KR101478835B1 - The system to prevent voice phishing and its method - Google Patents

Abstract

The present invention relates to a voice phishing prevention system and a method thereof, in which voice phishing is discriminated (judged) and the corresponding voice phishing discrimination information is transmitted to a receiving side, and accordingly, A voice phishing prevention system for collecting information and a method thereof.

To this end, the present invention provides a voice phishing prevention system, comprising: billing information storage means for storing billing-related information; Subscriber information storing means for storing subscriber information; A voice phishing black list storing means for storing a black list of voice phishing; Voice phishing processing means for inquiring the charging information storing means, the subscriber information storing means, and the voice phishing blacklist storing means to discriminate whether voice phishing is performed; And transmitting means for transmitting a voice phishing discrimination result (voice phishing discrimination information) from the voice phishing processing means to the receiving side.

Voice phishing, prevention, discrimination information, voice phishing blacklist, caller's phone number, recording (recording)

Description

[0001] Voice phishing prevention system and method [0002]

The present invention relates to a voice phishing prevention system and a method thereof, and more particularly, to a voice phishing prevention system and a method thereof, and more particularly, to a voice phishing prevention system and a method thereof, To a phishing detection system and a method for transmitting phishing discrimination information and collecting information on a corresponding voice phishing in response to the corresponding voice phishing on the receiving side.

First, abbreviations used in the present invention and their meanings are as follows.

URL is an abbreviation of "Uniform Resource Locator", which indicates how to display the site address on the Web.

SSP is an abbreviation of "Service Switching Point", and represents an exchange for transmitting the control signal required for processing in the intelligent network to the SCP (Service Control Point).

SCP stands for "Service Control Point" and represents a control system for intelligent network service processing in the intelligent network.

The MSC stands for "Mobile Switching Center" and represents a mobile switching center.

SMS stands for "Short Message Service " and represents a short message service.

CID is an abbreviation of "Caller-ID "

The existing phishing method on the Internet refers to a method by which a sender collects personal information from a recipient by stealing a site address (URL) such as a bank or a financial institution site. Such a conventional phishing method is that a sender may judge that the same URL is a URL similar to a URL of a bank or a financial institution site in mail or the like (although it is slightly different from a URL of a real bank or a financial institution site, (Recipient) clicks the link and accesses the site to input personal information such as an ID, a password, and an authentication number, and the sender inputs the personal information of the other person (recipient) through the phishing server And then accesses the actual bank or financial institution site to give the receiver damage such as financial damage or information theft.

In particular, if phishing is performed by stealing a URL similar to a URL on a bank or financial institution site, the sender obtains financial information such as the recipient's ID, password, resident number, account number and account password, Causing serious damage such as theft and becoming a social problem.

As the damage to the Internet soared, security software was introduced to prevent phishing, and the risk of accessing the site information distributed by mail or messenger became worrisome.

Meanwhile, in recent years, similar to the phishing method, a phone fraud crime through voice phishing using a landline phone or a mobile phone frequently occurs. However, since the receiver side can not know the identity of the calling party Therefore, there is a case that it is damaged by helplessness.

For example, a phonecalling fraudulent system impersonates a bank or a credit card company by using a landline telephone or a mobile phone to acquire financial information from the receiver side, thereby causing damage such as account transfer, card number exposure, and personal information theft.

And family relationship, and obtaining the victim's or child's mobile phone number to impersonate kidnapping to cause financial damage such as mental harm and account transfer, and impersonate the National Tax Service, the National Intelligence Service, the investigation agency, etc., It also induces impersonation or financial damage by inducing.

Such voice phishing generally proceeds secretly by a method in which a caller transmits an arbitrary number through an origination number manipulation, so it is difficult to discriminate the authenticity of a calling party on the receiving side.

In addition, regulations that restrict the operation of the calling number have not been provided so far. It is pointed out that the change of outgoing telephone number is necessary for business purpose or convenience of reception of individual, so it can not be regulated as a whole.

As described above, there is still no systematic solution or technique for discriminating and coping with the above-mentioned voice phishing.

Accordingly, it is an object of the present invention to solve the above-mentioned problem of voice phishing.

However, in order to prevent crime using voice phishing, if the receiver can know the information such as the identity and the location (address) of the caller, the damage caused by voice phishing can be prevented in advance.

Accordingly, the present invention provides a voice phishing prevention system for discriminating (judging) a voice phishing and transmitting the voice phishing discrimination information to a receiving side and collecting information on the corresponding voice phishing in response to the voice phishing on the receiving side, The purpose of this method is to provide.

The objects of the present invention are not limited to the above-mentioned objects, and other objects and advantages of the present invention which are not mentioned can be understood by the following description, and will be more clearly understood by the embodiments of the present invention. It will also be readily apparent that the objects and advantages of the invention may be realized and attained by means of the instrumentalities and combinations particularly pointed out in the appended claims.

According to an aspect of the present invention, there is provided a system for preventing phishing in a voice phishing system, comprising: charging information storing means for storing charging related information; Subscriber information storage means for storing subscriber information; A voice phishing black list storing means for storing a black list of voice phishing; Voice phishing processing means for inquiring the charging information storing means, the subscriber information storing means and the voice phishing blacklist storing means to determine whether or not voice phishing is performed; And transmitting means for transmitting a voice phishing discrimination result (voice phishing discrimination information) from the voice phishing processing means to the receiving side.

In addition, the system of the present invention further includes a recording means for receiving and recording voice data of a call channel in cooperation with a receiving communication device in accordance with a control signal from the voice phishing processing means.

According to another aspect of the present invention, there is provided a method for preventing voice phishing, the method comprising: receiving a reception number together with a voice phishing discrimination request from a communication equipment; Inquiring the origination number based on the received reception number and the reception time; Inquiring the caller's identity and address using the inquired calling number; Searching the voice phishing black list using the inquired information to determine whether voice phishing is to be performed; And a transmitting step of transmitting the discriminated voice phishing discrimination result (voice phishing discrimination information) to the receiving side.

In addition, the method of the present invention further includes transmitting and receiving voice data of a call channel in cooperation with the receiving communication equipment among the exchange equipment.

In addition, the method of the present invention may further include transmitting voice-phishing-related information and the recorded voice data to an external professional phishing phishing agency.

According to the present invention as described above, the voice phishing is discriminated (judged) and the corresponding voice phishing discrimination information is transmitted to the receiving side, thereby allowing the receiving side to correspond to the corresponding voice phishing, whereby the telephone financial fraud, To prevent criminal acts that impersonate kidnapping.

In other words, in general, voice phishing is performed secretly by a method in which a caller transmits an arbitrary number through an origination number manipulation. Therefore, it is difficult to discriminate the authenticity of a calling party on the receiving side and a system for coping with voice phishing Not enough. Accordingly, in the present invention, in order to prevent crime using voice phishing, the receiver can identify the caller's identity and location during a call, thereby recognizing the caller's phone that manipulates the caller information, thereby preventing an accident .

In addition, the present invention enables systematic management of regular voice phishing callers through a cyber crime response organization by registering and managing callers, thereby preventing similar cases in advance.

BRIEF DESCRIPTION OF THE DRAWINGS The above and other objects, features and advantages of the present invention will become more apparent from the following detailed description of the present invention when taken in conjunction with the accompanying drawings, It can be easily carried out. In the following description, well-known functions or constructions are not described in detail since they would obscure the invention in unnecessary detail. Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram of a communication system to which the present invention is applied.

1, the calling party can attempt voice phishing using the wired telephone network 103, the mobile communication network (wireless telephone network) 203, the Internet (VoIP network) 302, ), A mobile communication network (wireless telephone network) 203, and the Internet (VoIP network 302).

At this time, the calling party (voice phishing actor) selects the voice phishing victim (recipient) by using personal information (phone number, family relationship, etc.) acquired on-line or off-line.

On the other hand, when using the wired telephone network 103, the calling party (voice phishing actor) makes a call through the wired terminal 100. Generally, a PBX (Private Branch Exchanger) 101 is used to transmit a calling number Or the calling number of the wired terminal 100 of the wired terminal 100 may be used as it is without manipulating the calling number.

At this time, the outgoing call is transmitted to the wired terminal 105 of the wired telephone subscriber through the local exchange (SSP) 104 of the receiving side connected to the same wired telephone network via the local exchange (SSP) 102 of the calling side and the wired telephone network 103, Or may be used as a voice phishing target or may be used as a voice phishing target in the middle of the mobile communication subscriber's wireless terminal 206 (206) via the mobile communication network 203, the mobile communication exchange 204 and the base transceiver station (VoIP) terminal 306 of the VoIP subscriber through a VoIP (Voice over Internet Protocol) gateway (G / W) 304 and a router 305 in the middle ) So that the VoIP subscribers can be targeted for voice phishing.

Alternatively, the calling party (voice phishing actor) may make a call through the mobile communication network 203 using the mobile terminal 200, make the mobile communication subscriber of the same mobile communication network a voice phishing object, The VoIP subscriber can be a voice phishing target through the VoIP gateway 304 or the voice telephony subscriber can be targeted for voice phishing.

Alternatively, the calling party (voice phishing agent) can make a call through the Internet 302 using the VoIP terminal 300, make a VoIP subscriber who uses the same Internet telephone as a voice phishing target, or via a wired telephone network 103 The subscriber of the fixed line telephone may be a voice phishing target or the mobile communication subscriber may be a voice phishing target via the mobile communication network 203. [

In general, in the case of the wired telephone network 103, the calling number is manipulated by using a PBX (Private Branch Exchange) 101, or the telephone number of the wireless terminal 200 or VoIP terminal 300 is transmitted from the wired terminal 100 Since the caller's number is manipulated by setting the number, the receiver can not know the caller's information accurately. Using this disadvantage, the voice-phishing actor is causing crime such as phone finance fraud and kidnapping.

2 is a block diagram of an embodiment of a voice phishing prevention system according to the present invention.

2, the voice phishing prevention system according to the present invention includes a billing server 701 that stores billing-related information such as call start time, caller number, called party number, and call end time, A subscriber information DB 702 for storing subscriber information such as a name and address of the user, payment related information (payment method, payment account), and a voice phishing black list (VP) storing a black list telephone number for voice phishing A voice phishing processing server 700 for inquiring the billing server 701, the subscriber information DB 702 and the VP black list DB 703 to determine whether voice phishing has occurred, And a message server 704 for generating a voice phishing discrimination result (voice phishing discrimination information) from a voice message or text message and transmitting the voice phishing discrimination result to a receiving side.

In accordance with the control signal of the voice phishing processing server 700, the voice phishing prevention system according to the present invention transmits voice data of a call channel in cooperation with the exchange 402 or the VoIP server 501 on the receiving side, And a recording server 705 for recording.

Next, the overall configuration and operation of the voice phishing prevention system according to the present invention will be described with reference to FIG.

The wired terminal 400 and the wireless terminal 402 are connected to the wired / wireless intelligent network 600 through a local exchange (SSP) 402 or a mobile communication exchange (MSC) 402, respectively . The VoIP terminal 500 is connected to the wired / wireless intelligent network 600 through a VoIP server 501 of the Internet and a gateway (G / W) 502 to an external network.

In an embodiment of the present invention, the intelligent network service provided through the wired / wireless intelligent network 600 is used to prevent voice phishing. To this end, the wired / wireless intelligent network 600 is interlocked with a voice phishing processing server 700, which is a main server, to control processing operations and services for preventing voice phishing. The detailed operation will be described with reference to Fig.

The billing server 701 collectively refers to a billing server 701 as a wired telephone network billing server, a mobile communication network billing server, and a VoIP billing server. The billing server 701 records call start time, caller number, called party number, and call end time when a call is made.

The subscriber information DB 702 is a database (DB) that stores subscriber information secured from a customer (subscriber) when a wired / wireless / VoIP phone is established. The database stores information such as a name, an address, , Payment account).

The VP (Voice Phishing) blacklist DB 703 can be regarded as a database (DB) managing the blacklist telephone numbers for voice phishing. That is, the VP blacklist DB 703 can be regarded as a database (DB) storing a list of origination numbers that are regularly detected in voice phishing. In this case, the billing server, the subscriber information DB, and the VP black list DB are separately provided for each different type of network, and the billing server, the subscriber information DB, and the VP black list DB are managed separately for each vendor. However, Since the billing server, the subscriber information DB, and the VP blacklist DB can be interworked with each other using the known interworking technology, This includes cases where each network or each operator is used or interlocked.

Then, the message server 704 generates a voice phishing discrimination result (voice phishing discrimination information) as an automatic voice message such as 700 service through an automatic voice message generator and transmits it to a receiver or generates a text message as a SMS message through a text message generator To the receiving side.

The recording server 705 is a server that receives and records voice data of a call channel in cooperation with the exchange 402 or the VoIP server 501 on the receiving side according to the control signal of the voice phishing processing server 700. [ That is, when the receiving-side switchboard 402 or the VoIP server 501 copies voice data generated in the communication channel and transmits the voice data to the voice recording server 705, the voice recording server 705 stores and manages the voice data.

3 is a flowchart of an embodiment of a voice phishing prevention method according to the present invention.

First, the receiver (receiver) responds to the outgoing call on the calling side (31). At this time, a normal calling number, a calling number may not be displayed, or an originated calling number may be displayed on the terminal of the receiving side. In order to provide the calling number display service, the receiving terminal must have a display device (e.g., liquid crystal display) capable of confirming the calling number, and the calling number can be confirmed by subscribing to the calling number display (CID) service.

Next, when the recipient listens to the call and recognizes that the sender's identity needs to be confirmed, a caller identification request button, for example, a '# 112' button during the call, (32).

In other words, the receiver recognizes that the caller's identity is necessary when the call is judged to be doubtful from the telephone call from the IRS, the financial institution, or the card company. If the caller presses the '# 112' button, Communication switch) or a VoIP server via a control channel.

Accordingly, the exchange (SSP or MSC) or the VoIP server that receives the control signal requesting the identity of the sender connects the voice phishing processing server of the intelligent network according to the corresponding control signal to transmit the reception number (the receiver's telephone number) 33).

In more detail, in a switching center (SSP, MSC) or a VoIP server, a control signal is stored in an internal memory when a '#' is received from a receiver through a control channel. For example, the local exchange monitors the composite frequency signal from the telephone and stores it in the internal memory upon receipt of the specific number (#).

When '112' is received after '#', the exchange (SSP, MSC) or VoIP server connects to the voice phishing processing server of the intelligent network and transmits the reception number to the voice phishing processing server. At this time, when the control signal input through the control channel during the call is determined as the intelligent network call signal, the switch or VoIP server transmits the call information to the intelligent network service. That is, it connects to the intelligent network control system SCP. Then, the SCP of the intelligent network plays a role of calling the voice phishing processing server according to the received call information.

Meanwhile, in the above-described example, the case of connecting to the voice phishing processing server at the request of the receiver has been described as an example. However, in addition to the case where the subscriber is registered in advance for the voice phishing prevention service, A voice phishing processing server may be connected to the voice phishing processing server or a voice phishing processing server may be connected to a call received by an old receiver vulnerable to voice phishing. Alternatively, if the resources of the system are sufficient, it is also possible to connect to the voice phishing processing server for all calls.

Meanwhile, the voice phishing processing server is a main server for discriminating and responding to voice phishing, and plays a major role in controlling each service server as well as interworking with an exchange and a VoIP server. The details are as follows.

First, the voice phishing processing server interrogates the calling number from the billing server based on the receiving number and the receiving time in cooperation with the billing server (34). That is, even if all the charges other than the incoming charging service are charged to the calling party or some foreign countries are charged to both the calling party and the called party, even when the caller (voice phishing player) You can view the telephone number for which you are obligated to bill.

Thereafter, the voice phishing processing server inquires the sender's identity and address (sender information) from the subscriber information DB using the calling number retrieved from the charging server (35). Here, the subscriber information DB stores subscriber information obtained from a customer (subscriber) when establishing a wired / wireless / VoIP phone, and stores the name, address, bill payment information (payment method, payment account) for the corresponding phone number.

Thereafter, the voice phishing processing server inquires the voice phishing (VP) black list DB using the calling number retrieved from the charging server (36). Here, the VP black list DB can be regarded as a DB which manages a black list telephone number for voice phishing. That is, it can be regarded as a DB which registers and manages the calling number list which is regularly detected in voice phishing.

At this time, if the information such as the identity and the address of the voice phishing agent is stored in the VP black list DB, voice phishing (VP) is performed using the identity and address (sender information) of the sender inquired from the subscriber information DB, It can be implemented to look up the blacklist DB.

Of course, when both the information such as the identity and the address of the voice phishing actor and the black list telephone number for voice phishing are stored in the VP black list DB, the identity and address of the sender inquired from the subscriber information DB And the calling number inquired from the charging server to inquire the voice phishing (VP) black list DB.

Thereafter, the voice phishing processing server determines whether voice phishing is performed using the result of the inquiry from the VP black list DB (37). That is, as a result of the inquiry from the VP black list DB, it is determined whether or not the sender information is present in the voice phishing black list.

Thereafter, the message server generates a voice message or a text message by using a voice message generator or a text message generator based on the calling party, the calling party address (calling party information), and the voice phishing result according to the control of the voice phishing processing server, To the receiving side (38).

That is, the message server uses an automatic voice message generator or a text message generator, and the sender is OOO and the address is OOO. I suspect phone fraud. If you do not want to hang up or want to report it, you can generate a voice message or a text message such as 'Please press 1' and send it to the receiver through interworking with the interchanger or VoIP server via the intelligent network. At this time, it is very important to prevent the sender (voice phishing actor) from perceiving the transmission contents to the receiver. Therefore, according to the present invention, since the current call channel is used, the corresponding voice message is transmitted to the receiver using a method of sharing the call channel as in the three-way call, so that the receiver can listen to the voice message only. On the other hand, the text message generator transmits a text message, such as an SMS server of the mobile communication network, to a receiver through a control channel.

Accordingly, when the receiving side confirms whether or not voice phishing (voice phishing discrimination result) is confirmed through the intelligent network during the call and ends when the call is disconnected, the voice phishing processing server of the intelligent network In addition, the recording server is controlled to record the conversation (39). At this time, the voice phishing processing server of the intelligent network transmits a control signal to the receiving-side exchange or the VoIP server to copy the voice data of the call channel of the receiving-side exchanger or the VoIP server to the recording server. This is the same technology used for tapping or tapping.

After that, the recording data of the recording server is referred to professional cyber crime response organization as voice phishing evidence data and processed. At this time, the information related to the voice phishing is also transmitted to the professional cyber crime response organization.

Meanwhile, the method of the present invention as described above can be written in a computer program. And the code and code segments constituting the program can be easily deduced by a computer programmer in the field. In addition, the created program is stored in a computer-readable recording medium (information storage medium), and is read and executed by a computer to implement the method of the present invention. And the recording medium includes all types of recording media readable by a computer.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the invention. The present invention is not limited to the drawings.

The present invention can be used for prevention of voice phishing in a communication system and the like.

1 is a configuration diagram of an embodiment of a communication system to which the present invention is applied;

2 is a configuration diagram of an embodiment of a voice phishing prevention system according to the present invention,

3 is a flowchart of an embodiment of a voice phishing prevention method according to the present invention.

DESCRIPTION OF THE REFERENCE NUMERALS

700: Voice phishing processing server 701: Charging server

702: subscriber information DB 703: VP black list DB

704: Message server 705: Recording server

Claims (18)

In a voice phishing prevention system, Billing information storage means for storing billing-related information; Subscriber information storing means for storing subscriber information; A voice phishing black list storing means for storing a black list of voice phishing; Voice phishing processing means for inquiring the charging information storing means, the subscriber information storing means and the voice phishing blacklist storing means to determine whether or not voice phishing is performed; And (Voice phishing discrimination information) from the voice phishing processing means to a receiving side, The voice phishing prevention system comprising: The method according to claim 1, A sounding means for receiving and recording voice data of a call channel in cooperation with the receiving communication equipment in accordance with a control signal from the voice phishing processing means; Further comprising a voice phishing prevention system. 3. The method of claim 2, Wherein the voice phishing processing means comprises: And transmits the voice phishing-related information and the voice data recorded by the voice recording means to an external professional voice phishing support organization. 4. The method according to any one of claims 1 to 3, Wherein the voice phishing processing means comprises: (Voice phishing actor) from the billing information storage means, the subscriber information storage means, and the voice phishing blacklist storage means to determine whether or not voice phishing is performed. 5. The method of claim 4, Wherein the voice phishing processing means comprises: Inquires the calling number based on the receiving number and the receiving time from the charging information storing means, Inquiring the identity and address of the caller from the subscriber information storage means using the searched calling number, And the voice phishing black list storage means is inquired by using the inquired information to determine whether or not voice phishing is performed. 6. The method of claim 5, Wherein the voice phishing blacklist storage means comprises: Voice phishing prevention system that stores phone numbers of blacklist caught in routine voice phishing. 6. The method of claim 5, Wherein the transmission means comprises: And a voice phishing discrimination result (voice phishing discrimination information) from the voice phishing processing means is generated as a voice message through a voice message generator and transmitted to the receiving side. 8. The method of claim 7, Wherein the transmission means comprises: And transmits the generated voice message to the receiver through a separate call channel created by an external communication device. 6. The method of claim 5, Wherein the transmission means comprises: And a voice phishing discrimination result (voice phishing discrimination information) from the voice phishing processing means is generated as a text message through a text message generator and transmitted to the receiving side. 10. The method of claim 9, Wherein the transmission means comprises: And transmits the generated text message to the receiver through a control channel. In a method for preventing voice phishing, Receiving a reception number from the communication apparatus side together with a voice phishing discrimination request; Inquiring the origination number based on the received reception number and the reception time; Inquiring the caller's identity and address using the inquired calling number; Searching the voice phishing black list using the inquired information to determine whether voice phishing is to be performed; And A transmission step of transmitting the discriminated voice phishing discrimination result (voice phishing discrimination information) / RTI > 12. The method of claim 11, Transmitting and receiving voice data of a call channel in cooperation with a receiving communication device among the exchange devices Further comprising the steps of: 13. The method of claim 12, Transmitting voice-phishing-related information and the recorded voice data to an external professional voice phishing-compatible organization Further comprising the steps of: 14. The method according to any one of claims 11 to 13, The voice phishing blacklist may include: A method for preventing voice phishing that stores a blacklist phone number that has been habitually detected in voice phishing. 14. The method according to any one of claims 11 to 13, Wherein, And generating the voice phishing discrimination result (voice phishing discrimination information) as a voice message through a voice message generator and transmitting the result to the receiver. 16. The method of claim 15, Wherein, And transmitting the generated voice message to the receiver through a separate communication channel generated by an external communication device. 14. The method according to any one of claims 11 to 13, Wherein, (Voice phishing discrimination information) is generated as a text message through a text message generator and transmitted to the receiver. 18. The method of claim 17, Wherein, And transmitting the generated text message to the receiver through a control channel.

Images