KR20170006287A - System and method for managing voice phishing information - Google Patents

Abstract

The present invention relates to a system and a method for managing voice phishing information. The present invention includes: at least one user terminal including a phishing managing device which transmits phishing suspicion information when a call is suspected as voice phishing; and a phishing managing server which determines whether there is voice phishing based on phishing suspicion information which is received from any one of the user terminals, and transmits phishing information determined as voice phishing to the entire user terminal. The user terminal determines whether there is voice phishing based on phishing information received from the phishing managing server.

Description

[0001] SYSTEM AND METHOD FOR MANAGING VOICE PHISING INFORMATION [0002]

The present invention relates to a system and method for managing voice phishing information, and more particularly, to a system and method for enhancing reliability and accuracy of voice phishing determination by sharing information related to voice phishing between user terminals.

"Voice Phishing" refers to a fraudulent method of impersonating a relevant organization via telephone and extracting personal information or inducing remittance. As voice phishing becomes a social issue and people are aware of the danger of voice phishing to some degree, voice phishing techniques are also evolving, and recent cases have been reported.

As a conventional technique for preventing voice phishing, there is known a service in which a telephone number used for voice phishing is stored in a communication service provider network and the call is originally blocked or informed to a called terminal. However, In this case, it takes much time and effort to acquire initial data. In addition, such information can only be confirmed on the receiving screen before receiving the call, and there is a limit to that the user can not be provided with the risk of voice phishing after receiving the call, that is, during communication.

In addition, as the voice phishing method evolves, a new voice phishing method appears. It is difficult for the user to know how to cope with all the voice phishing cases beforehand, and the damage occurs due to the momentary vigilance. It is not possible to provide such a limit.

Also, a method of storing a voice phishing suspicious phone number in a user terminal has been proposed, but the same problem also exists. Furthermore, there is also a problem that a telephone necessary for an actual called party is marked as spam, so that the reception of the telephone is cut off, or accurate information can not be provided.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problems, and it is an object of the present invention to provide a system and method capable of securely acquiring voice phishing-related information collected from a plurality of user terminals and enhancing reliability and accuracy of voice phishing judgment The purpose.

Further, in the present invention, when voice phishing-related information is suspected, the user terminal transmits voice phishing suspicion information to the phishing management server, and if the phishing management server determines that voice phishing is performed, The present invention also provides a system and method for preventing damage due to voice phishing in advance.

According to an aspect of the present invention, there is provided a voice phishing information management system comprising: a phishing management apparatus for transmitting phishing suspicion information to a phishing management server when a call is suspected to be a voice phishing during a call; A user terminal; And a phishing management server for determining whether or not voice phishing is determined based on the phishing suspicious information received from any one of the user terminals and the phishing management server and for transmitting the phishing information to all user terminals when determined to be voice phishing, Wherein the voice phishing information management system determines whether voice phishing is performed at the time of call connection based on the phishing information received from the server.

Here, the phishing management apparatus of the user terminal may include: a call state management unit for detecting a call reception event when a call is received and transmitting call related information related to the received call to the phone number analysis unit; A voice phishing judging unit for judging whether or not voice phishing is performed on the call during a telephone call received from the calling terminal, and for delivering phishing suspicion information to the phishing suspicious information reporting unit in case of suspicion of voice phishing; A phishing suspicious information reporting unit for sending the phishing suspicious information received from the voice phishing judging unit to the phishing management server; A phishing information management unit for receiving, storing and managing phishing information from a phishing management server; And a control unit for judging whether or not call related information received from the call state management unit is included in the phishing information stored in the phishing information management unit and providing a signal indicating that the voice phishing phone is received through the user terminal, And a telephone number analyzing unit for transmitting the call related information to the voice phishing determining unit when the phishing information is not included in the phishing information.

In addition, the phishing suspicious information preferably includes a telephone number of a calling terminal that originated the call.

The phishing suspicious information may further include at least one of phishing type information and a phishing probability index.

Further, the phishing information may include a telephone number from which a telephone determined to be voice phishing is originated.

The phishing management server may further include: a phishing suspicious state collecting unit for delivering the phishing suspicious information received from the phishing management apparatus to the phishing suspicious information managing unit; A phishing suspicious information management unit for storing and managing phishing suspicion information, and transmitting a phishing information determination request signal to the phishing information determination unit when the phishing suspicious information is received from the phishing suspicious information collection unit; A phishing information determining unit for analyzing phishing suspicious information stored in the phishing suspicious information managing unit in association with the phishing information determining request signal received from the phishing suspicious information managing unit to determine whether or not a voice phishing call is made and to update phishing information; And a phishing information distribution unit for transmitting the phishing information updated by the phishing information determination unit to the user terminal.

The phishing information determination unit may determine the phishing phishing phone when the number of times the phishing suspicious information is reported to the corresponding phone number is more than a predetermined number, or when the average of the phishing probability index is equal to or greater than a preset threshold value.

According to another aspect of the present invention, there is provided a method for managing voice phishing information by a voice phishing information management system as described above, the method comprising: transmitting, when a user terminal suspects voice phishing during a call, A first step; And a second step of determining whether or not voice phishing is performed based on the phishing suspicious information received from any one of the user terminals and transmitting phishing information to all user terminals when the phishing is determined to be voice phishing, Phishing information management method according to the present invention provides a method for managing voice phishing information based on phishing information received from a phishing management server.

According to the present invention, it is possible to provide a system and a method that can securely acquire voice-phishing-related information collected from a plurality of user terminals and increase the reliability and accuracy of voice phishing determination.

According to the present invention, when the voice phishing related information is suspected, the user terminal transmits the voice phishing suspicion information to the phishing management server, and when the phishing management server determines that voice phishing is performed, A system and a method for preventing damage due to voice phishing can be provided in advance.

1 is a diagram showing the overall configuration of a voice phishing suspicious information management system 100 according to the present invention.
2 is a diagram showing the internal configuration of the phishing management apparatus 11 provided in the user terminal 10. As shown in Fig.
3 is a diagram showing a configuration of the phishing management server 20. As shown in FIG.
Fig. 4 shows an example of phishing information.
FIG. 5 is a flowchart illustrating an embodiment of a method performed in the voice phishing suspicious information management system 100 according to the present invention described with reference to FIGS. 1 to 5. FIG.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram showing the overall configuration of a voice phishing suspicious information management system 100 according to the present invention.

Referring to FIG. 1, the voice phishing suspicious information management system 100 includes at least one user terminal 10 and a phishing management server 20, which are connected to each other via a network.

Preferably, the user terminal 10 is a mobile communication terminal such as a smart phone, and the user terminal is provided with a phishing management apparatus 11 for performing the present invention, preferably in the form of an application program.

Herein, the user terminal 10 means a called terminal, which is a side to receive a call. When a call is suspected to be a voice phishing during a call with a calling terminal, the user terminal 10 transmits phishing suspicion information to the phishing management server 20, Receives the phishing information from the server 20, and determines whether or not the corresponding call is voice phishing based on the received phishing information, and provides information about the voice phishing.

The phishing management server 20 receives the phishing suspicion information from any one of the user terminals 10 and determines whether or not to voice phish based on the received information, generates phishing information when it is determined to be phishing, And performs the function of transmitting.

That is, the voice phishing suspicious information management system 100 transmits phishing suspicion information to the phishing management server 20 when at least one of the user terminals 10 receives a call suspected of voice phishing, 20 determines whether or not voice phishing is determined on the basis of the phishing suspicion information and generates phishing information including a telephone number corresponding to the phishing suspicious information when the phishing is determined to be shared with all the user terminals 10, And to collect and manage phishing information.

Next, the operation of the phishing management device 11 and the phishing management server 20 will be described in detail with reference to FIG. 2 and the following figures.

2 is a diagram showing the internal configuration of the phishing management apparatus 11 provided in the user terminal 10. As shown in Fig.

2, the phishing management apparatus 11 includes a call state management unit 111, a voice phishing determination unit 112, a phishing suspicious information reporting unit 113, a phishing information management unit 114, 115).

When the call is received, the call status management unit 111 detects the call reception event and transmits the call related information related to the received call to the telephone number analysis unit 115. [ Here, the call-related information includes the telephone number of the calling terminal of the call and, in some cases, the name information stored corresponding to the telephone number of the calling terminal. Or may include a calling terminal identifier transmitted from the resources of the communication network.

As will be described later, the telephone number analyzing unit 115 determines whether the call related information received from the call state managing unit 111 is included in the phishing information stored in the phishing information managing unit 114, The voice phishing determination unit 112 may provide a signal indicating that a voice phishing call has been received through the user terminal and, if not included in the phishing information, transmit the call related information to the voice phishing determination unit 112.

When the call-related information is received from the telephone number analyzer 115, the voice phishing determination unit 112 determines whether or not voice phishing is performed on the call during the telephone call received from the caller terminal. If voice phishing is suspected And sends the phishing suspicious information to the phishing suspicious information reporting unit 113.

As a method for determining whether or not the call is a voice phishing, for example, there is a method in which voice recognition is performed by a speech recognition engine from a call voice signal to generate text data, A method of determining whether a phishing-related keyword is detected can be used. The technique for determining whether voice phishing is performed by the voice phishing determination unit 112 may use various methods known in the prior art as it is, and the detailed description thereof will be omitted because it is not a direct object of the present invention.

The phishing suspicion information includes the telephone number of the calling terminal that originated the call. It may further include information such as phishing type information, phishing probability index, etc., determined by the voice phishing determination unit 112. The phishing type information indicates a result of determining a voice phishing type by the voice phishing determination unit 112 in advance and determining whether the corresponding call corresponds to a voice phishing. The phishing probability index is a voice phishing in the voice phishing determination unit 112 Means the index or score used in judgment.

The phishing suspicious information reporting unit 113 receives the phishing suspicious information from the voice phishing judging unit 112 and transmits it to the phishing management server 20.

The phishing information management unit 114 receives phishing information from the phishing management server 20, and stores and manages the phishing information.

The phishing management server 20 finally determines whether or not voice phishing is to be performed based on the phishing suspicious information received from the phishing suspicious information reporting unit 113 and generates phishing information when voice phishing is determined and transmits the generated phishing information to all the user terminals 10 The phishing information management unit 114 is responsible for receiving and storing the phishing information.

Here, the phishing information includes the telephone number of the calling terminal that originated the call determined to be voice phishing. And may include information on the number of voice phishing reports, depending on the use example.

The telephone number analyzing unit 115 determines whether the call related information received from the call state managing unit 111 is included in the phishing information stored in the phishing information managing unit 114. If the phishing information is contained in the phishing information, And transmits the call related information to the voice phishing determination unit 112 when the phishing information is not included in the phishing information.

The telephone number analyzing unit 115 transmits the telephone number included in the call related information to the phishing information managing unit 114 to request confirmation of the phishing telephone number. The phishing information managing unit 114 stores the phishing information And transmits the result to the telephone number analyzer 115 as a response signal.

When the telephone number analyzing unit 115 receives the response signal indicating that the phishing information is not included in the phishing information, the telephone number analyzing unit 115 transmits the telephone related information to the voice phishing determining unit 112 to determine whether the voice phishing determination unit 112 . When receiving a response signal indicating that the call is included in the phishing information, the telephone number analyzing unit 115 displays a message such as "voice phishing call" because the corresponding call is voice phishing on the display unit of the user terminal 10, Let the user know that a phishing phone has been received. Alternatively, a method may be used in which the user terminal 10 vibrates, or a specific alarm sound is output.

3 is a diagram showing a configuration of the phishing management server 20. As shown in FIG.

3, the phishing management server 20 includes a phishing suspicious part collection unit 21, a phishing suspicious information management unit 22, a phishing information determination unit 23, and a phishing information distribution unit 24.

The phishing suspicious state collecting unit 21 receives the phishing suspicious information from the phishing suspicious information reporting unit 113 of the phishing management apparatus 11 and delivers the suspected phishing suspicious information to the phishing suspicious information managing unit 22.

The phishing suspicious information management unit 22 stores and manages the phishing suspicious information and transmits a phishing information determination request signal to the phishing information determination unit 23 when the phishing suspicious information is received.

When the phishing information determination unit 23 receives the phishing information determination request signal from the phishing suspicious information management unit 22, the phishing information determination unit 23 analyzes the phishing suspicious information stored in the phishing suspicious information management unit 22 in association with the request signal, And generates phishing information.

The phishing information determination unit 23 determines whether or not a phishing phishing call is made based on the phishing suspicion information. For example, when the number of reported phishing suspicious information is greater than a predetermined number of times, It is possible to judge whether or not the voice phishing telephone is based on a criterion such as the case where the average is equal to or greater than a preset threshold value.

If it is determined that the voice phishing telephone is the phishing information determination unit 23, the phishing information is updated. Here, the phishing information includes the telephone number of the calling terminal that originated the call determined to be voice phishing. That is, the phishing information means a list of voice phishing telephone numbers that originated the voice phishing call. And may include information on the number of voice phishing reports, depending on the use example. It may also include voice phishing type information.

Fig. 4 shows an example of phishing information.

As shown in FIG. 4, it can be seen that the number of times of report and the phishing type information are stored together with the voice phishing telephone numbers.

When the phishing information is updated, the phishing information determination unit 23 transmits the updated phishing information to the phishing information distribution unit 24. [

The phishing information distributing unit 24 transmits the phishing information received from the phishing information determining unit 23 to the user terminal 10. At this time, the phishing information is transmitted to all the user terminals 10, and all the user terminals 10 update the received phishing information to the phishing information management unit 114 and store it.

Thereafter, as described above, the user terminal 10 receives the phishing information, stores the phishing information, and uses the phishing information to determine whether or not voice phishing is performed.

FIG. 5 is a flowchart illustrating an embodiment of a method performed in the voice phishing suspicious information management system 100 according to the present invention described with reference to FIGS. 1 to 5. FIG.

Referring to FIG. 5, the call status management unit 111 detects a call reception event when a call is received and transmits call related information related to the received call to the call number analysis unit 115 (S100, S110).

The telephone number analyzing unit 115 transmits the telephone number included in the call related information to the phishing information managing unit 114 to request the phishing telephone number check (S120). The phishing information managing unit 114 stores the received telephone number And transmits the result as a response signal to the telephone number analyzing unit 115 (S130 and S140).

When the telephone number analyzing unit 115 receives a response signal indicating that it is not included in the phishing information, the telephone number analyzing unit 115 transmits the call related information to the voice phishing determining unit 112 (S150).

When the call-related information is received from the telephone number analyzer 115, the voice phishing determination unit 112 determines whether or not voice phishing is performed on the call during the telephone call received from the caller terminal (S160) The phishing suspicious information is transmitted to the phishing suspicious information reporting unit 113 (S170).

When the phishing suspicious information is received from the voice phishing judging unit 112, the phishing suspicious information reporting unit 113 transmits the suspicious information to the phishing suspicious information collecting unit 21 of the phishing management server 20 (S180).

The phishing suspicious information collecting unit 21 of the phishing management server 20 sends the phishing suspicious information received from the phishing suspicious information reporting unit 113 of the phishing management device 11 of the user terminal 10 to the phishing suspicious information managing unit 22 (S190).

When the phishing suspicious information management unit 22 receives the phishing suspicious information from the phishing suspicious information collecting unit 21, the phishing suspicious information managing unit 22 transmits a phishing information determination request signal to the phishing information determining unit 23 (S200).

When the phishing information determination unit 23 receives the phishing information determination request signal from the phishing suspicious information management unit 22, the phishing information determination unit 23 analyzes the phishing suspicious information stored in the phishing suspicious information management unit 22 in association with the request signal, And updates the phishing information (S210, S220).

As described above, the phishing information determination unit 23 determines whether or not a voice phishing call is made based on the suspicious phishing information. For example, when the number of times that the phishing suspicious information is reported to the corresponding phone number is more than a predetermined number, And the average of the phishing probability indexes is equal to or greater than a predetermined threshold value.

When the phishing information is updated, the phishing information determination unit 23 transmits the updated phishing information to the phishing information distribution unit 24 (S230). The phishing information distribution unit 24 receives the updated phishing information from the phishing information determination unit 23 And transmits the received phishing information to the phishing information management unit 114 of the user terminal 10 (S240).

The phishing information management unit 114 of the user terminal 10 updates and stores the received phishing information (S250).

If the telephone number analyzing unit 115 receives a response signal indicating that the telephone number is included in the phishing information from the phishing information managing unit 114 in step S140, Phishing phone "is displayed on the display unit of the user terminal 10, thereby allowing the user to recognize that the voice phishing phone has been received (S260).

While the present invention has been described in connection with what is presently considered to be practical exemplary embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, is intended to cover various modifications and equivalent arrangements included therein.

100 ... Voice phishing information management system
10 ... user terminal
20 ... phishing management server

Claims (8)

A voice phishing information management system comprising:
At least one user terminal including a phishing management device for sending phishing suspicion information to the phishing management server when the call is suspected to be a voice phishing during a call; And
A phishing management server for determining whether or not voice phishing is determined based on the phishing suspicious information received from any one of the user terminals and transmitting the phishing information to all user terminals when the phishing is determined;
Lt; / RTI >
Wherein the user terminal determines whether or not voice phishing is performed during a call connection based on the phishing information received from the phishing management server.
The method according to claim 1,
The phishing management device of the user terminal comprises:
A call state management unit for detecting a call reception event when a call is received and transmitting call related information related to the received call to a phone number analysis unit;
A voice phishing judging unit for judging whether or not voice phishing is performed on the call during a telephone call received from the calling terminal, and for delivering phishing suspicion information to the phishing suspicious information reporting unit in case of suspicion of voice phishing;
A phishing suspicious information reporting unit for sending the phishing suspicious information received from the voice phishing judging unit to the phishing management server;
A phishing information management unit for receiving, storing and managing phishing information from a phishing management server; And
The control unit determines whether the call related information received from the call state management unit is included in the phishing information stored in the phishing information management unit. If the information is included in the phishing information, a signal indicating that the voice phishing phone is received is provided through the user terminal. A telephone number analyzing unit for transmitting the call related information to the voice phishing determining unit when the information is not included in the information,
Wherein the voice phishing information management system comprises:
3. The method of claim 2,
Wherein the phishing suspicion information includes a telephone number of a calling terminal that originated the call.
The method of claim 3,
Wherein the phishing suspicion information further includes at least one of phishing type information and phishing probability index.
3. The method of claim 2,
Wherein the phishing information includes a telephone number from which a telephone determined as a voice phishing is originated.
The method according to claim 1,
The phishing management server comprises:
A phishing suspicious state collecting unit for delivering the phishing suspicious information received from the phishing management apparatus to the phishing suspicious information managing unit;
A phishing suspicious information management unit for storing and managing phishing suspicion information, and transmitting a phishing information determination request signal to the phishing information determination unit when the phishing suspicious information is received from the phishing suspicious information collection unit;
A phishing information determining unit for analyzing phishing suspicious information stored in the phishing suspicious information managing unit in association with the phishing information determining request signal received from the phishing suspicious information managing unit to determine whether or not a voice phishing call is made and to update phishing information; And
A phishing information distribution unit for transmitting the phishing information updated by the phishing information determination unit to the user terminal,
Wherein the voice phishing information management system comprises:
The method according to claim 6,
Wherein the phishing information determination unit determines the voice phishing information management system when the number of times that the number of reported phishing suspicious information is greater than or equal to a predetermined number or the average of the phishing probability index is equal to or greater than a preset threshold value .
A method for managing voice phishing information by a voice phishing information management system according to any one of claims 1 to 8,
A first step of transmitting phishing suspicion information to a phishing management server when the user terminal suspected voice phishing during a call; And
A second step of determining whether or not voice phishing is performed based on the phishing suspicious information received from any one of the user terminals by the phishing management server and transmitting the phishing information to all user terminals when determined to be voice phishing;
Lt; / RTI >
Wherein the user terminal determines whether or not voice phishing is performed during a call connection based on the phishing information received from the phishing management server.

Images