may be stopped to prevent damage caused by fraudulent use. Such call interruption should be handled in accordance with the agreement between the carriers. Since the customer dissatisfaction may increase when the call processing is interrupted even if the subscriber is a normal subscriber instead of the fraudulent terminal, it is preferable to stop the call processing when it is determined that the subscribers of the contracted telecommunication service provider are the fraudulent terminal only. Therefore, roaming SCP 115 checks the carrier information based on the subscriber identification information included in the Initial DP operation received from the originating exchange 133, and is only a subscriber of the carrier contracted to handle call interruption. Stop call processing.

Meanwhile, in the present exemplary embodiment, the subscriber of the home network 110 roams from the home network 110 to the visited network 130, but the terminal of the visited network 130 roams to the home network 110 according to the agreement between the operators. After the call is made, the call processing can be performed via the roaming SCP 115 of the home network 110, and the roaming SCP 115 is negative if the inbound roaming terminal's number of call origination attempts exceeds a reference value for a predetermined time. The determination may be made as to the use terminal to notify the related service provider of the visited network 130.

6 is a block diagram of a monitoring apparatus for monitoring an illegally used roaming mobile terminal according to an embodiment of the present invention. The monitoring device 600 according to the present embodiment with reference to FIG. 6 is mounted on the roaming SCP 115 to monitor an illegally used roaming mobile terminal.

As illustrated in FIG. 6, the monitoring apparatus 600 includes a message receiver 610, an illegal use terminal determination unit 630, a notification unit 650, and a call release request unit 670.

The message receiving unit 610 receives an Initial DP operation, which is an intelligent network service request message, from the originating exchange as the roaming mobile station originates a call.

The fraudulent terminal determination unit 630 starts a timer to periodically count the number of call originating attempts of the roaming mobile terminal for a predetermined time, and determines that the roaming mobile terminal that has made a call over the reference value for a predetermined time as the fraudulent terminal. .

Specifically, the fraud terminal determination unit 630 analyzes the intelligent network service request message received through the message receiver 610 and counts the number of call origination attempts of each roaming mobile terminal. The illegal use terminal determination unit 630 counts the number of call origination attempts of each roaming mobile terminal for a predetermined time, and determines that the roaming mobile terminal whose number of call origination attempts is greater than or equal to the reference value within the predetermined time as the illegal use terminal.

The notification unit 650 receives the information of the roaming mobile terminal and the number of call origination attempts of the roaming mobile terminal, which are determined to be an illegal use terminal, from the fraud terminal determining unit 630, and the information of the roaming mobile terminal. And confirm that the roaming mobile terminal is subscribed to, and notify the roaming mobile terminal that the roaming mobile terminal is suspected to be a fraudulent use terminal. The related system may be a customer information system (eg, WISE of KT), and the notification of the related fact may also be delivered in the form of SMS message, email, fax, etc. to the terminal of the management person.

The call release request unit 670 receives and stores information on a roaming mobile terminal determined to be an illegal use terminal from the illegal use terminal determination unit 630, and uses the stored roaming mobile terminal information to store the same roaming mobile terminal. When a network service request message is received from a roaming mobile terminal, a call release request for interrupting the call connection of the roaming mobile terminal is transmitted to the call processing means of the roaming SCP or transmitted to the calling exchange.

When the intelligent network service request message is received by the message receiving unit 610, the call release request unit 670 compares the information of the roaming mobile terminal that generated the received intelligent network service request message with the information of the stored fraudulent terminal. Confirm that the call origination is again made from the user terminal.

The method of the present invention as described above may be embodied as a program and stored in a computer-readable recording medium (such as a CD-ROM, a RAM, a ROM, a floppy disk, a hard disk, or a magneto-optical disk).

While the specification contains many features, such features should not be construed as limiting the scope of the invention or the scope of the claims. Also, the features described in the individual embodiments herein can be implemented in combination in a single embodiment. Conversely, various features described herein in a single embodiment may be implemented in various embodiments individually or in a suitable subcombination.

It is to be understood that, although the operations have been described in a particular order in the figures, it should be understood that such operations are performed in a particular order as shown, or that a series of sequential orders, or all described operations, . In some circumstances, multitasking and parallel processing may be advantageous. In addition, it should be understood that the division of various system components in the above-described embodiments does not require such division in all embodiments. The above-described program components and systems can generally be implemented as a single software product or as a package in multiple software products.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the technical spirit of the present invention for those skilled in the art to which the present invention pertains. It is not limited by the drawings.

1 is a diagram schematically illustrating a configuration of a roaming system for registering a location of an overseas roaming subscriber according to an embodiment of the present invention.

2 is a flowchart illustrating a location registration procedure of a roaming mobile terminal roaming into a visited network according to an embodiment of the present invention.

3 is a diagram illustrating a schematic configuration of a roaming system for monitoring fraudulent use of a roaming mobile terminal according to an embodiment of the present invention.

4 is a flowchart illustrating a method for real-time monitoring of an illegally used roaming mobile terminal according to an embodiment of the present invention.

5 is a flowchart illustrating a method for monitoring an illegally used roaming mobile terminal according to another embodiment of the present invention.

6 is a block diagram of a monitoring apparatus for monitoring an illegally used roaming mobile terminal according to an embodiment of the present invention.

Claims (9)

A method for monitoring a state of a roaming mobile terminal in a communication system, Counting a number of times of receiving an intelligent network service request message according to a call origination of a roaming mobile terminal for a predetermined time; Checking whether the counted number of receptions is equal to or greater than a reference value; And And determining the roaming mobile terminal as an illegal use terminal when the number of times of reception is equal to or greater than a reference value. The method of claim 1, The roaming mobile terminal status monitoring method further comprises the step of transmitting a roaming terminal notification message for unauthorized use to a communication provider subscribed to the roaming mobile terminal. delete The method of claim 2, The fraud roaming terminal notification message, Roaming mobile terminal status monitoring method characterized in that any one of e-mail, fax, short message. The method according to claim 1 or 2, Receiving an outgoing call from a roaming mobile terminal determined to be the fraudulent terminal; And And releasing a call connection of the roaming mobile terminal determined to be the fraudulent terminal. A monitoring apparatus for monitoring a state of a roaming mobile terminal in a communication network, Receiving means for receiving an intelligent network service request message according to a call origination of a roaming mobile terminal; And And determining means for counting the number of call origination of the roaming mobile terminal for a predetermined time based on the received intelligent network service request message, and determining the roaming mobile terminal as an unauthorized use terminal if the counted number of call origination is equal to or greater than a reference value. monitor. The method of claim 6, And notification means for transmitting an illegally used roaming terminal notification message to a communication service provider to which the roaming mobile terminal is subscribed. delete 8. The method according to claim 6 or 7, And requesting means for requesting the release of the call connection of the roaming mobile terminal when an outgoing call is received from the roaming mobile terminal determined to be the fraudulent use terminal.

Images